{"push_id":2499490290,"size":90,"distinct_size":90,"ref":"refs/heads/4.16-main","head":"25fa3b2bbf0722764ea7e1486bc9f5defec82cba","before":"8f055be2b975a00c9c67378646a6199cbdd5b05c","commits":[{"sha":"ee8dfbe42b89b95d4b8de5129684077b61f09f5d","author":{"name":"Guenter Roeck","email":"ba324ca7b1c77fc20bb970d5aff6eea9377918a5@roeck-us.net"},"message":"sparc64: Oracle DAX driver depends on SPARC64\n\ncommit 9c548bb5823dfcf7a16c6e65976d84d9581208c9 upstream.\n\nsparc:allmodconfig fails to build as follows.\n\nERROR: \"mdesc_release\" [drivers/sbus/char/oradax.ko] undefined!\nERROR: \"sun4v_hvapi_register\" [drivers/sbus/char/oradax.ko] undefined!\nERROR: \"mdesc_get_property\" [drivers/sbus/char/oradax.ko] undefined!\nERROR: \"mdesc_node_by_name\" [drivers/sbus/char/oradax.ko] undefined!\nERROR: \"mdesc_grab\" [drivers/sbus/char/oradax.ko] undefined!\nERROR: \"sun4v_ccb_info\" [drivers/sbus/char/oradax.ko] undefined!\nERROR: \"sun4v_ccb_submit\" [drivers/sbus/char/oradax.ko] undefined!\nERROR: \"sun4v_ccb_kill\" [drivers/sbus/char/oradax.ko] undefined!\n\nThe symbols are only available with SPARC64 builds, thus the driver\ndepends on it.\n\nFixes: dd0273284c74 (\"sparc64: Oracle DAX driver\")\nCc: Kees Cook <keescook@chromium.org>\nSigned-off-by: Guenter Roeck <linux@roeck-us.net>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/frank-w/BPI-R2-4.14/commits/ee8dfbe42b89b95d4b8de5129684077b61f09f5d"},{"sha":"1255b1f0dfced4101103de5cb509e8a527d7197b","author":{"name":"Miguel Fadon Perlines","email":"fa9586040a3964630e034fbbfee141e0a65bba17@teldat.com"},"message":"arp: fix arp_filter on l3slave devices\n\n\n[ Upstream commit 58b35f27689b5eb514fc293c332966c226b1b6e4 ]\n\narp_filter performs an ip_route_output search for arp source address and\nchecks if output device is the same where the arp request was received,\nif it is not, the arp request is not answered.\n\nThis route lookup is always done on main route table so l3slave devices\nnever find the proper route and arp is not answered.\n\nPassing l3mdev_master_ifindex_rcu(dev) return value as oif fixes the\nlookup for l3slave devices while maintaining same behavior for non\nl3slave devices as this function returns 0 in that case.\n\nFixes: 613d09b30f8b (\"net: Use VRF device index for lookups on TX\")\nSigned-off-by: Miguel Fadon Perlines <mfadon@teldat.com>\nAcked-by: David Ahern <dsa@cumulusnetworks.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/frank-w/BPI-R2-4.14/commits/1255b1f0dfced4101103de5cb509e8a527d7197b"},{"sha":"505e1b27d9f60d7f040a0232f42eb65c824efb13","author":{"name":"Andrew Lunn","email":"02e0a999c50b1f88df7a8f5a04e1b76b35ea6a88@lunn.ch"},"message":"net: dsa: Discard frames from unused ports\n\n\n[ Upstream commit fc5f33768cca7144f8d793205b229d46740d183b ]\n\nThe Marvell switches under some conditions will pass a frame to the\nhost with the port being the CPU port. Such frames are invalid, and\nshould be dropped. Not dropping them can result in a crash when\nincrementing the receive statistics for an invalid port.\n\nReported-by: Chris Healy <cphealy@gmail.com>\nFixes: 91da11f870f0 (\"net: Distributed Switch Architecture protocol support\")\nSigned-off-by: Andrew Lunn <andrew@lunn.ch>\nReviewed-by: Florian Fainelli <f.fainelli@gmail.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/frank-w/BPI-R2-4.14/commits/505e1b27d9f60d7f040a0232f42eb65c824efb13"},{"sha":"22034921c66be2b72505c025a5e73919b3b8abe9","author":{"name":"Jeff Barnhill","email":"6990780b619fbc2c277198012efc384361a92920@gmail.com"},"message":"net/ipv6: Increment OUTxxx counters after netfilter hook\n\n\n[ Upstream commit 71a1c915238c970cd9bdd5bf158b1279d6b6d55b ]\n\nAt the end of ip6_forward(), IPSTATS_MIB_OUTFORWDATAGRAMS and\nIPSTATS_MIB_OUTOCTETS are incremented immediately before the NF_HOOK call\nfor NFPROTO_IPV6 / NF_INET_FORWARD.  As a result, these counters get\nincremented regardless of whether or not the netfilter hook allows the\npacket to continue being processed.  