)]}' { "log": [ { "commit": "7d1e042314619115153a0f6f06e4552c09a50e13", "tree": "25d4271356edf0fe0f519393582328dc74859bbc", "parents": [ "e23d4159b109167126e5bcd7f3775c95de7fee47", "aa4f0601115319a52c80f468c8f007e5aa9277cb" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Sep 20 17:11:19 2016 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Sep 20 17:11:19 2016 -0700" }, "message": "Merge tag \u0027usercopy-v4.8-rc8\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/kees/linux\n\nPull usercopy hardening fix from Kees Cook:\n \"Expand the arm64 vmalloc check to include skipping the module space\n too\"\n\n* tag \u0027usercopy-v4.8-rc8\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/kees/linux:\n mm: usercopy: Check for module addresses\n" }, { "commit": "e23d4159b109167126e5bcd7f3775c95de7fee47", "tree": "15a9480da60c53b2754ed8aa6cf57dab92e9df65", "parents": [ "df04abfd181acc276ba6762c8206891ae10ae00d" ], "author": { "name": "Al Viro", "email": "viro@ZenIV.linux.org.uk", "time": "Tue Sep 20 20:07:42 2016 +0100" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Sep 20 16:44:28 2016 -0700" }, "message": "fix fault_in_multipages_...() on architectures with no-op access_ok()\n\nSwitching iov_iter fault-in to multipages variants has exposed an old\nbug in underlying fault_in_multipages_...(); they break if the range\npassed to them wraps around. Normally access_ok() done by callers will\nprevent such (and it\u0027s a guaranteed EFAULT - ERR_PTR() values fall into\nsuch a range and they should not point to any valid objects).\n\nHowever, on architectures where userland and kernel live in different\nMMU contexts (e.g. s390) access_ok() is a no-op and on those a range\nwith a wraparound can reach fault_in_multipages_...().\n\nSince any wraparound means EFAULT there, the fix is trivial - turn\nthose\n\n while (uaddr \u003c\u003d end)\n\t ...\ninto\n\n if (unlikely(uaddr \u003e end))\n\t return -EFAULT;\n do\n\t ...\n while (uaddr \u003c\u003d end);\n\nReported-by: Jan Stancek \u003cjstancek@redhat.com\u003e\nTested-by: Jan Stancek \u003cjstancek@redhat.com\u003e\nCc: stable@vger.kernel.org # v3.5+\nSigned-off-by: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "aa4f0601115319a52c80f468c8f007e5aa9277cb", "tree": "c09b301bdbf5cbcb44805fb0698d7270e1bc51c9", "parents": [ "d2ffb0103aaefa9b169da042cf39ce27bfb6cdbb" ], "author": { "name": "Laura Abbott", "email": "labbott@redhat.com", "time": "Tue Sep 20 08:56:36 2016 -0700" }, "committer": { "name": "Kees Cook", "email": "keescook@chromium.org", "time": "Tue Sep 20 16:07:39 2016 -0700" }, "message": "mm: usercopy: Check for module addresses\n\nWhile running a compile on arm64, I hit a memory exposure\n\nusercopy: kernel memory exposure attempt detected from fffffc0000f3b1a8 (buffer_head) (1 bytes)\n------------[ cut here ]------------\nkernel BUG at mm/usercopy.c:75!\nInternal error: Oops - BUG: 0 [#1] SMP\nModules linked in: ip6t_rpfilter ip6t_REJECT\nnf_reject_ipv6 xt_conntrack ip_set nfnetlink ebtable_broute bridge stp\nllc ebtable_nat ip6table_security ip6table_raw ip6table_nat\nnf_conntrack_ipv6 nf_defrag_ipv6 nf_nat_ipv6 ip6table_mangle\niptable_security iptable_raw iptable_nat nf_conntrack_ipv4\nnf_defrag_ipv4 nf_nat_ipv4 nf_nat nf_conntrack iptable_mangle\nebtable_filter ebtables ip6table_filter ip6_tables vfat fat xgene_edac\nxgene_enet edac_core i2c_xgene_slimpro i2c_core at803x realtek xgene_dma\nmdio_xgene gpio_dwapb gpio_xgene_sb xgene_rng mailbox_xgene_slimpro nfsd\nauth_rpcgss nfs_acl lockd grace sunrpc xfs libcrc32c sdhci_of_arasan\nsdhci_pltfm sdhci mmc_core xhci_plat_hcd gpio_keys\nCPU: 0 PID: 19744 Comm: updatedb Tainted: G W 4.8.0-rc3-threadinfo+ #1\nHardware name: AppliedMicro X-Gene Mustang Board/X-Gene Mustang Board, BIOS 3.06.12 Aug 12 2016\ntask: fffffe03df944c00 task.stack: fffffe00d128c000\nPC is at __check_object_size+0x70/0x3f0\nLR is at __check_object_size+0x70/0x3f0\n...\n[\u003cfffffc00082b4280\u003e] __check_object_size+0x70/0x3f0\n[\u003cfffffc00082cdc30\u003e] filldir64+0x158/0x1a0\n[\u003cfffffc0000f327e8\u003e] __fat_readdir+0x4a0/0x558 [fat]\n[\u003cfffffc0000f328d4\u003e] fat_readdir+0x34/0x40 [fat]\n[\u003cfffffc00082cd8f8\u003e] iterate_dir+0x190/0x1e0\n[\u003cfffffc00082cde58\u003e] SyS_getdents64+0x88/0x120\n[\u003cfffffc0008082c70\u003e] el0_svc_naked+0x24/0x28\n\nfffffc0000f3b1a8 is a module address. Modules may have compiled in\nstrings which could get copied to userspace. In this instance, it\nlooks like \".\" which matches with a size of 1 byte. Extend the\nis_vmalloc_addr check to be is_vmalloc_or_module_addr to cover\nall possible cases.\n\nSigned-off-by: Laura Abbott \u003clabbott@redhat.com\u003e\nSigned-off-by: Kees Cook \u003ckeescook@chromium.org\u003e\n" }, { "commit": "df04abfd181acc276ba6762c8206891ae10ae00d", "tree": "03afe92ae5ef3e51035ab871e0b29742d11eb0d1", "parents": [ "f5beeb1851ea6f8cfcf2657f26cb24c0582b4945" ], "author": { "name": "Jiri Olsa", "email": "jolsa@kernel.org", "time": "Thu Sep 08 09:57:08 2016 +0200" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Sep 20 13:32:49 2016 -0700" }, "message": "fs/proc/kcore.c: Add bounce buffer for ktext data\n\nWe hit hardened usercopy feature check for kernel text access by reading\nkcore file:\n\n usercopy: kernel memory exposure attempt detected from ffffffff8179a01f (\u003ckernel text\u003e) (4065 bytes)\n kernel BUG at mm/usercopy.c:75!\n\nBypassing this check for kcore by adding bounce buffer for ktext data.\n\nReported-by: Steve Best \u003csbest@redhat.com\u003e\nFixes: f5509cc18daa (\"mm: Hardened usercopy\")\nSuggested-by: Kees Cook \u003ckeescook@chromium.org\u003e\nSigned-off-by: Jiri Olsa \u003cjolsa@kernel.org\u003e\nAcked-by: Kees Cook \u003ckeescook@chromium.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "f5beeb1851ea6f8cfcf2657f26cb24c0582b4945", "tree": "f619d5d6686ec8e43fe5f234c52f551f1febacad", "parents": [ "d2ffb0103aaefa9b169da042cf39ce27bfb6cdbb" ], "author": { "name": "Jiri Olsa", "email": "jolsa@kernel.org", "time": "Thu Sep 08 09:57:07 2016 +0200" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Sep 20 13:32:49 2016 -0700" }, "message": "fs/proc/kcore.c: Make bounce buffer global for read\n\nNext patch adds bounce buffer for ktext area, so it\u0027s\nconvenient to have single bounce buffer for both\nvmalloc/module and ktext cases.\n\nSuggested-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Jiri Olsa \u003cjolsa@kernel.org\u003e\nAcked-by: Kees Cook \u003ckeescook@chromium.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "d2ffb0103aaefa9b169da042cf39ce27bfb6cdbb", "tree": "967273cfc51bf649cf5f9f4f4ad0cf0be4b633fc", "parents": [ "7fadce0d60d09427e0027d3d468781b08ca0b3d1", "b92ae139c308c5223521ed6ec022148b81312809" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Sep 19 16:08:03 2016 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Sep 19 16:08:03 2016 -0700" }, "message": "Merge branch \u0027akpm\u0027 (patches from Andrew)\n\nMerge fixes from Andrew Morton:\n \"20 fixes\"\n\n* emailed patches from Andrew Morton \u003cakpm@linux-foundation.org\u003e:\n rapidio/rio_cm: avoid GFP_KERNEL in atomic context\n Revert \"ocfs2: bump up o2cb network protocol version\"\n ocfs2: fix start offset to ocfs2_zero_range_for_truncate()\n cgroup: duplicate cgroup reference when cloning sockets\n mm: memcontrol: make per-cpu charge cache IRQ-safe for socket accounting\n ocfs2: fix double unlock in case retry after free truncate log\n fanotify: fix list corruption in fanotify_get_response()\n fsnotify: add a way to stop queueing events on group shutdown\n ocfs2: fix trans extend while free cached blocks\n ocfs2: fix trans extend while flush truncate log\n ipc/shm: fix crash if CONFIG_SHMEM is not set\n mm: fix the page_swap_info() BUG_ON check\n autofs: use dentry flags to block walks during expire\n MAINTAINERS: update email for VLYNQ bus entry\n mm: avoid endless recursion in dump_page()\n mm, thp: fix leaking mapped pte in __collapse_huge_page_swapin()\n khugepaged: fix use-after-free in collapse_huge_page()\n MAINTAINERS: Maik has moved\n ocfs2/dlm: fix race between convert and migration\n mem-hotplug: don\u0027t clear the only node in new_node_page()\n" }, { "commit": "b92ae139c308c5223521ed6ec022148b81312809", "tree": "ca05935b1c708bc8c982633781d46aed1b0070df", "parents": [ "63b52c4936a2e679639c38ef51a50aa8ca1c5c07" ], "author": { "name": "Alexandre Bounine", "email": "alexandre.bounine@idt.com", "time": "Mon Sep 19 14:44:47 2016 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Sep 19 15:36:17 2016 -0700" }, "message": "rapidio/rio_cm: avoid GFP_KERNEL in atomic context\n\nAs reported by Alexey Khoroshilov (https://lkml.org/lkml/2016/9/9/737):\nriocm_send_close() is called from rio_cm_shutdown() under\nspin_lock_bh(idr_lock), but riocm_send_close() uses a GFP_KERNEL\nallocation.\n\nFix by taking riocm_send_close() outside of spinlock protected code.\n\n[akpm@linux-foundation.org: remove unneeded `if (!list_empty())\u0027]\nLink: http://lkml.kernel.org/r/20160915175402.10122-1-alexandre.bounine@idt.com\nSigned-off-by: Alexandre Bounine \u003calexandre.bounine@idt.com\u003e\nReported-by: Alexey Khoroshilov \u003ckhoroshilov@ispras.ru\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "63b52c4936a2e679639c38ef51a50aa8ca1c5c07", "tree": "5219ded200670feddf311863179cbc4455ab0c6c", "parents": [ "d21c353d5e99c56cdd5b5c1183ffbcaf23b8b960" ], "author": { "name": "Junxiao Bi", "email": "junxiao.bi@oracle.com", "time": "Mon Sep 19 14:44:44 2016 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Sep 19 15:36:17 2016 -0700" }, "message": "Revert \"ocfs2: bump up o2cb network protocol version\"\n\nThis reverts commit 38b52efd218b (\"ocfs2: bump up o2cb network protocol\nversion\").\n\nThis commit made rolling upgrade fail. When one node is upgraded to new\nversion with this commit, the remaining nodes will fail to establish\nconnections to it, then the application like VMs on the remaining nodes\ncan\u0027t be live migrated to the upgraded one. This will cause an outage.\nSince negotiate hb timeout behavior didn\u0027t change without this commit,\nso revert it.\n\nFixes: 38b52efd218bf (\"ocfs2: bump up o2cb network protocol version\")\nLink: http://lkml.kernel.org/r/1471396924-10375-1-git-send-email-junxiao.bi@oracle.com\nSigned-off-by: Junxiao Bi \u003cjunxiao.bi@oracle.com\u003e\nCc: Mark Fasheh \u003cmfasheh@suse.de\u003e\nCc: Joel Becker \u003cjlbec@evilplan.org\u003e\nCc: Joseph Qi \u003cjoseph.qi@huawei.com\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "d21c353d5e99c56cdd5b5c1183ffbcaf23b8b960", "tree": "d0c56ebf05ea58999b3e1ec2fae968e7ee94c05b", "parents": [ "d979a39d7242e0601bf9b60e89628fb8ac577179" ], "author": { "name": "Ashish Samant", "email": "ashish.samant@oracle.com", "time": "Mon Sep 19 14:44:42 2016 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Sep 19 15:36:17 2016 -0700" }, "message": "ocfs2: fix start offset to ocfs2_zero_range_for_truncate()\n\nIf we punch a hole on a reflink such that following conditions are met:\n\n1. start offset is on a cluster boundary\n2. end offset is not on a cluster boundary\n3. (end offset is somewhere in another extent) or\n (hole range \u003e MAX_CONTIG_BYTES(1MB)),\n\nwe dont COW the first cluster starting at the start offset. But in this\ncase, we were wrongly passing this cluster to\nocfs2_zero_range_for_truncate() to zero out. This will modify the\ncluster in place and zero it in the source too.\n\nFix this by skipping this cluster in such a scenario.\n\nTo reproduce:\n\n1. Create a random file of say 10 MB\n xfs_io -c \u0027pwrite -b 4k 0 10M\u0027 -f 10MBfile\n2. Reflink it\n reflink -f 10MBfile reflnktest\n3. Punch a hole at starting at cluster boundary with range greater that\n1MB. You can also use a range that will put the end offset in another\nextent.\n fallocate -p -o 0 -l 1048615 reflnktest\n4. sync\n5. Check the first cluster in the source file. (It will be zeroed out).\n dd if\u003d10MBfile iflag\u003ddirect bs\u003d\u003ccluster size\u003e count\u003d1 | hexdump -C\n\nLink: http://lkml.kernel.org/r/1470957147-14185-1-git-send-email-ashish.samant@oracle.com\nSigned-off-by: Ashish Samant \u003cashish.samant@oracle.com\u003e\nReported-by: Saar Maoz \u003csaar.maoz@oracle.com\u003e\nReviewed-by: Srinivas Eeda \u003csrinivas.eeda@oracle.com\u003e\nCc: Mark Fasheh \u003cmfasheh@suse.de\u003e\nCc: Joel Becker \u003cjlbec@evilplan.org\u003e\nCc: Junxiao Bi \u003cjunxiao.bi@oracle.com\u003e\nCc: Joseph Qi \u003cjoseph.qi@huawei.com\u003e\nCc: Eric Ren \u003czren@suse.com\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "d979a39d7242e0601bf9b60e89628fb8ac577179", "tree": "f790aa92992c9bf54088de8d8bf0fa275252ab1f", "parents": [ "db2ba40c277dc545bab531671c3f45ac0afea6f8" ], "author": { "name": "Johannes Weiner", "email": "jweiner@fb.com", "time": "Mon Sep 19 14:44:38 2016 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Sep 19 15:36:17 2016 -0700" }, "message": "cgroup: duplicate cgroup reference when cloning sockets\n\nWhen a socket is cloned, the associated sock_cgroup_data is duplicated\nbut not its reference on the cgroup. As a result, the cgroup reference\ncount will underflow when both sockets are destroyed later on.\n\nFixes: bd1060a1d671 (\"sock, cgroup: add sock-\u003esk_cgroup\")\nLink: http://lkml.kernel.org/r/20160914194846.11153-2-hannes@cmpxchg.org\nSigned-off-by: Johannes Weiner \u003channes@cmpxchg.org\u003e\nAcked-by: Tejun Heo \u003ctj@kernel.org\u003e\nCc: Michal Hocko \u003cmhocko@suse.cz\u003e\nCc: Vladimir Davydov \u003cvdavydov@virtuozzo.com\u003e\nCc: \u003cstable@vger.kernel.org\u003e\t[4.5+]\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "db2ba40c277dc545bab531671c3f45ac0afea6f8", "tree": "0a8cf97596ce97c77a4cf44e4ab8262cbdb429af", "parents": [ "3bb8b653c86f6b1d2cc05aa1744fed4b18f99485" ], "author": { "name": "Johannes Weiner", "email": "jweiner@fb.com", "time": "Mon Sep 19 14:44:36 2016 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Sep 19 15:36:17 2016 -0700" }, "message": "mm: memcontrol: make per-cpu charge cache IRQ-safe for socket accounting\n\nDuring cgroup2 rollout into production, we started encountering css\nrefcount underflows and css access crashes in the memory controller.\nSplitting the heavily shared css reference counter into logical users\nnarrowed the imbalance down to the cgroup2 socket memory accounting.\n\nThe problem turns out to be the per-cpu charge cache. Cgroup1 had a\nseparate socket counter, but the new cgroup2 socket accounting goes\nthrough the common charge path that uses a shared per-cpu cache for all\nmemory that is being tracked. Those caches are safe against scheduling\npreemption, but not against interrupts - such as the newly added packet\nreceive path. When cache draining is interrupted by network RX taking\npages out of the cache, the resuming drain operation will put references\nof in-use pages, thus causing the imbalance.\n\nDisable IRQs during all per-cpu charge cache operations.\n\nFixes: f7e1cb6ec51b (\"mm: memcontrol: account socket memory in unified hierarchy memory controller\")\nLink: http://lkml.kernel.org/r/20160914194846.11153-1-hannes@cmpxchg.org\nSigned-off-by: Johannes Weiner \u003channes@cmpxchg.org\u003e\nAcked-by: Tejun Heo \u003ctj@kernel.org\u003e\nCc: \"David S. Miller\" \u003cdavem@davemloft.net\u003e\nCc: Michal Hocko \u003cmhocko@suse.cz\u003e\nCc: Vladimir Davydov \u003cvdavydov@virtuozzo.com\u003e\nCc: \u003cstable@vger.kernel.org\u003e\t[4.5+]\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "3bb8b653c86f6b1d2cc05aa1744fed4b18f99485", "tree": "f1a968b08b33778b1b603857bab8465bbfe4942b", "parents": [ "96d41019e3ac55f6f0115b0ce97e4f24a3d636d2" ], "author": { "name": "Joseph Qi", "email": "joseph.qi@huawei.com", "time": "Mon Sep 19 14:44:33 2016 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Sep 19 15:36:17 2016 -0700" }, "message": "ocfs2: fix double unlock in case retry after free truncate log\n\nIf ocfs2_reserve_cluster_bitmap_bits() fails with ENOSPC, it will try to\nfree truncate log and then retry. Since ocfs2_try_to_free_truncate_log\nwill lock/unlock global bitmap inode, we have to unlock it before\ncalling this function. But when retry reserve and it fails with no\nglobal bitmap inode lock taken, it will unlock again in error handling\nbranch and BUG.