{"push_id":2773872469,"size":215,"distinct_size":215,"ref":"refs/heads/oneplus/SDM845_O_8.1","head":"a9cef9874354ffd7750640559f45752644040bfa","before":"1c4b2860de0cabb2d608a593a96044656e6eb1aa","commits":[{"sha":"76267a8a19cdc40094796a2bd032eaf437774c35","author":{"name":"Lan Tianyu","email":"4221d0916eb5c472a0ab46f0107445bbb3e8a589@intel.com"},"message":"KVM/Eventfd: Avoid crash when assign and deassign specific eventfd in parallel.\n\ncommit b5020a8e6b54d2ece80b1e7dedb33c79a40ebd47 upstream.\n\nSyzbot reports crashes in kvm_irqfd_assign(), caused by use-after-free\nwhen kvm_irqfd_assign() and kvm_irqfd_deassign() run in parallel\nfor one specific eventfd. When the assign path hasn't finished but irqfd\nhas been added to kvm->irqfds.items list, another thead may deassign the\neventfd and free struct kvm_kernel_irqfd(). The assign path then uses\nthe struct kvm_kernel_irqfd that has been freed by deassign path. To avoid\nsuch issue, keep irqfd under kvm->irq_srcu protection after the irqfd\nhas been added to kvm->irqfds.items list, and call synchronize_srcu()\nin irq_shutdown() to make sure that irqfd has been fully initialized in\nthe assign path.\n\nReported-by: Dmitry Vyukov <dvyukov@google.com>\nCc: Paolo Bonzini <pbonzini@redhat.com>\nCc: Radim Krčmář <rkrcmar@redhat.com>\nCc: Dmitry Vyukov <dvyukov@google.com>\nSigned-off-by: Tianyu Lan <tianyu.lan@intel.com>\nCc: stable@vger.kernel.org\nSigned-off-by: Paolo Bonzini <pbonzini@redhat.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/mwilky/op6/commits/76267a8a19cdc40094796a2bd032eaf437774c35"},{"sha":"6ac85d22332118d2dc449536110a31a5ca3956b0","author":{"name":"Ville Syrjälä","email":"cd6e8d405ca90be3a03d5427c5b24fbd2d68dcc4@linux.intel.com"},"message":"x86/apm: Don't access __preempt_count with zeroed fs\n\ncommit 6f6060a5c9cc76fdbc22748264e6aa3779ec2427 upstream.\n\nAPM_DO_POP_SEGS does not restore fs/gs which were zeroed by\nAPM_DO_ZERO_SEGS. Trying to access __preempt_count with\nzeroed fs doesn't really work.\n\nMove the ibrs call outside the APM_DO_SAVE_SEGS/APM_DO_RESTORE_SEGS\ninvocations so that fs is actually restored before calling\npreempt_enable().\n\nFixes the following sort of oopses:\n[    0.313581] general protection fault: 0000 [#1] PREEMPT SMP\n[    0.313803] Modules linked in:\n[    0.314040] CPU: 0 PID: 268 Comm: kapmd Not tainted 4.16.0-rc1-triton-bisect-00090-gdd84441a7971 #19\n[    0.316161] EIP: __apm_bios_call_simple+0xc8/0x170\n[    0.316161] EFLAGS: 00210016 CPU: 0\n[    0.316161] EAX: 00000102 EBX: 00000000 ECX: 00000102 EDX: 00000000\n[    0.316161] ESI: 0000530e EDI: dea95f64 EBP: dea95f18 ESP: dea95ef0\n[    0.316161]  DS: 007b ES: 007b FS: 0000 GS: 0000 SS: 0068\n[    0.316161] CR0: 80050033 CR2: 00000000 CR3: 015d3000 CR4: 000006d0\n[    0.316161] Call Trace:\n[    0.316161]  ? cpumask_weight.constprop.15+0x20/0x20\n[    0.316161]  on_cpu0+0x44/0x70\n[    0.316161]  apm+0x54e/0x720\n[    0.316161]  ? __switch_to_asm+0x26/0x40\n[    0.316161]  ? __schedule+0x17d/0x590\n[    0.316161]  kthread+0xc0/0xf0\n[    0.316161]  ? proc_apm_show+0x150/0x150\n[    0.316161]  ? kthread_create_worker_on_cpu+0x20/0x20\n[    0.316161]  ret_from_fork+0x2e/0x38\n[    0.316161] Code: da 8e c2 8e e2 8e