This change increments the counters\nin ip6_forward_finish() so that it will not happen if the netfilter hook\nchooses to terminate the packet, which is similar to how IPv4 works.\n\nSigned-off-by: Jeff Barnhill <0xeffeff@gmail.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/frank-w/BPI-R2-4.14/commits/22034921c66be2b72505c025a5e73919b3b8abe9"},{"sha":"6f9d3212c7059668843b533c02443f34f5eed2ee","author":{"name":"Davide Caratti","email":"44f6b86a4f44f713d97ccb1325316b79af6bdedb@redhat.com"},"message":"net/sched: fix NULL dereference in the error path of tcf_bpf_init()\n\n\n[ Upstream commit 3239534a79ee6f20cffd974173a1e62e0730e8ac ]\n\nwhen tcf_bpf_init_from_ops() fails (e.g. because of program having invalid\nnumber of instructions), tcf_bpf_cfg_cleanup() calls bpf_prog_put(NULL) or\nbpf_prog_destroy(NULL). Unless CONFIG_BPF_SYSCALL is unset, this causes\nthe following error:\n\n BUG: unable to handle kernel NULL pointer dereference at 0000000000000020\n PGD 800000007345a067 P4D 800000007345a067 PUD 340e1067 PMD 0\n Oops: 0000 [#1] SMP PTI\n Modules linked in: act_bpf(E) ip6table_filter ip6_tables iptable_filter binfmt_misc ext4 mbcache jbd2 crct10dif_pclmul crc32_pclmul ghash_clmulni_intel snd_hda_codec_generic pcbc snd_hda_intel snd_hda_codec snd_hda_core snd_hwdep snd_seq snd_seq_device snd_pcm aesni_intel crypto_simd glue_helper cryptd joydev snd_timer snd virtio_balloon pcspkr soundcore i2c_piix4 nfsd auth_rpcgss nfs_acl lockd grace sunrpc ip_tables xfs libcrc32c ata_generic pata_acpi qxl drm_kms_helper syscopyarea sysfillrect sysimgblt fb_sys_fops ttm virtio_blk drm virtio_net virtio_console i2c_core crc32c_intel serio_raw virtio_pci ata_piix libata virtio_ring floppy virtio dm_mirror dm_region_hash dm_log dm_mod [last unloaded: act_bpf]\n CPU: 3 PID: 5654 Comm: tc Tainted: G            E    4.16.0.bpf_test+ #408\n Hardware name: Red Hat KVM, BIOS 0.5.1 01/01/2011\n RIP: 0010:__bpf_prog_put+0xc/0xc0\n RSP: 0018:ffff9594003ef728 EFLAGS: 00010202\n RAX: 0000000000000000 RBX: ffff9594003ef758 RCX: 0000000000000024\n RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000\n RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000044\n R10: 0000000000000220 R11: ffff8a7ab9f17131 R12: 0000000000000000\n R13: ffff8a7ab7c3c8e0 R14: 0000000000000001 R15: ffff8a7ab88f1054\n FS:  00007fcb2f17c740(0000) GS:ffff8a7abfd80000(0000) knlGS:0000000000000000\n CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n CR2: 0000000000000020 CR3: 000000007c888006 CR4: 00000000001606e0\n Call Trace:\n  tcf_bpf_cfg_cleanup+0x2f/0x40 [act_bpf]\n  tcf_bpf_cleanup+0x4c/0x70 [act_bpf]\n  __tcf_idr_release+0x79/0x140\n  tcf_bpf_init+0x125/0x330 [act_bpf]\n  tcf_action_init_1+0x2cc/0x430\n  ? get_page_from_freelist+0x3f0/0x11b0\n  tcf_action_init+0xd3/0x1b0\n  tc_ctl_action+0x18b/0x240\n  rtnetlink_rcv_msg+0x29c/0x310\n  ? _cond_resched+0x15/0x30\n  ? __kmalloc_node_track_caller+0x1b9/0x270\n  ? rtnl_calcit.isra.29+0x100/0x100\n  netlink_rcv_skb+0xd2/0x110\n  netlink_unicast+0x17c/0x230\n  netlink_sendmsg+0x2cd/0x3c0\n  sock_sendmsg+0x30/0x40\n  ___sys_sendmsg+0x27a/0x290\n  ? mem_cgroup_commit_charge+0x80/0x130\n  ? page_add_new_anon_rmap+0x73/0xc0\n  ? do_anonymous_page+0x2a2/0x560\n  ? __handle_mm_fault+0xc75/0xe20\n  __sys_sendmsg+0x58/0xa0\n  do_syscall_64+0x6e/0x1a0\n  entry_SYSCALL_64_after_hwframe+0x3d/0xa2\n RIP: 0033:0x7fcb2e58eba0\n RSP: 002b:00007ffc93c496c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e\n RAX: ffffffffffffffda RBX: 00007ffc93c497f0 RCX: 00007fcb2e58eba0\n RDX: 0000000000000000 RSI: 00007ffc93c49740 RDI: 0000000000000003\n RBP: 000000005ac6a646 R08: 0000000000000002 R09: 0000000000000000\n R10: 00007ffc93c49120 R11: 0000000000000246 R12: 0000000000000000\n R13: 00007ffc93c49804 R14: 0000000000000001 R15: 000000000066afa0\n Code: 5f 00 48 8b 43 20 48 c7 c7 70 2f 7c b8 c7 40 10 00 00 00 00 5b e9 a5 8b 61 00 0f 1f 44 00 00 0f 1f 44 00 00 41 54 55 48 89 fd 53 <48> 8b 47 20 f0 ff 08 74 05 5b 5d 41 5c c3 41 89 f4 0f 1f 44 00\n RIP: __bpf_prog_put+0xc/0xc0 RSP: ffff9594003ef728\n CR2: 0000000000000020\n\nFix it in tcf_bpf_cfg_cleanup(), ensuring that bpf_prog_{put,destroy}(f)\nis called only when f is not NULL.