Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.kernel > #1655491 > unrolled thread

[PATCH 3.16 000/212] 3.16.44-rc1 review

Back to article view | Back to linux.kernel

Contents

  [PATCH 3.16 000/212] 3.16.44-rc1 review Ben Hutchings <ben@decadent.org.uk> - 2017-06-01 18:50 +0200
    [PATCH 3.16 003/212] adm80211: return an error if adm8211_alloc_rings()  fails Ben Hutchings <ben@decadent.org.uk> - 2017-06-01 18:50 +0200
    [PATCH 3.16 006/212] MIPS: Clear ISA bit correctly in  get_frame_info() Ben Hutchings <ben@decadent.org.uk> - 2017-06-01 18:50 +0200
    [PATCH 3.16 023/212] Drivers: hv: vmbus: Raise retry/wait limits  in vmbus_post_msg() Ben Hutchings <ben@decadent.org.uk> - 2017-06-01 18:50 +0200
    [PATCH 3.16 008/212] MIPS: Fix get_frame_info() handling of  microMIPS function size Ben Hutchings <ben@decadent.org.uk> - 2017-06-01 18:50 +0200
    [PATCH 3.16 011/212] MIPS: Handle microMIPS jumps in the same way  as MIPS32/MIPS64 jumps Ben Hutchings <ben@decadent.org.uk> - 2017-06-01 18:50 +0200
    [PATCH 3.16 031/212] ASoC: rt5640: use msleep() for long delays Ben Hutchings <ben@decadent.org.uk> - 2017-06-01 18:50 +0200
    [PATCH 3.16 027/212] ext4: avoid deadlock when expanding inode size Ben Hutchings <ben@decadent.org.uk> - 2017-06-01 18:50 +0200
    [PATCH 3.16 004/212] iio: st_pressure: Fix data sign Ben Hutchings <ben@decadent.org.uk> - 2017-06-01 18:50 +0200
    [PATCH 3.16 001/212] mm/huge_memory.c: fix up "mm/huge_memory.c:  respect FOLL_FORCE/FOLL_COW for thp" backport Ben Hutchings <ben@decadent.org.uk> - 2017-06-01 18:50 +0200
    Re: [PATCH 3.16 000/212] 3.16.44-rc1 review Guenter Roeck <linux@roeck-us.net> - 2017-06-01 23:20 +0200

#1655491 — [PATCH 3.16 000/212] 3.16.44-rc1 review

This is the start of the stable review cycle for the 3.16.44 release.
There are 212 patches in this series, which will be posted as responses
to this one.  If anyone has any issues with these being applied, please
let me know.

Responses should be made by Sat Jun 03 16:00:00 UTC 2017.
Anything received after that time might be too late.

A combined patch relative to 3.16.43 will be posted as an additional
response to this.  A shortlog and diffstat can be found below.

Ben.

-------------

Alex Deucher (1):
      drm/radeon: handle vfct with multiple vbios images
         [a882f5de402ded769af74fbf276132f9c175049c]

Alexander Stein (1):
      W1: ds2490: Increase timeout when waiting for status
         [d25221525e0e2cfd70e4ec7216549c06609a8bd2]

Alexey Kodanev (1):
      tcp: account for ts offset only if tsecr not zero
         [eee2faabc63d863a129000b698a2bca54dff643d]

Amey Telawane (1):
      tracing: Use strlcpy() instead of strcpy() in __trace_find_cmdline()
         [e09e28671cda63e6308b31798b997639120e2a21]

Andrey Konovalov (3):
      net/packet: fix overflow in check for priv area size
         [2b6867c2ce76c596676bec7d2d525af525fdc6e2]
      net/packet: fix overflow in check for tp_frame_nr
         [8f8d28e4d6d815a391285e121c3a53a0b6cb9e7b]
      net/packet: fix overflow in check for tp_reserve
         [bcc5364bdcfe131e6379363f089e7b4108d35b70]

Andrey Ryabinin (1):
      net/dccp: fix use after free in tw_timer_handler()
         [ec7cb62d18d854ea09df8b7194e7e710985f8b9a]

Andy Whitcroft (2):
      xfrm_user: validate XFRM_MSG_NEWAE XFRMA_REPLAY_ESN_VAL  replay_window
         [677e806da4d916052585301785d847c3b3e6186a]
      xfrm_user: validate XFRM_MSG_NEWAE incoming ESN size harder
         [f843ee6dd019bcece3e74e76ad9df0155655d0df]

Arnaldo Carvalho de Melo (1):
      perf tests: Avoid possible truncation with dirent->d_name + snprintf
         [2e2bbc039fad9eabad6c4c1a473c8b2554cdd2d4]

Arnd Bergmann (4):
      MIPS: 'make -s' should be silent
         [8c9b23ffb3f92ffa4cbe37b1bab4542586e0bfd1]
      MIPS: ip27: Disable qlge driver in defconfig
         [b617649468390713db1515ea79fc772d2eb897a8]
      [media] dvb-usb-v2: avoid use-after-free
         [005145378c9ad7575a01b6ce1ba118fb427f583a]
      staging: rtl: fix possible NULL pointer dereference
         [6e017006022abfea5d2466cad936065f45763ad1]

Bart Van Assche (1):
      blk-mq: Make bt_clear_tag() easier to read
         [9d8f0bcca6ffa024a822ce4ab1008ab663f06672]

Brian Norris (1):
      mwifiex: debugfs: Fix (sometimes) off-by-1 SSID print
         [6183468a23fc6b6903f8597982017ad2c7fdefcf]

Chao Peng (1):
      KVM: VMX: use correct vmcs_read/write for guest segment selector/base
         [96794e4ed4d758272c486e1529e431efb7045265]

Chao Yu (1):
      f2fs: use for_each_set_bit to simplify the code
         [b65ee14818e67127aa242fe1dbd3711b9c095cc0]

Chris Brandt (2):
      clk: renesas: mstp: ensure register writes complete
         [f59de563358eb9351b7f8f0ba2d3be2ebb70b93d]
      i2c: riic: correctly finish transfers
         [71ccea095ea1d4efd004dab971be6d599e06fc3f]

Chris Salls (1):
      mm/mempolicy.c: fix error handling in set_mempolicy and mbind.
         [cf01fb9985e8deb25ccf0ea54d916b8871ae0e62]

Chris Wilson (1):
      locking/ww_mutex: Fix compilation of __WW_MUTEX_INITIALIZER
         [af2e859edd477fa1ea3d1d106f41a595cff3d162]

Christian Lamparter (1):
      ath9k: use correct OTP register offsets for the AR9340 and AR9550
         [c9f1e32600816d695f817477d56490bfc2ba43c6]

Christoph Hellwig (3):
      nfsd: minor nfsd_setattr cleanup
         [758e99fefe1d9230111296956335cd35995c0eaf]
      nfsd: special case truncates some more
         [783112f7401ff449d979530209b3f6c2594fdb4e]
      nfsd: update mtime on truncate
         [f0c63124a6165792f6e37e4b5983792d009e1ce8]

Chun-Yi Lee (1):
      platform/x86: acer-wmi: setup accelerometer when machine has appropriate notify event
         [98d610c3739ac354319a6590b915f4624d9151e6]

Colin Ian King (1):
      usb: misc: adutux: remove redundant error check on copy_to_user return code
         [453785c64e090d9b4169636b7276fcd6d7489d33]

Colyli@Suse.De (1):
      md linear: fix a race between linear_add() and linear_congested()
         [03a9e24ef2aaa5f1f9837356aed79c860521407a]

Craig Gallek (1):
      ipv6: Prevent overrun when parsing v6 header options
         [2423496af35d94a87156b063ea5cedffc10a70a1]

Dan Carpenter (5):
      KEYS: Fix an error code in request_master_key()
         [57cb17e764ba0aaa169d07796acce54ccfbc6cae]
      adm80211: return an error if adm8211_alloc_rings() fails
         [c705a6b3aa7804d7bc6660183f51e510c61dc807]
      cpufreq: s3c2416: double free on driver init error path
         [a69261e4470d680185a15f748d9cdafb37c57a33]
      ipx: call ipxitf_put() in ioctl error path
         [ee0d8d8482345ff97a75a7d747efc309f13b0d80]
      net/mlx4: && vs & typo
         [b2d0fe35471d1a71471f99147ffb5986bd60e744]

David Dillow (1):
      iommu/vt-d: Don't over-free page table directories
         [f7116e115acdd74bc75a4daf6492b11d43505125]

David Howells (2):
      KEYS: Disallow keyrings beginning with '.' to be joined as session  keyrings
         [ee8f844e3c5a73b999edf733df1c529d6503ec2f]
      KEYS: Reinstate EPERM for a key type name beginning with a '.'
         [54e2c2c1a9d6cbb270b0999a38545fa9a69bee43]

David S. Miller (1):
      ipv6: Check ip6_find_1stfragopt() return value properly.
         [7dd7eb9513bd02184d45f000ab69d78cb1fa1531]

Dexuan Cui (1):
      hv: vmbus_post_msg: retry the hypercall on some transient errors
         [89f9f6796d41e10e224b0cb0027ddd78cb881f65]

Dmitry Tunin (1):
      Bluetooth: Add another AR3012 04ca:3018 device
         [441ad62d6c3f131f1dbd7dcdd9cbe3f74dbd8501]

Eli Cohen (1):
      IB/mlx5: Fix retrieval of index to first hi class bfreg
         [0b80c14f009758cefeed0edff4f9141957964211]