ea 57 55 2e ff 1d e0 bb 5d b1 0f 92 c3 5d 5f 07 1f 89 47 0c 90 8d b4 26 00 00 00 00 90 8d b4 26 00 00 00 00 90 <64> ff 0d 84 16 5c b1 74 7f 8b 45 dc 8e e0 8b 45 d8 8e e8 8b 45\n[    0.316161] EIP: __apm_bios_call_simple+0xc8/0x170 SS:ESP: 0068:dea95ef0\n[    0.316161] ---[ end trace 656253db2deaa12c ]---\n\nFixes: dd84441a7971 (\"x86/speculation: Use IBRS if available before calling into firmware\")\nSigned-off-by: Ville Syrjälä <ville.syrjala@linux.intel.com>\nSigned-off-by: Thomas Gleixner <tglx@linutronix.de>\nCc: stable@vger.kernel.org\nCc:  David Woodhouse <dwmw@amazon.co.uk>\nCc:  \"H. Peter Anvin\" <hpa@zytor.com>\nCc:  x86@kernel.org\nCc: David Woodhouse <dwmw@amazon.co.uk>\nCc: \"H. Peter Anvin\" <hpa@zytor.com>\nLink: https://lkml.kernel.org/r/20180709133534.5963-1-ville.syrjala@linux.intel.com\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/mwilky/op6/commits/6ac85d22332118d2dc449536110a31a5ca3956b0"},{"sha":"91b6b9d0bf39443d708352c193c597a01e9b0004","author":{"name":"Dewet Thibaut","email":"7cb3b8504b40999a891fc2b4fa769090fa160f13@nokia.com"},"message":"x86/MCE: Remove min interval polling limitation\n\ncommit fbdb328c6bae0a7c78d75734a738b66b86dffc96 upstream.\n\ncommit b3b7c4795c (\"x86/MCE: Serialize sysfs changes\") introduced a min\ninterval limitation when setting the check interval for polled MCEs.\nHowever, the logic is that 0 disables polling for corrected MCEs, see\nDocumentation/x86/x86_64/machinecheck. The limitation prevents disabling.\n\nRemove this limitation and allow the value 0 to disable polling again.\n\nFixes: b3b7c4795c (\"x86/MCE: Serialize sysfs changes\")\nSigned-off-by: Dewet Thibaut <thibaut.dewet@nokia.com>\nSigned-off-by: Alexander Sverdlin <alexander.sverdlin@nokia.com>\n[ Massage commit message. ]\nSigned-off-by: Borislav Petkov <bp@suse.de>\nSigned-off-by: Thomas Gleixner <tglx@linutronix.de>\nCc: Tony Luck <tony.luck@intel.com>\nCc: linux-edac <linux-edac@vger.kernel.org>\nCc: stable@vger.kernel.org\nLink: http://lkml.kernel.org/r/20180716084927.24869-1-alexander.sverdlin@nokia.com\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/mwilky/op6/commits/91b6b9d0bf39443d708352c193c597a01e9b0004"},{"sha":"6fc87cc95b4de93348821f7a23c927b58deab593","author":{"name":"OGAWA Hirofumi","email":"1dd685eef08048be95744a1b104ca593a93cc914@mail.parknet.co.jp"},"message":"fat: fix memory allocation failure handling of match_strdup()\n\ncommit 35033ab988c396ad7bce3b6d24060c16a9066db8 upstream.\n\nIn parse_options(), if match_strdup() failed, parse_options() leaves\nopts->iocharset in unexpected state (i.e.  still pointing the freed\nstring).  And this can be the cause of double free.\n\nTo fix, this initialize opts->iocharset always when freeing.\n\nLink: http://lkml.kernel.org/r/8736wp9dzc.fsf@mail.parknet.co.jp\nSigned-off-by: OGAWA Hirofumi <hirofumi@mail.parknet.co.jp>\nReported-by: syzbot+90b8e10515ae88228a92@syzkaller.appspotmail.com\nCc: <stable@vger.kernel.org>\nSigned-off-by: Andrew Morton <akpm@linux-foundation.org>\nSigned-off-by: Linus Torvalds <torvalds@linux-foundation.org>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/mwilky/op6/commits/6fc87cc95b4de93348821f7a23c927b58deab593"},{"sha":"c4f094deb3d69dcc8b4e3dc6c056c1e62a72c33e","author":{"name":"Takashi Iwai","email":"4596b3305151c7ee743192a95d394341e3d3b644@suse.de"},"message":"ALSA: rawmidi: Change resized buffers atomically\n\ncommit 39675f7a7c7e7702f7d5341f1e0d01db746543a0 upstream.