\n\nFixes: bbc09e7842a5 (\"net/sched: fix idr leak on the error path of tcf_bpf_init()\")\nReported-by: Lucas Bates <lucasb@mojatatu.com>\nSigned-off-by: Davide Caratti <dcaratti@redhat.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/frank-w/BPI-R2-4.14/commits/6f9d3212c7059668843b533c02443f34f5eed2ee"},{"sha":"141ce92477bdee39fbc41f52396630bb079645b0","author":{"name":"Eric Dumazet","email":"312c7d941f03386814be517ffdb3e0eb6624e275@google.com"},"message":"pptp: remove a buggy dst release in pptp_connect()\n\n\n[ Upstream commit bfacfb457b36911a10140b8cb3ce76a74883ac5a ]\n\nOnce dst has been cached in socket via sk_setup_caps(),\nit is illegal to call ip_rt_put() (or dst_release()),\nsince sk_setup_caps() did not change dst refcount.\n\nWe can still dereference it since we hold socket lock.\n\nCaugth by syzbot :\n\nBUG: KASAN: use-after-free in atomic_dec_return include/asm-generic/atomic-instrumented.h:198 [inline]\nBUG: KASAN: use-after-free in dst_release+0x27/0xa0 net/core/dst.c:185\nWrite of size 4 at addr ffff8801c54dc040 by task syz-executor4/20088\n\nCPU: 1 PID: 20088 Comm: syz-executor4 Not tainted 4.16.0+ #376\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011\nCall Trace:\n __dump_stack lib/dump_stack.c:17 [inline]\n dump_stack+0x1a7/0x27d lib/dump_stack.c:53\n print_address_description+0x73/0x250 mm/kasan/report.c:256\n kasan_report_error mm/kasan/report.c:354 [inline]\n kasan_report+0x23c/0x360 mm/kasan/report.c:412\n check_memory_region_inline mm/kasan/kasan.c:260 [inline]\n check_memory_region+0x137/0x190 mm/kasan/kasan.c:267\n kasan_check_write+0x14/0x20 mm/kasan/kasan.c:278\n atomic_dec_return include/asm-generic/atomic-instrumented.h:198 [inline]\n dst_release+0x27/0xa0 net/core/dst.c:185\n sk_dst_set include/net/sock.h:1812 [inline]\n sk_dst_reset include/net/sock.h:1824 [inline]\n sock_setbindtodevice net/core/sock.c:610 [inline]\n sock_setsockopt+0x431/0x1b20 net/core/sock.c:707\n SYSC_setsockopt net/socket.c:1845 [inline]\n SyS_setsockopt+0x2ff/0x360 net/socket.c:1828\n do_syscall_64+0x281/0x940 arch/x86/entry/common.c:287\n entry_SYSCALL_64_after_hwframe+0x42/0xb7\nRIP: 0033:0x4552d9\nRSP: 002b:00007f4878126c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036\nRAX: ffffffffffffffda RBX: 00007f48781276d4 RCX: 00000000004552d9\nRDX: 0000000000000019 RSI: 0000000000000001 RDI: 0000000000000013\nRBP: 000000000072bea0 R08: 0000000000000010 R09: 0000000000000000\nR10: 00000000200010c0 R11: 0000000000000246 R12: 00000000ffffffff\nR13: 0000000000000526 R14: 00000000006fac30 R15: 0000000000000000\n\nAllocated by task 20088:\n save_stack+0x43/0xd0 mm/kasan/kasan.c:447\n set_track mm/kasan/kasan.c:459 [inline]\n kasan_kmalloc+0xad/0xe0 mm/kasan/kasan.c:552\n kasan_slab_alloc+0x12/0x20 mm/kasan/kasan.c:489\n kmem_cache_alloc+0x12e/0x760 mm/slab.c:3542\n dst_alloc+0x11f/0x1a0 net/core/dst.c:104\n rt_dst_alloc+0xe9/0x540 net/ipv4/route.c:1520\n __mkroute_output net/ipv4/route.c:2265 [inline]\n ip_route_output_key_hash_rcu+0xa49/0x2c60 net/ipv4/route.c:2493\n ip_route_output_key_hash+0x20b/0x370 net/ipv4/route.c:2322\n __ip_route_output_key include/net/route.h:126 [inline]\n ip_route_output_flow+0x26/0xa0 net/ipv4/route.c:2577\n ip_route_output_ports include/net/route.h:163 [inline]\n pptp_connect+0xa84/0x1170 drivers/net/ppp/pptp.c:453\n SYSC_connect+0x213/0x4a0 net/socket.c:1639\n SyS_connect+0x24/0x30 net/socket.c:1620\n do_syscall_64+0x281/0x940 arch/x86/entry/common.c:287\n entry_SYSCALL_64_after_hwframe+0x42/0xb7\n\nFreed by task 20082:\n save_stack+0x43/0xd0 mm/kasan/kasan.c:447\n set_track mm/kasan/kasan.c:459 [inline]\n __kasan_slab_free+0x11a/0x170 