Eric Biggers (1):
      KEYS: fix keyctl_set_reqkey_keyring() to not leak thread keyrings
         [c9f838d104fed6f2f61d68164712e3204bf5271b]

Eric Dumazet (7):
      dccp/tcp: do not inherit mc_list from parent
         [657831ffc38e30092a2d5f03d385d710eb88b09a]
      ipv6: fix out of bound writes in __ip6_append_data()
         [232cd35d0804cc241eb887bb8d4d9b3b9881c64a]
      mlx4: reduce OOM risk on arches with large pages
         [3608b13ccc51d06e499dfe12b27f134de1286e28]
      net/mlx4_en: Use __skb_fill_page_desc()
         [7f0137e2ef9f32143df623001a96f7aab61a9595]
      net: net_enable_timestamp() can be called from irq contexts
         [13baa00ad01bb3a9f893e3a08cbc2d072fc0c15d]
      ping: implement proper locking
         [43a6684519ab0a6c52024b5e25322476cabad893]
      sctp: do not inherit ipv6_{mc|ac|fl}_list from parent
         [fdcee2cbb8438702ea1b328fb6e0ac5e9a40c7f8]

Eugenia Emantayev (1):
      net/mlx4: Spoofcheck and zero MAC can't coexist
         [745d8ae4622c6808b22e33a944c7decb30074be4]

Felipe Balbi (1):
      usb: dwc3: gadget: skip Set/Clear Halt when invalid
         [ffb80fc672c3a7b6afd0cefcb1524fb99917b2f3]

Felipe F. Tonello (1):
      usb: gadget: define free_ep_req as universal function
         [079fe5a6da616891cca1a26e803e1df2a87e9ae5]

Felix Fietkau (2):
      ath5k: drop bogus warning on drv_set_key with unsupported cipher
         [a70e1d6fd6b5e1a81fa6171600942bee34f5128f]
      ath9k: fix race condition in enabling/disabling IRQs
         [3a5e969bb2f6692a256352649355d56d018d6b88]

Feras Daoud (6):
      IB/ipoib: Change list_del to list_del_init in the tx object
         [27d41d29c7f093f6f77843624fbb080c1b4a8b9c]
      IB/ipoib: Fix deadlock between rmmod and set_mode
         [0a0007f28304cb9fc87809c86abb80ec71317f20]
      IB/ipoib: Fix deadlock over vlan_mutex
         [1c3098cdb05207e740715857df7b0998e372f527]
      IB/ipoib: Replace list_del of the neigh->list with list_del_init
         [c586071d1dc8227a7182179b8e50ee92cc43f6d2]
      IB/ipoib: Set device connection mode only when needed
         [80b5b35aba62232521b31440f0a3cf6caa033849]
      IB/ipoib: rtnl_unlock can not come after free_netdev
         [89a3987ab7a923c047c6dec008e60ad6f41fac22]

Ganapathi Bhat (1):
      mwifiex: Avoid skipping WEP key deletion for AP
         [a5b60de6972decc6b50a39abb376077c3c3621c8]

Gavin Shan (1):
      mm/page_alloc: fix nodes for reclaim in fast path
         [e02dc017c3032dcdce1b993af0db135462e1b4b7]

Guennadi Liakhovetski (1):
      [media] uvcvideo: Fix a wrong macro
         [17c341ec0115837a610b2da15e32546e26068234]

Haiyang Zhang (1):
      hv_vmbus: Add gradually increased delay for retries in vmbus_post_msg()
         [e1c0d82dab4a4605d3bd1968436f030dfed4a829]

Hari Vyas (1):
      net: ethernet: bgmac: mac address change bug
         [fa42245dff4a5f2f8f208da542acbd80c22f7c65]

Herbert Xu (1):
      crypto: ahash - Fix EINPROGRESS notification callback
         [ef0579b64e93188710d48667cb5e014926af9f1b]

Hou Pengyang (1):
      f2fs: add ovp valid_blocks check for bg gc victim to fg_gc
         [e93b9865251a0503d83fd570e7d5a7c8bc351715]

Ian Abbott (1):
      serial: 8250_pci: Add MKS Tenta SCOM-0800 and SCOM-0801 cards
         [1c9c858e2ff8ae8024a3d75d2ed080063af43754]

Igor Pylypiv (1):
      staging: wlan-ng: add missing byte order conversion
         [2c474b8579e9b67ff72b2bcefce9f53c7f4469d4]

J. Bruce Fields (4):
      NFSv4: fix getacl head length estimation
         [6682c14bbe505a8b912c57faf544f866777ee48d]
      nfsd4: minor NFSv2/v3 write decoding cleanup
         [db44bac41bbfc0c0d9dd943092d8bded3c9db19b]
      nfsd: check for oversized NFSv2/v3 arguments
         [e6838a29ecb484c97e4efef9429643b9851fba6e]
      nfsd: stricter decoding of write-like NFSv2/v3 ops
         [13bf9fbff0e5e099e2b6f003a0ab8ae145436309]

James Cowgill (1):
      MIPS: OCTEON: Fix copy_from_user fault handling for large buffers
         [884b426917e4b3c85f33b382c792a94305dfdd62]

Jan Kara (3):
      ext4: avoid deadlock when expanding inode size
         [2e81a4eeedcaa66e35f58b81e0755b87057ce392]
      ext4: fix data corruption in data=journal mode
         [3b136499e906460919f0d21a49db1aaccf0ae963]
      ext4: trim allocation requests to group size
         [cd648b8a8fd5071d232242d5ee7ee3c0815776af]

Jan Kiszka (1):
      serial: exar: Fix initialization of EXAR registers for ports > 0
         [5b5f252d67afd7bd5b923c664206d60800bf5054]

Janosch Frank (1):
      KVM: s390: Disable dirty log retrieval for UCONTROL guests
         [e1e8a9624f7ba8ead4f056ff558ed070e86fa747]

Jason Gunthorpe (1):
      RDMA/core: Fix incorrect structure packing for booleans
         [55efcfcd7776165b294f8b5cd6e05ca00ec89b7c]

Javier Martinez Canillas (1):
      tty: serial: msm: Fix module autoload
         [abe81f3b8ed2996e1712d26d38ff6b73f582c616]

Joe Thornber (1):
      dm cache: fix corruption seen when using cache > 2TB
         [ca763d0a53b264a650342cee206512bc92ac7050]

Johan Hovold (23):
      USB: iowarrior: fix NULL-deref at probe
         [b7321e81fc369abe353cf094d4f0dc2fe11ab95f]
      USB: serial: ark3116: fix open error handling
         [b631433b175f1002a31020e09bbfc2e5caecf290]
      USB: serial: ark3116: fix register-accessor error handling
         [9fef37d7cf170522fb354d6d0ea6de09b9b16678]
      USB: serial: ch341: fix modem-status handling
         [a0467a967f347842b30739aae636c44980265265]
      USB: serial: digi_acceleport: fix OOB data sanity check
         [2d380889215fe20b8523345649dee0579821800c]
      USB: serial: digi_acceleport: fix incomplete rx sanity check
         [1b0aed2b1600f6e5c7b9acfbd610a4e351ef5232]
      USB: serial: ftdi_sio: fix extreme low-latency setting
         [c6dce2626606ef16434802989466636bc28c1419]
      USB: serial: ftdi_sio: fix latency-timer error handling
         [e3e574ad85a208cb179f33720bb5f12b453de33c]
      USB: serial: ftdi_sio: fix line-status over-reporting
         [a6bb1e17a39818b01b55d8e6238b4b5f06d55038]
      USB: serial: ftdi_sio: fix modem-status error handling
         [427c3a95e3e29e65f59d99aaf320d7506f3eed57]
      USB: serial: io_edgeport: fix descriptor error handling
         [3c0e25d883d06a1fbd1ad35257e8abaa57befb37]
      USB: serial: io_edgeport: fix epic-descriptor handling
         [e4457d9798adb96272468e93da663de9bd0a4198]
      USB: serial: io_ti: fix information leak in completion handler
         [654b404f2a222f918af9b0cd18ad469d0c941a8e]
      USB: serial: keyspan_pda: fix receive sanity checks
         [c528fcb116e61afc379a2e0a0f70906b937f1e2c]
      USB: serial: mct_u232: fix modem-status error handling
         [36356a669eddb32917fc4b5c2b9b8bf80ede69de]
      USB: serial: mos7840: fix another NULL-deref at open
         [5182c2cf2a9bfb7f066ef0bdd2bb6330b94dd74e]
      USB: serial: omninet: fix reference leaks at open
         [30572418b445d85fcfe6c8fe84c947d2606767d8]
      USB: serial: opticon: fix CTS retrieval at open
         [2eee05020a0e7ee7c04422cbacdb07859e45dce6]
      USB: serial: quatech2: fix control-message error handling
         [8c34cb8ddfe808d557b51da983ff10c02793beb2]
      USB: serial: sierra: fix bogus alternate-setting assumption
         [16620b483eaf7750413bae472f4363b6b959fcaa]
      USB: serial: spcp8x5: fix modem-status handling
         [5ed8d41023751bdd3546f2fe4118304357efe8d2]
      USB: serial: ssu100: fix control-message error handling
         [1eac5c244f705182d1552a53e2f74e2775ed95d6]
      USB: serial: ti_usb_3410_5052: fix control-message error handling
         [39712e8bfa8d3aa6ce1e60fc9d62c9b076c17a30]

John Keeping (1):
      PM / QoS: Fix memory leak on resume_latency.notifiers
         [e84b4a84e52d4cd8770b4242cd09df0133333f63]