\n\nThe SNDRV_RAWMIDI_IOCTL_PARAMS ioctl may resize the buffers and the\ncurrent code is racy.  For example, the sequencer client may write to\nbuffer while it being resized.\n\nAs a simple workaround, let's switch to the resized buffer inside the\nstream runtime lock.\n\nReported-by: syzbot+52f83f0ea8df16932f7f@syzkaller.appspotmail.com\nCc: <stable@vger.kernel.org>\nSigned-off-by: Takashi Iwai <tiwai@suse.de>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/mwilky/op6/commits/c4f094deb3d69dcc8b4e3dc6c056c1e62a72c33e"},{"sha":"3a80fb0d7752e6ae163d72736b9401076c7b75c9","author":{"name":"Alexey Brodkin","email":"1fa739873496c8c0c1b521f2061ee5fa4a0306e8@synopsys.com"},"message":"ARC: Fix CONFIG_SWAP\n\ncommit 6e3761145a9ba3ce267c330b6bff51cf6a057b06 upstream.\n\nswap was broken on ARC due to silly copy-paste issue.\n\nWe encode offset from swapcache page in __swp_entry() as (off << 13) but\nwere not decoding back in __swp_offset() as (off >> 13) - it was still\n(off << 13).\n\nThis finally fixes swap usage on ARC.\n\n| # mkswap /dev/sda2\n|\n| # swapon -a -e /dev/sda2\n| Adding 500728k swap on /dev/sda2.  Priority:-2 extents:1 across:500728k\n|\n| # free\n|              total       used       free     shared    buffers     cached\n| Mem:        765104      13456     751648       4736          8       4736\n| -/+ buffers/cache:       8712     756392\n| Swap:       500728          0     500728\n\nCc: stable@vger.kernel.org\nSigned-off-by: Alexey Brodkin <abrodkin@synopsys.com>\nSigned-off-by: Vineet Gupta <vgupta@synopsys.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/mwilky/op6/commits/3a80fb0d7752e6ae163d72736b9401076c7b75c9"},{"sha":"2ee7d6f173308488c4ea190cbedd435b2a166e46","author":{"name":"Vineet Gupta","email":"af669d95a4c0de051445d4cafdbb2c5c4a2838be@synopsys.com"},"message":"ARC: mm: allow mprotect to make stack mappings executable\n\ncommit 93312b6da4df31e4102ce5420e6217135a16c7ea upstream.\n\nmprotect(EXEC) was failing for stack mappings as default vm flags was\nmissing MAYEXEC.\n\nThis was triggered by glibc test suite nptl/tst-execstack testcase\n\nWhat is surprising is that despite running LTP for years on, we didn't\ncatch this issue as it lacks a directed test case.\n\ngcc dejagnu tests with nested functions also requiring exec stack work\nfine though because they rely on the GNU_STACK segment spit out by\ncompiler and handled in kernel elf loader.\n\nThis glibc case is different as the stack is non exec to begin with and\na dlopen of shared lib with GNU_STACK segment triggers the exec stack\nproceedings using a mprotect(PROT_EXEC) which was broken.\n\nCC: stable@vger.kernel.org\nSigned-off-by: Vineet Gupta <vgupta@synopsys.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/mwilky/op6/commits/2ee7d6f173308488c4ea190cbedd435b2a166e46"},{"sha":"1be686fe508d32521efd4fa7bcda581cb97813e0","author":{"name":"Alexey Brodkin","email":"df74735e5e8e4da139876d19d7450f461d604b9f@synopsys.com"},"message":"ARC: configs: Remove CONFIG_INITRAMFS_SOURCE from defconfigs\n\ncommit 64234961c145606b36eaa82c47b11be842b21049 upstream.