\n\nThis issue also exists if no need retry and then ocfs2_inode_lock fails.\nSo fix it.\n\nFixes: 2070ad1aebff (\"ocfs2: retry on ENOSPC if sufficient space in truncate log\")\nLink: http://lkml.kernel.org/r/57D91939.6030809@huawei.com\nSigned-off-by: Joseph Qi \u003cjoseph.qi@huawei.com\u003e\nSigned-off-by: Jiufei Xue \u003cxuejiufei@huawei.com\u003e\nCc: Mark Fasheh \u003cmfasheh@suse.de\u003e\nCc: Joel Becker \u003cjlbec@evilplan.org\u003e\nCc: Junxiao Bi \u003cjunxiao.bi@oracle.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "96d41019e3ac55f6f0115b0ce97e4f24a3d636d2", "tree": "4178f8feee6258da1c08f27de55af8de3f2b5af2", "parents": [ "12703dbfeb15402260e7554d32a34ac40c233990" ], "author": { "name": "Jan Kara", "email": "jack@suse.cz", "time": "Mon Sep 19 14:44:30 2016 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Sep 19 15:36:17 2016 -0700" }, "message": "fanotify: fix list corruption in fanotify_get_response()\n\nfanotify_get_response() calls fsnotify_remove_event() when it finds that\ngroup is being released from fanotify_release() (bypass_perm is set).\n\nHowever the event it removes need not be only in the group\u0027s notification\nqueue but it can have already moved to access_list (userspace read the\nevent before closing the fanotify instance fd) which is protected by a\ndifferent lock. Thus when fsnotify_remove_event() races with\nfanotify_release() operating on access_list, the list can get corrupted.\n\nFix the problem by moving all the logic removing permission events from\nthe lists to one place - fanotify_release().\n\nFixes: 5838d4442bd5 (\"fanotify: fix double free of pending permission events\")\nLink: http://lkml.kernel.org/r/1473797711-14111-3-git-send-email-jack@suse.cz\nSigned-off-by: Jan Kara \u003cjack@suse.cz\u003e\nReported-by: Miklos Szeredi \u003cmszeredi@redhat.com\u003e\nTested-by: Miklos Szeredi \u003cmszeredi@redhat.com\u003e\nReviewed-by: Miklos Szeredi \u003cmszeredi@redhat.com\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "12703dbfeb15402260e7554d32a34ac40c233990", "tree": "daff806026a436ba9a359606c8eb580a9d9a7632", "parents": [ "d5bf141893880f7283fe97e1812c58ff22c8f9a5" ], "author": { "name": "Jan Kara", "email": "jack@suse.cz", "time": "Mon Sep 19 14:44:27 2016 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Sep 19 15:36:17 2016 -0700" }, "message": "fsnotify: add a way to stop queueing events on group shutdown\n\nImplement a function that can be called when a group is being shutdown\nto stop queueing new events to the group. Fanotify will use this.\n\nFixes: 5838d4442bd5 (\"fanotify: fix double free of pending permission events\")\nLink: http://lkml.kernel.org/r/1473797711-14111-2-git-send-email-jack@suse.cz\nSigned-off-by: Jan Kara \u003cjack@suse.cz\u003e\nReviewed-by: Miklos Szeredi \u003cmszeredi@redhat.com\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "d5bf141893880f7283fe97e1812c58ff22c8f9a5", "tree": "eca3e87bfffa734000aef45ddec76940ac5077dc", "parents": [ "2b0ad0085aa47ace4756aa501274a7de0325c09c" ], "author": { "name": "Junxiao Bi", "email": "junxiao.bi@oracle.com", "time": "Mon Sep 19 14:44:24 2016 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Sep 19 15:36:17 2016 -0700" }, "message": "ocfs2: fix trans extend while free cached blocks\n\nThe root cause of this issue is the same with the one fixed by the last\npatch, but this time credits for allocator inode and group descriptor\nmay not be consumed before trans extend.\n\nThe following error was caught:\n\n WARNING: CPU: 0 PID: 2037 at fs/jbd2/transaction.c:269 start_this_handle+0x4c3/0x510 [jbd2]()\n Modules linked in: ocfs2 nfsd lockd grace nfs_acl auth_rpcgss sunrpc autofs4 ocfs2_dlmfs ocfs2_stack_o2cb ocfs2_dlm ocfs2_nodemanager ocfs2_stackglue configfs sd_mod sg ip6t_REJECT nf_reject_ipv6 nf_conntrack_ipv6 nf_defrag_ipv6 xt_state nf_conntrack ip6table_filter ip6_tables be2iscsi iscsi_boot_sysfs bnx2i cnic uio cxgb4i cxgb4 cxgb3i libcxgbi cxgb3 mdio ib_iser rdma_cm ib_cm iw_cm ib_sa ib_mad ib_core ib_addr ipv6 iscsi_tcp libiscsi_tcp libiscsi scsi_transport_iscsi ppdev xen_kbdfront fb_sys_fops sysimgblt sysfillrect syscopyarea xen_netfront parport_pc parport pcspkr i2c_piix4 i2c_core acpi_cpufreq ext4 jbd2 mbcache xen_blkfront floppy pata_acpi ata_generic ata_piix dm_mirror dm_region_hash dm_log dm_mod\n CPU: 0 PID: 2037 Comm: rm Tainted: G W 4.1.12-37.6.3.el6uek.bug24573128v2.x86_64 #2\n Hardware name: Xen HVM domU, BIOS 4.4.4OVM 02/11/2016\n Call Trace:\n dump_stack+0x48/0x5c\n warn_slowpath_common+0x95/0xe0\n warn_slowpath_null+0x1a/0x20\n start_this_handle+0x4c3/0x510 [jbd2]\n jbd2__journal_restart+0x161/0x1b0 [jbd2]\n jbd2_journal_restart+0x13/0x20 [jbd2]\n ocfs2_extend_trans+0x74/0x220 [ocfs2]\n ocfs2_free_cached_blocks+0x16b/0x4e0 [ocfs2]\n ocfs2_run_deallocs+0x70/0x270 [ocfs2]\n ocfs2_commit_truncate+0x474/0x6f0 [ocfs2]\n ocfs2_truncate_for_delete+0xbd/0x380 [ocfs2]\n ocfs2_wipe_inode+0x136/0x6a0 [ocfs2]\n ocfs2_delete_inode+0x2a2/0x3e0 [ocfs2]\n ocfs2_evict_inode+0x28/0x60 [ocfs2]\n evict+0xab/0x1a0\n iput_final+0xf6/0x190\n iput+0xc8/0xe0\n do_unlinkat+0x1b7/0x310\n SyS_unlinkat+0x22/0x40\n system_call_fastpath+0x12/0x71\n ---[ end trace a62437cb060baa71 ]---\n JBD2: rm wants too many credits (149 \u003e 128)\n\nLink: http://lkml.kernel.org/r/1473674623-11810-2-git-send-email-junxiao.bi@oracle.com\nSigned-off-by: Junxiao Bi \u003cjunxiao.bi@oracle.com\u003e\nReviewed-by: Joseph Qi \u003cjoseph.qi@huawei.com\u003e\nCc: Mark Fasheh \u003cmfasheh@suse.de\u003e\nCc: Joel Becker \u003cjlbec@evilplan.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "2b0ad0085aa47ace4756aa501274a7de0325c09c", "tree": "431d2727f92749b9aa6e9b7450ce293a15c3d1da", "parents": [ "31b4beb473e3bdee1bf79db849502dcb24b5c202" ], "author": { "name": "Junxiao Bi", "email": "junxiao.bi@oracle.com", "time": "Mon Sep 19 14:44:21 2016 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Sep 19 15:36:17 2016 -0700" }, "message": "ocfs2: fix trans extend while flush truncate log\n\nEvery time, ocfs2_extend_trans() included a credit for truncate log\ninode, but as that inode had been managed by jbd2 running transaction\nfirst time, it will not consume that credit until\njbd2_journal_restart().\n\nSince total credits to extend always included the un-consumed ones,\nthere will be more and more un-consumed credit, at last\njbd2_journal_restart() will fail due to credit number over the half of\nmax transction credit.\n\nThe following error was caught when unlinking a large file with many\nextents:\n\n ------------[ cut here ]------------\n WARNING: CPU: 0 PID: 13626 at fs/jbd2/transaction.c:269 start_this_handle+0x4c3/0x510 [jbd2]()\n Modules linked in: ocfs2 nfsd lockd grace nfs_acl auth_rpcgss sunrpc autofs4 ocfs2_dlmfs ocfs2_stack_o2cb ocfs2_dlm ocfs2_nodemanager ocfs2_stackglue configfs sd_mod sg ip6t_REJECT nf_reject_ipv6 nf_conntrack_ipv6 nf_defrag_ipv6 xt_state nf_conntrack ip6table_filter ip6_tables be2iscsi iscsi_boot_sysfs bnx2i cnic uio cxgb4i cxgb4 cxgb3i libcxgbi cxgb3 mdio ib_iser rdma_cm ib_cm iw_cm ib_sa ib_mad ib_core ib_addr ipv6 iscsi_tcp libiscsi_tcp libiscsi scsi_transport_iscsi ppdev xen_kbdfront xen_netfront fb_sys_fops sysimgblt sysfillrect syscopyarea parport_pc parport pcspkr i2c_piix4 i2c_core acpi_cpufreq ext4 jbd2 mbcache xen_blkfront floppy pata_acpi ata_generic ata_piix dm_mirror dm_region_hash dm_log dm_mod\n CPU: 0 PID: 13626 Comm: unlink Tainted: G W 4.1.12-37.6.3.el6uek.x86_64 #2\n Hardware name: Xen HVM domU, BIOS 4.4.4OVM 02/11/2016\n Call Trace:\n dump_stack+0x48/0x5c\n warn_slowpath_common+0x95/0xe0\n warn_slowpath_null+0x1a/0x20\n start_this_handle+0x4c3/0x510 [jbd2]\n jbd2__journal_restart+0x161/0x1b0 [jbd2]\n jbd2_journal_restart+0x13/0x20 [jbd2]\n ocfs2_extend_trans+0x74/0x220 [ocfs2]\n ocfs2_replay_truncate_records+0x93/0x360 [ocfs2]\n __ocfs2_flush_truncate_log+0x13e/0x3a0 [ocfs2]\n ocfs2_remove_btree_range+0x458/0x7f0 [ocfs2]\n ocfs2_commit_truncate+0x1b3/0x6f0 [ocfs2]\n ocfs2_truncate_for_delete+0xbd/0x380 [ocfs2]\n ocfs2_wipe_inode+0x136/0x6a0 [ocfs2]\n ocfs2_delete_inode+0x2a2/0x3e0 [ocfs2]\n ocfs2_evict_inode+0x28/0x60 [ocfs2]\n evict+0xab/0x1a0\n iput_final+0xf6/0x190\n iput+0xc8/0xe0\n do_unlinkat+0x1b7/0x310\n SyS_unlink+0x16/0x20\n system_call_fastpath+0x12/0x71\n ---[ end trace 28aa7410e69369cf ]---\n JBD2: unlink wants too many credits (251 \u003e 128)\n\nLink: http://lkml.kernel.org/r/1473674623-11810-1-git-send-email-junxiao.bi@oracle.com\nSigned-off-by: Junxiao Bi \u003cjunxiao.bi@oracle.com\u003e\nReviewed-by: Joseph Qi \u003cjoseph.qi@huawei.com\u003e\nCc: Mark Fasheh \u003cmfasheh@suse.de\u003e\nCc: Joel Becker \u003cjlbec@evilplan.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "31b4beb473e3bdee1bf79db849502dcb24b5c202", "tree": "ba862e325b07ebd106cde077dfbddd3aedf4b233", "parents": [ "c8de641b1e9c5489aa6ca57b7836acd68e7563f1" ], "author": { "name": "Kirill A. Shutemov", "email": "kirill.shutemov@linux.intel.com", "time": "Mon Sep 19 14:44:18 2016 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Sep 19 15:36:17 2016 -0700" }, "message": "ipc/shm: fix crash if CONFIG_SHMEM is not set\n\nCommit c01d5b300774 (\"shmem: get_unmapped_area align huge page\") makes\nuse of shm_get_unmapped_area() in shm_file_operations() unconditional to\nCONFIG_MMU.\n\nAs Tony Battersby pointed this can lead NULL-pointer dereference on\nmachine with CONFIG_MMU\u003dy and CONFIG_SHMEM\u003dn. In this case ipc/shm is\nbacked by ramfs which doesn\u0027t provide f_op-\u003eget_unmapped_area for\nconfigurations with MMU.\n\nThe solution is to provide dummy f_op-\u003eget_unmapped_area for ramfs when\nCONFIG_MMU\u003dy, which just call current-\u003emm-\u003eget_unmapped_area().\n\nFixes: c01d5b300774 (\"shmem: get_unmapped_area align huge page\")\nLink: http://lkml.kernel.org/r/20160912102704.140442-1-kirill.shutemov@linux.intel.com\nSigned-off-by: Kirill A. Shutemov \u003ckirill.shutemov@linux.intel.com\u003e\nReported-by: Tony Battersby \u003ctonyb@cybernetics.com\u003e\nTested-by: Tony Battersby \u003ctonyb@cybernetics.com\u003e\nCc: Hugh Dickins \u003chughd@google.com\u003e\nCc: \u003cstable@vger.kernel.org\u003e\t[4.7.x]\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "c8de641b1e9c5489aa6ca57b7836acd68e7563f1", "tree": "6cf2e5f733905522629ef39910f79709f9f78422", "parents": [ "7cbdb4a286a60c5d519cb9223fe2134d26870d39" ], "author": { "name": "Santosh Shilimkar", "email": "santosh.shilimkar@oracle.com", "time": "Mon Sep 19 14:44:15 2016 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Sep 19 15:36:17 2016 -0700" }, "message": "mm: fix the page_swap_info() BUG_ON check\n\nCommit 62c230bc1790 (\"mm: add support for a filesystem to activate\nswap files and use direct_IO for writing swap pages\") replaced the\nswap_aops dirty hook from __set_page_dirty_no_writeback() with\nswap_set_page_dirty().\n\nFor normal cases without these special SWP flags code path falls back to\n__set_page_dirty_no_writeback() so the behaviour is expected to be the\nsame as before.\n\nBut swap_set_page_dirty() makes use of the page_swap_info() helper to\nget the swap_info_struct to check for the flags like SWP_FILE,\nSWP_BLKDEV etc as desired for those features. This helper has\nBUG_ON(!PageSwapCache(page)) which is racy and safe only for the\nset_page_dirty_lock() path.\n\nFor the set_page_dirty() path which is often needed for cases to be\ncalled from irq context, kswapd() can toggle the flag behind the back\nwhile the call is getting executed when system is low on memory and\nheavy swapping is ongoing.\n\nThis ends up with undesired kernel panic.\n\nThis patch just moves the check outside the helper to its users\nappropriately to fix kernel panic for the described path. Couple of\nusers of helpers already take care of SwapCache condition so I skipped\nthem.\n\nLink: http://lkml.kernel.org/r/1473460718-31013-1-git-send-email-santosh.shilimkar@oracle.com\nSigned-off-by: Santosh Shilimkar \u003csantosh.shilimkar@oracle.com\u003e\nCc: Mel Gorman \u003cmgorman@suse.de\u003e\nCc: Joe Perches \u003cjoe@perches.com\u003e\nCc: Peter Zijlstra \u003ca.p.zijlstra@chello.nl\u003e\nCc: Rik van Riel \u003criel@redhat.com\u003e\nCc: David S. Miller \u003cdavem@davemloft.net\u003e\nCc: Jens Axboe \u003caxboe@fb.com\u003e\nCc: Michal Hocko \u003cmhocko@suse.com\u003e\nCc: Hugh Dickins \u003chughd@google.com\u003e\nCc: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\nCc: \u003cstable@vger.kernel.org\u003e\t[4.7.x]\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "7cbdb4a286a60c5d519cb9223fe2134d26870d39", "tree": "dd283b03f720e4df73b09894ecf765b2aee2185d", "parents": [ "08eeb3061e44661afb4cb9eb08780e2fff8bfbc5" ], "author": { "name": "Ian Kent", "email": "raven@themaw.net", "time": "Mon Sep 19 14:44:12 2016 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Sep 19 15:36:17 2016 -0700" }, "message": "autofs: use dentry flags to block walks during expire\n\nSomewhere along the way the autofs expire operation has changed to hold\na spin lock over expired dentry selection. The autofs indirect mount\nexpired dentry selection is complicated and quite lengthy so it isn\u0027t\nappropriate to hold a spin lock over the operation.\n\nCommit 47be61845c77 (\"fs/dcache.c: avoid soft-lockup in dput()\") added a\nmight_sleep() to dput() causing a WARN_ONCE() about this usage to be\nissued.\n\nBut the spin lock doesn\u0027t need to be held over this check, the autofs\ndentry info. flags are enough to block walks into dentrys during the\nexpire.\n\nI\u0027ve left the direct mount expire as it is (for now) because it is much\nsimpler and quicker than the indirect mount expire and adding spin lock\nrelease and re-aquires would do nothing more than add overhead.\n\nFixes: 47be61845c77 (\"fs/dcache.c: avoid soft-lockup in dput()\")\nLink: http://lkml.kernel.org/r/20160912014017.1773.73060.stgit@pluto.themaw.net\nSigned-off-by: Ian Kent \u003craven@themaw.net\u003e\nReported-by: Takashi Iwai \u003ctiwai@suse.de\u003e\nTested-by: Takashi Iwai \u003ctiwai@suse.de\u003e\nCc: Takashi Iwai \u003ctiwai@suse.de\u003e\nCc: NeilBrown \u003cneilb@suse.com\u003e\nCc: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "08eeb3061e44661afb4cb9eb08780e2fff8bfbc5", "tree": "f3de05635c1850a761ee6b188496f7a27a5898a4", "parents": [ "4d35427ad7641cba08ea0deffae1a78147ad41c0" ], "author": { "name": "Florian Fainelli", "email": "f.fainelli@gmail.com", "time": "Mon Sep 19 14:44:09 2016 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Sep 19 15:36:17 2016 -0700" }, "message": "MAINTAINERS: update email for VLYNQ bus entry\n\nLink: http://lkml.kernel.org/r/1473218738-21836-1-git-send-email-f.fainelli@gmail.com\nSigned-off-by: Florian Fainelli \u003cf.fainelli@gmail.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "4d35427ad7641cba08ea0deffae1a78147ad41c0", "tree": "832a652ea61f198004cd27bfa8cc56a24087d422", "parents": [ "982785c6b05a82c01e90687b7e25ee87c8970b2e" ], "author": { "name": "Kirill A. Shutemov", "email": "kirill.shutemov@linux.intel.com", "time": "Mon Sep 19 14:44:07 2016 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Sep 19 15:36:16 2016 -0700" }, "message": "mm: avoid endless recursion in dump_page()\n\ndump_page() uses page_mapcount() to get mapcount of the page.\npage_mapcount() has VM_BUG_ON_PAGE(PageSlab(page)) as mapcount doesn\u0027t\nmake sense for slab pages and the field in struct page used for other\ninformation.\n\nIt leads to recursion if dump_page() called for slub page and DEBUG_VM\nis enabled:\n\ndump_page() -\u003e page_mapcount() -\u003e VM_BUG_ON_PAGE() -\u003e dump_page -\u003e ...\n\nLet\u0027s avoid calling page_mapcount() for slab pages in dump_page().\n\nLink: http://lkml.kernel.org/r/20160908082137.131076-1-kirill.shutemov@linux.intel.com\nSigned-off-by: Kirill A. Shutemov \u003ckirill.shutemov@linux.intel.