Julian Anastasov (1):
      ipv4: mask tos for input route
         [6e28099d38c0e50d62c1afc054e37e573adf3d21]

Julian Wiedmann (1):
      s390/qdio: clear DSCI prior to scanning multiple input queues
         [1e4a382fdc0ba8d1a85b758c0811de3a3631085e]

K. Y. Srinivasan (3):
      Drivers: hv: vmbus: Reduce the delay between retries in vmbus_post_msg()
         [8de0d7e951826d7592e0ba1da655b175c4aa0923]
      drivers: hv: Turn off write permission on the hypercall page
         [372b1e91343e657a7cc5e2e2bcecd5140ac28119]
      scsi: storvsc: Fix a bug in the handling of SRB status flags
         [3209f9d780d137cdb54c85e0a776cb19e723a170]

Ken Lin (1):
      USB: serial: cp210x: add new IDs for GE Bx50v3 boards
         [9a593656def0dc2f6c227851e8e602077267a5f1]

Kirtika Ruchandani (1):
      iwlwifi: mvm: rs: Remove unused 'mcs' variable
         [9d50443575fa379c3c72848162af1375a4d43b50]

Krzysztof Opasiak (3):
      usb: gadget: f_hid: Use spinlock instead of mutex
         [33e4c1a9987a1fc3b42c3b534100b5b006d55c61]
      usb: gadget: f_hid: fix: Free out requests
         [20d2ca955bd09639c7b01db5761d157c297aea0a]
      usb: gadget: f_hid: fix: Prevent accessing released memory
         [aa65d11aa008f4de58a9cee7e121666d9d68505e]

Lars-Peter Clausen (1):
      [media] adv7604: Initialize drive strength to default when using DT
         [da8892d410db224d9a24104529794e6e37e0c100]

Leo Yan (1):
      clk: hisilicon: fix lock assignment
         [55da97e38cab844682abb71400a908b871d0054c]

Leon Romanovsky (2):
      IB/mlx5: Fix out-of-bound access
         [0fd27a88c2e4f548937fd7d93fc6e65c4ad7c278]
      IB/mlx5: Return error for unsupported signature type
         [12bbf1ea7e3b35892dbb8636b978160bc9576b61]

Li Qiang (1):
      drm/vmwgfx: fix integer overflow in vmw_surface_define_ioctl()
         [e7e11f99564222d82f0ce84bd521e57d78a6b678]

Liam Breck (6):
      power: supply: bq24190_charger: Call power_supply_changed() for relevant component
         [2d9fee6a42ea170e4378b3363a7ad385d0e67281]
      power: supply: bq24190_charger: Call set_mode_host() on pm_resume()
         [e05ad7e0741ce0505e1df157c62b22b95172bb97]
      power: supply: bq24190_charger: Don't read fault register outside irq_handle_thread()
         [68abfb8015832ddf728b911769659468efaf8bd9]
      power: supply: bq24190_charger: Fix irq trigger to IRQF_TRIGGER_FALLING
         [767eee362fd72bb2ca44cc80419ca4b38c6d8369]
      power: supply: bq24190_charger: Handle fault before status on interrupt
         [ba52e75718784fda1b683ee0bfded72a0b83b047]
      power: supply: bq24190_charger: Install irq_handler_thread() at end of probe()
         [d62acc5ef0621463446091ebd7a345e06e9ab80c]

Linus Lüssing (1):
      batman-adv: Fix transmission of final, 16th fragment
         [51c6b429c0c95e67edd1cb0b548c5cf6a6604763]

Long Li (3):
      scsi: storvsc: properly handle SRB_ERROR when sense message is present
         [bba5dc332ec2d3a685cb4dae668c793f6a3713a3]
      scsi: storvsc: properly set residual data length on errors
         [40630f462824ee24bc00d692865c86c3828094e0]
      scsi: storvsc: use tagged SRB requests if supported by the device
         [3cd6d3d9b1abab8dcdf0800224ce26daac24eea2]

Maciej S. Szmigiero (2):
      w1: don't leak refcount on slave attach failure in w1_attach_slave_device()
         [d2ce4ea1a0b0162e5d2d7e7942ab6f5cc2063d5a]
      w1: ds2490: USB transfer buffers need to be DMAable
         [61cd1b4cd1e8f7f7642ab64529d9bd52e8374641]

Majd Dibbiny (1):
      net/mlx4_core: Fix VF overwrite of module param which disables DMFS on new probed PFs
         [95f1ba9a24af9769f6e20dfe9a77c863f253f311]

Mantas M (1):
      net: ipv6: check route protocol when deleting routes
         [c2ed1880fd61a998e3ce40254a99a2ad000f1a7d]

Marc Kleine-Budde (1):
      can: usb_8dev: Fix memory leak of priv->cmd_msg_buffer
         [7c42631376306fb3f34d51fda546b50a9b6dd6ec]

Marc Zyngier (1):
      arm/arm64: KVM: Enforce unconditional flush to PoC when mapping to stage-2
         [8f36ebaf21fdae99c091c67e8b6fab33969f2667]

Marcin Niestroj (1):
      iio: st_pressure: Fix data sign
         [1b211d48abaa0e12e6e6177c0316ff55d11fdfce]

Martin Kaiser (1):
      clk: samsung: mark s3c...._clk_sleep_init() as __init
         [02c952c8f95fd0adf1835704db95215f57cfc8e6]

Mathias Svensson (1):
      samples/seccomp: fix 64-bit comparison macros
         [916cafdc95843fb9af5fd5f83ca499d75473d107]

Matt Chen (1):
      mac80211: flush delayed work when entering suspend
         [a9e9200d8661c1a0be8c39f93deb383dc940de35]

Matthias Schiffer (1):
      vxlan: correctly validate VXLAN ID against VXLAN_N_VID
         [4e37d6911f36545b286d15073f6f2222f840e81c]

Max Filippov (1):
      xtensa: move parse_tag_fdt out of #ifdef CONFIG_BLK_DEV_INITRD
         [4ab18701c66552944188dbcd0ce0012729baab84]

Michael Petlan (1):
      perf script: Fix man page about --dump-raw-trace option
         [5c64f99b1d030ce52acce53d83141d88f79e6362]

Michal Hocko (1):
      mm/huge_memory.c: fix up "mm/huge_memory.c: respect FOLL_FORCE/FOLL_COW for thp" backport
         [not upstream; fixes bug specific to the stable backport]

Michel Dänzer (1):
      drm/ttm: Make sure BOs being swapped out are cacheable
         [239ac65fa5ffab71adf66e642750f940e7241d99]

Miklos Szeredi (1):
      fuse: add missing FR_FORCE
         [2e38bea99a80eab408adee27f873a188d57b76cb]

Mimi Zohar (1):
      KEYS: special dot prefixed keyring name bug fix
         [a4e3b8d79a5c6d40f4a9703abf7fe3abcc6c3b8d]

Minchan Kim (1):
      mm: do not access page->mapping directly on page_endio
         [dd8416c47715cf324c9a16f13273f9fda87acfed]

Mirko Parthey (1):
      MIPS: BCM47XX: Fix button inversion for Asus WL-500W
         [bdfdaf1a016ef09cb941f2edad485a713510b8d5]

Murray McAllister (1):
      drm/vmwgfx: NULL pointer dereference in vmw_surface_define_ioctl()
         [36274ab8c596f1240c606bb514da329add2a1bcd]

NeilBrown (1):
      md: ensure md devices are freed before module is unloaded.
         [9356863c9409efc79029c01a85d015efae977e69]

Nicholas Mc Guire (3):
      ASoC: rt5640: use msleep() for long delays
         [4a312c9c825adf74c0026c98fed4ab59ce190863]
      clk: wm831x: fix usleep_range with bad range
         [ed784c532a3d0959db488f40a96c5127f63d42dc]
      drm/i915: relax uncritical udelay_range()
         [15a43cbf4736a3932e6259fa7d6e47558f6222b0]

Nicolai Hähnle (1):
      drm/ttm: fix use-after-free races in vm fault handling
         [3089c1df10e2931b1d72d2ffa7d86431084c86b3]

Nikola Pajkovsky (1):
      x86/pci-calgary: Fix iommu_free() comparison of unsigned expression >= 0
         [68dee8e2f2cacc54d038394e70d22411dee89da2]

Omar Sandoval (2):
      sbitmap: fix wakeup hang after sbq resize
         [6c0ca7ae292adea09b8bdd33a524bb9326c3e989]
      virtio-console: avoid DMA from stack
         [c4baad50297d84bde1a7ad45e50c73adae4a2192]

Paul Burton (7):
      MIPS: Calculate microMIPS ra properly when unwinding the stack
         [bb9bc4689b9c635714fbcd5d335bad9934a7ebfc]
      MIPS: Clear ISA bit correctly in get_frame_info()
         [ccaf7caf2c73c6db920772bf08bf1d47b2170634]
      MIPS: Fix get_frame_info() handling of microMIPS function size
         [b6c7a324df37bf05ef7a2c1580683cf10d082d97]
      MIPS: Fix is_jump_ins() handling of 16b microMIPS instructions
         [67c75057709a6d85c681c78b9b2f9b71191f01a2]
      MIPS: Handle microMIPS jumps in the same way as MIPS32/MIPS64 jumps
         [096a0de427ea333f56f0ee00328cff2a2731bcf1]
      MIPS: Netlogic: Fix assembler warning from smpboot.S
         [a8b3b0c94ac282628f0668d1366239a3fa72dc9d]
      MIPS: Prevent unaligned accesses during stack unwinding
         [a3552dace7d1d0cabf573e88fc3025cb90c4a601]