mm/kasan/kasan.c:520\n kasan_slab_free+0xe/0x10 mm/kasan/kasan.c:527\n __cache_free mm/slab.c:3486 [inline]\n kmem_cache_free+0x83/0x2a0 mm/slab.c:3744\n dst_destroy+0x266/0x380 net/core/dst.c:140\n dst_destroy_rcu+0x16/0x20 net/core/dst.c:153\n __rcu_reclaim kernel/rcu/rcu.h:178 [inline]\n rcu_do_batch kernel/rcu/tree.c:2675 [inline]\n invoke_rcu_callbacks kernel/rcu/tree.c:2930 [inline]\n __rcu_process_callbacks kernel/rcu/tree.c:2897 [inline]\n rcu_process_callbacks+0xd6c/0x17b0 kernel/rcu/tree.c:2914\n __do_softirq+0x2d7/0xb85 kernel/softirq.c:285\n\nThe buggy address belongs to the object at ffff8801c54dc000\n which belongs to the cache ip_dst_cache of size 168\nThe buggy address is located 64 bytes inside of\n 168-byte region [ffff8801c54dc000, ffff8801c54dc0a8)\nThe buggy address belongs to the page:\npage:ffffea0007153700 count:1 mapcount:0 mapping:ffff8801c54dc000 index:0x0\nflags: 0x2fffc0000000100(slab)\nraw: 02fffc0000000100 ffff8801c54dc000 0000000000000000 0000000100000010\nraw: ffffea0006b34b20 ffffea0006b6c1e0 ffff8801d674a1c0 0000000000000000\npage dumped because: kasan: bad access detected\n\nSigned-off-by: Eric Dumazet <edumazet@google.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/frank-w/BPI-R2-4.14/commits/141ce92477bdee39fbc41f52396630bb079645b0"},{"sha":"e8fc61bc77bd44c37a51a491a9891705d5a60f3c","author":{"name":"Eric Dumazet","email":"312c7d941f03386814be517ffdb3e0eb6624e275@google.com"},"message":"sctp: do not leak kernel memory to user space\n\n\n[ Upstream commit 6780db244d6b1537d139dea0ec8aad10cf9e4adb ]\n\nsyzbot produced a nice report [1]\n\nIssue here is that a recvmmsg() managed to leak 8 bytes of kernel memory\nto user space, because sin_zero (padding field) was not properly cleared.\n\n[1]\nBUG: KMSAN: uninit-value in copy_to_user include/linux/uaccess.h:184 [inline]\nBUG: KMSAN: uninit-value in move_addr_to_user+0x32e/0x530 net/socket.c:227\nCPU: 1 PID: 3586 Comm: syzkaller481044 Not tainted 4.16.0+ #82\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011\nCall Trace:\n __dump_stack lib/dump_stack.c:17 [inline]\n dump_stack+0x185/0x1d0 lib/dump_stack.c:53\n kmsan_report+0x142/0x240 mm/kmsan/kmsan.c:1067\n kmsan_internal_check_memory+0x164/0x1d0 mm/kmsan/kmsan.c:1176\n kmsan_copy_to_user+0x69/0x160 mm/kmsan/kmsan.c:1199\n copy_to_user include/linux/uaccess.h:184 [inline]\n move_addr_to_user+0x32e/0x530 net/socket.c:227\n ___sys_recvmsg+0x4e2/0x810 net/socket.c:2211\n __sys_recvmmsg+0x54e/0xdb0 net/socket.c:2313\n SYSC_recvmmsg+0x29b/0x3e0 net/socket.c:2394\n SyS_recvmmsg+0x76/0xa0 net/socket.c:2378\n do_syscall_64+0x309/0x430 arch/x86/entry/common.c:287\n entry_SYSCALL_64_after_hwframe+0x3d/0xa2\nRIP: 0033:0x4401c9\nRSP: 002b:00007ffc56f73098 EFLAGS: 00000217 ORIG_RAX: 000000000000012b\nRAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 00000000004401c9\nRDX: 0000000000000001 RSI: 0000000020003ac0 RDI: 0000000000000003\nRBP: 00000000006ca018 R08: 0000000020003bc0 R09: 0000000000000010\nR10: 0000000000000000 R11: 0000000000000217 R12: 0000000000401af0\nR13: 0000000000401b80 R14: 0000000000000000 R15: 0000000000000000\n\nLocal variable description: ----addr@___sys_recvmsg\nVariable was created at:\n ___sys_recvmsg+0xd5/0x810 net/socket.c:2172\n __sys_recvmmsg+0x54e/0xdb0 net/socket.c:2313\n\nBytes 8-15 of 16 are uninitialized\n\n==================================================================\nKernel panic - not syncing: panic_on_warn set ...