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "982785c6b05a82c01e90687b7e25ee87c8970b2e", "tree": "d855120e0185c802dcb3c222fc94abe31a279b3c", "parents": [ "c131f751ab1a852d4dd4b490b3a7fbba7d738de5" ], "author": { "name": "Ebru Akagunduz", "email": "ebru.akagunduz@gmail.com", "time": "Mon Sep 19 14:44:04 2016 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Sep 19 15:36:16 2016 -0700" }, "message": "mm, thp: fix leaking mapped pte in __collapse_huge_page_swapin()\n\nCurrently, khugepaged does not permit swapin if there are enough young\npages in a THP. The problem is when a THP does not have enough young\npages, khugepaged leaks mapped ptes.\n\nThis patch prohibits leaking mapped ptes.\n\nLink: http://lkml.kernel.org/r/1472820276-7831-1-git-send-email-ebru.akagunduz@gmail.com\nSigned-off-by: Ebru Akagunduz \u003cebru.akagunduz@gmail.com\u003e\nSuggested-by: Andrea Arcangeli \u003caarcange@redhat.com\u003e\nReviewed-by: Andrea Arcangeli \u003caarcange@redhat.com\u003e\nReviewed-by: Rik van Riel \u003criel@redhat.com\u003e\nCc: Vlastimil Babka \u003cvbabka@suse.cz\u003e\nCc: Mel Gorman \u003cmgorman@techsingularity.net\u003e\nCc: Kirill A. Shutemov \u003ckirill.shutemov@linux.intel.com\u003e\nCc: Johannes Weiner \u003channes@cmpxchg.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "c131f751ab1a852d4dd4b490b3a7fbba7d738de5", "tree": "8aad30641286414906d71e5bcfa7f8274998a601", "parents": [ "d8e3875431956c1f78e142d531f490f76c760ce3" ], "author": { "name": "Kirill A. Shutemov", "email": "kirill.shutemov@linux.intel.com", "time": "Mon Sep 19 14:44:01 2016 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Sep 19 15:36:16 2016 -0700" }, "message": "khugepaged: fix use-after-free in collapse_huge_page()\n\nhugepage_vma_revalidate() tries to re-check if we still should try to\ncollapse small pages into huge one after the re-acquiring mmap_sem.\n\nThe problem Dmitry Vyukov reported[1] is that the vma found by\nhugepage_vma_revalidate() can be suitable for huge pages, but not the\nsame vma we had before dropping mmap_sem. And dereferencing original\nvma can lead to fun results..\n\nLet\u0027s use vma hugepage_vma_revalidate() found instead of assuming it\u0027s the\nsame as what we had before the lock was dropped.\n\n[1] http://lkml.kernel.org/r/CACT4Y+Z3gigBvhca9kRJFcjX0G70V_nRhbwKBU+yGoESBDKi9Q@mail.gmail.com\n\nLink: http://lkml.kernel.org/r/20160907122559.GA6542@black.fi.intel.com\nSigned-off-by: Kirill A. Shutemov \u003ckirill.shutemov@linux.intel.com\u003e\nReported-by: Dmitry Vyukov \u003cdvyukov@google.com\u003e\nReviewed-by: Andrea Arcangeli \u003caarcange@redhat.com\u003e\nCc: Ebru Akagunduz \u003cebru.akagunduz@gmail.com\u003e\nCc: Vlastimil Babka \u003cvbabka@suse.cz\u003e\nCc: Mel Gorman \u003cmgorman@techsingularity.net\u003e\nCc: Johannes Weiner \u003channes@cmpxchg.org\u003e\nCc: Vegard Nossum \u003cvegard.nossum@oracle.com\u003e\nCc: Sasha Levin \u003clevinsasha928@gmail.com\u003e\nCc: Konstantin Khlebnikov \u003ckoct9i@gmail.com\u003e\nCc: Andrey Ryabinin \u003cryabinin.a.a@gmail.com\u003e\nCc: Greg Thelen \u003cgthelen@google.com\u003e\nCc: Suleiman Souhlal \u003csuleiman@google.com\u003e\nCc: Hugh Dickins \u003chughd@google.com\u003e\nCc: David Rientjes \u003crientjes@google.com\u003e\nCc: syzkaller \u003csyzkaller@googlegroups.com\u003e\nCc: Kostya Serebryany \u003ckcc@google.com\u003e\nCc: Alexander Potapenko \u003cglider@google.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "d8e3875431956c1f78e142d531f490f76c760ce3", "tree": "afe997353943170885c1cc0e0f57f53bd15ccf3d", "parents": [ "e6f0c6e6170fec175fe676495f29029aecdf486c" ], "author": { "name": "Sudip Mukherjee", "email": "sudipm.mukherjee@gmail.com", "time": "Mon Sep 19 14:43:58 2016 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Sep 19 15:36:16 2016 -0700" }, "message": "MAINTAINERS: Maik has moved\n\nMaik is no longer using the plusserver.de email, update with his\ncurrent email.\n\nLink: http://lkml.kernel.org/r/1473007794-27960-1-git-send-email-sudipm.mukherjee@gmail.com\nSigned-off-by: Sudip Mukherjee \u003csudip.mukherjee@codethink.co.uk\u003e\nCc: Maik Broemme \u003cmbroemme@libmpq.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "e6f0c6e6170fec175fe676495f29029aecdf486c", "tree": "9f0ccd2923830ee0088a81d3abb5526d829c2832", "parents": [ "9bb627be47a574b764e162e8513d5db78d49e7f5" ], "author": { "name": "Joseph Qi", "email": "joseph.qi@huawei.com", "time": "Mon Sep 19 14:43:55 2016 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Sep 19 15:36:16 2016 -0700" }, "message": "ocfs2/dlm: fix race between convert and migration\n\nCommit ac7cf246dfdb (\"ocfs2/dlm: fix race between convert and recovery\")\nchecks if lockres master has changed to identify whether new master has\nfinished recovery or not. This will introduce a race that right after\nold master does umount ( means master will change), a new convert\nrequest comes.\n\nIn this case, it will reset lockres state to DLM_RECOVERING and then\nretry convert, and then fail with lockres-\u003el_action being set to\nOCFS2_AST_INVALID, which will cause inconsistent lock level between\nocfs2 and dlm, and then finally BUG.\n\nSince dlm recovery will clear lock-\u003econvert_pending in\ndlm_move_lockres_to_recovery_list, we can use it to correctly identify\nthe race case between convert and recovery. So fix it.\n\nFixes: ac7cf246dfdb (\"ocfs2/dlm: fix race between convert and recovery\")\nLink: http://lkml.kernel.org/r/57CE1569.8010704@huawei.com\nSigned-off-by: Joseph Qi \u003cjoseph.qi@huawei.com\u003e\nSigned-off-by: Jun Piao \u003cpiaojun@huawei.com\u003e\nCc: Mark Fasheh \u003cmfasheh@suse.de\u003e\nCc: Joel Becker \u003cjlbec@evilplan.org\u003e\nCc: Junxiao Bi \u003cjunxiao.bi@oracle.com\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "9bb627be47a574b764e162e8513d5db78d49e7f5", "tree": "3d5ba54acea02ab5c1d44161cf239b6273d451f6", "parents": [ "3be7988674ab33565700a37b210f502563d932e6" ], "author": { "name": "Li Zhong", "email": "zhong@linux.vnet.ibm.com", "time": "Mon Sep 19 14:43:52 2016 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Sep 19 15:36:16 2016 -0700" }, "message": "mem-hotplug: don\u0027t clear the only node in new_node_page()\n\nCommit 394e31d2ceb4 (\"mem-hotplug: alloc new page from a nearest\nneighbor node when mem-offline\") introduced new_node_page() for memory\nhotplug.\n\nIn new_node_page(), the nid is cleared before calling\n__alloc_pages_nodemask(). But if it is the only node of the system, and\nthe first round allocation fails, it will not be able to get memory from\nan empty nodemask, and will trigger oom.\n\nThe patch checks whether it is the last node on the system, and if it\nis, then don\u0027t clear the nid in the nodemask.\n\nFixes: 394e31d2ceb4 (\"mem-hotplug: alloc new page from a nearest neighbor node when mem-offline\")\nLink: http://lkml.kernel.org/r/1473044391.4250.19.camel@TP420\nSigned-off-by: Li Zhong \u003czhong@linux.vnet.ibm.com\u003e\nReported-by: John Allen \u003cjallen@linux.vnet.ibm.com\u003e\nAcked-by: Vlastimil Babka \u003cvbabka@suse.cz\u003e\nCc: Xishi Qiu \u003cqiuxishi@huawei.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "7fadce0d60d09427e0027d3d468781b08ca0b3d1", "tree": "54192b2c448828a575ba0a04eac91fffb376660e", "parents": [ "7bb91e06730140a693611e51a4a9636152448bd3" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Sep 19 14:49:08 2016 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Sep 19 14:49:08 2016 -0700" }, "message": "scripts/faddr2line: improve on base path filtering a bit\n\nDue to our compiler include directives, the build pathnames for header\nfiles often end up being of the form \"$srcdir/./include/linux/xyz.h\",\nwhich ends up having that extra \".\" path component after the build base\nin it.\n\nTeach faddr2line to skip that too, to make code generated in inline\nfunctions in header files match the filename for the regular C files.\n\nRabin Vincent pointed out that I can\u0027t make a stricter regexp match by\nusing the \" at \" prefix for the pathname, because that ends up being\nlocale-dependent. But this does require that the path match be preceded\nby a space, to make it a bit more strict (that matters mainly if we\ndidn\u0027t find any base_dir at all, and we only end up with the \"./\" part\nof the match)\n\nAcked-by: Josh Poimboeuf \u003cjpoimboe@redhat.com\u003e\nCc: Rabin Vincent \u003crabin@rab.in\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "7bb91e06730140a693611e51a4a9636152448bd3", "tree": "3db8274e509dded5e864b4af9154ffd2b4f0a846", "parents": [ "8ff77206aa36949afab46be43a3d14af75a4e270", "2db34e78f126c6001d79d3b66ab1abb482dc7caa" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Sep 19 12:58:34 2016 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Sep 19 12:58:34 2016 -0700" }, "message": "Merge branch \u0027linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6\n\nPull crypto fixes from Herbert Xu:\n \"This fixes a potential weakness in IPsec CBC IV generation, as well as\n a number of issues that arose out of an OOM crash on ARM with CTR-mode\n AES\"\n\n* \u0027linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6:\n crypto: arm64/aes-ctr - fix NULL dereference in tail processing\n crypto: arm/aes-ctr - fix NULL dereference in tail processing\n crypto: skcipher - Fix blkcipher walk OOM crash\n crypto: echainiv - Replace chaining with multiplication\n" }, { "commit": "8ff77206aa36949afab46be43a3d14af75a4e270", "tree": "4be6bf1ad3171ece225ae56d9ed6a509e7970817", "parents": [ "67326666e2d45ebea7db3ed8e3e735f15e60dd91", "47a66e45d7a7613322549c2475ea9d809baaf514" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Sep 19 12:27:31 2016 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Sep 19 12:27:31 2016 -0700" }, "message": "Merge tag \u0027drm-fixes-for-4.8-rc7\u0027 of git://people.freedesktop.org/~airlied/linux\n\nPull exynos and one stable ABI fix from Dave Airlie:\n \"One important drm 32/64 ABI fix came in so I\u0027ll dequeue what I have,\n the rest is just exynos runtime pm fixes, but the net removal of code\n seems like a win to me.\n\n I\u0027m going to be sporadic this week due to school holidays, so if\n anything urgent turns up, Daniel will take care of it\"\n\n* tag \u0027drm-fixes-for-4.8-rc7\u0027 of git://people.freedesktop.org/~airlied/linux:\n drm: Only use compat ioctl for addfb2 on X86/IA64\n Subject: [PATCH, RESEND] drm: exynos: avoid unused function warning\n drm/exynos: g2d: fix system and runtime pm integration\n drm/exynos: rotator: fix system and runtime pm integration\n drm/exynos: gsc: fix system and runtime pm integration\n drm/exynos: fimc: fix system and runtime pm integration\n exynos-drm: Fix unsupported GEM memory type error message to be clear\n" }, { "commit": "67326666e2d45ebea7db3ed8e3e735f15e60dd91", "tree": "a558a6e310aefbaccf6aeca602c58a9182c6ccd1", "parents": [ "3be7988674ab33565700a37b210f502563d932e6" ], "author": { "name": "Josh Poimboeuf", "email": "jpoimboe@redhat.com", "time": "Mon Sep 19 10:52:14 2016 -0500" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Sep 19 12:00:30 2016 -0700" }, "message": "scripts: add script for translating stack dump function offsets\n\naddr2line doesn\u0027t work with KASLR addresses. Add a basic addr2line\nwrapper script which takes the \u0027func+offset/size\u0027 format as input.\n\nSigned-off-by: Josh Poimboeuf \u003cjpoimboe@redhat.com\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "47a66e45d7a7613322549c2475ea9d809baaf514", "tree": "032e2cb2448c2bb7da1fc3f3c6bd40870e4e7742", "parents": [ "f2543242adccd86bfeea3a4921800879e7187810" ], "author": { "name": "Kristian H. Kristensen", "email": "hoegsberg@gmail.com", "time": "Tue Sep 13 14:20:45 2016 -0700" }, "committer": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Mon Sep 19 17:28:20 2016 +1000" }, "message": "drm: Only use compat ioctl for addfb2 on X86/IA64\n\nSimilar to struct drm_update_draw, struct drm_mode_fb_cmd2 has an\nunaligned 64 bit field (modifier). This get packed differently between\n32 bit and 64 bit modes on architectures that can handle unaligned 64\nbit access (X86 and IA64). Other architectures pack the structs the\nsame and don\u0027t need the compat wrapper. Use the same condition for\ndrm_mode_fb_cmd2 as we use for drm_update_draw.\n\nNote that only the modifier will be packed differently between compat\nand non-compat versions.\n\nReviewed-by: Rob Clark \u003crobdclark@gmail.com\u003e\nSigned-off-by: Kristian H. Kristensen \u003choegsberg@chromium.org\u003e\n[seanpaul added not at bottom of commit msg re: modifier]\nSigned-off-by: Sean Paul \u003cseanpaul@chromium.org\u003e\nLink: http://patchwork.freedesktop.org/patch/msgid/1473801645-116011-1-git-send-email-hoegsberg@chromium.org\nCc: stable@vger.kernel.org\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\n" }, { "commit": "f2543242adccd86bfeea3a4921800879e7187810", "tree": "202dd3df10dd8d66ef128b2eb0dcf12591709fa7", "parents": [ "09cb5b78af52208afb9f1b194c8a9154df4a4782", "4158dbe1be9b420e1fdd9ec5c033647a605ca485" ], "author": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Mon Sep 19 14:22:56 2016 +1000" }, "committer": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Mon Sep 19 14:22:56 2016 +1000" }, "message": "Merge branch \u0027exynos-drm-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/daeinki/drm-exynos into drm-fixes\n\nJust fixup to runtime pm usage and some cleanups.\n\n* \u0027exynos-drm-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/daeinki/drm-exynos:\n Subject: [PATCH, RESEND] drm: exynos: avoid unused function warning\n drm/exynos: g2d: fix system and runtime pm integration\n drm/exynos: rotator: fix system and runtime pm integration\n drm/exynos: gsc: fix system and runtime pm integration\n drm/exynos: fimc: fix system and runtime pm integration\n exynos-drm: Fix unsupported GEM memory type error message to be clear\n" }, { "commit": "4158dbe1be9b420e1fdd9ec5c033647a605ca485", "tree": "202dd3df10dd8d66ef128b2eb0dcf12591709fa7", "parents": [ "b05984e21a7e000bf5074ace00d7a574944b2c16" ], "author": { "name": "Arnd Bergmann", "email": "arnd@arndb.de", "time": "Sun Sep 18 22:51:38 2016 +0900" }, "committer": { "name": "Inki Dae", "email": "inki.dae@samsung.com", "time": "Mon Sep 19 10:07:26 2016 +0900" }, "message": "Subject: [PATCH, RESEND] drm: exynos: avoid unused function warning\n\nWhen CONFIG_PM is not set, we get a warning about an unused function:\n\ndrivers/gpu/drm/exynos/exynos_drm_gsc.c:1219:12: error: \u0027gsc_clk_ctrl\u0027 defined but not used [-Werror\u003dunused-function]\n static int gsc_clk_ctrl(struct gsc_context *ctx, bool enable)\n ^~~~~~~~~~~~\n\nThis removes the two #ifdef checks in this file and instead marks the\nfunctions as __maybe_unused, which is a more reliable way of doing the\nsame, allowing better build coverage and avoiding the warning above.\n\nSigned-off-by: Arnd Bergmann \u003carnd@arndb.de\u003e\nSigned-off-by: Inki Dae \u003cinki.dae@samsung.com\u003e\n" }, { "commit": "3be7988674ab33565700a37b210f502563d932e6", "tree": "3766a43fe8b1dcd2d20513afc8bdd7b9a9d884e3", "parents": [ "b01cf676835b681c159a395dc6828f1d6e3b3db6" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Sep 18 17:27:41 2016 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Sep 18 17:27:41 2016 -0700" }, "message": "Linux 4.8-rc7\n" }, { "commit": "b01cf676835b681c159a395dc6828f1d6e3b3db6", "tree": "50eb4f80d73af2a8b241d451ad780c68c19991f2", "parents": [ "88b4ad287c91790e98fe9381b5cba7b381f359c0", "e06226e66beafd6118aa81b511d88cb549ad7ea5" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Sep 18 12:07:05 2016 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Sep 18 12:07:05 2016 -0700" }, "message": "Merge tag \u0027usb-4.8-rc7\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb\n\nPull USB fixes from Greg KH:\n \"Here are two small fixes, and one new device id, for 4.8-rc7\n\n The fixes solve a build error that was reported in your tree for the\n blackfin arch, and resolve an issue with a number of broken USB\n devices that reported the wrong interval rate. Included here is also\n a new device id for the usb-serial driver.