Peter Dunning (1):
      sfc: do not device_attach if a reset is pending
         [9c568fd8844ec3986eb19b0b5d97536243d10d46]

Peter Oberparleiter (1):
      s390/chsc: Add exception handler for CHSC instruction
         [77759137248f34864a8f7a58bbcebfcf1047504a]

Peter Rosin (3):
      i2c: i2c-mux-gpio: rename i2c-gpio-mux to i2c-mux-gpio
         [6b66a6f27e799d9441ef2c0b1e00913a6a070fa5]
      iio: pressure: mpl115: do not rely on structure field ordering
         [6a6e1d56a0769795a36c0461c64bf5e5b9bbb4c0]
      iio: pressure: mpl3115: do not rely on structure field ordering
         [9cf6cdba586ced75c69b8314b88b2d2f5ce9b3ed]

Peter Zijlstra (1):
      locking/static_keys: Add static_key_{en,dis}able() helpers
         [e33886b38cc82a9fc3b2d655dfc7f50467594138]

Ping-Ke Shih (1):
      rtlwifi: Fix alignment issues
         [40b368af4b750863b2cb66a3a9513241db2f0793]

Rafał Miłecki (1):
      bcma: use (get|put)_device when probing/removing device driver
         [a971df0b9d04674e325346c17de9a895425ca5e1]

Raghava Aditya Renukunta (2):
      scsi: aacraid: Fix memory leak in fib init path
         [1bff5abca65d4b9761fcc992ab6288243220003d]
      scsi: aacraid: Reorder Adapter status check
         [c421530bf848604e97d0785a03b3fe2c62775083]

Ralf Baechle (1):
      MIPS: Fix special case in 64 bit IP checksumming.
         [66fd848cadaa6be974a8c780fbeb328f0af4d3bd]

Randy Dunlap (2):
      [media] media: fix dm1105.c build error
         [e3bb3cddd177550d63a3e4909cf1a7782f13414d]
      mm: fix <linux/pagemap.h> stray kernel-doc notation
         [083fb8edda0487d192e8c117f625563b920cf7a4]

Ravi Bangoria (1):
      powerpc/xmon: Fix data-breakpoint
         [c21a493a2b44650707d06741601894329486f2ad]

Ravikumar Kattekola (1):
      mmc: host: omap_hsmmc: avoid possible overflow of timeout value
         [a53210f56d7f3f75d1edc1b3a069ddb87b72a919]

Ridge Kennedy (1):
      l2tp: Avoid schedule while atomic in exit_net
         [12d656af4e3d2781b9b9f52538593e1717e7c979]

Roman Mashak (1):
      net sched actions: decrement module reference count after table flush.
         [edb9d1bff4bbe19b8ae0e71b1f38732591a9eeb2]

Soramichi Akiyama (1):
      perf evlist: Fix typo in perf_evlist__start_workload()
         [e978be9ea2990f1af60fe10eadd2312a6250e0b8]

Steve Wise (1):
      rdma_cm: fail iwarp accepts w/o connection params
         [f2625f7db4dd0bbd16a9c7d2950e7621f9aa57ad]

Steven Rostedt (1):
      ktest: Fix child exit code processing
         [32677207dcc5e594254b7fb4fb2352b1755b1d5b]

Sven Eckelmann (1):
      batman-adv: Fix double free during fragment merge error
         [248e23b50e2da0753f3b5faa068939cbe9f8a75a]

Takashi Iwai (3):
      ALSA: ctxfi: Fallback DMA mask to 32bit
         [15c75b09f8d190f89ab4db463b87d411ca349dfe]
      ALSA: seq: Fix link corruption by event error handling
         [f3ac9f737603da80c2da3e84b89e74429836bb6d]
      ALSA: timer: Reject user params with too small ticks
         [71321eb3f2d0df4e6c327e0b936eec4458a12054]

Theodore Ts'o (7):
      ext4: fix deadlock between inline_data and ext4_expand_extra_isize_ea()
         [c755e251357a0cee0679081f08c3f4ba797a8009]
      ext4: fix fencepost in s_first_meta_bg validation
         [2ba3e6e8afc9b6188b471f27cf2b5e3cf34e7af2]
      ext4: fix inline data error paths
         [eb5efbcb762aee4b454b04f7115f73ccbcf8f0ef]
      ext4: preserve the needs_recovery flag when the journal is aborted
         [97abd7d4b5d9c48ec15c425485f054e1c15e591b]
      ext4: return EROFS if device is r/o and journal replay is needed
         [4753d8a24d4588657bc0a4cd66d4e282dff15c8c]
      ext4: use private version of page_zero_new_buffers() for data=journal mode
         [b90197b655185a11640cce3a0a0bc5d8291b8ad2]
      jbd2: don't leak modified metadata buffers on an aborted journal
         [e112666b4959b25a8552d63bc564e1059be703e8]

Thomas Elste (1):
      power: bq24190_charger: Change first_time flag reset condition
         [cd054ee16580690830297dbda0abe9c184276d6a]

Thomas Gleixner (2):
      goldfish: Sanitize the broken interrupt handler
         [6cf18e6927c0b224f972e3042fb85770d63cb9f8]
      x86/platform/goldfish: Prevent unconditional loading
         [47512cfd0d7a8bd6ab71d01cd89fca19eb2093eb]

Trond Myklebust (3):
      NFSv4: Fix memory and state leak in _nfs4_open_and_get_state
         [a974deee477af89411e0f80456bfb344ac433c98]
      NFSv4: Fix the underestimation of delegation XDR space reservation
         [5a1f6d9e9b803003271b40b67786ff46fa4eda01]
      nlm: Ensure callback code also checks that the files match
         [251af29c320d86071664f02c76f0d063a19fefdf]

Vinayak Menon (1):
      mm: vmpressure: fix sending wrong events on underflow
         [e1587a4945408faa58d0485002c110eb2454740c]

Vitaly Kuznetsov (3):
      Drivers: hv: vmbus: Raise retry/wait limits in vmbus_post_msg()
         [c0bb03924f1a80e7f65900e36c8e6b3dc167c5f8]
      hv: allocate synic pages for all present CPUs
         [421b8f20d3c381b215f988b42428f56fc3b82405]
      hv: init percpu_list in hv_synic_alloc()
         [3c7630d35009e6635e5b58d62de554fd5b6db5df]

WANG Cong (1):
      ipv6/dccp: do not inherit ipv6_mc_list from parent
         [83eaddab4378db256d00d295bda6ca997cd13a52]

Weston Andros Adamson (1):
      NFSv4: fix getacl ERANGE for some ACL buffer sizes
         [ed92d8c137b7794c2c2aa14479298b9885967607]

Y.C. Chen (1):
      drm/ast: Fix AST2400 POST failure without BMC FW or VBIOS
         [3856081eede297b617560b85e948cfb00bb395ec]