\n\nCPU: 1 PID: 3586 Comm: syzkaller481044 Tainted: G    B            4.16.0+ #82\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011\nCall Trace:\n __dump_stack lib/dump_stack.c:17 [inline]\n dump_stack+0x185/0x1d0 lib/dump_stack.c:53\n panic+0x39d/0x940 kernel/panic.c:183\n kmsan_report+0x238/0x240 mm/kmsan/kmsan.c:1083\n kmsan_internal_check_memory+0x164/0x1d0 mm/kmsan/kmsan.c:1176\n kmsan_copy_to_user+0x69/0x160 mm/kmsan/kmsan.c:1199\n copy_to_user include/linux/uaccess.h:184 [inline]\n move_addr_to_user+0x32e/0x530 net/socket.c:227\n ___sys_recvmsg+0x4e2/0x810 net/socket.c:2211\n __sys_recvmmsg+0x54e/0xdb0 net/socket.c:2313\n SYSC_recvmmsg+0x29b/0x3e0 net/socket.c:2394\n SyS_recvmmsg+0x76/0xa0 net/socket.c:2378\n do_syscall_64+0x309/0x430 arch/x86/entry/common.c:287\n entry_SYSCALL_64_after_hwframe+0x3d/0xa2\n\nFixes: 1da177e4c3f4 (\"Linux-2.6.12-rc2\")\nSigned-off-by: Eric Dumazet <edumazet@google.com>\nCc:\tVlad Yasevich <vyasevich@gmail.com>\nCc:\tNeil Horman <nhorman@tuxdriver.com>\nReported-by: syzbot <syzkaller@googlegroups.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/frank-w/BPI-R2-4.14/commits/e8fc61bc77bd44c37a51a491a9891705d5a60f3c"},{"sha":"0f56180a8f3b95b21228efc05bbc9987ddccd5db","author":{"name":"Eric Dumazet","email":"312c7d941f03386814be517ffdb3e0eb6624e275@google.com"},"message":"sctp: sctp_sockaddr_af must check minimal addr length for AF_INET6\n\n\n[ Upstream commit 81e98370293afcb58340ce8bd71af7b97f925c26 ]\n\nCheck must happen before call to ipv6_addr_v4mapped()\n\nsyzbot report was :\n\nBUG: KMSAN: uninit-value in sctp_sockaddr_af net/sctp/socket.c:359 [inline]\nBUG: KMSAN: uninit-value in sctp_do_bind+0x60f/0xdc0 net/sctp/socket.c:384\nCPU: 0 PID: 3576 Comm: syzkaller968804 Not tainted 4.16.0+ #82\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011\nCall Trace:\n __dump_stack lib/dump_stack.c:17 [inline]\n dump_stack+0x185/0x1d0 lib/dump_stack.c:53\n kmsan_report+0x142/0x240 mm/kmsan/kmsan.c:1067\n __msan_warning_32+0x6c/0xb0 mm/kmsan/kmsan_instr.c:676\n sctp_sockaddr_af net/sctp/socket.c:359 [inline]\n sctp_do_bind+0x60f/0xdc0 net/sctp/socket.c:384\n sctp_bind+0x149/0x190 net/sctp/socket.c:332\n inet6_bind+0x1fd/0x1820 net/ipv6/af_inet6.c:293\n SYSC_bind+0x3f2/0x4b0 net/socket.c:1474\n SyS_bind+0x54/0x80 net/socket.c:1460\n do_syscall_64+0x309/0x430 arch/x86/entry/common.c:287\n entry_SYSCALL_64_after_hwframe+0x3d/0xa2\nRIP: 0033:0x43fd49\nRSP: 002b:00007ffe99df3d28 EFLAGS: 00000213 ORIG_RAX: 0000000000000031\nRAX: ffffffffffffffda RBX: 00000000004002c8 RCX: 000000000043fd49\nRDX: 0000000000000010 RSI: 0000000020000000 RDI: 0000000000000003\nRBP: 00000000006ca018 R08: 00000000004002c8 R09: 00000000004002c8\nR10: 00000000004002c8 R11: 0000000000000213 R12: 0000000000401670\nR13: 0000000000401700 R14: 0000000000000000 R15: 0000000000000000\n\nLocal variable description: ----address@SYSC_bind\nVariable was created at:\n SYSC_bind+0x6f/0x4b0 net/socket.c:1461\n SyS_bind+0x54/0x80 net/socket.c:1460\n\nSigned-off-by: Eric Dumazet <edumazet@google.com>\nCc: Vlad Yasevich <vyasevich@gmail.com>\nCc: Neil Horman <nhorman@tuxdriver.com>\nReported-by: syzbot <syzkaller@googlegroups.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/frank-w/BPI-R2-4.14/commits/0f56180a8f3b95b21228efc05bbc9987ddccd5db"},{"sha":"22714d6e24a7da2d07f49162790d6b1973702da9","author":{"name":"Kai-Heng Feng","email":"06af28c154da900e58fef391e9e9415561e1d8ae@canonical.com"},"message":"sky2: Increase D3 delay to sky2 stops working after suspend\n\n\n[ Upstream commit afb133637071be6deeb8b3d0e55593ffbf63c527 ]\n\nThe sky2 ethernet stops working after system resume from suspend:\n[ 582.852065] sky2 0000:04:00.0: Refused to change power state, currently in D3\n\nThe current 150ms delay is not enough, change it to 200ms can solve the\nissue.\n\nBugLink: https://bugs.launchpad.net/bugs/1758507\nCc: Stable <stable@vger.kernel.org>\nSigned-off-by: Kai-Heng Feng <kai.heng.feng@canonical.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/frank-w/BPI-R2-4.14/commits/22714d6e24a7da2d07f49162790d6b1973702da9"},{"sha":"066eacb902de37e4e48bfa13297a7e66f5ca1c20","author":{"name":"Hangbin Liu","email":"f18dd0be96fb7338348dc2439a86c9a4ef8ef3b9@gmail.com"},"message":"vlan: also check phy_driver ts_info for vlan's real device\n\n\n[ Upstream commit ec1d8ccb07deaf30fd0508af6755364ac47dc08d ]\n\nJust like function ethtool_get_ts_info(), we should also consider the\nphy_driver ts_info call back. For example, driver dp83640.