\n\n All have been in linux-next with no reported issues\"\n\n* tag \u0027usb-4.8-rc7\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb:\n USB: change bInterval default to 10 ms\n usb: musb: Fix tusb6010 compile error on blackfin\n USB: serial: simple: add support for another Infineon flashloader\n" }, { "commit": "88b4ad287c91790e98fe9381b5cba7b381f359c0", "tree": "940afd1ae0074b7431f4b3a8c247fe5927ae387d", "parents": [ "3286be94808c403a5ca6bb2830d933439315cb99", "8e4b72054f554967827e18be1de0e8122e6efc04" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Sep 18 11:57:24 2016 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Sep 18 11:57:24 2016 -0700" }, "message": "Merge tag \u0027fixes-for-linus-v4.8-rc7\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/groeck/linux-staging\n\nPull uaccess fixes from Guenter Roeck:\n \"Two patches fixing problems introduced with copy_from_user changes\"\n\n* tag \u0027fixes-for-linus-v4.8-rc7\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/groeck/linux-staging:\n openrisc: fix the fix of copy_from_user()\n avr32: fix \u0027undefined reference to `___copy_from_user\u0027\n" }, { "commit": "3286be94808c403a5ca6bb2830d933439315cb99", "tree": "2f92c4403ae1f8c1601cf82b42e5005b0106058d", "parents": [ "6ffa36a59a01691cc8823ef1113e328bb84c14de", "080fe0b790ad438fc1b61621dac37c1964ce7f35" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Sep 18 11:50:48 2016 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Sep 18 11:50:48 2016 -0700" }, "message": "Merge branch \u0027perf-urgent-for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip\n\nPull perf fixes from Thomas Gleixner:\n \"A couple of small fixes to x86 perf drivers:\n\n - Measure L2 for HW_CACHE* events on AMD\n\n - Fix the address filter handling in the intel/pt driver\n\n - Handle the BTS disabling at the proper place\"\n\n* \u0027perf-urgent-for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:\n perf/x86/amd: Make HW_CACHE_REFERENCES and HW_CACHE_MISSES measure L2\n perf/x86/intel/pt: Do validate the size of a kernel address filter\n perf/x86/intel/pt: Fix kernel address filter\u0027s offset validation\n perf/x86/intel/pt: Fix an off-by-one in address filter configuration\n perf/x86/intel: Don\u0027t disable \"intel_bts\" around \"intel\" event batching\n" }, { "commit": "6ffa36a59a01691cc8823ef1113e328bb84c14de", "tree": "63f81a2d04658d6000ce5edf2d39d06bbbc18136", "parents": [ "aaed4d0bddaef70640fa8ac0d52a380e2d3c6101", "6cfeaf5125d425043d44002d0a1a8a147be582bf" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Sep 18 11:38:46 2016 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Sep 18 11:38:46 2016 -0700" }, "message": "Merge branch \u0027smp-urgent-for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip\n\nPull SMP build fixlet from Thomas Gleixner:\n \"Add a missing include in cpuhotplug.h\"\n\n* \u0027smp-urgent-for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:\n cpu/hotplug: Include linux/types.h in linux/cpuhotplug.h\n" }, { "commit": "aaed4d0bddaef70640fa8ac0d52a380e2d3c6101", "tree": "68cb6ee186a6a96485121eb2270d45ca71b66be8", "parents": [ "d4690f1e1cdabb4d61207b6787b1605a0dc0aeab", "5eb0d6eb3fac3daa60d9190eed9fa41cf809c756" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Sep 18 11:08:00 2016 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sun Sep 18 11:08:00 2016 -0700" }, "message": "Merge branch \u0027irq-urgent-for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip\n\nPull irq fixes from Thomas Gleixner:\n \"Two patches from Boris which address a potential deadlock in the atmel\n irq chip driver\"\n\n* \u0027irq-urgent-for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:\n irqchip/atmel-aic: Fix potential deadlock in -\u003exlate()\n genirq: Provide irq_gc_{lock_irqsave,unlock_irqrestore}() helpers\n" }, { "commit": "8e4b72054f554967827e18be1de0e8122e6efc04", "tree": "2af6cc02dc448a37ffae36f971a5d9a3e6e7ebd3", "parents": [ "65c0044ca8d7c7bbccae37f0ff2972f0210e9f41" ], "author": { "name": "Guenter Roeck", "email": "linux@roeck-us.net", "time": "Sat Sep 17 12:57:24 2016 -0700" }, "committer": { "name": "Guenter Roeck", "email": "linux@roeck-us.net", "time": "Sun Sep 18 07:26:42 2016 -0700" }, "message": "openrisc: fix the fix of copy_from_user()\n\nSince commit acb2505d0119 (\"openrisc: fix copy_from_user()\"),\ncopy_from_user() returns the number of bytes requested, not the\nnumber of bytes not copied.\n\nCc: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\nFixes: acb2505d0119 (\"openrisc: fix copy_from_user()\")\nSigned-off-by: Guenter Roeck \u003clinux@roeck-us.net\u003e\n" }, { "commit": "65c0044ca8d7c7bbccae37f0ff2972f0210e9f41", "tree": "4a28522b7a337eccddbfd484ed3dc24eeb766343", "parents": [ "d4690f1e1cdabb4d61207b6787b1605a0dc0aeab" ], "author": { "name": "Guenter Roeck", "email": "linux@roeck-us.net", "time": "Sat Sep 17 07:52:49 2016 -0700" }, "committer": { "name": "Guenter Roeck", "email": "linux@roeck-us.net", "time": "Sun Sep 18 07:26:26 2016 -0700" }, "message": "avr32: fix \u0027undefined reference to `___copy_from_user\u0027\n\navr32 builds fail with:\n\narch/avr32/kernel/built-in.o: In function `arch_ptrace\u0027:\n(.text+0x650): undefined reference to `___copy_from_user\u0027\narch/avr32/kernel/built-in.o:(___ksymtab+___copy_from_user+0x0): undefined\nreference to `___copy_from_user\u0027\nkernel/built-in.o: In function `proc_doulongvec_ms_jiffies_minmax\u0027:\n(.text+0x5dd8): undefined reference to `___copy_from_user\u0027\nkernel/built-in.o: In function `proc_dointvec_minmax_sysadmin\u0027:\nsysctl.c:(.text+0x6174): undefined reference to `___copy_from_user\u0027\nkernel/built-in.o: In function `ptrace_has_cap\u0027:\nptrace.c:(.text+0x69c0): undefined reference to `___copy_from_user\u0027\nkernel/built-in.o:ptrace.c:(.text+0x6b90): more undefined references to\n`___copy_from_user\u0027 follow\n\nFixes: 8630c32275ba (\"avr32: fix copy_from_user()\")\nCc: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\nAcked-by: Havard Skinnemoen \u003chskinnemoen@gmail.com\u003e\nAcked-by: Hans-Christian Noren Egtvedt \u003cegtvedt@samfundet.no\u003e\nSigned-off-by: Guenter Roeck \u003clinux@roeck-us.net\u003e\n" }, { "commit": "b05984e21a7e000bf5074ace00d7a574944b2c16", "tree": "5140cf66896e1a28c7dd7cbf179d99acfda049fb", "parents": [ "5b67723e6096f5470f361656cd108430d3b12c67" ], "author": { "name": "Marek Szyprowski", "email": "m.szyprowski@samsung.com", "time": "Wed Aug 31 14:55:57 2016 +0200" }, "committer": { "name": "Inki Dae", "email": "daeinki@gmail.com", "time": "Sun Sep 18 22:20:39 2016 +0900" }, "message": "drm/exynos: g2d: fix system and runtime pm integration\n\nMove code from system sleep pm to runtime pm callbacks to ensure proper\ndriver state preservation when device is under power domain. Then, use\ngeneric helpers for using runtime pm for system sleep pm.\n\nSigned-off-by: Marek Szyprowski \u003cm.szyprowski@samsung.com\u003e\nSigned-off-by: Inki Dae \u003cinki.dae@samsung.com\u003e\n" }, { "commit": "5b67723e6096f5470f361656cd108430d3b12c67", "tree": "6e3ca035c43a35aa9e3850fa426311c996be173d", "parents": [ "83bd7b20aaf499030bf857ef64de3c19309b107d" ], "author": { "name": "Marek Szyprowski", "email": "m.szyprowski@samsung.com", "time": "Wed Aug 31 14:55:56 2016 +0200" }, "committer": { "name": "Inki Dae", "email": "daeinki@gmail.com", "time": "Sun Sep 18 22:20:38 2016 +0900" }, "message": "drm/exynos: rotator: fix system and runtime pm integration\n\nUse generic helpers instead of open-coding usage of runtime pm for system\nsleep pm, which was potentially broken for some corner cases.\n\nSigned-off-by: Marek Szyprowski \u003cm.szyprowski@samsung.com\u003e\nSigned-off-by: Inki Dae \u003cinki.dae@samsung.com\u003e\n" }, { "commit": "83bd7b20aaf499030bf857ef64de3c19309b107d", "tree": "138e846b9b8c2a9aa5ad177f7c0f2f58f96b8765", "parents": [ "479f12545460809cfc9093d90d6ed82d76388e97" ], "author": { "name": "Marek Szyprowski", "email": "m.szyprowski@samsung.com", "time": "Wed Aug 31 14:55:55 2016 +0200" }, "committer": { "name": "Inki Dae", "email": "daeinki@gmail.com", "time": "Sun Sep 18 22:20:37 2016 +0900" }, "message": "drm/exynos: gsc: fix system and runtime pm integration\n\nUse generic helpers instead of open-coding usage of runtime pm for system\nsleep pm, which was potentially broken for some corner cases.\n\nSigned-off-by: Marek Szyprowski \u003cm.szyprowski@samsung.com\u003e\nSigned-off-by: Inki Dae \u003cinki.dae@samsung.com\u003e\n" }, { "commit": "479f12545460809cfc9093d90d6ed82d76388e97", "tree": "d02ebc5d6eaa2b37c49f129b8c17da45b70522b2", "parents": [ "6244bd651236d86f59387d43c531b5f942a92b38" ], "author": { "name": "Marek Szyprowski", "email": "m.szyprowski@samsung.com", "time": "Wed Aug 31 14:55:54 2016 +0200" }, "committer": { "name": "Inki Dae", "email": "daeinki@gmail.com", "time": "Sun Sep 18 22:20:37 2016 +0900" }, "message": "drm/exynos: fimc: fix system and runtime pm integration\n\nUse generic helpers instead of open-coding usage of runtime pm for system\nsleep pm, which was potentially broken for some corner cases.\n\nSigned-off-by: Marek Szyprowski \u003cm.szyprowski@samsung.com\u003e\nSigned-off-by: Inki Dae \u003cinki.dae@samsung.com\u003e\n" }, { "commit": "6244bd651236d86f59387d43c531b5f942a92b38", "tree": "7884881f7133ee5e4185a57de971fbe1a4b124cd", "parents": [ "09cb5b78af52208afb9f1b194c8a9154df4a4782" ], "author": { "name": "Shuah Khan", "email": "shuahkh@osg.samsung.com", "time": "Mon Aug 08 17:48:20 2016 -0600" }, "committer": { "name": "Inki Dae", "email": "daeinki@gmail.com", "time": "Sun Sep 18 22:20:36 2016 +0900" }, "message": "exynos-drm: Fix unsupported GEM memory type error message to be clear\n\nFix unsupported GEM memory type error message to include the memory type\ninformation.\n\nSigned-off-by: Shuah Khan \u003cshuahkh@osg.samsung.com\u003e\nSigned-off-by: Inki Dae \u003cinki.dae@samsung.com\u003e\n" }, { "commit": "d4690f1e1cdabb4d61207b6787b1605a0dc0aeab", "tree": "bd482082c7f8f3dec6a2ed658460dc0c7482f4e4", "parents": [ "f32a10df2ed6b87a10c1ca11757b0bbb035486a4" ], "author": { "name": "Al Viro", "email": "viro@ZenIV.linux.org.uk", "time": "Fri Sep 16 00:11:45 2016 +0100" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Sep 17 14:05:30 2016 -0700" }, "message": "fix iov_iter_fault_in_readable()\n\n... by turning it into what used to be multipages counterpart\n\nCc: stable@vger.kernel.org\nSigned-off-by: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "f32a10df2ed6b87a10c1ca11757b0bbb035486a4", "tree": "19af8cda0d8700c27fcd3785b746576d134c3116", "parents": [ "baf009f92731c0fc1f036d8b7dba3bf5bb2c2a5e", "df804d5e27490151da1ce9f216031a31352203e6" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Sep 17 12:59:57 2016 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Sep 17 12:59:57 2016 -0700" }, "message": "Merge tag \u0027mmc-v4.8-rc6\u0027 of git://git.linaro.org/people/ulf.hansson/mmc\n\nPull MMC fixes from Ulf Hansson:\n \"MMC host:\n - omap/omap_hsmmc: Initialize dma_slave_config to avoid random data\n - sdhci-st: Handle interconnect clock\"\n\n* tag \u0027mmc-v4.8-rc6\u0027 of git://git.linaro.org/people/ulf.hansson/mmc:\n mmc: omap: Initialize dma_slave_config to avoid random data in it\u0027s fields\n mmc: omap_hsmmc: Initialize dma_slave_config to avoid random data\n mmc: sdhci-st: Handle interconnect clock\n dt-bindings: mmc: sdhci-st: Mention the discretionary \"icn\" clock\n" }, { "commit": "baf009f92731c0fc1f036d8b7dba3bf5bb2c2a5e", "tree": "20561586e27bbb43162badad10a0c3280e42e6bc", "parents": [ "4d2899d73c4734cd04edb9409a72d0ef637cfb06", "ed7d9a1d7da6fe7b1c7477dc70e95051583fd60c" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Sep 17 12:52:01 2016 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Sep 17 12:52:01 2016 -0700" }, "message": "Merge tag \u0027powerpc-4.8-6\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux\n\nPull powerpc fixes from Michael Ellerman:\n \"Fixes for code merged this cycle:\n\n - Fix restore of SPRs upon wake up from hypervisor state loss from\n Gautham R Shenoy\n - Fix the state of root PE from Gavin Shan\n - Detach from PE on releasing PCI device from Gavin Shan\n - Fix size of NUM_CPU_FTR_KEYS on 32-bit\n - Fix missed TCE invalidations that should fallback to OPAL\"\n\n* tag \u0027powerpc-4.8-6\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/powerpc/linux:\n powerpc/powernv/pci: Fix missed TCE invalidations that should fallback to OPAL\n powerpc/powernv: Detach from PE on releasing PCI device\n powerpc/powernv: Fix the state of root PE\n powerpc/kernel: Fix size of NUM_CPU_FTR_KEYS on 32-bit\n powerpc/powernv: Fix restore of SPRs upon wake up from hypervisor state loss\n" }, { "commit": "4d2899d73c4734cd04edb9409a72d0ef637cfb06", "tree": "89e4886a7870daf0454947bd41c3533460766275", "parents": [ "87ee1280ff80e04adf9b36361235eef76cd80301", "348c1bfa84dfc47da1f1234b7f2bf09fa798edea" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Sep 16 17:09:48 2016 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Sep 16 17:09:48 2016 -0700" }, "message": "Merge branch \u0027for-next\u0027 of git://git.samba.org/sfrench/cifs-2.6\n\nPull cifs fixes from Steve French:\n \"Small set of cifs fixes\"\n\n* \u0027for-next\u0027 of git://git.samba.org/sfrench/cifs-2.6:\n Move check for prefix path to within cifs_get_root()\n Compare prepaths when comparing superblocks\n Fix memory leaks in cifs_do_mount()\n" }, { "commit": "87ee1280ff80e04adf9b36361235eef76cd80301", "tree": "1dd85b1ad234780afabc7a25feac686b11a21fef", "parents": [ "5fbf3e3275a739f93fee9fb32c41e5a018c97b8d", "bf2c4b6f9b74c2ee1dd3c050b181e9b9c86fbcdb" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Sep 16 17:00:26 2016 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Sep 16 17:00:26 2016 -0700" }, "message": "Merge tag \u0027nfsd-4.8-2\u0027 of git://linux-nfs.org/~bfields/linux\n\nPull nfsd bugfix from Bruce Fields:\n \"Fix a memory corruption bug that I introduced in 4.7\"\n\n* tag \u0027nfsd-4.8-2\u0027 of git://linux-nfs.org/~bfields/linux:\n svcauth_gss: Revert 64c59a3726f2 (\"Remove unnecessary allocation\")\n" }, { "commit": "5fbf3e3275a739f93fee9fb32c41e5a018c97b8d", "tree": "bd4d5cd3756a1ba9cbedf645aa7e750a1c734a9d", "parents": [ "095f5cfaea5f03db6c6bd7c3bd9aa790a21e797a", "09cb5b78af52208afb9f1b194c8a9154df4a4782" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Sep 16 16:27:30 2016 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Sep 16 16:27:30 2016 -0700" }, "message": "Merge tag \u0027drm-fixes-for-4.8-rc6\u0027 of git://people.freedesktop.org/~airlied/linux\n\nPull drm fixes from Dave Airlie:\n \"Two sets of i915 fixes, one set of vc4 crasher fixes, and a couple of\n atmel fixes.\n\n Nothing too out there at this stage, though I think some people are\n holidaying so it\u0027s been quiet enough\"\n\n* tag \u0027drm-fixes-for-4.8-rc6\u0027 of git://people.freedesktop.org/~airlied/linux:\n drm/i915: Ignore OpRegion panel type except on select machines\n Revert \"drm/i915/psr: Make idle_frames sensible again\"\n drm/i915: Restore lost \"Initialized i915\" welcome message\n drm/vc4: mark vc4_bo_cache_purge() static\n drm/i915: Add GEN7_PCODE_MIN_FREQ_TABLE_GT_RATIO_OUT_OF_RANGE to SNB\n drm/i915: disable 48bit full PPGTT when vGPU is active\n drm/i915: enable vGPU detection for all\n drm/atmel-hlcdc: Make -\u003ereset() implementation static\n drm: atmel-hlcdc: Fix vertical scaling\n drm/vc4: Allow some more signals to be packed with uniform resets.\n drm/i915/dvo: Remove dangling call to drm_encoder_cleanup()\n" }, { "commit": "095f5cfaea5f03db6c6bd7c3bd9aa790a21e797a", "tree": "5b1cf04e61dfdef3b6be3e15c2521f46606d32ca", "parents": [ "dd5a477c7f31a44d9f16b24fbf015611eb13a9f2", "778935778c3b88e5152a88765850009006ef2e32" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Sep 16 16:22:52 2016 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Sep 16 16:22:52 2016 -0700" }, "message": "Merge tag \u0027pm-4.8-rc7\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm\n\nPull power management fix from Rafael Wysocki:\n \"More annotations of tracepoints in the runtime PM framework to prevent\n RCU from complaining when that code is invoked from the idle path\n (Paul McKenney)\"\n\n* tag \u0027pm-4.8-rc7\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm:\n PM / runtime: Use _rcuidle for runtime suspend tracepoints\n" }, { "commit": "09cb5b78af52208afb9f1b194c8a9154df4a4782", "tree": "c9b698aaf0265a4191241afcbf1444029b65a00d", "parents": [ "9929c09767da8c5936dda6ea6d5054e4c1bc5f6e", "ea90383837334bcebe842e719ad4d8c966f4ef51" ], "author": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Sat Sep 17 07:57:55 2016 +1000" }, "committer": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Sat Sep 17 07:57:55 2016 +1000" }, "message": "Merge tag \u0027drm-vc4-fixes-2016-09-14\u0027 of https://github.com/anholt/linux into drm-fixes\n\nThis pull request brings in a fix for crashes in X on VC4.