 Documentation/i2c/muxes/i2c-mux-gpio           |  20 +--
 Documentation/kernel-parameters.txt            |   4 +
 Makefile                                       |   4 +-
 arch/arm/include/asm/kvm_mmu.h                 |   3 +-
 arch/arm64/include/asm/kvm_mmu.h               |   3 +-
 arch/mips/Makefile                             |   4 +-
 arch/mips/bcm47xx/buttons.c                    |  10 +-
 arch/mips/cavium-octeon/octeon-memcpy.S        |  20 +--
 arch/mips/configs/ip27_defconfig               |   1 -
 arch/mips/include/asm/checksum.h               |   2 +
 arch/mips/kernel/process.c                     | 153 +++++++++++++--------
 arch/mips/netlogic/common/smpboot.S            |   4 +-
 arch/powerpc/kernel/hw_breakpoint.c            |   4 +-
 arch/s390/kvm/kvm-s390.c                       |   3 +
 arch/x86/include/uapi/asm/hyperv.h             |   2 +
 arch/x86/kernel/pci-calgary_64.c               |   2 +-
 arch/x86/kvm/vmx.c                             |   2 +-
 arch/x86/platform/goldfish/goldfish.c          |  14 +-
 arch/xtensa/kernel/setup.c                     |   4 +-
 block/blk-mq-tag.c                             |  44 +++++--
 crypto/ahash.c                                 |  79 +++++++----
 drivers/base/power/qos.c                       |   2 +-
 drivers/bcma/main.c                            |   4 +
 drivers/bluetooth/ath3k.c                      |   2 +
 drivers/bluetooth/btusb.c                      |   1 +
 drivers/char/virtio_console.c                  |  12 +-
 drivers/clk/clk-wm831x.c                       |   3 +-
 drivers/clk/hisilicon/clkgate-separated.c      |   1 +
 drivers/clk/samsung/clk-s3c2410.c              |   4 +-
 drivers/clk/samsung/clk-s3c2412.c              |   4 +-
 drivers/clk/samsung/clk-s3c2443.c              |   4 +-
 drivers/clk/samsung/clk-s3c64xx.c              |   4 +-
 drivers/clk/shmobile/clk-mstp.c                |   6 +
 drivers/cpufreq/s3c2416-cpufreq.c              |   1 -
 drivers/gpu/drm/ast/ast_post.c                 |  38 +++++-
 drivers/gpu/drm/i915/intel_dsi_pll.c           |   6 +-
 drivers/gpu/drm/radeon/radeon_bios.c           |  64 +++++----
 drivers/gpu/drm/ttm/ttm_bo.c                   |   4 +-
 drivers/gpu/drm/ttm/ttm_bo_vm.c                |  12 ++
 drivers/gpu/drm/vmwgfx/vmwgfx_surface.c        |   9 +-
 drivers/hv/channel.c                           |  15 ++-
 drivers/hv/channel_mgmt.c                      |   7 +-
 drivers/hv/connection.c                        |  27 +++-
 drivers/hv/hv.c                                |  10 +-
 drivers/hv/hyperv_vmbus.h                      |   2 +-
 drivers/i2c/busses/i2c-riic.c                  |  30 ++++-
 drivers/iio/pressure/mpl115.c                  |   1 +
 drivers/iio/pressure/mpl3115.c                 |   4 +-
 drivers/iio/pressure/st_pressure_core.c        |   8 +-
 drivers/infiniband/core/cma.c                  |   3 +
 drivers/infiniband/hw/mlx5/qp.c                |  29 ++--
 drivers/infiniband/hw/mlx5/srq.c               |  11 +-
 drivers/infiniband/ulp/ipoib/ipoib_cm.c        |  14 +-
 drivers/infiniband/ulp/ipoib/ipoib_main.c      |  21 +--
 drivers/infiniband/ulp/ipoib/ipoib_vlan.c      |  10 +-
 drivers/iommu/intel-iommu.c                    |   2 +-
 drivers/md/dm-cache-target.c                   |   6 +-
 drivers/md/linear.c                            |  29 +++-
 drivers/md/linear.h                            |   1 +
 drivers/md/md.c                                |   7 +
 drivers/media/i2c/adv7604.c                    |   3 +
 drivers/media/pci/dm1105/Kconfig               |   2 +-
 drivers/media/usb/dvb-usb-v2/dvb_usb_core.c    |   9 +-
 drivers/media/usb/uvc/uvc_queue.c              |   2 +-
 drivers/mmc/host/omap_hsmmc.c                  |   7 +-
 drivers/net/can/usb/usb_8dev.c                 |   9 +-
 drivers/net/ethernet/broadcom/bgmac.c          |   6 +-
 drivers/net/ethernet/mellanox/mlx4/cmd.c       |  22 +++-
 drivers/net/ethernet/mellanox/mlx4/en_netdev.c |   6 +-
 drivers/net/ethernet/mellanox/mlx4/en_rx.c     |   8 +-
 drivers/net/ethernet/mellanox/mlx4/main.c      |   2 -
 drivers/net/ethernet/mellanox/mlx4/mlx4_en.h   |   3 +-
 drivers/net/ethernet/sfc/efx.c                 |  10 +-
 drivers/net/ethernet/sfc/efx.h                 |   6 +
 drivers/net/ethernet/sfc/selftest.c            |   2 +-
 drivers/net/vxlan.c                            |   2 +-
 drivers/net/wireless/adm8211.c                 |   3 +-
 drivers/net/wireless/ath/ath5k/mac80211-ops.c  |   3 +-
 drivers/net/wireless/ath/ath9k/ar9003_eeprom.h |   4 +-
 drivers/net/wireless/ath/ath9k/ath9k.h         |   1 +
 drivers/net/wireless/ath/ath9k/init.c          |   1 +
 drivers/net/wireless/ath/ath9k/mac.c           |  44 +++++--
 drivers/net/wireless/ath/ath9k/mac.h           |   1 +
 drivers/net/wireless/ath/ath9k/main.c          |  27 ++--
 drivers/net/wireless/iwlwifi/mvm/rs.c          |   4 +-
 drivers/net/wireless/mwifiex/debugfs.c         |   3 +-
 drivers/net/wireless/mwifiex/sta_ioctl.c       |   2 -
 drivers/platform/goldfish/pdev_bus.c           |  13 +-
 drivers/platform/x86/acer-wmi.c                |  22 +++-
 drivers/power/bq24190_charger.c                | 175 ++++++++++---------------
 drivers/s390/cio/ioasm.h                       |   8 +-
 drivers/s390/cio/qdio_thinint.c                |   8 +-
 drivers/scsi/aacraid/commsup.c                 |  36 ++---
 drivers/scsi/aacraid/src.c                     |  21 ++-
 drivers/scsi/storvsc_drv.c                     |  37 +++++-
 drivers/staging/rtl8188eu/core/rtw_recv.c      |   4 +
 drivers/staging/rtl8192ee/rtl8192ee/hw.c       |   2 +-
 drivers/staging/rtl8712/rtl871x_recv.c         |   7 +-
 drivers/staging/rtl8821ae/rtl8821ae/hw.c       |   2 +-
 drivers/staging/wlan-ng/p80211netdev.c         |   2 +-
 drivers/tty/serial/8250/8250_pci.c             |  36 +++--
 drivers/tty/serial/msm_serial.c                |   1 +
 drivers/usb/dwc3/gadget.c                      |   6 +
 drivers/usb/gadget/f_hid.c                     | 101 ++++++++++----
 drivers/usb/gadget/f_midi.c                    |   6 -
 drivers/usb/gadget/f_sourcesink.c              |   6 -
 drivers/usb/gadget/g_zero.h                    |   1 -
 drivers/usb/gadget/u_f.c                       |   1 -
 drivers/usb/gadget/u_f.h                       |  10 +-
 drivers/usb/misc/adutux.c                      |   4 -
 drivers/usb/misc/iowarrior.c                   |  13 +-
 drivers/usb/serial/ark3116.c                   |  38 ++++--
 drivers/usb/serial/ch341.c                     |  27 ++--
 drivers/usb/serial/cp210x.c                    |   2 +
 drivers/usb/serial/digi_acceleport.c           |  52 +++++---
 drivers/usb/serial/ftdi_sio.c                  |  38 ++++--
 drivers/usb/serial/io_edgeport.c               |  48 ++++---
 drivers/usb/serial/io_ti.c                     |   2 +-
 drivers/usb/serial/keyspan_pda.c               |  19 ++-
 drivers/usb/serial/mct_u232.c                  |   6 +-
 drivers/usb/serial/mos7840.c                   |   4 +-
 drivers/usb/serial/omninet.c                   |   6 -
 drivers/usb/serial/opticon.c                   |   2 +-
 drivers/usb/serial/quatech2.c                  |  24 ++--
 drivers/usb/serial/sierra.c                    |  28 +---
 drivers/usb/serial/spcp8x5.c                   |   8 +-
 drivers/usb/serial/ssu100.c                    |  31 ++++-
 drivers/usb/serial/ti_usb_3410_5052.c          |  12 +-
 drivers/w1/masters/ds2490.c                    | 141 ++++++++++++--------
 drivers/w1/w1.c                                |   1 +
 fs/ext4/inline.c                               |  75 +++++------
 fs/ext4/inode.c                                |  69 ++++++++--
 fs/ext4/mballoc.c                              |   7 +
 fs/ext4/super.c                                |  11 +-
 fs/ext4/xattr.c                                |  35 ++---
 fs/ext4/xattr.h                                |  32 +++++
 fs/f2fs/f2fs.h                                 |   3 +
 fs/f2fs/gc.c                                   |  28 +++-
 fs/f2fs/segment.c                              |  13 +-
 fs/f2fs/segment.h                              |   9 ++
 fs/fuse/file.c                                 |   1 +
 fs/jbd2/transaction.c                          |   4 +-
 fs/nfs/nfs4proc.c                              |  10 +-
 fs/nfs/nfs4xdr.c                               |   4 +-
 fs/nfsd/nfs3xdr.c                              |  12 +-
 fs/nfsd/nfssvc.c                               |  36 +++++
 fs/nfsd/nfsxdr.c                               |  10 +-
 fs/nfsd/vfs.c                                  |  63 ++++++---
 include/crypto/internal/hash.h                 |  10 ++
 include/linux/jump_label.h                     |  20 +++
 include/linux/lockd/lockd.h                    |   3 +-
 include/linux/mlx4/cmd.h                       |   2 +-
 include/linux/mlx4/driver.h                    |  10 ++
 include/linux/pagemap.h                        |   1 -
 include/linux/ww_mutex.h                       |   8 +-
 include/rdma/ib_sa.h                           |   6 +-
 kernel/sched/core.c                            |   6 +-
 kernel/trace/trace.c                           |   2 +-
 mm/filemap.c                                   |   7 +-
 mm/huge_memory.c                               |   2 +-
 mm/mempolicy.c                                 |  20 ++-
 mm/page_alloc.c                                |   2 +-
 mm/vmpressure.c                                |  10 +-
 net/batman-adv/fragmentation.c                 |  16 ++-
 net/core/dev.c                                 |  35 ++++-
 net/dccp/ipv4.c                                |   6 +
 net/dccp/ipv6.c                                |  12 ++
 net/ipv4/inet_connection_sock.c                |   2 +
 net/ipv4/ping.c                                |   5 +-
 net/ipv4/route.c                               |   1 +
 net/ipv4/tcp_minisocks.c                       |   3 +-
 net/ipv6/ip6_offload.c                         |   7 +-
 net/ipv6/ip6_output.c                          |  20 +--
 net/ipv6/output_core.c                         |  14 +-
 net/ipv6/route.c                               |   2 +
 net/ipv6/tcp_ipv6.c                            |   2 +
 net/ipv6/udp_offload.c                         |   6 +-
 net/ipx/af_ipx.c                               |   5 +-
 net/l2tp/l2tp_core.c                           |   4 +-
 net/mac80211/pm.c                              |   1 +
 net/packet/af_packet.c                         |   8 +-
 net/sched/act_api.c                            |   5 +-
 net/sctp/ipv6.c                                |   3 +
 net/xfrm/xfrm_user.c                           |   9 +-
 samples/seccomp/bpf-helper.h                   | 125 ++++++++++--------
 security/keys/encrypted-keys/encrypted.c       |   2 +-
 security/keys/keyctl.c                         |  24 ++--
 security/keys/process_keys.c                   |  44 ++++---
 sound/core/seq/seq_fifo.c                      |   3 +
 sound/core/timer.c                             |  18 ++-
 sound/pci/ctxfi/cthw20k1.c                     |  19 +--
 sound/pci/ctxfi/cthw20k2.c                     |  18 +--
 sound/soc/codecs/rt5640.c                      |   4 +-
 tools/perf/Documentation/perf-script.txt       |   4 +-
 tools/perf/tests/parse-events.c                |   6 +-
 tools/perf/util/evlist.c                       |   2 +-
 tools/testing/ktest/ktest.pl                   |   2 +-
 197 files changed, 1917 insertions(+), 1054 deletions(-)

-- 
Ben Hutchings
The most exhausting thing in life is being insincere. - Anne Morrow Lindberg

[toc] | [next] | [standalone]

#1655493 — [PATCH 3.16 003/212] adm80211: return an error if adm8211_alloc_rings() fails

3.16.44-rc1 review patch.  If anyone has any objections, please let me know.