\n\nFixes: 37dd9255b2f6 (\"vlan: Pass ethtool get_ts_info queries to real device.\")\nAcked-by: Richard Cochran <richardcochran@gmail.com>\nSigned-off-by: Hangbin Liu <liuhangbin@gmail.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/frank-w/BPI-R2-4.14/commits/066eacb902de37e4e48bfa13297a7e66f5ca1c20"},{"sha":"218031d3509512c054fb8204ca674fc74d97fe6a","author":{"name":"Eric Dumazet","email":"312c7d941f03386814be517ffdb3e0eb6624e275@google.com"},"message":"net: fool proof dev_valid_name()\n\n\n[ Upstream commit a9d48205d0aedda021fc3728972a9e9934c2b9de ]\n\nWe want to use dev_valid_name() to validate tunnel names,\nso better use strnlen(name, IFNAMSIZ) than strlen(name) to make\nsure to not upset KASAN.\n\nSigned-off-by: Eric Dumazet <edumazet@google.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/frank-w/BPI-R2-4.14/commits/218031d3509512c054fb8204ca674fc74d97fe6a"},{"sha":"3e13d6548c0b70bd53e3c9762a7127ce7566ab18","author":{"name":"Eric Dumazet","email":"312c7d941f03386814be517ffdb3e0eb6624e275@google.com"},"message":"ip_tunnel: better validate user provided tunnel names\n\n\n[ Upstream commit 9cb726a212a82c88c98aa9f0037fd04777cd8fe5 ]\n\nUse dev_valid_name() to make sure user does not provide illegal\ndevice name.\n\nsyzbot caught the following bug :\n\nBUG: KASAN: stack-out-of-bounds in strlcpy include/linux/string.h:300 [inline]\nBUG: KASAN: stack-out-of-bounds in __ip_tunnel_create+0xca/0x6b0 net/ipv4/ip_tunnel.c:257\nWrite of size 20 at addr ffff8801ac79f810 by task syzkaller268107/4482\n\nCPU: 0 PID: 4482 Comm: syzkaller268107 Not tainted 4.16.0+ #1\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011\nCall Trace:\n __dump_stack lib/dump_stack.c:17 [inline]\n dump_stack+0x1b9/0x29f lib/dump_stack.c:53\n print_address_description+0x6c/0x20b mm/kasan/report.c:256\n kasan_report_error mm/kasan/report.c:354 [inline]\n kasan_report.cold.7+0xac/0x2f5 mm/kasan/report.c:412\n check_memory_region_inline mm/kasan/kasan.c:260 [inline]\n check_memory_region+0x13e/0x1b0 mm/kasan/kasan.c:267\n memcpy+0x37/0x50 mm/kasan/kasan.c:303\n strlcpy include/linux/string.h:300 [inline]\n __ip_tunnel_create+0xca/0x6b0 net/ipv4/ip_tunnel.c:257\n ip_tunnel_create net/ipv4/ip_tunnel.c:352 [inline]\n ip_tunnel_ioctl+0x818/0xd40 net/ipv4/ip_tunnel.c:861\n ipip_tunnel_ioctl+0x1c5/0x420 net/ipv4/ipip.c:350\n dev_ifsioc+0x43e/0xb90 net/core/dev_ioctl.c:334\n dev_ioctl+0x69a/0xcc0 net/core/dev_ioctl.c:525\n sock_ioctl+0x47e/0x680 net/socket.c:1015\n vfs_ioctl fs/ioctl.c:46 [inline]\n file_ioctl fs/ioctl.c:500 [inline]\n do_vfs_ioctl+0x1cf/0x1650 fs/ioctl.c:684\n ksys_ioctl+0xa9/0xd0 fs/ioctl.c:701\n SYSC_ioctl fs/ioctl.c:708 [inline]\n SyS_ioctl+0x24/0x30 fs/ioctl.c:706\n do_syscall_64+0x29e/0x9d0 arch/x86/entry/common.c:287\n entry_SYSCALL_64_after_hwframe+0x42/0xb7\n\nFixes: c54419321455 (\"GRE: Refactor GRE tunneling code.\")\nSigned-off-by: Eric Dumazet <edumazet@google.com>\nReported-by: syzbot <syzkaller@googlegroups.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/frank-w/BPI-R2-4.14/commits/3e13d6548c0b70bd53e3c9762a7127ce7566ab18"},{"sha":"e7392359da590d6573fbf0d6f0cb4fafa144c488","author":{"name":"Eric Dumazet","email":"312c7d941f03386814be517ffdb3e0eb6624e275@google.com"},"message":"ipv6: sit: better validate user provided tunnel names\n\n\n[ Upstream commit b95211e066fc3494b7c115060b2297b4ba21f025 ]\n\nUse dev_valid_name() to make sure user does not provide illegal\ndevice name.