\n\n* tag \u0027drm-vc4-fixes-2016-09-14\u0027 of https://github.com/anholt/linux:\n drm/vc4: mark vc4_bo_cache_purge() static\n drm/vc4: Allow some more signals to be packed with uniform resets.\n" }, { "commit": "9929c09767da8c5936dda6ea6d5054e4c1bc5f6e", "tree": "83fe4ef61a8c5ec4b78c854e716a3d450f597e1b", "parents": [ "7eebfba5c48f89e1729022459cde2b256696ba2a", "ea54ff4008892b46c7a3e6bc8ab8aaec9d198639" ], "author": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Sat Sep 17 07:57:21 2016 +1000" }, "committer": { "name": "Dave Airlie", "email": "airlied@redhat.com", "time": "Sat Sep 17 07:57:21 2016 +1000" }, "message": "Merge tag \u0027drm-intel-fixes-2016-09-15\u0027 of git://anongit.freedesktop.org/drm-intel into drm-fixes\n\ni915 fixes from Jani.\n\n* tag \u0027drm-intel-fixes-2016-09-15\u0027 of git://anongit.freedesktop.org/drm-intel:\n drm/i915: Ignore OpRegion panel type except on select machines\n Revert \"drm/i915/psr: Make idle_frames sensible again\"\n drm/i915: Restore lost \"Initialized i915\" welcome message\n" }, { "commit": "dd5a477c7f31a44d9f16b24fbf015611eb13a9f2", "tree": "d015528221e4365678eaf6c507f555391d63d446", "parents": [ "008f08d64a74a71a4ea99533d0520d804048a4a0", "e4618d40eb3dc1a6d1f55f7150ea25bb23ab410a" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Sep 16 13:51:42 2016 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Sep 16 13:51:42 2016 -0700" }, "message": "Merge tag \u0027for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/dledford/rdma\n\nPull rdma fixes from Doug Ledford:\n \"Round three of 4.8 rc fixes.\n\n This is likely the last rdma pull request this cycle. The new rxe\n driver had a few issues (you probably saw the boot bot bug report) and\n they should be addressed now. There are a couple other fixes here,\n mainly mlx4. There are still two outstanding issues that need\n resolved but I don\u0027t think their fix will make this kernel cycle.\n\n Summary:\n\n - Various fixes to rdmavt, ipoib, mlx5, mlx4, rxe\"\n\n* tag \u0027for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/dledford/rdma:\n IB/rdmavt: Don\u0027t vfree a kzalloc\u0027ed memory region\n IB/rxe: Fix kmem_cache leak\n IB/rxe: Fix race condition between requester and completer\n IB/rxe: Fix duplicate atomic request handling\n IB/rxe: Fix kernel panic in udp_setup_tunnel\n IB/mlx5: Set source mac address in FTE\n IB/mlx5: Enable MAD_IFC commands for IB ports only\n IB/mlx4: Diagnostic HW counters are not supported in slave mode\n IB/mlx4: Use correct subnet-prefix in QP1 mads under SR-IOV\n IB/mlx4: Fix code indentation in QP1 MAD flow\n IB/mlx4: Fix incorrect MC join state bit-masking on SR-IOV\n IB/ipoib: Don\u0027t allow MC joins during light MC flush\n IB/rxe: fix GFP_KERNEL in spinlock context\n" }, { "commit": "008f08d64a74a71a4ea99533d0520d804048a4a0", "tree": "d4cffda696ea6d71573fbc0b5ad570a3df005b70", "parents": [ "cac4662a88702fc9e405ef19c429de375822d77a", "6408649115cfd73d6807398d04b2ba564db9211e" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Sep 16 12:15:41 2016 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Sep 16 12:15:41 2016 -0700" }, "message": "Merge tag \u0027fixes-for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/arm/arm-soc\n\nPull ARM SoC fixes from Arnd Bergmann:\n \"Here are a couple of bugfixes for v4.8-rc.\n\n Most of them have actually been around for a while this time but for\n some reason didn\u0027t get applied early on. The shmobile regulator fix\n is the only one that isn\u0027t completely obvious.\n\n Device tree changes:\n - archtimer interrupts must be level triggered (multiple platforms)\n - fix for USB and MMC clocks on STiH410\n - fix split DT repository in case of raspberry-pi 3\n - a new use of skeleton.dtsi on arm64 has crept in after that was\n removed.\n\n defconfig updates:\n - xilinx vdma has a new Kconfig symbol name\n - keystone requires CONFIG_NOP_USB_XCEIV since v4.8-rc1\n\n Code fixes:\n - fix regulator quirk on shmobile\n - suspend-to-ram regression on EXYNOS\n\n Maintainer updates:\n - Javier Martinez Canillas is now a reviewer for Samsung EXYNOS\"\n\n* tag \u0027fixes-for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/arm/arm-soc:\n ARM: keystone: defconfig: Fix USB configuration\n arm64: dts: Fix broken architected timer interrupt trigger\n ARM: multi_v7_defconfig: update XILINX_VDMA\n ARM64: dts: bcm: Use a symlink to R-Pi dtsi files from arch\u003darm\n ARM: dts: Remove use of skeleton.dtsi from bcm283x.dtsi\n ARM: dts: STiH407-family: Provide interconnect clock for consumption in ST SDHCI\n ARM: dts: STiH410: Handle interconnect clock required by EHCI/OHCI (USB)\n ARM: shmobile: fix regulator quirk for Gen2\n ARM: EXYNOS: Clear OF_POPULATED flag from PMU node in IRQ init callback\n MAINTAINERS: Add myself as reviewer for Samsung Exynos support\n" }, { "commit": "cac4662a88702fc9e405ef19c429de375822d77a", "tree": "8de362ab63366e281843351a37daf162f10cb888", "parents": [ "22f6b4d34fcf039c63a94e7670e0da24f8575a5a", "1a57c286d8ced1e4144c6201a19bbb70827edee6" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Sep 16 12:08:13 2016 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Sep 16 12:08:13 2016 -0700" }, "message": "Merge branch \u0027fixes\u0027 of git://git.armlinux.org.uk/~rmk/linux-arm\n\nPull ARM fixes from Russell King:\n \"Most of this update are fixes primarily discovered from testing on the\n older StrongARM 1110 and PXA systems, as a result of recent interest\n from several people in these platforms:\n\n - Locomo interrupt handling incorrectly stores the handler data in\n the chip\u0027s private data slot: when Locomo is combined with an\n interrupt controller who\u0027s chip uses the chip private data, this\n leads to an oops.\n\n - SA1111 was missing a call to clk_disable() to clean up after a\n failed probe.\n\n - SA1111 and PCMCIA suspend/resume was broken:\n\n The PCMCIA \"ds\" layer was using the legacy bus suspend/resume\n methods, which the core PM code is no longer calling as a result of\n device_pm_check_callbacks() introduced in commit aa8e54b559479\n (\"PM / sleep: Go direct_complete if driver has no callbacks\").\n\n SA1111 was broken due to changes to PCMCIA which makes PCMCIA\n suspend itself later than the SA1111 code expects, and resume\n before the SA1111 code has initialised access to the pcmcia\n sub-device.\n\n - the default SA1111 interrupt mask polarity got messed up when it\n was converted to use a dynamic interrupt base number for its\n interrupts.\n\n - fix platform_get_irq() error code propagation, which was causing\n problems on platforms where the interrupt may not be available at\n probe time in DT setups.\n\n - fix the lack of clock to PCMCIA code on PXA platforms, which was\n omitted in conversions of PXA to CCF.\n\n - fix an oops in the PXA PCMCIA code caused by a previous commit not\n realising that Lubbock is different from the rest of the PXA PCMCIA\n drivers.\n\n - ensure that SA1111 low-level PCMCIA drivers propagate their error\n codes to the main probe function, rather than the driver silently\n accepting a failure.\n\n - fix the sa11xx debugfs reporting of timing information, which\n always indicated zero due to the clock being a factor of 1000 out.\n\n - fix the polarity of the status change signal reported from the\n sockets.\n\n Lastly, one ARM specific commit from Stefan Agner fixing the LPAE\n cache attributes\"\n\n* \u0027fixes\u0027 of git://git.armlinux.org.uk/~rmk/linux-arm:\n ARM: pxa/lubbock: add pcmcia clock\n ARM: locomo: fix locomo irq handling\n ARM: 8612/1: LPAE: initialize cache policy correctly\n ARM: sa1111: fix missing clk_disable()\n ARM: sa1111: fix pcmcia suspend/resume\n ARM: sa1111: fix pcmcia interrupt mask polarity\n ARM: sa1111: fix error code propagation in sa1111_probe()\n pcmcia: lubbock: fix sockets configuration\n pcmcia: sa1111: fix propagation of lowlevel board init return code\n pcmcia: soc_common: fix SS_STSCHG polarity\n pcmcia: sa11xx_base: add units to the timing information\n pcmcia: sa11xx_base: fix reporting of timing information\n pcmcia: ds: fix suspend/resume\n" }, { "commit": "e4618d40eb3dc1a6d1f55f7150ea25bb23ab410a", "tree": "587b46a8506c0d8bc6d66a81116e99fadd131bae", "parents": [ "c1cc72cb6ff95cbe02ed747866576dccab4a5911" ], "author": { "name": "Colin Ian King", "email": "colin.king@canonical.com", "time": "Fri Sep 09 08:15:37 2016 +0100" }, "committer": { "name": "Doug Ledford", "email": "dledford@redhat.com", "time": "Fri Sep 16 14:14:23 2016 -0400" }, "message": "IB/rdmavt: Don\u0027t vfree a kzalloc\u0027ed memory region\n\nThe userspace memory region \u0027mr\u0027 is allocated with kzalloc in\n__rvt_alloc_mr however it is incorrectly being freed with vfree in\n__rvt_free_mr. Fix this by using kfree to free it.\n\nSigned-off-by: Colin Ian King \u003ccolin.king@canonical.com\u003e\nReviewed-by: Leon Romanovsky \u003cleonro@mellanox.com\u003e\nAcked-by: Dennis Dalessandro \u003cdennis.dalessandro@intel.com\u003e\nSigned-off-by: Doug Ledford \u003cdledford@redhat.com\u003e\n" }, { "commit": "c1cc72cb6ff95cbe02ed747866576dccab4a5911", "tree": "760b7443960d74c7abd8f96758898be23754892e", "parents": [ "3050b99850247695cb07a5c15265afcc08bcf400" ], "author": { "name": "Yonatan Cohen", "email": "yonatanc@mellanox.com", "time": "Wed Sep 07 14:04:07 2016 +0300" }, "committer": { "name": "Doug Ledford", "email": "dledford@redhat.com", "time": "Fri Sep 16 14:14:08 2016 -0400" }, "message": "IB/rxe: Fix kmem_cache leak\n\nDecrement qp reference when handling error path\nin completer to prevent kmem_cache leak.\n\nFixes: 8700e3e7c485 (\"Soft RoCE driver\")\nSigned-off-by: Yonatan Cohen \u003cyonatanc@mellanox.com\u003e\nSigned-off-by: Leon Romanovsky \u003cleon@kernel.org\u003e\nSigned-off-by: Doug Ledford \u003cdledford@redhat.com\u003e\n" }, { "commit": "3050b99850247695cb07a5c15265afcc08bcf400", "tree": "0f4fad28a660a0496540b598c08cbf713005bd94", "parents": [ "908948877bbbb240f67d7eb27d3a392beb394a07" ], "author": { "name": "Yonatan Cohen", "email": "yonatanc@mellanox.com", "time": "Wed Sep 07 14:04:06 2016 +0300" }, "committer": { "name": "Doug Ledford", "email": "dledford@redhat.com", "time": "Fri Sep 16 14:14:08 2016 -0400" }, "message": "IB/rxe: Fix race condition between requester and completer\n\nrxe_requester() is sending a pkt with rxe_xmit_packet() and\nthen calls rxe_update() to update the wqe and qp\u0027s psn values.\nBut sometimes the response is received before the requester\nhad time to update the wqe in which case the completer\nacts on errornous wqe values.\nThis fix updates the wqe and qp before actually sending\nthe request and rolls back when xmit fails.\n\nFixes: 8700e3e7c485 (\"Soft RoCE driver\")\nSigned-off-by: Yonatan Cohen \u003cyonatanc@mellanox.com\u003e\nSigned-off-by: Leon Romanovsky \u003cleon@kernel.org\u003e\nSigned-off-by: Doug Ledford \u003cdledford@redhat.com\u003e\n" }, { "commit": "908948877bbbb240f67d7eb27d3a392beb394a07", "tree": "0c02e80de95207f0659bdfe57cc526e0a1cd3dea", "parents": [ "dfdd6158ca2c8838313470c5ab79243d04da70b2" ], "author": { "name": "Yonatan Cohen", "email": "yonatanc@mellanox.com", "time": "Wed Sep 07 14:04:05 2016 +0300" }, "committer": { "name": "Doug Ledford", "email": "dledford@redhat.com", "time": "Fri Sep 16 14:14:08 2016 -0400" }, "message": "IB/rxe: Fix duplicate atomic request handling\n\nWhen handling ack for atomic opcodes like \"fetch\u0026add\"\nor \"cmp\u0026swp\", the method send_atomic_ack() saves the ack\nbefore sending it, in case it gets lost and never reach the\nrequester. In which case the method duplicate_request()\nwill need to find it using the duplicated request.psn.\nBut send_atomic_ack() used a wrong psn value and thus\nthe above ack was never found.\nThis fix uses the ack.psn to locate the ack in case\nits needed.\nThis fix also copies the ack packet to the skb\u0027s control buffer\nsince duplicate_request() will need it when calling rxe_xmit_packet()\n\nFixes: 8700e3e7c485 (\"Soft RoCE driver\")\nSigned-off-by: Yonatan Cohen \u003cyonatanc@mellanox.com\u003e\nSigned-off-by: Leon Romanovsky \u003cleon@kernel.org\u003e\nSigned-off-by: Doug Ledford \u003cdledford@redhat.com\u003e\n" }, { "commit": "dfdd6158ca2c8838313470c5ab79243d04da70b2", "tree": "12b0e7121b9ac2217971da1ada265fd4ab9b4d6d", "parents": [ "ee3da804ad1b1dd4c766199a6e8443542b0aaaef" ], "author": { "name": "Yonatan Cohen", "email": "yonatanc@mellanox.com", "time": "Wed Sep 07 14:04:04 2016 +0300" }, "committer": { "name": "Doug Ledford", "email": "dledford@redhat.com", "time": "Fri Sep 16 14:14:08 2016 -0400" }, "message": "IB/rxe: Fix kernel panic in udp_setup_tunnel\n\nDisable creation of a UDP socket for ipv6 when\nCONFIG_IPV6 is not enabeld. Since udp_sock_create6()\nreturns 0 when CONFIG_IPV6 is not set\n\n[ 46.888632] IP: [\u003cc220705a\u003e] setup_udp_tunnel_sock+0x6/0x4f\n[ 46.891355] *pdpt \u003d 0000000000000000 *pde \u003d f000ff53f000ff53\n[ 46.893918] Oops: 0002 [#1] PREEMPT\n[ 46.896014] CPU: 0 PID: 1 Comm: swapper Not tainted 4.7.0-rc4-00001-g8700e3e #1\n[ 46.900280] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS Debian-1.8.2-1 04/01/2014\n[ 46.904905] task: cf06c040 ti: cf05e000 task.ti: cf05e000\n[ 46.907854] EIP: 0060:[\u003cc220705a\u003e] EFLAGS: 00210246 CPU: 0\n[ 46.911137] EIP is at setup_udp_tunnel_sock+0x6/0x4f\n[ 46.914070] EAX: 00000044 EBX: 00000001 ECX: cf05fef0 EDX: ca8142e0\n[ 46.917236] ESI: c2c4505b EDI: cf05fef0 EBP: cf05fed0 ESP: cf05fed0\n[ 46.919836] DS: 007b ES: 007b FS: 0000 GS: 00e0 SS: 0068\n[ 46.922046] CR0: 80050033 CR2: 000001fc CR3: 02cec000 CR4: 000006b0\n[ 46.924550] Stack:\n[ 46.926014] cf05ff10 c1fd4657 ca8142e0 0000000a 00000000 00000000 0000b712 00000008\n[ 46.931274] 00000000 6bb5bd01 c1fd48de 00000000 00000000 cf05ff1c 00000000 00000000\n[ 46.936122] cf05ff1c c1fd4bdf 00000000 cf05ff28 c2c4507b ffffffff cf05ff88 c2bf1c74\n[ 46.942350] Call Trace:\n[ 46.944403] [\u003cc1fd4657\u003e] rxe_setup_udp_tunnel+0x8f/0x99\n[ 46.947689] [\u003cc1fd48de\u003e] ? net_to_rxe+0x4e/0x4e\n[ 46.950567] [\u003cc1fd4bdf\u003e] rxe_net_init+0xe/0xa4\n[ 46.953147] [\u003cc2c4507b\u003e] rxe_module_init+0x20/0x4c\n[ 46.955448] [\u003cc2bf1c74\u003e] do_one_initcall+0x89/0x113\n[ 46.957797] [\u003cc2bf15eb\u003e] ? set_debug_rodata+0xf/0xf\n[ 46.959966] [\u003cc2bf1dbc\u003e] ? kernel_init_freeable+0xbe/0x15b\n[ 46.962262] [\u003cc2bf1ddc\u003e] kernel_init_freeable+0xde/0x15b\n[ 46.964418] [\u003cc232eb54\u003e] kernel_init+0x8/0xd0\n[ 46.966618] [\u003cc2333122\u003e] ret_from_kernel_thread+0xe/0x24\n[ 46.969592] [\u003cc232eb4c\u003e] ? rest_init+0x6f/0x6f\n\nFixes: 8700e3e7c485 (\"Soft RoCE driver\")\nSigned-off-by: Yonatan Cohen \u003cyonatanc@mellanox.com\u003e\nSigned-off-by: Leon Romanovsky \u003cleon@kernel.org\u003e\nSigned-off-by: Doug Ledford \u003cdledford@redhat.com\u003e\n" }, { "commit": "ee3da804ad1b1dd4c766199a6e8443542b0aaaef", "tree": "2b42f6006fff4d090b0974155c03fced2c52eb14", "parents": [ "7fae6655a0c897875bd34501ec092232b526d3e4" ], "author": { "name": "Maor Gottlieb", "email": "maorg@mellanox.com", "time": "Mon Sep 12 19:16:24 2016 +0300" }, "committer": { "name": "Doug Ledford", "email": "dledford@redhat.com", "time": "Fri Sep 16 14:14:08 2016 -0400" }, "message": "IB/mlx5: Set source mac address in FTE\n\nSet the source mac address in the FTE when L2 specification\nis provided.\n\nFixes: 038d2ef87572 (\u0027IB/mlx5: Add flow steering support\u0027)\nSigned-off-by: Maor Gottlieb \u003cmaorg@mellanox.com\u003e\nSigned-off-by: Leon Romanovsky \u003cleon@kernel.org\u003e\nSigned-off-by: Doug Ledford \u003cdledford@redhat.com\u003e\n" }, { "commit": "7fae6655a0c897875bd34501ec092232b526d3e4", "tree": "fef1bb265517c0a5297f4d8cd6524ff9734ecc74", "parents": [ "69d269d38910e697e461ec5677368f57d2046cbe" ], "author": { "name": "Noa Osherovich", "email": "noaos@mellanox.com", "time": "Mon Sep 12 19:16:23 2016 +0300" }, "committer": { "name": "Doug Ledford", "email": "dledford@redhat.com", "time": "Fri Sep 16 14:14:08 2016 -0400" }, "message": "IB/mlx5: Enable MAD_IFC commands for IB ports only\n\nMAD_IFC command is supported only for physical functions (PF)\nand when physical port is IB. The proposed fix enforces it.