\n\nWe used to have pre-set CONFIG_INITRAMFS_SOURCE with local path\nto intramfs in ARC defconfigs. This was quite convenient for\nin-house development but not that convenient for newcomers\nwho obviusly don't have folders like \"arc_initramfs\" next to\nthe Linux source tree. Which leads to quite surprising failure\nof defconfig building:\n------------------------------->8-----------------------------\n  ../scripts/gen_initramfs_list.sh: Cannot open '../../arc_initramfs_hs/'\n../usr/Makefile:57: recipe for target 'usr/initramfs_data.cpio.gz' failed\nmake[2]: *** [usr/initramfs_data.cpio.gz] Error 1\n------------------------------->8-----------------------------\n\nSo now when more and more people start to deal with our defconfigs\nlet's make their life easier with removal of CONFIG_INITRAMFS_SOURCE.\n\nSigned-off-by: Alexey Brodkin <abrodkin@synopsys.com>\nCc: Kevin Hilman <khilman@baylibre.com>\nCc: stable@vger.kernel.org\nSigned-off-by: Alexey Brodkin <abrodkin@synopsys.com>\nSigned-off-by: Vineet Gupta <vgupta@synopsys.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/mwilky/op6/commits/1be686fe508d32521efd4fa7bcda581cb97813e0"},{"sha":"f46b054eca657260236fca84748dc8946b0a24f3","author":{"name":"Jing Xia","email":"3263987517ef6b2847ae8390ee21b54538a403d0@gmail.com"},"message":"mm: memcg: fix use after free in mem_cgroup_iter()\n\ncommit 9f15bde671355c351cf20d9f879004b234353100 upstream.\n\nIt was reported that a kernel crash happened in mem_cgroup_iter(), which\ncan be triggered if the legacy cgroup-v1 non-hierarchical mode is used.\n\nUnable to handle kernel paging request at virtual address 6b6b6b6b6b6b8f\n......\nCall trace:\n  mem_cgroup_iter+0x2e0/0x6d4\n  shrink_zone+0x8c/0x324\n  balance_pgdat+0x450/0x640\n  kswapd+0x130/0x4b8\n  kthread+0xe8/0xfc\n  ret_from_fork+0x10/0x20\n\n  mem_cgroup_iter():\n      ......\n      if (css_tryget(css))    <-- crash here\n\t    break;\n      ......\n\nThe crashing reason is that mem_cgroup_iter() uses the memcg object whose\npointer is stored in iter->position, which has been freed before and\nfilled with POISON_FREE(0x6b).\n\nAnd the root cause of the use-after-free issue is that\ninvalidate_reclaim_iterators() fails to reset the value of iter->position\nto NULL when the css of the memcg is released in non- hierarchical mode.\n\nLink: http://lkml.kernel.org/r/1531994807-25639-1-git-send-email-jing.xia@unisoc.com\nFixes: 6df38689e0e9 (\"mm: memcontrol: fix possible memcg leak due to interrupted reclaim\")\nSigned-off-by: Jing Xia <jing.xia.mail@gmail.com>\nAcked-by: Michal Hocko <mhocko@suse.com>\nCc: Johannes Weiner <hannes@cmpxchg.org>\nCc: Vladimir Davydov <vdavydov.dev@gmail.com>\nCc: <chunyan.zhang@unisoc.com>\nCc: Shakeel Butt <shakeelb@google.com>\nCc: <stable@vger.kernel.org>\nSigned-off-by: Andrew Morton <akpm@linux-foundation.org>\nSigned-off-by: Linus Torvalds <torvalds@linux-foundation.org>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/mwilky/op6/commits/f46b054eca657260236fca84748dc8946b0a24f3"},{"sha":"3472e37379f15a1a19c4ee66b14e56e07613a309","author":{"name":"Hugh Dickins","email":"d3abdf3e2800e6cb849f11b81e6eb50b34d96431@google.com"},"message":"mm/huge_memory.c: fix data loss when splitting a file pmd\n\ncommit e1f1b1572e8db87a56609fd05bef76f98f0e456a upstream.