------------------

From: Dan Carpenter <dan.carpenter@oracle.com>

commit c705a6b3aa7804d7bc6660183f51e510c61dc807 upstream.

We accidentally return success when adm8211_alloc_rings() fails but we
should preserve the error code.

Fixes: cc0b88cf5ecf ("[PATCH] Add adm8211 802.11b wireless driver")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Kalle Valo <kvalo@codeaurora.org>
[bwh: Backported to 3.16: adjust filename]
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
---
 drivers/net/wireless/adm8211.c | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

--- a/drivers/net/wireless/adm8211.c
+++ b/drivers/net/wireless/adm8211.c
@@ -1843,7 +1843,8 @@ static int adm8211_probe(struct pci_dev
 	priv->rx_ring_size = rx_ring_size;
 	priv->tx_ring_size = tx_ring_size;
 
-	if (adm8211_alloc_rings(dev)) {
+	err = adm8211_alloc_rings(dev);
+	if (err) {
 		printk(KERN_ERR "%s (adm8211): Cannot allocate TX/RX ring\n",
 		       pci_name(pdev));
 		goto err_iounmap;

[toc] | [prev] | [next] | [standalone]

#1655498 — [PATCH 3.16 006/212] MIPS: Clear ISA bit correctly in get_frame_info()

3.16.44-rc1 review patch.  If anyone has any objections, please let me know.

------------------

From: Paul Burton <paul.burton@imgtec.com>

commit ccaf7caf2c73c6db920772bf08bf1d47b2170634 upstream.

get_frame_info() can be called in microMIPS kernels with the ISA bit
already clear. For example this happens when unwind_stack_by_address()
is called because we begin with a PC that has the ISA bit set & subtract
the (odd) offset from the preceding symbol (which does not have the ISA
bit set). Since get_frame_info() unconditionally subtracts 1 from the PC
in microMIPS kernels it incorrectly misaligns the address it then
attempts to access code at, leading to an address error exception.

Fix this by using msk_isa16_mode() to clear the ISA bit, which allows
get_frame_info() to function regardless of whether it is provided with a
PC that has the ISA bit set or not.

Signed-off-by: Paul Burton <paul.burton@imgtec.com>
Fixes: 34c2f668d0f6 ("MIPS: microMIPS: Add unaligned access support.")
Cc: Leonid Yegoshin <leonid.yegoshin@imgtec.com>
Cc: linux-mips@linux-mips.org
Patchwork: https://patchwork.linux-mips.org/patch/14528/
Signed-off-by: Ralf Baechle <ralf@linux-mips.org>
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
---
 arch/mips/kernel/process.c | 7 ++-----
 1 file changed, 2 insertions(+), 5 deletions(-)

--- a/arch/mips/kernel/process.c
+++ b/arch/mips/kernel/process.c
@@ -331,17 +331,14 @@ static inline int is_sp_move_ins(union m
 
 static int get_frame_info(struct mips_frame_info *info)
 {
-#ifdef CONFIG_CPU_MICROMIPS
-	union mips_instruction *ip = (void *) (((char *) info->func) - 1);
-#else
-	union mips_instruction *ip = info->func;
-#endif
+	union mips_instruction *ip;
 	unsigned max_insns = info->func_size / sizeof(union mips_instruction);
 	unsigned i;
 
 	info->pc_offset = -1;
 	info->frame_size = 0;
 
+	ip = (void *)msk_isa16_mode((ulong)info->func);
 	if (!ip)
 		goto err;
 

[toc] | [prev] | [next] | [standalone]

#1655501 — [PATCH 3.16 023/212] Drivers: hv: vmbus: Raise retry/wait limits in vmbus_post_msg()

3.16.44-rc1 review patch.  If anyone has any objections, please let me know.

------------------

From: Vitaly Kuznetsov <vkuznets@redhat.com>

commit c0bb03924f1a80e7f65900e36c8e6b3dc167c5f8 upstream.

DoS protection conditions were altered in WS2016 and now it's easy to get
-EAGAIN returned from vmbus_post_msg() (e.g. when we try changing MTU on a
netvsc device in a loop). All vmbus_post_msg() callers don't retry the
operation and we usually end up with a non-functional device or crash.

While host's DoS protection conditions are unknown to me my tests show that
it can take up to 10 seconds before the message is sent so doing udelay()
is not an option, we really need to sleep. Almost all vmbus_post_msg()
callers are ready to sleep but there is one special case:
vmbus_initiate_unload() which can be called from interrupt/NMI context and
we can't sleep there. I'm also not sure about the lonely
vmbus_send_tl_connect_request() which has no in-tree users but its external
users are most likely waiting for the host to reply so sleeping there is
also appropriate.

Signed-off-by: Vitaly Kuznetsov <vkuznets@redhat.com>
Signed-off-by: K. Y. Srinivasan <kys@microsoft.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
[bwh: Backported to 3.16:
 - Drop changes in vmbus_send_tl_connect_request(),
   vmbus_initiate_unload()
 - Adjust context, indentation]
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
---
--- a/drivers/hv/channel.c
+++ b/drivers/hv/channel.c
@@ -163,7 +163,7 @@ int vmbus_open(struct vmbus_channel *new
 	spin_unlock_irqrestore(&vmbus_connection.channelmsg_lock, flags);
 
 	ret = vmbus_post_msg(open_msg,
-			       sizeof(struct vmbus_channel_open_channel));
+			     sizeof(struct vmbus_channel_open_channel), true);
 
 	if (ret != 0) {
 		err = ret;
@@ -391,7 +391,7 @@ int vmbus_establish_gpadl(struct vmbus_c
 	spin_unlock_irqrestore(&vmbus_connection.channelmsg_lock, flags);
 
 	ret = vmbus_post_msg(gpadlmsg, msginfo->msgsize -
-			       sizeof(*msginfo));
+			     sizeof(*msginfo), true);
 	if (ret != 0)
 		goto cleanup;
 
@@ -407,8 +407,8 @@ int vmbus_establish_gpadl(struct vmbus_c
 			gpadl_body->gpadl = next_gpadl_handle;
 
 			ret = vmbus_post_msg(gpadl_body,
-					       submsginfo->msgsize -
-					       sizeof(*submsginfo));
+					     submsginfo->msgsize - sizeof(*submsginfo),
+					     true);
 			if (ret != 0)
 				goto cleanup;
 
@@ -456,8 +456,8 @@ int vmbus_teardown_gpadl(struct vmbus_ch
 	list_add_tail(&info->msglistentry,
 		      &vmbus_connection.chn_msg_list);
 	spin_unlock_irqrestore(&vmbus_connection.channelmsg_lock, flags);
-	ret = vmbus_post_msg(msg,
-			       sizeof(struct vmbus_channel_gpadl_teardown));
+	ret = vmbus_post_msg(msg, sizeof(struct vmbus_channel_gpadl_teardown),
+			     true);
 
 	if (ret)
 		goto post_msg_err;
@@ -502,7 +502,8 @@ static int vmbus_close_internal(struct v
 	msg->header.msgtype = CHANNELMSG_CLOSECHANNEL;
 	msg->child_relid = channel->offermsg.child_relid;
 
-	ret = vmbus_post_msg(msg, sizeof(struct vmbus_channel_close_channel));
+	ret = vmbus_post_msg(msg, sizeof(struct vmbus_channel_close_channel),
+			     true);
 
 	if (ret) {
 		pr_err("Close failed: close post msg return is %d\n", ret);
--- a/drivers/hv/channel_mgmt.c
+++ b/drivers/hv/channel_mgmt.c
@@ -229,7 +229,8 @@ static void vmbus_process_rescind_offer(
 	memset(&msg, 0, sizeof(struct vmbus_channel_relid_released));
 	msg.child_relid = channel->offermsg.child_relid;
 	msg.header.msgtype = CHANNELMSG_RELID_RELEASED;
-	vmbus_post_msg(&msg, sizeof(struct vmbus_channel_relid_released));
+	vmbus_post_msg(&msg, sizeof(struct vmbus_channel_relid_released),
+		       true);
 
 	if (channel->target_cpu != smp_processor_id())
 		smp_call_function_single(channel->target_cpu,
@@ -771,8 +772,8 @@ int vmbus_request_offers(void)
 	msg->msgtype = CHANNELMSG_REQUESTOFFERS;
 