\n\nsyzbot caught the following bug :\n\nBUG: KASAN: stack-out-of-bounds in strlcpy include/linux/string.h:300 [inline]\nBUG: KASAN: stack-out-of-bounds in ipip6_tunnel_locate+0x63b/0xaa0 net/ipv6/sit.c:254\nWrite of size 33 at addr ffff8801b64076d8 by task syzkaller932654/4453\n\nCPU: 0 PID: 4453 Comm: syzkaller932654 Not tainted 4.16.0+ #1\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011\nCall Trace:\n __dump_stack lib/dump_stack.c:17 [inline]\n dump_stack+0x1b9/0x29f lib/dump_stack.c:53\n print_address_description+0x6c/0x20b mm/kasan/report.c:256\n kasan_report_error mm/kasan/report.c:354 [inline]\n kasan_report.cold.7+0xac/0x2f5 mm/kasan/report.c:412\n check_memory_region_inline mm/kasan/kasan.c:260 [inline]\n check_memory_region+0x13e/0x1b0 mm/kasan/kasan.c:267\n memcpy+0x37/0x50 mm/kasan/kasan.c:303\n strlcpy include/linux/string.h:300 [inline]\n ipip6_tunnel_locate+0x63b/0xaa0 net/ipv6/sit.c:254\n ipip6_tunnel_ioctl+0xe71/0x241b net/ipv6/sit.c:1221\n dev_ifsioc+0x43e/0xb90 net/core/dev_ioctl.c:334\n dev_ioctl+0x69a/0xcc0 net/core/dev_ioctl.c:525\n sock_ioctl+0x47e/0x680 net/socket.c:1015\n vfs_ioctl fs/ioctl.c:46 [inline]\n file_ioctl fs/ioctl.c:500 [inline]\n do_vfs_ioctl+0x1cf/0x1650 fs/ioctl.c:684\n ksys_ioctl+0xa9/0xd0 fs/ioctl.c:701\n SYSC_ioctl fs/ioctl.c:708 [inline]\n SyS_ioctl+0x24/0x30 fs/ioctl.c:706\n do_syscall_64+0x29e/0x9d0 arch/x86/entry/common.c:287\n entry_SYSCALL_64_after_hwframe+0x42/0xb7\n\nFixes: 1da177e4c3f4 (\"Linux-2.6.12-rc2\")\nSigned-off-by: Eric Dumazet <edumazet@google.com>\nReported-by: syzbot <syzkaller@googlegroups.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/frank-w/BPI-R2-4.14/commits/e7392359da590d6573fbf0d6f0cb4fafa144c488"},{"sha":"d210545346e9b452ca93d0778b1e235d026bf0de","author":{"name":"Eric Dumazet","email":"312c7d941f03386814be517ffdb3e0eb6624e275@google.com"},"message":"ip6_gre: better validate user provided tunnel names\n\n\n[ Upstream commit 5f42df013b8bc1b6511af7a04bf93b014884ae2a ]\n\nUse dev_valid_name() to make sure user does not provide illegal\ndevice name.\n\nsyzbot caught the following bug :\n\nBUG: KASAN: stack-out-of-bounds in strlcpy include/linux/string.h:300 [inline]\nBUG: KASAN: stack-out-of-bounds in ip6gre_tunnel_locate+0x334/0x860 net/ipv6/ip6_gre.c:339\nWrite of size 20 at addr ffff8801afb9f7b8 by task syzkaller851048/4466\n\nCPU: 1 PID: 4466 Comm: syzkaller851048 Not tainted 4.16.0+ #1\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011\nCall Trace:\n __dump_stack lib/dump_stack.c:17 [inline]\n dump_stack+0x1b9/0x29f lib/dump_stack.c:53\n print_address_description+0x6c/0x20b mm/kasan/report.c:256\n kasan_report_error mm/kasan/report.c:354 [inline]\n kasan_report.cold.7+0xac/0x2f5 mm/kasan/report.c:412\n check_memory_region_inline mm/kasan/kasan.c:260 [inline]\n check_memory_region+0x13e/0x1b0 mm/kasan/kasan.c:267\n memcpy+0x37/0x50 mm/kasan/kasan.c:303\n strlcpy include/linux/string.h:300 [inline]\n ip6gre_tunnel_locate+0x334/0x860 net/ipv6/ip6_gre.c:339\n ip6gre_tunnel_ioctl+0x69d/0x12e0 net/ipv6/ip6_gre.c:1195\n dev_ifsioc+0x43e/0xb90 net/core/dev_ioctl.c:334\n dev_ioctl+0x69a/0xcc0 net/core/dev_ioctl.c:525\n sock_ioctl+0x47e/0x680 net/socket.c:1015\n vfs_ioctl fs/ioctl.c:46 [inline]\n file_ioctl fs/ioctl.c:500 [inline]\n do_vfs_ioctl+0x1cf/0x1650 fs/ioctl.c:684\n ksys_ioctl+0xa9/0xd0 fs/ioctl.c:701\n SYSC_ioctl fs/ioctl.c:708 [inline]\n SyS_ioctl+0x24/0x30 fs/ioctl.c:706\n do_syscall_64+0x29e/0x9d0 arch/x86/entry/common.c:287\n entry_SYSCALL_64_after_hwframe+0x42/0xb7\n\nFixes: c12b395a4664 (\"gre: Support GRE over IPv6\")\nSigned-off-by: Eric Dumazet <edumazet@google.com>\nReported-by: syzbot <syzkaller@googlegroups.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/frank-w/BPI-R2-4.14/commits/d210545346e9b452ca93d0778b1e235d026bf0de"},{"sha":"961757a4234e1dfd1ba71b8ced950c7fbccda694","author":{"name":"Eric Dumazet","email":"312c7d941f03386814be517ffdb3e0eb6624e275@google.com"},"message":"ip6_tunnel: better validate user provided tunnel names\n\n\n[ Upstream commit db7a65e3ab78e5b1c4b17c0870ebee35a4ee3257 ]\n\nUse valid_name() to make sure user does not provide illegal\ndevice name.\n\nFixes: 1da177e4c3f4 (\"Linux-2.6.12-rc2\")\nSigned-off-by: Eric Dumazet <edumazet@google.