\n\nFixes: d603c809ef91 (\"IB/mlx5: Fix decision on using MAD_IFC\")\nReported-by: David Chang \u003cdchang@suse.com\u003e\nSigned-off-by: Noa Osherovich \u003cnoaos@mellanox.com\u003e\nSigned-off-by: Leon Romanovsky \u003cleon@kernel.org\u003e\nSigned-off-by: Doug Ledford \u003cdledford@redhat.com\u003e\n" }, { "commit": "69d269d38910e697e461ec5677368f57d2046cbe", "tree": "ad2395cd655aa43b89f146e6c4ed4259fd7f2d89", "parents": [ "8ec07bf8a8b57d6c58927a16a0a22c0115cf2855" ], "author": { "name": "Kamal Heib", "email": "kamalh@mellanox.com", "time": "Mon Sep 12 19:16:22 2016 +0300" }, "committer": { "name": "Doug Ledford", "email": "dledford@redhat.com", "time": "Fri Sep 16 14:14:08 2016 -0400" }, "message": "IB/mlx4: Diagnostic HW counters are not supported in slave mode\n\nModify the mlx4_ib_diag_counters() to avoid the following error in the\nhypervisor when the slave tries to query the hardware counters in SR-IOV\nmode.\n\nmlx4_core 0000:81:00.0: Unknown command:0x30 accepted from slave:1\n\nFixes: 3f85f2aaabf7 (\"IB/mlx4: Add diagnostic hardware counters\")\nSigned-off-by: Kamal Heib \u003ckamalh@mellanox.com\u003e\nSigned-off-by: Leon Romanovsky \u003cleon@kernel.org\u003e\nSigned-off-by: Doug Ledford \u003cdledford@redhat.com\u003e\n" }, { "commit": "8ec07bf8a8b57d6c58927a16a0a22c0115cf2855", "tree": "6ea9c5b90d4e6a6f0dcad816254fe0be6a1a8b27", "parents": [ "baa0be7026e2f7d1d40bfd45909044169e9e3c68" ], "author": { "name": "Jack Morgenstein", "email": "jackm@dev.mellanox.co.il", "time": "Mon Sep 12 19:16:20 2016 +0300" }, "committer": { "name": "Doug Ledford", "email": "dledford@redhat.com", "time": "Fri Sep 16 14:14:08 2016 -0400" }, "message": "IB/mlx4: Use correct subnet-prefix in QP1 mads under SR-IOV\n\nWhen sending QP1 MAD packets which use a GRH, the source GID\n(which consists of the 64-bit subnet prefix, and the 64 bit port GUID)\nmust be included in the packet GRH.\n\nFor SR-IOV, a GID cache is used, since the source GID needs to be the\nslave\u0027s source GID, and not the Hypervisor\u0027s GID. This cache also\nincluded a subnet_prefix. Unfortunately, the subnet_prefix field in\nthe cache was never initialized (to the default subnet prefix 0xfe80::0).\nAs a result, this field remained all zeroes. Therefore, when SR-IOV\nwas active, all QP1 packets which included a GRH had a source GID\nsubnet prefix of all-zeroes.\n\nHowever, the subnet-prefix should initially be 0xfe80::0 (the default\nsubnet prefix). In addition, if OpenSM modifies a port\u0027s subnet prefix,\nthe new subnet prefix must be used in the GRH when sending QP1 packets.\nTo fix this we now initialize the subnet prefix in the SR-IOV GID cache\nto the default subnet prefix. We update the cached value if/when OpenSM\nmodifies the port\u0027s subnet prefix. We take this cached value when sending\nQP1 packets when SR-IOV is active.\n\nNote that the value is stored as an atomic64. This eliminates any need\nfor locking when the subnet prefix is being updated.\n\nNote also that we depend on the FW generating the \"port management change\"\nevent for tracking subnet-prefix changes performed by OpenSM. If running\nearly FW (before 2.9.4630), subnet prefix changes will not be tracked (but\nthe default subnet prefix still will be stored in the cache; therefore\nusers who do not modify the subnet prefix will not have a problem).\nIF there is a need for such tracking also for early FW, we will add that\ncapability in a subsequent patch.\n\nFixes: 1ffeb2eb8be9 (\"IB/mlx4: SR-IOV IB context objects and proxy/tunnel SQP support\")\nSigned-off-by: Jack Morgenstein \u003cjackm@dev.mellanox.co.il\u003e\nSigned-off-by: Leon Romanovsky \u003cleon@kernel.org\u003e\nSigned-off-by: Doug Ledford \u003cdledford@redhat.com\u003e\n" }, { "commit": "baa0be7026e2f7d1d40bfd45909044169e9e3c68", "tree": "d5770c6bf7e4af2acdefefe3bec8591bacb65b40", "parents": [ "e5ac40cd66c2f3cd11bc5edc658f012661b16347" ], "author": { "name": "Jack Morgenstein", "email": "jackm@dev.mellanox.co.il", "time": "Mon Sep 12 19:16:19 2016 +0300" }, "committer": { "name": "Doug Ledford", "email": "dledford@redhat.com", "time": "Fri Sep 16 14:14:08 2016 -0400" }, "message": "IB/mlx4: Fix code indentation in QP1 MAD flow\n\nThe indentation in the QP1 GRH flow in procedure build_mlx_header is\nreally confusing. Fix it, in preparation for a commit which touches\nthis code.\n\nFixes: 1ffeb2eb8be9 (\"IB/mlx4: SR-IOV IB context objects and proxy/tunnel SQP support\")\nSigned-off-by: Jack Morgenstein \u003cjackm@dev.mellanox.co.il\u003e\nSigned-off-by: Leon Romanovsky \u003cleon@kernel.org\u003e\nSigned-off-by: Doug Ledford \u003cdledford@redhat.com\u003e\n" }, { "commit": "e5ac40cd66c2f3cd11bc5edc658f012661b16347", "tree": "d4ca888de8fffae37a2195a29e77507e5838a6b0", "parents": [ "344bacca8cd811809fc33a249f2738ab757d327f" ], "author": { "name": "Alex Vesker", "email": "valex@mellanox.com", "time": "Mon Sep 12 19:16:18 2016 +0300" }, "committer": { "name": "Doug Ledford", "email": "dledford@redhat.com", "time": "Fri Sep 16 14:14:08 2016 -0400" }, "message": "IB/mlx4: Fix incorrect MC join state bit-masking on SR-IOV\n\nBecause of an incorrect bit-masking done on the join state bits, when\nhandling a join request we failed to detect a difference between the\ngroup join state and the request join state when joining as send only\nfull member (0x8). This caused the MC join request not to be sent.\nThis issue is relevant only when SRIOV is enabled and SM supports\nsend only full member.\n\nThis fix separates scope bits and join states bits a nibble each.\n\nFixes: b9c5d6a64358 (\u0027IB/mlx4: Add multicast group (MCG) paravirtualization for SR-IOV\u0027)\nSigned-off-by: Alex Vesker \u003cvalex@mellanox.com\u003e\nSigned-off-by: Leon Romanovsky \u003cleon@kernel.org\u003e\nSigned-off-by: Doug Ledford \u003cdledford@redhat.com\u003e\n" }, { "commit": "344bacca8cd811809fc33a249f2738ab757d327f", "tree": "724825ec1c834a1e60dbb390382fc5803235465f", "parents": [ "5e102b3b4fa944815aead89e63eec2a35069a07b" ], "author": { "name": "Alex Vesker", "email": "valex@mellanox.com", "time": "Mon Sep 12 09:55:28 2016 +0300" }, "committer": { "name": "Doug Ledford", "email": "dledford@redhat.com", "time": "Fri Sep 16 14:14:08 2016 -0400" }, "message": "IB/ipoib: Don\u0027t allow MC joins during light MC flush\n\nThis fix solves a race between light flush and on the fly joins.\nLight flush doesn\u0027t set the device to down and unset IPOIB_OPER_UP\nflag, this means that if while flushing we have a MC join in progress\nand the QP was attached to BC MGID we can have a mismatches when\nre-attaching a QP to the BC MGID.\n\nThe light flush would set the broadcast group to NULL causing an on\nthe fly join to rejoin and reattach to the BC MCG as well as adding\nthe BC MGID to the multicast list. The flush process would later on\nremove the BC MGID and detach it from the QP. On the next flush\nthe BC MGID is present in the multicast list but not found when trying\nto detach it because of the previous double attach and single detach.\n\n[18332.714265] ------------[ cut here ]------------\n[18332.717775] WARNING: CPU: 6 PID: 3767 at drivers/infiniband/core/verbs.c:280 ib_dealloc_pd+0xff/0x120 [ib_core]\n...\n[18332.775198] Hardware name: Red Hat KVM, BIOS Bochs 01/01/2011\n[18332.779411] 0000000000000000 ffff8800b50dfbb0 ffffffff813fed47 0000000000000000\n[18332.784960] 0000000000000000 ffff8800b50dfbf0 ffffffff8109add1 0000011832f58300\n[18332.790547] ffff880226a596c0 ffff880032482000 ffff880032482830 ffff880226a59280\n[18332.796199] Call Trace:\n[18332.798015] [\u003cffffffff813fed47\u003e] dump_stack+0x63/0x8c\n[18332.801831] [\u003cffffffff8109add1\u003e] __warn+0xd1/0xf0\n[18332.805403] [\u003cffffffff8109aebd\u003e] warn_slowpath_null+0x1d/0x20\n[18332.809706] [\u003cffffffffa025d90f\u003e] ib_dealloc_pd+0xff/0x120 [ib_core]\n[18332.814384] [\u003cffffffffa04f3d7c\u003e] ipoib_transport_dev_cleanup+0xfc/0x1d0 [ib_ipoib]\n[18332.820031] [\u003cffffffffa04ed648\u003e] ipoib_ib_dev_cleanup+0x98/0x110 [ib_ipoib]\n[18332.825220] [\u003cffffffffa04e62c8\u003e] ipoib_dev_cleanup+0x2d8/0x550 [ib_ipoib]\n[18332.830290] [\u003cffffffffa04e656f\u003e] ipoib_uninit+0x2f/0x40 [ib_ipoib]\n[18332.834911] [\u003cffffffff81772a8a\u003e] rollback_registered_many+0x1aa/0x2c0\n[18332.839741] [\u003cffffffff81772bd1\u003e] rollback_registered+0x31/0x40\n[18332.844091] [\u003cffffffff81773b18\u003e] unregister_netdevice_queue+0x48/0x80\n[18332.848880] [\u003cffffffffa04f489b\u003e] ipoib_vlan_delete+0x1fb/0x290 [ib_ipoib]\n[18332.853848] [\u003cffffffffa04df1cd\u003e] delete_child+0x7d/0xf0 [ib_ipoib]\n[18332.858474] [\u003cffffffff81520c08\u003e] dev_attr_store+0x18/0x30\n[18332.862510] [\u003cffffffff8127fe4a\u003e] sysfs_kf_write+0x3a/0x50\n[18332.866349] [\u003cffffffff8127f4e0\u003e] kernfs_fop_write+0x120/0x170\n[18332.870471] [\u003cffffffff81207198\u003e] __vfs_write+0x28/0xe0\n[18332.874152] [\u003cffffffff810e09bf\u003e] ? percpu_down_read+0x1f/0x50\n[18332.878274] [\u003cffffffff81208062\u003e] vfs_write+0xa2/0x1a0\n[18332.881896] [\u003cffffffff812093a6\u003e] SyS_write+0x46/0xa0\n[18332.885632] [\u003cffffffff810039b7\u003e] do_syscall_64+0x57/0xb0\n[18332.889709] [\u003cffffffff81883321\u003e] entry_SYSCALL64_slow_path+0x25/0x25\n[18332.894727] ---[ end trace 09ebbe31f831ef17 ]---\n\nFixes: ee1e2c82c245 (\"IPoIB: Refresh paths instead of flushing them on SM change events\")\nSigned-off-by: Alex Vesker \u003cvalex@mellanox.com\u003e\nSigned-off-by: Leon Romanovsky \u003cleon@kernel.org\u003e\nSigned-off-by: Doug Ledford \u003cdledford@redhat.com\u003e\n" }, { "commit": "5e102b3b4fa944815aead89e63eec2a35069a07b", "tree": "4524b72cbb25dcea49c7e977c5c6bc577b8db9e8", "parents": [ "16170d9c102764f76c58aad244e947f4e3f44590" ], "author": { "name": "Alexey Khoroshilov", "email": "khoroshilov@ispras.ru", "time": "Fri Sep 02 23:46:53 2016 +0300" }, "committer": { "name": "Doug Ledford", "email": "dledford@redhat.com", "time": "Fri Sep 16 14:14:08 2016 -0400" }, "message": "IB/rxe: fix GFP_KERNEL in spinlock context\n\nThere is skb_clone(skb, GFP_KERNEL) in spinlock context\nin rxe_rcv_mcast_pkt().\n\nFound by Linux Driver Verification project (linuxtesting.org).\n\nSigned-off-by: Alexey Khoroshilov \u003ckhoroshilov@ispras.ru\u003e\nAcked-by: Moni Shoua \u003cmonis@mellanox.com\u003e\nSigned-off-by: Doug Ledford \u003cdledford@redhat.com\u003e\n" }, { "commit": "e06226e66beafd6118aa81b511d88cb549ad7ea5", "tree": "8ef298d1e1c866566fdc0463c22d196d65771a9a", "parents": [ "08c5cd37480f59ea39682f4585d92269be6b1424", "f190fd92458da3e869b4e2c6289e2c617490ae53" ], "author": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Fri Sep 16 17:42:10 2016 +0200" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Fri Sep 16 17:42:10 2016 +0200" }, "message": "Merge tag \u0027usb-serial-4.8-rc7\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/johan/usb-serial into usb-linus\n\nJohan writes:\n\nUSB-serial fixes for v4.8-rc7\n\nHere\u0027s another Infineon flashloader device id.\n\nSigned-off-by: Johan Hovold \u003cjohan@kernel.org\u003e\n" }, { "commit": "6408649115cfd73d6807398d04b2ba564db9211e", "tree": "43d94bd6c76c2a92d43c8438a8613cdc11d1d920", "parents": [ "a6805884e263e82d9fb87bd5f39ad4bb38cde246", "b030485220caf862c71db6fb8b8ad016ce7f7565" ], "author": { "name": "Arnd Bergmann", "email": "arnd@arndb.de", "time": "Fri Sep 16 16:29:48 2016 +0200" }, "committer": { "name": "Arnd Bergmann", "email": "arnd@arndb.de", "time": "Fri Sep 16 16:29:48 2016 +0200" }, "message": "Merge tag \u0027samsung-fixes-4.8-2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/krzk/linux into fixes\n\nPull \"ARM: exynos: Fixes for v4.8, secound round\" from Krzysztof Kozłowski:\n\n1. A recent change in populating irqchip devices from Device Tree\n broke Suspend to RAM on Exynos boards due to lack of probing of\n PMU (Power Management Unit) driver. Multiple drivers attach to\n the PMU\u0027s DT node: irqchip, clock controller and PMU platform\n driver for handling suspend. The new irqchip code marked the\n PMU\u0027s DT node as OF_POPULATED but we need to attach to this\n node also PMU platform driver.\n\n2. Add Javier as additional reviewer for Exynos patches.\n\n* tag \u0027samsung-fixes-4.8-2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/krzk/linux:\n ARM: EXYNOS: Clear OF_POPULATED flag from PMU node in IRQ init callback\n MAINTAINERS: Add myself as reviewer for Samsung Exynos support\n" }, { "commit": "08c5cd37480f59ea39682f4585d92269be6b1424", "tree": "ef69ed0b3c7f5805ac80eba1d9b01ccd6be2046d", "parents": [ "ed3d6d0ac036bcff6e4649a6f8fb987bb4e34444" ], "author": { "name": "Alan Stern", "email": "stern@rowland.harvard.edu", "time": "Fri Sep 16 10:24:26 2016 -0400" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Fri Sep 16 16:29:41 2016 +0200" }, "message": "USB: change bInterval default to 10 ms\n\nSome full-speed mceusb infrared transceivers contain invalid endpoint\ndescriptors for their interrupt endpoints, with bInterval set to 0.\nIn the past they have worked out okay with the mceusb driver, because\nthe driver sets the bInterval field in the descriptor to 1,\noverwriting whatever value may have been there before. However, this\napproach was never sanctioned by the USB core, and in fact it does not\nwork with xHCI controllers, because they use the bInterval value that\nwas present when the configuration was installed.\n\nCurrently usbcore uses 32 ms as the default interval if the value in\nthe endpoint descriptor is invalid. It turns out that these IR\ntransceivers don\u0027t work properly unless the interval is set to 10 ms\nor below. To work around this mceusb problem, this patch changes the\nendpoint-descriptor parsing routine, making the default interval value\nbe 10 ms rather than 32 ms.\n\nSigned-off-by: Alan Stern \u003cstern@rowland.harvard.edu\u003e\nTested-by: Wade Berrier \u003cwberrier@gmail.com\u003e\nCC: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "ed3d6d0ac036bcff6e4649a6f8fb987bb4e34444", "tree": "4c950d1b1aa356e6dc021f1431631853267178fe", "parents": [ "9395452b4aab7bc2475ef8935b4a4fb99d778d70" ], "author": { "name": "Tony Lindgren", "email": "tony@atomide.com", "time": "Fri Sep 16 09:24:44 2016 -0500" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Fri Sep 16 16:29:41 2016 +0200" }, "message": "usb: musb: Fix tusb6010 compile error on blackfin\n\nWe have CONFIG_BLACKFIN ifdef redefining all musb registers in\nmusb_regs.h and tusb6010.h is never included causing a build\nerror with blackfin-allmodconfig and COMPILE_TEST.\n\nLet\u0027s fix the issue by not building tusb6010 if CONFIG_BLACKFIN\nis selected.\n\nReported-by: kbuild test robot \u003cfengguang.wu@intel.com\u003e\nSigned-off-by: Tony Lindgren \u003ctony@atomide.com\u003e\nSigned-off-by: Bin Liu \u003cb-liu@ti.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "080fe0b790ad438fc1b61621dac37c1964ce7f35", "tree": "a8629c8fb6fd22c2942a17de410276ca8c3009ca", "parents": [ "1155bafcb79208abc6ae234c6e135ac70607755c" ], "author": { "name": "Matt Fleming", "email": "matt@codeblueprint.co.uk", "time": "Wed Aug 24 14:12:08 2016 +0100" }, "committer": { "name": "Ingo Molnar", "email": "mingo@kernel.org", "time": "Fri Sep 16 16:19:49 2016 +0200" }, "message": "perf/x86/amd: Make HW_CACHE_REFERENCES and HW_CACHE_MISSES measure L2\n\nWhile the Intel PMU monitors the LLC when perf enables the\nHW_CACHE_REFERENCES and HW_CACHE_MISSES events, these events monitor\nL1 instruction cache fetches (0x0080) and instruction cache misses\n(0x0081) on the AMD PMU.\n\nThis is extremely confusing when monitoring the same workload across\nIntel and AMD machines, since parameters like,\n\n $ perf stat -e cache-references,cache-misses\n\nmeasure completely different things.