 
-	ret = vmbus_post_msg(msg,
-			       sizeof(struct vmbus_channel_message_header));
+	ret = vmbus_post_msg(msg, sizeof(struct vmbus_channel_message_header),
+			     true);
 	if (ret != 0) {
 		pr_err("Unable to request offers - %d\n", ret);
 
--- a/drivers/hv/connection.c
+++ b/drivers/hv/connection.c
@@ -94,7 +94,8 @@ static int vmbus_negotiate_version(struc
 	spin_unlock_irqrestore(&vmbus_connection.channelmsg_lock, flags);
 
 	ret = vmbus_post_msg(msg,
-			       sizeof(struct vmbus_channel_initiate_contact));
+			     sizeof(struct vmbus_channel_initiate_contact),
+			     true);
 	if (ret != 0) {
 		spin_lock_irqsave(&vmbus_connection.channelmsg_lock, flags);
 		list_del(&msginfo->msglistentry);
@@ -413,7 +414,7 @@ void vmbus_on_event(unsigned long data)
 /*
  * vmbus_post_msg - Send a msg on the vmbus's message connection
  */
-int vmbus_post_msg(void *buffer, size_t buflen)
+int vmbus_post_msg(void *buffer, size_t buflen, bool can_sleep)
 {
 	union hv_connection_id conn_id;
 	int ret = 0;
@@ -428,7 +429,7 @@ int vmbus_post_msg(void *buffer, size_t
 	 * insufficient resources. Retry the operation a couple of
 	 * times before giving up.
 	 */
-	while (retries < 20) {
+	while (retries < 100) {
 		ret = hv_post_message(conn_id, 1, buffer, buflen);
 
 		switch (ret) {
@@ -451,8 +452,14 @@ int vmbus_post_msg(void *buffer, size_t
 		}
 
 		retries++;
-		udelay(usec);
-		if (usec < 2048)
+		if (can_sleep && usec > 1000)
+			msleep(usec / 1000);
+		else if (usec < MAX_UDELAY_MS * 1000)
+			udelay(usec);
+		else
+			mdelay(usec / 1000);
+
+		if (usec < 256000)
 			usec *= 2;
 	}
 	return ret;
--- a/drivers/hv/hyperv_vmbus.h
+++ b/drivers/hv/hyperv_vmbus.h
@@ -672,7 +672,7 @@ void vmbus_free_channels(void);
 
 int vmbus_connect(void);
 
-int vmbus_post_msg(void *buffer, size_t buflen);
+int vmbus_post_msg(void *buffer, size_t buflen, bool can_sleep);
 
 int vmbus_set_event(struct vmbus_channel *channel);
 

[toc] | [prev] | [next] | [standalone]

#1655502 — [PATCH 3.16 008/212] MIPS: Fix get_frame_info() handling of microMIPS function size

3.16.44-rc1 review patch.  If anyone has any objections, please let me know.

------------------

From: Paul Burton <paul.burton@imgtec.com>

commit b6c7a324df37bf05ef7a2c1580683cf10d082d97 upstream.

get_frame_info() is meant to iterate over up to the first 128
instructions within a function, but for microMIPS kernels it will not
reach that many instructions unless the function is 512 bytes long since
we calculate the maximum number of instructions to check by dividing the
function length by the 4 byte size of a union mips_instruction. In
microMIPS kernels this won't do since instructions are variable length.

Fix this by instead checking whether the pointer to the current
instruction has reached the end of the function, and use max_insns as a
simple constant to check the number of iterations against.

Signed-off-by: Paul Burton <paul.burton@imgtec.com>
Fixes: 34c2f668d0f6 ("MIPS: microMIPS: Add unaligned access support.")
Cc: Leonid Yegoshin <leonid.yegoshin@imgtec.com>
Cc: linux-mips@linux-mips.org
Patchwork: https://patchwork.linux-mips.org/patch/14530/
Signed-off-by: Ralf Baechle <ralf@linux-mips.org>
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
---
 arch/mips/kernel/process.c | 12 +++++-------
 1 file changed, 5 insertions(+), 7 deletions(-)

--- a/arch/mips/kernel/process.c
+++ b/arch/mips/kernel/process.c
@@ -321,9 +321,9 @@ static inline int is_sp_move_ins(union m
 static int get_frame_info(struct mips_frame_info *info)
 {
 	bool is_mmips = IS_ENABLED(CONFIG_CPU_MICROMIPS);
-	union mips_instruction insn, *ip;
-	unsigned max_insns = info->func_size / sizeof(union mips_instruction);
-	unsigned i;
+	union mips_instruction insn, *ip, *ip_end;
+	const unsigned int max_insns = 128;
+	unsigned int i;
 
 	info->pc_offset = -1;
 	info->frame_size = 0;
@@ -332,11 +332,9 @@ static int get_frame_info(struct mips_fr
 	if (!ip)
 		goto err;
 
-	if (max_insns == 0)
-		max_insns = 128U;	/* unknown function size */
-	max_insns = min(128U, max_insns);
+	ip_end = (void *)ip + info->func_size;
 
-	for (i = 0; i < max_insns; i++, ip++) {
+	for (i = 0; i < max_insns && ip < ip_end; i++, ip++) {
 		if (is_mmips && mm_insn_16bit(ip->halfword[0])) {
 			insn.halfword[0] = 0;
 			insn.halfword[1] = ip->halfword[0];

[toc] | [prev] | [next] | [standalone]

#1655504 — [PATCH 3.16 011/212] MIPS: Handle microMIPS jumps in the same way as MIPS32/MIPS64 jumps

3.16.44-rc1 review patch.  If anyone has any objections, please let me know.

------------------

From: Paul Burton <paul.burton@imgtec.com>

commit 096a0de427ea333f56f0ee00328cff2a2731bcf1 upstream.

is_jump_ins() checks for plain jump ("j") instructions since commit
e7438c4b893e ("MIPS: Fix sibling call handling in get_frame_info") but
that commit didn't make the same change to the microMIPS code, leaving
it inconsistent with the MIPS32/MIPS64 code. Handle the microMIPS
encoding of the jump instruction too such that it behaves consistently.

Signed-off-by: Paul Burton <paul.burton@imgtec.com>
Fixes: e7438c4b893e ("MIPS: Fix sibling call handling in get_frame_info")
Cc: Tony Wu <tung7970@gmail.com>
Cc: linux-mips@linux-mips.org
Patchwork: https://patchwork.linux-mips.org/patch/14533/
Signed-off-by: Ralf Baechle <ralf@linux-mips.org>
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
---
 arch/mips/kernel/process.c | 2 ++
 1 file changed, 2 insertions(+)

--- a/arch/mips/kernel/process.c
+++ b/arch/mips/kernel/process.c
@@ -321,6 +321,8 @@ static inline int is_jump_ins(union mips
 		return 0;
 	}
 
+	if (ip->j_format.opcode == mm_j32_op)
+		return 1;
 	if (ip->j_format.opcode == mm_jal32_op)
 		return 1;
 	if (ip->r_format.opcode != mm_pool32a_op ||

[toc] | [prev] | [next] | [standalone]

#1655508 — [PATCH 3.16 031/212] ASoC: rt5640: use msleep() for long delays

3.16.44-rc1 review patch.  If anyone has any objections, please let me know.

------------------

From: Nicholas Mc Guire <hofrat@osadl.org>

commit 4a312c9c825adf74c0026c98fed4ab59ce190863 upstream.

ulseep_range() uses hrtimers and provides no advantage over msleep()
for larger delays. Fix up the 70/80ms delays here passing the "min"
value to msleep(). This reduces the load on the hrtimer subsystem.

Link: http://lkml.org/lkml/2017/1/11/377
Fixes: commit 246693ba7b0b ("ASoC: rt5640: change widget sequence for depop")
Signed-off-by: Nicholas Mc Guire <hofrat@osadl.org>
Signed-off-by: Mark Brown <broonie@kernel.org>
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
---
 sound/soc/codecs/rt5640.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

--- a/sound/soc/codecs/rt5640.c
+++ b/sound/soc/codecs/rt5640.c
@@ -974,7 +974,7 @@ static int rt5640_hp_event(struct snd_so
 
 	case SND_SOC_DAPM_PRE_PMD:
 		rt5640->hp_mute = 1;
-		usleep_range(70000, 75000);
+		msleep(70);
 		break;
 
 	default:
@@ -1038,7 +1038,7 @@ static int rt5640_hp_post_event(struct s
 	switch (event) {
 	case SND_SOC_DAPM_POST_PMU:
 		if (!rt5640->hp_mute)
-			usleep_range(80000, 85000);
+			msleep(80);
 
 		break;
 

[toc] | [prev] | [next] | [standalone]

#1655510 — [PATCH 3.16 027/212] ext4: avoid deadlock when expanding inode size

3.16.44-rc1 review patch.  If anyone has any objections, please let me know.

------------------

From: Jan Kara <jack@suse.cz>

commit 2e81a4eeedcaa66e35f58b81e0755b87057ce392 upstream.

When we need to move xattrs into external xattr block, we call
ext4_xattr_block_set() from ext4_expand_extra_isize_ea(). That may end
up calling ext4_mark_inode_dirty() again which will recurse back into
the inode expansion code leading to deadlocks.

Protect from recursion using EXT4_STATE_NO_EXPAND inode flag and move
its management into ext4_expand_extra_isize_ea() since its manipulation
is safe there (due to xattr_sem) from possible races with
ext4_xattr_set_handle() which plays with it as well.