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/frank-w/BPI-R2-4.14/commits/961757a4234e1dfd1ba71b8ced950c7fbccda694"},{"sha":"9f13ba19ddb668081fec2e0554e2d3c923591807","author":{"name":"Eric Dumazet","email":"312c7d941f03386814be517ffdb3e0eb6624e275@google.com"},"message":"vti6: better validate user provided tunnel names\n\n\n[ Upstream commit 537b361fbcbcc3cd6fe2bb47069fd292b9256d16 ]\n\nUse valid_name() to make sure user does not provide illegal\ndevice name.\n\nFixes: ed1efb2aefbb (\"ipv6: Add support for IPsec virtual tunnel interfaces\")\nSigned-off-by: Eric Dumazet <edumazet@google.com>\nCc: Steffen Klassert <steffen.klassert@secunet.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/frank-w/BPI-R2-4.14/commits/9f13ba19ddb668081fec2e0554e2d3c923591807"},{"sha":"d0fd3e03df3f139b2eb46368ba6064d8d0c460a8","author":{"name":"Cong Wang","email":"0f114804888b88d50037b04b42e57b858d851b87@gmail.com"},"message":"net_sched: fix a missing idr_remove() in u32_delete_key()\n\n\n[ Upstream commit f12c643209db0626f2f54780d86bb93bfa7a9c2d ]\n\nWhen we delete a u32 key via u32_delete_key(), we forget to\ncall idr_remove() to remove its handle from IDR.\n\nFixes: e7614370d6f0 (\"net_sched: use idr to allocate u32 filter handles\")\nReported-by: Marcin Kabiesz <admin@hostcenter.eu>\nTested-by: Marcin Kabiesz <admin@hostcenter.eu>\nSigned-off-by: Cong Wang <xiyou.wangcong@gmail.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/frank-w/BPI-R2-4.14/commits/d0fd3e03df3f139b2eb46368ba6064d8d0c460a8"},{"sha":"87d1acd833dfee77dbe927bdb2099628129308ba","author":{"name":"Dirk van der Merwe","email":"cfdf641ca63af74a6fabf58be09a6e7fda857b37@netronome.com"},"message":"nfp: use full 40 bits of the NSP buffer address\n\n\n[ Upstream commit 1489bbd10e16079ce30a53d3c22a431fd47af791 ]\n\nThe NSP default buffer is a piece of NFP memory where additional\ncommand data can be placed.  Its format has been copied from\nhost buffer, but the PCIe selection bits do not make sense in\nthis case.  If those get masked out from a NFP address - writes\nto random place in the chip memory may be issued and crash the\ndevice.\n\nEven in the general NSP buffer case, it doesn't make sense to have the\nPCIe selection bits there anymore. These are unused at the moment, and\nwhen it becomes necessary, the PCIe selection bits should rather be\nmoved to another register to utilise more bits for the buffer address.\n\nThis has never been an issue because the buffer used to be\nallocated in memory with less-than-38-bit-long address but that\nis about to change.\n\nFixes: 1a64821c6af7 (\"nfp: add support for service processor access\")\nSigned-off-by: Dirk van der Merwe <dirk.vandermerwe@netronome.com>\nReviewed-by: Jakub Kicinski <jakub.kicinski@netronome.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/frank-w/BPI-R2-4.14/commits/87d1acd833dfee77dbe927bdb2099628129308ba"},{"sha":"216f33936eaa006a8b4f5bb992592e34f6432fc2","author":{"name":"Greg Kroah-Hartman","email":"4645f7897fd33786a2ee1264d590b3c400559d85@linuxfoundation.org"},"message":"Linux 4.16.2","distinct":true,"url":"https://api.github.com/repos/frank-w/BPI-R2-4.14/commits/216f33936eaa006a8b4f5bb992592e34f6432fc2"},{"sha":"30d8e38bc876c48114de1b4090acd41c321f1c89","author":{"name":"Bassem Boubaker","email":"45cfb4a93c0295ade8c8c92feac62c981849ff7d@actia.fr"},"message":"cdc_ether: flag the Cinterion AHS8 modem by gemalto as WWAN\n\n\n[ Upstream commit 53765341ee821c0a0f1dec41adc89c9096ad694c ]\n\nThe Cinterion AHS8 is a 3G device with one embedded WWAN interface\nusing cdc_ether as a driver.\n\nThe modem is controlled via AT commands through the exposed TTYs.\n\nAT+CGDCONT write command can be used to activate or deactivate a WWAN\nconnection for a PDP context defined with the same command. UE\nsupports one WWAN adapter.\n\nSigned-off-by: Bassem Boubaker <bassem.boubaker@actia.fr>\nAcked-by: Oliver Neukum <oneukum@suse.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/frank-w/BPI-R2-4.14/commits/30d8e38bc876c48114de1b4090acd41c321f1c89"}]}
{"actor":{"display_login":"frank-w"}}