\n\nInstead, make the AMD PMU measure instruction/data cache and TLB fill\nrequests to the L2 and instruction/data cache and TLB misses in the L2\nwhen HW_CACHE_REFERENCES and HW_CACHE_MISSES are enabled,\nrespectively. That way the events measure unified caches on both\nplatforms.\n\nSigned-off-by: Matt Fleming \u003cmatt@codeblueprint.co.uk\u003e\nAcked-by: Peter Zijlstra \u003cpeterz@infradead.org\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nCc: Borislav Petkov \u003cbp@alien8.de\u003e\nCc: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nCc: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nLink: http://lkml.kernel.org/r/1472044328-21302-1-git-send-email-matt@codeblueprint.co.uk\nSigned-off-by: Ingo Molnar \u003cmingo@kernel.org\u003e\n" }, { "commit": "1155bafcb79208abc6ae234c6e135ac70607755c", "tree": "6ae17177d6eca39a6592451c4abb0d3435191ca2", "parents": [ "ddfdad991e55b65c1cc4ee29502f6dceee04455a" ], "author": { "name": "Alexander Shishkin", "email": "alexander.shishkin@linux.intel.com", "time": "Thu Sep 15 18:13:52 2016 +0300" }, "committer": { "name": "Ingo Molnar", "email": "mingo@kernel.org", "time": "Fri Sep 16 11:14:16 2016 +0200" }, "message": "perf/x86/intel/pt: Do validate the size of a kernel address filter\n\nRight now, the kernel address filters in PT are prone to integer overflow\nthat may happen in adding filter\u0027s size to its offset to obtain the end\nof the range. Such an overflow would also throw a #GP in the PT event\nconfiguration path.\n\nFix this by explicitly validating the result of this calculation.\n\nReported-by: Adrian Hunter \u003cadrian.hunter@intel.com\u003e\nSigned-off-by: Alexander Shishkin \u003calexander.shishkin@linux.intel.com\u003e\nAcked-by: Peter Zijlstra \u003cpeterz@infradead.org\u003e\nCc: Arnaldo Carvalho de Melo \u003cacme@infradead.org\u003e\nCc: Arnaldo Carvalho de Melo \u003cacme@redhat.com\u003e\nCc: Jiri Olsa \u003cjolsa@redhat.com\u003e\nCc: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nCc: Peter Zijlstra \u003ca.p.zijlstra@chello.nl\u003e\nCc: Stephane Eranian \u003ceranian@google.com\u003e\nCc: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nCc: Vince Weaver \u003cvincent.weaver@maine.edu\u003e\nCc: stable@vger.kernel.org # v4.7\nCc: stable@vger.kernel.org#v4.7\nCc: vince@deater.net\nLink: http://lkml.kernel.org/r/20160915151352.21306-4-alexander.shishkin@linux.intel.com\nSigned-off-by: Ingo Molnar \u003cmingo@kernel.org\u003e\n" }, { "commit": "ddfdad991e55b65c1cc4ee29502f6dceee04455a", "tree": "1dee222eeb25283a821b30945e5e0c8298251cae", "parents": [ "95f60084acbcee6c466256cf26eb52191fad9edc" ], "author": { "name": "Alexander Shishkin", "email": "alexander.shishkin@linux.intel.com", "time": "Thu Sep 15 18:13:51 2016 +0300" }, "committer": { "name": "Ingo Molnar", "email": "mingo@kernel.org", "time": "Fri Sep 16 11:14:16 2016 +0200" }, "message": "perf/x86/intel/pt: Fix kernel address filter\u0027s offset validation\n\nThe kernel_ip() filter is used mostly by the DS/LBR code to look at the\nbranch addresses, but Intel PT also uses it to validate the address\nfilter offsets for kernel addresses, for which it is not sufficient:\nsupplying something in bits 64:48 that\u0027s not a sign extension of the lower\naddress bits (like 0xf00d000000000000) throws a #GP.\n\nThis patch adds address validation for the user supplied kernel filters.\n\nReported-by: Adrian Hunter \u003cadrian.hunter@intel.com\u003e\nSigned-off-by: Alexander Shishkin \u003calexander.shishkin@linux.intel.com\u003e\nAcked-by: Peter Zijlstra \u003cpeterz@infradead.org\u003e\nCc: Arnaldo Carvalho de Melo \u003cacme@infradead.org\u003e\nCc: Arnaldo Carvalho de Melo \u003cacme@redhat.com\u003e\nCc: Jiri Olsa \u003cjolsa@redhat.com\u003e\nCc: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nCc: Peter Zijlstra \u003ca.p.zijlstra@chello.nl\u003e\nCc: Stephane Eranian \u003ceranian@google.com\u003e\nCc: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nCc: Vince Weaver \u003cvincent.weaver@maine.edu\u003e\nCc: stable@vger.kernel.org # v4.7\nCc: stable@vger.kernel.org#v4.7\nCc: vince@deater.net\nLink: http://lkml.kernel.org/r/20160915151352.21306-3-alexander.shishkin@linux.intel.com\nSigned-off-by: Ingo Molnar \u003cmingo@kernel.org\u003e\n" }, { "commit": "95f60084acbcee6c466256cf26eb52191fad9edc", "tree": "de6ea116f902508f597ce4c32316f30b77c1c841", "parents": [ "cecf62352aee2b4fe114aafd1b8c5f265a4243ce" ], "author": { "name": "Alexander Shishkin", "email": "alexander.shishkin@linux.intel.com", "time": "Thu Sep 15 18:13:50 2016 +0300" }, "committer": { "name": "Ingo Molnar", "email": "mingo@kernel.org", "time": "Fri Sep 16 11:14:16 2016 +0200" }, "message": "perf/x86/intel/pt: Fix an off-by-one in address filter configuration\n\nPT address filter configuration requires that a range is specified by\nits first and last address, but at the moment we\u0027re obtaining the end\nof the range by adding user specified size to its start, which is off\nby one from what it actually needs to be.\n\nFix this and make sure that zero-sized filters don\u0027t pass the filter\nvalidation.\n\nReported-by: Adrian Hunter \u003cadrian.hunter@intel.com\u003e\nSigned-off-by: Alexander Shishkin \u003calexander.shishkin@linux.intel.com\u003e\nAcked-by: Peter Zijlstra \u003cpeterz@infradead.org\u003e\nCc: Arnaldo Carvalho de Melo \u003cacme@infradead.org\u003e\nCc: Arnaldo Carvalho de Melo \u003cacme@redhat.com\u003e\nCc: Jiri Olsa \u003cjolsa@redhat.com\u003e\nCc: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nCc: Peter Zijlstra \u003ca.p.zijlstra@chello.nl\u003e\nCc: Stephane Eranian \u003ceranian@google.com\u003e\nCc: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nCc: Vince Weaver \u003cvincent.weaver@maine.edu\u003e\nCc: stable@vger.kernel.org # v4.7\nCc: stable@vger.kernel.org#v4.7\nCc: vince@deater.net\nLink: http://lkml.kernel.org/r/20160915151352.21306-2-alexander.shishkin@linux.intel.com\nSigned-off-by: Ingo Molnar \u003cmingo@kernel.org\u003e\n" }, { "commit": "778935778c3b88e5152a88765850009006ef2e32", "tree": "aea593ef003a5b5c6175f65252e96aad3c6f6697", "parents": [ "9395452b4aab7bc2475ef8935b4a4fb99d778d70" ], "author": { "name": "Paul E. McKenney", "email": "paulmck@linux.vnet.ibm.com", "time": "Tue Apr 26 10:42:25 2016 -0700" }, "committer": { "name": "Rafael J. Wysocki", "email": "rafael.j.wysocki@intel.com", "time": "Fri Sep 16 02:59:58 2016 +0200" }, "message": "PM / runtime: Use _rcuidle for runtime suspend tracepoints\n\nFurther testing with false negatives suppressed by commit 293e2421fe25\n(\"rcu: Remove superfluous versions of rcu_read_lock_sched_held()\")\nidentified a few more unprotected uses of RCU from the idle loop.\nBecause RCU actively ignores idle-loop code (for energy-efficiency\nreasons, among other things), using RCU from the idle loop can result\nin too-short grace periods, in turn resulting in arbitrary misbehavior.\n\nThe affected function is rpm_suspend().\n\nThe resulting lockdep-RCU splat is as follows:\n\n------------------------------------------------------------------------\n\nWarning from omap3\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n[ INFO: suspicious RCU usage. ]\n4.6.0-rc5-next-20160426+ #1112 Not tainted\n-------------------------------\ninclude/trace/events/rpm.h:63 suspicious rcu_dereference_check() usage!\n\nother info that might help us debug this:\n\nRCU used illegally from idle CPU!\nrcu_scheduler_active \u003d 1, debug_locks \u003d 0\nRCU used illegally from extended quiescent state!\n1 lock held by swapper/0/0:\n #0: (\u0026(\u0026dev-\u003epower.lock)-\u003erlock){-.-...}, at: [\u003cc052ee24\u003e] __pm_runtime_suspend+0x54/0x84\n\nstack backtrace:\nCPU: 0 PID: 0 Comm: swapper/0 Not tainted 4.6.0-rc5-next-20160426+ #1112\nHardware name: Generic OMAP36xx (Flattened Device Tree)\n[\u003cc0110308\u003e] (unwind_backtrace) from [\u003cc010c3a8\u003e] (show_stack+0x10/0x14)\n[\u003cc010c3a8\u003e] (show_stack) from [\u003cc047fec8\u003e] (dump_stack+0xb0/0xe4)\n[\u003cc047fec8\u003e] (dump_stack) from [\u003cc052d7b4\u003e] (rpm_suspend+0x604/0x7e4)\n[\u003cc052d7b4\u003e] (rpm_suspend) from [\u003cc052ee34\u003e] (__pm_runtime_suspend+0x64/0x84)\n[\u003cc052ee34\u003e] (__pm_runtime_suspend) from [\u003cc04bf3bc\u003e] (omap2_gpio_prepare_for_idle+0x5c/0x70)\n[\u003cc04bf3bc\u003e] (omap2_gpio_prepare_for_idle) from [\u003cc01255e8\u003e] (omap_sram_idle+0x140/0x244)\n[\u003cc01255e8\u003e] (omap_sram_idle) from [\u003cc0126b48\u003e] (omap3_enter_idle_bm+0xfc/0x1ec)\n[\u003cc0126b48\u003e] (omap3_enter_idle_bm) from [\u003cc0601db8\u003e] (cpuidle_enter_state+0x80/0x3d4)\n[\u003cc0601db8\u003e] (cpuidle_enter_state) from [\u003cc0183c74\u003e] (cpu_startup_entry+0x198/0x3a0)\n[\u003cc0183c74\u003e] (cpu_startup_entry) from [\u003cc0b00c0c\u003e] (start_kernel+0x354/0x3c8)\n[\u003cc0b00c0c\u003e] (start_kernel) from [\u003c8000807c\u003e] (0x8000807c)\n\n------------------------------------------------------------------------\n\nReported-by: Tony Lindgren \u003ctony@atomide.com\u003e\nSigned-off-by: Paul E. McKenney \u003cpaulmck@linux.vnet.ibm.com\u003e\nTested-by: Tony Lindgren \u003ctony@atomide.com\u003e\nTested-by: Guenter Roeck \u003clinux@roeck-us.net\u003e\n[ rjw: Subject ]\nSigned-off-by: Rafael J. Wysocki \u003crafael.j.wysocki@intel.com\u003e\n" }, { "commit": "22f6b4d34fcf039c63a94e7670e0da24f8575a5a", "tree": "e862a0c7bb66ba58b3ad3298efe066793c14a234", "parents": [ "024c7e3756d8a42fc41fe8a9488488b9b09d1dcc" ], "author": { "name": "Jann Horn", "email": "jann@thejh.net", "time": "Fri Sep 16 00:31:22 2016 +0200" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Sep 15 15:49:28 2016 -0700" }, "message": "aio: mark AIO pseudo-fs noexec\n\nThis ensures that do_mmap() won\u0027t implicitly make AIO memory mappings\nexecutable if the READ_IMPLIES_EXEC personality flag is set. Such\nbehavior is problematic because the security_mmap_file LSM hook doesn\u0027t\ncatch this case, potentially permitting an attacker to bypass a W^X\npolicy enforced by SELinux.\n\nI have tested the patch on my machine.\n\nTo test the behavior, compile and run this:\n\n #define _GNU_SOURCE\n #include \u003cunistd.h\u003e\n #include \u003csys/personality.h\u003e\n #include \u003clinux/aio_abi.h\u003e\n #include \u003cerr.h\u003e\n #include \u003cstdlib.h\u003e\n #include \u003cstdio.h\u003e\n #include \u003csys/syscall.h\u003e\n\n int main(void) {\n personality(READ_IMPLIES_EXEC);\n aio_context_t ctx \u003d 0;\n if (syscall(__NR_io_setup, 1, \u0026ctx))\n err(1, \"io_setup\");\n\n char cmd[1000];\n sprintf(cmd, \"cat /proc/%d/maps | grep -F \u0027/[aio]\u0027\",\n (int)getpid());\n system(cmd);\n return 0;\n }\n\nIn the output, \"rw-s\" is good, \"rwxs\" is bad.\n\nSigned-off-by: Jann Horn \u003cjann@thejh.net\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "024c7e3756d8a42fc41fe8a9488488b9b09d1dcc", "tree": "05e0ca49e91699708bcf9dfdcab1ece6ba620ee8", "parents": [ "b71dbf1032f546bf3efd60fb5d9d0cefd200a508", "b0eaf4506f5f95d15d6731d72c0ddf4a2179eefa" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Sep 15 15:15:41 2016 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Sep 15 15:15:41 2016 -0700" }, "message": "Merge tag \u0027for-linus\u0027 of git://git.kernel.org/pub/scm/virt/kvm/kvm\n\nPull kvm fix from Paolo Bonzini:\n \"One fix for an x86 regression in VM migration, mostly visible with\n Windows because it uses RTC periodic interrupts\"\n\n* tag \u0027for-linus\u0027 of git://git.kernel.org/pub/scm/virt/kvm/kvm:\n kvm: x86: correctly reset dest_map-\u003evector when restoring LAPIC state\n" }, { "commit": "b71dbf1032f546bf3efd60fb5d9d0cefd200a508", "tree": "6b09fe48b1c87c94f8274be6e834dc6abada6c63", "parents": [ "5297e0f0fe13305a1fc7f01986be0dccd063d57a" ], "author": { "name": "Darrick J. Wong", "email": "darrick.wong@oracle.com", "time": "Wed Sep 14 20:20:44 2016 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Sep 15 13:29:52 2016 -0700" }, "message": "vfs: cap dedupe request structure size at PAGE_SIZE\n\nKirill A Shutemov reports that the kernel doesn\u0027t try to cap dest_count\nin any way, and uses the number to allocate kernel memory. This causes\nhigh order allocation warnings in the kernel log if someone passes in a\nbig enough value. We should clamp the allocation at PAGE_SIZE to avoid\nstressing the VM.\n\nThe two existing users of the dedupe ioctl never send more than 120\nrequests, so we can safely clamp dest_range at PAGE_SIZE, because with\n4k pages we can handle up to 127 dedupe candidates. Given the max\nextent length of 16MB, we can end up doing 2GB of IO which is plenty.\n\n[ Note: the \"offsetof()\" can\u0027t overflow, because \u0027count\u0027 is just a\n 16-bit integer. That\u0027s not obvious in the limited context of the\n patch, so I\u0027m noting it here because it made me go look. - Linus ]\n\nReported-by: \"Kirill A. Shutemov\" \u003ckirill@shutemov.name\u003e\nSigned-off-by: Darrick J. Wong \u003cdarrick.wong@oracle.com\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "5297e0f0fe13305a1fc7f01986be0dccd063d57a", "tree": "b2ca0801594de4a97354a558f6a40dcc6ceb3cd6", "parents": [ "46626600d120dc48ab605265677b858506a81011" ], "author": { "name": "Darrick J. Wong", "email": "darrick.wong@oracle.com", "time": "Wed Sep 14 20:20:00 2016 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Sep 15 13:29:52 2016 -0700" }, "message": "vfs: fix return type of ioctl_file_dedupe_range\n\nAll the VFS functions in the dedupe ioctl path return int status, so\nthe ioctl handler ought to as well.\n\nFound by Coverity, CID 1350952.\n\nSigned-off-by: Darrick J. Wong \u003cdarrick.wong@oracle.com\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "46626600d120dc48ab605265677b858506a81011", "tree": "3871c6ef5f80ebcad1dcf1d88dc005e41956af0b", "parents": [ "1c109fabbd51863475cd12ac206bdd249aee35af", "3bc42f3f0ef13a8239138a4c00a0b782f029f23d" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Sep 15 13:22:59 2016 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Sep 15 13:22:59 2016 -0700" }, "message": "Merge branch \u0027for-linus\u0027 of git://git.kernel.dk/linux-block\n\nPull block fixes from Jens Axboe:\n \"A set of fixes for the current series in the realm of block.\n\n Like the previous pull request, the meat of it are fixes for the nvme\n fabrics/target code. Outside of that, just one fix from Gabriel for\n not doing a queue suspend if we didn\u0027t get the admin queue setup in\n the first place\"\n\n* \u0027for-linus\u0027 of git://git.kernel.dk/linux-block:\n nvme-rdma: add back dependency on CONFIG_BLOCK\n nvme-rdma: fix null pointer dereference on req-\u003emr\n nvme-rdma: use ib_client API to detect device removal\n nvme-rdma: add DELETING queue flag\n nvme/quirk: Add a delay before checking device ready for memblaze device\n nvme: Don\u0027t suspend admin queue that wasn\u0027t created\n nvme-rdma: destroy nvme queue rdma resources on connect failure\n nvme_rdma: keep a ref on the ctrl during delete/flush\n iw_cxgb4: block module unload until all ep resources are released\n iw_cxgb4: call dev_put() on l2t allocation failure\n" }, { "commit": "1c109fabbd51863475cd12ac206bdd249aee35af", "tree": "2b4a8204e47e27945a8ec57c4abe146ece8fe1e1", "parents": [ "4cea8776571b18db7485930cb422faa739580c8c" ], "author": { "name": "Al Viro", "email": "viro@ZenIV.linux.org.uk", "time": "Thu Sep 15 02:35:29 2016 +0100" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Sep 15 12:54:04 2016 -0700" }, "message": "fix minor infoleak in get_user_ex()\n\nget_user_ex(x, ptr) should zero x on failure. It\u0027s not a lot of a leak\n(at most we are leaking uninitialized 64bit value off the kernel stack,\nand in a fairly constrained situation, at that), but the fix is trivial,\nso...\n\nCc: stable@vger.kernel.org\nSigned-off-by: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\n[ This sat in different branch from the uaccess fixes since mid-August ]\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "b0eaf4506f5f95d15d6731d72c0ddf4a2179eefa", "tree": "3ac8bc41280e6db2809e844ee7ac173807b50fdc", "parents": [ "77e5bdf9f7b2d20939c8d807f3e68778d6e1557a" ], "author": { "name": "Paolo Bonzini", "email": "pbonzini@redhat.com", "time": "Wed Sep 14 23:39:12 2016 +0200" }, "committer": { "name": "Paolo Bonzini", "email": "pbonzini@redhat.com", "time": "Thu Sep 15 18:00:32 2016 +0200" }, "message": "kvm: x86: correctly reset dest_map-\u003evector when restoring LAPIC state\n\nWhen userspace sends KVM_SET_LAPIC, KVM schedules a check between\nthe vCPU\u0027s IRR and ISR and the IOAPIC redirection table, in order\nto re-establish the IOAPIC\u0027s dest_map (the list of CPUs servicing\nthe real-time clock interrupt with the corresponding vectors).