Signed-off-by: Jan Kara <jack@suse.cz>
Signed-off-by: Theodore Ts'o <tytso@mit.edu>
[bwh: Backported to 3.16: adjust context[
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
---
 fs/ext4/inode.c |  2 --
 fs/ext4/xattr.c | 19 +++++++++++++------
 2 files changed, 13 insertions(+), 8 deletions(-)

--- a/fs/ext4/inode.c
+++ b/fs/ext4/inode.c
@@ -5062,8 +5062,6 @@ int ext4_mark_inode_dirty(handle_t *hand
 						      sbi->s_want_extra_isize,
 						      iloc, handle);
 			if (ret) {
-				ext4_set_inode_state(inode,
-						     EXT4_STATE_NO_EXPAND);
 				if (mnt_count !=
 					le16_to_cpu(sbi->s_es->s_mnt_count)) {
 					ext4_warning(inode->i_sb,
--- a/fs/ext4/xattr.c
+++ b/fs/ext4/xattr.c
@@ -1277,11 +1277,13 @@ int ext4_expand_extra_isize_ea(struct in
 	int s_min_extra_isize = le16_to_cpu(EXT4_SB(inode->i_sb)->s_es->s_min_extra_isize);
 
 	down_write(&EXT4_I(inode)->xattr_sem);
+	/*
+	 * Set EXT4_STATE_NO_EXPAND to avoid recursion when marking inode dirty
+	 */
+	ext4_set_inode_state(inode, EXT4_STATE_NO_EXPAND);
 retry:
-	if (EXT4_I(inode)->i_extra_isize >= new_extra_isize) {
-		up_write(&EXT4_I(inode)->xattr_sem);
-		return 0;
-	}
+	if (EXT4_I(inode)->i_extra_isize >= new_extra_isize)
+		goto out;
 
 	header = IHDR(inode, raw_inode);
 	entry = IFIRST(header);
@@ -1306,8 +1308,7 @@ retry:
 				(void *)header, total_ino,
 				inode->i_sb->s_blocksize);
 		EXT4_I(inode)->i_extra_isize = new_extra_isize;
-		error = 0;
-		goto cleanup;
+		goto out;
 	}
 
 	/*
@@ -1467,6 +1468,8 @@ retry:
 		kfree(bs);
 	}
 	brelse(bh);
+out:
+	ext4_clear_inode_state(inode, EXT4_STATE_NO_EXPAND);
 	up_write(&EXT4_I(inode)->xattr_sem);
 	return 0;
 
@@ -1478,6 +1481,10 @@ cleanup:
 	kfree(is);
 	kfree(bs);
 	brelse(bh);
+	/*
+	 * We deliberately leave EXT4_STATE_NO_EXPAND set here since inode
+	 * size expansion failed.
+	 */
 	up_write(&EXT4_I(inode)->xattr_sem);
 	return error;
 }

[toc] | [prev] | [next] | [standalone]

#1655520 — [PATCH 3.16 004/212] iio: st_pressure: Fix data sign

3.16.44-rc1 review patch.  If anyone has any objections, please let me know.

------------------

From: Marcin Niestroj <m.niestroj@grinn-global.com>

commit 1b211d48abaa0e12e6e6177c0316ff55d11fdfce upstream.

Datasheet of each device (lps331ap, lps25h, lps001wp, lps22hb) says that
the pressure and temperature data is a 2's complement.

I'm sending this the slow way, as negative pressures on these are pretty
unusual and the nature of the fixing of multiple device introduction patches
will make it hard to apply to older kernels - Jonathan.

Fixes: 217494e5b780 ("iio:pressure: Add STMicroelectronics pressures driver")
Fixes: 2f5effcbd097 ("iio: pressure-core: st: Expand and rename LPS331AP's channel descriptor")
Fixes: 7885a8ce6800 ("iio: pressure: st: Add support for new LPS001WP pressure sensor")
Fixes: e039e2f5b4da ("iio:st_pressure:initial lps22hb sensor support")
Signed-off-by: Marcin Niestroj <m.niestroj@grinn-global.com>
Reviewed-by: Linus Walleij <linus.walleij@linaro.org>
Signed-off-by: Jonathan Cameron <jic23@kernel.org>
[bwh: Backported to 3.16: drop change in st_press_lps22hb_channels]
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
---
--- a/drivers/iio/pressure/st_pressure_core.c
+++ b/drivers/iio/pressure/st_pressure_core.c
@@ -116,7 +116,7 @@ static const struct iio_chan_spec st_pre
 		.address = ST_PRESS_1_OUT_XL_ADDR,
 		.scan_index = ST_SENSORS_SCAN_X,
 		.scan_type = {
-			.sign = 'u',
+			.sign = 's',
 			.realbits = 24,
 			.storagebits = 24,
 			.endianness = IIO_LE,
@@ -131,7 +131,7 @@ static const struct iio_chan_spec st_pre
 		.address = ST_TEMP_1_OUT_L_ADDR,
 		.scan_index = -1,
 		.scan_type = {
-			.sign = 'u',
+			.sign = 's',
 			.realbits = 16,
 			.storagebits = 16,
 			.endianness = IIO_LE,
@@ -152,7 +152,7 @@ static const struct iio_chan_spec st_pre
 		.address = ST_PRESS_LPS001WP_OUT_L_ADDR,
 		.scan_index = ST_SENSORS_SCAN_X,
 		.scan_type = {
-			.sign = 'u',
+			.sign = 's',
 			.realbits = 16,
 			.storagebits = 16,
 			.endianness = IIO_LE,
@@ -168,7 +168,7 @@ static const struct iio_chan_spec st_pre
 		.address = ST_TEMP_LPS001WP_OUT_L_ADDR,
 		.scan_index = -1,
 		.scan_type = {
-			.sign = 'u',
+			.sign = 's',
 			.realbits = 16,
 			.storagebits = 16,
 			.endianness = IIO_LE,

[toc] | [prev] | [next] | [standalone]

#1655521 — [PATCH 3.16 001/212] mm/huge_memory.c: fix up "mm/huge_memory.c: respect FOLL_FORCE/FOLL_COW for thp" backport

3.16.44-rc1 review patch.  If anyone has any objections, please let me know.

------------------

From: Michal Hocko <mhocko@suse.com>

This is a stable follow up fix for an incorrect backport. The issue is
not present in the upstream kernel.

Miroslav has noticed the following splat when testing my 3.2 forward
port of 8310d48b125d ("mm/huge_memory.c: respect FOLL_FORCE/FOLL_COW for
thp") to 3.12:

BUG: Bad page state in process a.out  pfn:26400
page:ffffea000085e000 count:0 mapcount:1 mapping:          (null) index:0x7f049d600
page flags: 0x1fffff80108018(uptodate|dirty|head|swapbacked)
page dumped because: nonzero mapcount
[iii]
CPU: 2 PID: 5926 Comm: a.out Tainted: G            E    3.12.61-0-default #1
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.0.0-prebuilt.qemu-project.org 04/01/2014
 0000000000000000 ffffffff81515830 ffffea000085e000 ffffffff81800ad7
 ffffffff815118a5 ffffea000085e000 0000000000000000 000fffff80000000
 ffffffff81140f18 fff000007c000000 ffffea000085e000 0000000000000009
Call Trace:
 [<ffffffff8100475d>] dump_trace+0x7d/0x2d0
 [<ffffffff81004a44>] show_stack_log_lvl+0x94/0x170
 [<ffffffff81005ce1>] show_stack+0x21/0x50
 [<ffffffff81515830>] dump_stack+0x5d/0x78
 [<ffffffff815118a5>] bad_page.part.67+0xe8/0x102
 [<ffffffff81140f18>] free_pages_prepare+0x198/0x1b0
 [<ffffffff81141275>] __free_pages_ok+0x15/0xd0
 [<ffffffff8116444c>] __access_remote_vm+0x7c/0x1e0
 [<ffffffff81205afb>] mem_rw.isra.13+0x14b/0x1a0
 [<ffffffff811a3b18>] vfs_write+0xb8/0x1e0
 [<ffffffff811a469b>] SyS_pwrite64+0x6b/0xa0
 [<ffffffff81523b49>] system_call_fastpath+0x16/0x1b
 [<00007f049da18573>] 0x7f049da18572

The problem is that the original 3.2 backport didn't return NULL page on
the FOLL_COW page and so the page got reused.

Reported-and-tested-by: Miroslav Beneš <mbenes@suse.com>
Signed-off-by: Michal Hocko <mhocko@suse.com>
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
---
 mm/huge_memory.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

--- a/mm/huge_memory.c
+++ b/mm/huge_memory.c
@@ -1226,7 +1226,7 @@ struct page *follow_trans_huge_pmd(struc
 	VM_BUG_ON_PAGE(!PageHead(page), page);
 
 	if (flags & FOLL_WRITE && !can_follow_write_pmd(*pmd, page, flags))
-		goto out;
+		return NULL;
 
 	if (flags & FOLL_TOUCH) {
 		pmd_t _pmd;

[toc] | [prev] | [next] | [standalone]

#1655769

On Thu, Jun 01, 2017 at 04:43:14PM +0100, Ben Hutchings wrote:
> This is the start of the stable review cycle for the 3.16.44 release.
> There are 212 patches in this series, which will be posted as responses
> to this one.  If anyone has any issues with these being applied, please
> let me know.
> 
> Responses should be made by Sat Jun 03 16:00:00 UTC 2017.
> Anything received after that time might be too late.
> 
Build results:
	total: 136 pass: 136 fail: 0
Qemu test results:
	total: 107 pass: 107 fail: 0

Details are available at http://kerneltests.org/builders.

Thanks,
Guenter

[toc] | [prev] | [standalone]

Back to top | Article view | linux.kernel

csiph-web