\n\nHowever, __rtc_irq_eoi_tracking_restore_one was forgetting to\nset dest_map-\u003evectors. Because of this, the IOAPIC did not process\nthe real-time clock interrupt EOI, ioapic-\u003ertc_status.pending_eoi\ngot stuck at a non-zero value, and further RTC interrupts were\nreported to userspace as coalesced.\n\nFixes: 9e4aabe2bb3454c83dac8139cf9974503ee044db\nFixes: 4d99ba898dd0c521ca6cdfdde55c9b58aea3cb3d\nCc: stable@vger.kernel.org\nCc: Joerg Roedel \u003cjroedel@suse.de\u003e\nCc: David Gilbert \u003cdgilbert@redhat.com\u003e\nReviewed-by: Radim Krčmář \u003crkrcmar@redhat.com\u003e\nSigned-off-by: Paolo Bonzini \u003cpbonzini@redhat.com\u003e\n" }, { "commit": "a6805884e263e82d9fb87bd5f39ad4bb38cde246", "tree": "c99ae212b9962d513d1212cb25390bd062687c6b", "parents": [ "d20ced23c7a019a9ca6fe69d6d1907bfd8c1a255" ], "author": { "name": "Roger Quadros", "email": "rogerq@ti.com", "time": "Wed Aug 17 13:44:50 2016 +0300" }, "committer": { "name": "Arnd Bergmann", "email": "arnd@arndb.de", "time": "Thu Sep 15 11:46:12 2016 +0200" }, "message": "ARM: keystone: defconfig: Fix USB configuration\n\nSimply enabling CONFIG_KEYSTONE_USB_PHY doesn\u0027t work anymore\nas it depends on CONFIG_NOP_USB_XCEIV. We need to enable\nthat as well.\n\nThis fixes USB on Keystone boards from v4.8-rc1 onwards.\n\nSigned-off-by: Roger Quadros \u003crogerq@ti.com\u003e\nAcked-by: Santosh Shilimkar \u003cssantosh@kernel.org\u003e\nSigned-off-by: Arnd Bergmann \u003carnd@arndb.de\u003e\n" }, { "commit": "cecf62352aee2b4fe114aafd1b8c5f265a4243ce", "tree": "0000f4424e48eacc9e1386cd0fad97522e3ab4b2", "parents": [ "4cea8776571b18db7485930cb422faa739580c8c" ], "author": { "name": "Alexander Shishkin", "email": "alexander.shishkin@linux.intel.com", "time": "Thu Sep 15 11:22:33 2016 +0300" }, "committer": { "name": "Ingo Molnar", "email": "mingo@kernel.org", "time": "Thu Sep 15 11:25:26 2016 +0200" }, "message": "perf/x86/intel: Don\u0027t disable \"intel_bts\" around \"intel\" event batching\n\nAt the moment, intel_bts events get disabled from intel PMU\u0027s disable\ncallback, which includes event scheduling transactions of said PMU,\nwhich have nothing to do with intel_bts events.\n\nWe do want to keep intel_bts events off inside the PMI handler to\navoid filling up their buffer too soon.\n\nThis patch moves intel_bts enabling/disabling directly to the PMI\nhandler.\n\nReported-by: Vince Weaver \u003cvincent.weaver@maine.edu\u003e\nSigned-off-by: Alexander Shishkin \u003calexander.shishkin@linux.intel.com\u003e\nCc: Arnaldo Carvalho de Melo \u003cacme@infradead.org\u003e\nCc: Arnaldo Carvalho de Melo \u003cacme@redhat.com\u003e\nCc: Jiri Olsa \u003cjolsa@redhat.com\u003e\nCc: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nCc: Peter Zijlstra \u003ca.p.zijlstra@chello.nl\u003e\nCc: Peter Zijlstra \u003cpeterz@infradead.org\u003e\nCc: Stephane Eranian \u003ceranian@google.com\u003e\nCc: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nCc: vince@deater.net\nLink: http://lkml.kernel.org/r/20160915082233.11065-1-alexander.shishkin@linux.intel.com\nSigned-off-by: Ingo Molnar \u003cmingo@kernel.org\u003e\n" }, { "commit": "ed7d9a1d7da6fe7b1c7477dc70e95051583fd60c", "tree": "1e6764d41f7b846aba193ed1faf9259173abe6da", "parents": [ "29bf282dec94f6015a675c007614cb29563f1c18" ], "author": { "name": "Michael Ellerman", "email": "mpe@ellerman.id.au", "time": "Thu Sep 15 17:03:06 2016 +1000" }, "committer": { "name": "Michael Ellerman", "email": "mpe@ellerman.id.au", "time": "Thu Sep 15 17:05:11 2016 +1000" }, "message": "powerpc/powernv/pci: Fix missed TCE invalidations that should fallback to OPAL\n\nIn commit f0228c413011 (\"powerpc/powernv/pci: Fallback to OPAL for TCE\ninvalidations\"), we added logic to fallback to OPAL for doing TCE\ninvalidations if we can\u0027t do it in Linux.\n\nBen sent a v2 of the patch, containing these additional call sites, but\nI had already applied v1 and didn\u0027t notice. So fix them now.\n\nFixes: f0228c413011 (\"powerpc/powernv/pci: Fallback to OPAL for TCE invalidations\")\nSigned-off-by: Benjamin Herrenschmidt \u003cbenh@kernel.crashing.org\u003e\nSigned-off-by: Michael Ellerman \u003cmpe@ellerman.id.au\u003e\n" }, { "commit": "29bf282dec94f6015a675c007614cb29563f1c18", "tree": "a725a9e457f7a5445a20c649071ac0ea017cdf73", "parents": [ "6eaed1665fc6864fbdbffcc6f43a7f5d012f3052" ], "author": { "name": "Gavin Shan", "email": "gwshan@linux.vnet.ibm.com", "time": "Tue Sep 06 16:34:01 2016 +1000" }, "committer": { "name": "Michael Ellerman", "email": "mpe@ellerman.id.au", "time": "Thu Sep 15 13:53:19 2016 +1000" }, "message": "powerpc/powernv: Detach from PE on releasing PCI device\n\nThe PCI hotplug can be part of EEH error recovery. The @pdn and\nthe device\u0027s PE number aren\u0027t removed and added afterwords. The\nPE number in @pdn should be set to an invalid one. Otherwise, the\nPE\u0027s device count is decreased on removing devices while failing\nto be increased on adding devices. It leads to unbalanced PE\u0027s\ndevice count and make normal PCI hotplug path broken.\n\nFixes: c5f7700bbd2e (\"powerpc/powernv: Dynamically release PE\")\nSigned-off-by: Gavin Shan \u003cgwshan@linux.vnet.ibm.com\u003e\nSigned-off-by: Michael Ellerman \u003cmpe@ellerman.id.au\u003e\n" }, { "commit": "4cea8776571b18db7485930cb422faa739580c8c", "tree": "6db396d3322f32c856ff9137edee4b039181c00e", "parents": [ "77e5bdf9f7b2d20939c8d807f3e68778d6e1557a", "035ee288ae7ade4152f1c3cf23a587b04fdc526c" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Sep 14 14:06:30 2016 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Sep 14 14:06:30 2016 -0700" }, "message": "Merge tag \u0027pci-v4.8-fixes-2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/helgaas/pci\n\nPull PCI fixes from Bjorn Helgaas:\n \"Here are two changes for v4.8. The first fixes a \"[Firmware Bug]: reg\n 0x10: invalid BAR (can\u0027t size)\" warning on Haswell, and the second\n fixes a problem in some new runtime suspend functionality we merged\n for v4.8. Summary:\n\n Enumeration:\n Mark Haswell Power Control Unit as having non-compliant BARs (Bjorn Helgaas)\n\n Power management:\n Fix bridge_d3 update on device removal (Lukas Wunner)\"\n\n* tag \u0027pci-v4.8-fixes-2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/helgaas/pci:\n PCI: Fix bridge_d3 update on device removal\n PCI: Mark Haswell Power Control Unit as having non-compliant BARs\n" }, { "commit": "d20ced23c7a019a9ca6fe69d6d1907bfd8c1a255", "tree": "db74daeac853f0afad8b16817cedf71d7d66b486", "parents": [ "7ccb8e633cfeb7969eba09bbf53346e746bb7f89", "f2a89d3b2b85b90b05453872aaabfdb412a21a03" ], "author": { "name": "Arnd Bergmann", "email": "arnd@arndb.de", "time": "Wed Sep 14 22:47:36 2016 +0200" }, "committer": { "name": "Arnd Bergmann", "email": "arnd@arndb.de", "time": "Wed Sep 14 22:47:36 2016 +0200" }, "message": "Merge branch \u0027dt/irq-fix\u0027 into fixes\n\n* dt/irq-fix:\n arm64: dts: Fix broken architected timer interrupt trigger\n" }, { "commit": "f2a89d3b2b85b90b05453872aaabfdb412a21a03", "tree": "5721114a29d28a3bcb8544f45bf9ea30c0a9afb7", "parents": [ "29b4817d4018df78086157ea3a55c1d9424a7cfc" ], "author": { "name": "Marc Zyngier", "email": "marc.zyngier@arm.com", "time": "Mon Aug 01 10:54:16 2016 +0100" }, "committer": { "name": "Arnd Bergmann", "email": "arnd@arndb.de", "time": "Wed Sep 14 22:47:22 2016 +0200" }, "message": "arm64: dts: Fix broken architected timer interrupt trigger\n\nThe ARM architected timer specification mandates that the interrupt\nassociated with each timer is level triggered (which corresponds to\nthe \"counter \u003e\u003d comparator\" condition).\n\nA number of DTs are being remarkably creative, declaring the interrupt\nto be edge triggered. A quick look at the TRM for the corresponding ARM\nCPUs clearly shows that this is wrong, and I\u0027ve corrected those.\nFor non-ARM designs (and in the absence of a publicly available TRM),\nI\u0027ve made them active low as well, which can\u0027t be completely wrong\nas the GIC cannot disinguish between level low and level high.\n\nThe respective maintainers are of course welcome to prove me wrong.\n\nWhile I was at it, I took the liberty to fix a couple of related issue,\nsuch as some spurious affinity bits on ThunderX, and their complete\nabsence on ls1043a (both of which seem to be related to copy-pasting\nfrom other DTs).\n\nAcked-by: Duc Dang \u003cdhdang@apm.com\u003e\nAcked-by: Carlo Caione \u003ccarlo@endlessm.com\u003e\nAcked-by: Michal Simek \u003cmichal.simek@xilinx.com\u003e\nAcked-by: Krzysztof Kozlowski \u003ck.kozlowski@samsung.com\u003e\nAcked-by: Dinh Nguyen \u003cdinguyen@opensource.altera.com\u003e\nAcked-by: Masahiro Yamada \u003cyamada.masahiro@socionext.com\u003e\nSigned-off-by: Marc Zyngier \u003cmarc.zyngier@arm.com\u003e\nSigned-off-by: Arnd Bergmann \u003carnd@arndb.de\u003e\n" }, { "commit": "7ccb8e633cfeb7969eba09bbf53346e746bb7f89", "tree": "80ebd4d10577d11147475c8b7d998a7ef8b595bc", "parents": [ "56fe27beeb158e2046c10df0d5eb8292ecaf78c0" ], "author": { "name": "Fabian Frederick", "email": "fabf@skynet.be", "time": "Mon Aug 15 19:34:44 2016 +0200" }, "committer": { "name": "Arnd Bergmann", "email": "arnd@arndb.de", "time": "Wed Sep 14 22:40:59 2016 +0200" }, "message": "ARM: multi_v7_defconfig: update XILINX_VDMA\n\nCommit fde57a7c4474\n(\"dmaengine: xilinx: Rename driver and config\")\n\nrenamed config XILINX_VDMA to config XILINX_DMA\nUpdate defconfig accordingly.\n\nSigned-off-by: Fabian Frederick \u003cfabf@skynet.be\u003e\nSigned-off-by: Arnd Bergmann \u003carnd@arndb.de\u003e\n" }, { "commit": "77e5bdf9f7b2d20939c8d807f3e68778d6e1557a", "tree": "377970d3aeae627a6a5ff9b78eaa5e8a1feca3cc", "parents": [ "b8f26e880c8166604e0da741eccd9fe6d8e1b9fb", "8630c32275bac2de6ffb8aea9d9b11663e7ad28e" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Sep 14 09:35:05 2016 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Sep 14 09:35:05 2016 -0700" }, "message": "Merge branch \u0027uaccess-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs\n\nPull uaccess fixes from Al Viro:\n \"Fixes for broken uaccess primitives - mostly lack of proper zeroing\n in copy_from_user()/get_user()/__get_user(), but for several\n architectures there\u0027s more (broken clear_user() on frv and\n strncpy_from_user() on hexagon)\"\n\n* \u0027uaccess-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs: (28 commits)\n avr32: fix copy_from_user()\n microblaze: fix __get_user()\n microblaze: fix copy_from_user()\n m32r: fix __get_user()\n blackfin: fix copy_from_user()\n sparc32: fix copy_from_user()\n sh: fix copy_from_user()\n sh64: failing __get_user() should zero\n score: fix copy_from_user() and friends\n score: fix __get_user/get_user\n s390: get_user() should zero on failure\n ppc32: fix copy_from_user()\n parisc: fix copy_from_user()\n openrisc: fix copy_from_user()\n nios2: fix __get_user()\n nios2: copy_from_user() should zero the tail of destination\n mn10300: copy_from_user() should zero on access_ok() failure...\n mn10300: failing __get_user() and get_user() should zero\n mips: copy_from_user() must zero the destination on access_ok() failure\n ARC: uaccess: get_user to zero out dest in cause of fault\n ...\n" }, { "commit": "b8f26e880c8166604e0da741eccd9fe6d8e1b9fb", "tree": "79ea08ab32e0322ae17c6bc115ed03bb1b05278b", "parents": [ "5924bbecd0267d87c24110cbe2041b5075173a25", "de75abbe0121a6c3c9c6b04c75300088e57ad1d5" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Sep 14 08:42:51 2016 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Sep 14 08:42:51 2016 -0700" }, "message": "Merge tag \u0027for-linus-4.8b-rc6-tag\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/xen/tip\n\nPull xen regression fix from David Vrabel:\n \"Fix SMP boot in arm guests\"\n\n* tag \u0027for-linus-4.8b-rc6-tag\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/xen/tip:\n arm/xen: fix SMP guests boot\n" }, { "commit": "de75abbe0121a6c3c9c6b04c75300088e57ad1d5", "tree": "def35bbb8678c3d1820fd730d73ae440c753057b", "parents": [ "55467dea2967259f21f4f854fc99d39cc5fea60e" ], "author": { "name": "Vitaly Kuznetsov", "email": "vkuznets@redhat.com", "time": "Thu Sep 08 11:48:28 2016 +0200" }, "committer": { "name": "David Vrabel", "email": "david.vrabel@citrix.com", "time": "Wed Sep 14 14:39:13 2016 +0100" }, "message": "arm/xen: fix SMP guests boot\n\nCommit 88e957d6e47f (\"xen: introduce xen_vcpu_id mapping\") broke SMP\nARM guests on Xen. When FIFO-based event channels are in use (this is\nthe default), evtchn_fifo_alloc_control_block() is called on\nCPU_UP_PREPARE event and this happens before we set up xen_vcpu_id\nmapping in xen_starting_cpu. Temporary fix the issue by setting direct\nLinux CPU id \u003c-\u003e Xen vCPU id mapping for all possible CPUs at boot. We\ndon\u0027t currently support kexec/kdump on Xen/ARM so these ids always\nmatch.\n\nIn future, we have several ways to solve the issue, e.g.:\n\n- Eliminate all hypercalls from CPU_UP_PREPARE, do them from the\n starting CPU. This can probably be done for both x86 and ARM and, if\n done, will allow us to get Xen\u0027s idea of vCPU id from CPUID/MPIDR on\n the starting CPU directly, no messing with ACPI/device tree\n required.\n\n- Save vCPU id information from ACPI/device tree on ARM and use it to\n initialize xen_vcpu_id mapping. This is the same trick we currently\n do on x86.\n\nReported-by: Julien Grall \u003cjulien.grall@arm.com\u003e\nTested-by: Wei Chen \u003cWei.Chen@arm.com\u003e\nSigned-off-by: Vitaly Kuznetsov \u003cvkuznets@redhat.com\u003e\nAcked-by: Stefano Stabellini \u003csstabellini@kernel.org\u003e\nSigned-off-by: David Vrabel \u003cdavid.vrabel@citrix.com\u003e\n" }, { "commit": "6cfeaf5125d425043d44002d0a1a8a147be582bf", "tree": "a84702ac20fda35513e247278236117226edc09b", "parents": [ "9395452b4aab7bc2475ef8935b4a4fb99d778d70" ], "author": { "name": "Paul Burton", "email": "paul.burton@imgtec.com", "time": "Wed Sep 14 11:00:26 2016 +0100" }, "committer": { "name": "Thomas Gleixner", "email": "tglx@linutronix.de", "time": "Wed Sep 14 15:31:53 2016 +0200" }, "message": "cpu/hotplug: Include linux/types.h in linux/cpuhotplug.h\n\nThe linux/cpuhotplug.h header makes use of the bool type, but wasn\u0027t\nincluding linux/types.h to ensure that type has been defined. Fix this\nby including linux/types.h in preparation for including\nlinux/cpuhotplug.h in a file that doesn\u0027t do so already.\n\nSigned-off-by: Paul Burton \u003cpaul.burton@imgtec.com\u003e\nCc: linux-mips@linux-mips.org\nCc: Richard Cochran \u003crcochran@linutronix.de\u003e\nCc: Sebastian Andrzej Siewior \u003cbigeasy@linutronix.de\u003e\nCc: Ralf Baechle \u003cralf@linux-mips.org\u003e\nCc: Anna-Maria Gleixner \u003canna-maria@linutronix.de\u003e\nLink: http://lkml.kernel.org/r/20160914100027.20945-1-paul.burton@imgtec.com\nSigned-off-by: Thomas Gleixner \u003ctglx@linutronix.de\u003e\n\n" }, { "commit": "df804d5e27490151da1ce9f216031a31352203e6", "tree": "74a535ef8717272bb413119061ef54e0c80e53a1", "parents": [ "e5789608766113ca9c30d596d93ca7d5cbd8b461" ], "author": { "name": "Peter Ujfalusi", "email": "peter.ujfalusi@ti.com", "time": "Wed Sep 14 14:21:54 2016 +0300" }, "committer": { "name": "Ulf Hansson", "email": "ulf.hansson@linaro.org", "time": "Wed Sep 14 13:59:33 2016 +0200" }, "message": "mmc: omap: Initialize dma_slave_config to avoid random data in it\u0027s fields\n\nIt is wrong to use uninitialized dma_slave_config and configure only\ncertain fields as the DMAengine driver might look at non initialized\n(random data) fields and tries to interpret it.\n\nSigned-off-by: Peter Ujfalusi \u003cpeter.ujfalusi@ti.com\u003e\nSigned-off-by: Ulf Hansson \u003culf.hansson@linaro.org\u003e\n" } ], "next": "e5789608766113ca9c30d596d93ca7d5cbd8b461" }