\n\n__split_huge_pmd_locked() must check if the cleared huge pmd was dirty,\nand propagate that to PageDirty: otherwise, data may be lost when a huge\ntmpfs page is modified then split then reclaimed.\n\nHow has this taken so long to be noticed?  Because there was no problem\nwhen the huge page is written by a write system call (shmem_write_end()\ncalls set_page_dirty()), nor when the page is allocated for a write fault\n(fault_dirty_shared_page() calls set_page_dirty()); but when allocated for\na read fault (which MAP_POPULATE simulates), no set_page_dirty().\n\nLink: http://lkml.kernel.org/r/alpine.LSU.2.11.1807111741430.1106@eggly.anvils\nFixes: d21b9e57c74c (\"thp: handle file pages in split_huge_pmd()\")\nSigned-off-by: Hugh Dickins <hughd@google.com>\nReported-by: Ashwin Chaugule <ashwinch@google.com>\nReviewed-by: Yang Shi <yang.shi@linux.alibaba.com>\nReviewed-by: Kirill A. Shutemov <kirill.shutemov@linux.intel.com>\nCc: \"Huang, Ying\" <ying.huang@intel.com>\nCc: <stable@vger.kernel.org>\t[4.8+]\nSigned-off-by: Andrew Morton <akpm@linux-foundation.org>\nSigned-off-by: Linus Torvalds <torvalds@linux-foundation.org>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/mwilky/op6/commits/3472e37379f15a1a19c4ee66b14e56e07613a309"},{"sha":"40974672ae870e02b781bf060b04688cf922e0f9","author":{"name":"Gustavo A. R. Silva","email":"beac5f8171fcde5e2ec734cc5d25d03e7362e8de@embeddedor.com"},"message":"vfio/pci: Fix potential Spectre v1\n\ncommit 0e714d27786ce1fb3efa9aac58abc096e68b1c2a upstream.\n\ninfo.index can be indirectly controlled by user-space, hence leading\nto a potential exploitation of the Spectre variant 1 vulnerability.\n\nThis issue was detected with the help of Smatch:\n\ndrivers/vfio/pci/vfio_pci.c:734 vfio_pci_ioctl()\nwarn: potential spectre issue 'vdev->region'\n\nFix this by sanitizing info.index before indirectly using it to index\nvdev->region\n\nNotice that given that speculation windows are large, the policy is\nto kill the speculation on the first load and not worry if it can be\ncompleted with a dependent load/store [1].\n\n[1] https://marc.info/?l=linux-kernel&m=152449131114778&w=2\n\nCc: stable@vger.kernel.org\nSigned-off-by: Gustavo A. R. Silva <gustavo@embeddedor.com>\nSigned-off-by: Alex Williamson <alex.williamson@redhat.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/mwilky/op6/commits/40974672ae870e02b781bf060b04688cf922e0f9"},{"sha":"1e02c4f403c0b7f53e9b31ca76352e5351163c7e","author":{"name":"Ville Syrjälä","email":"cd6e8d405ca90be3a03d5427c5b24fbd2d68dcc4@linux.intel.com"},"message":"drm/i915: Fix hotplug irq ack on i965/g4x\n\ncommit 96a85cc517a9ee4ae5e8d7f5a36cba05023784eb upstream.\n\nJust like with PIPESTAT, the edge triggered IIR on i965/g4x\nalso causes problems for hotplug interrupts. To make sure\nwe don't get the IIR port interrupt bit stuck low with the\nISR bit high we must force an edge in ISR. Unfortunately\nwe can't borrow the PIPESTAT trick and toggle the enable\nbits in PORT_HOTPLUG_EN as that act itself generates hotplug\ninterrupts. Instead we just have to loop until we've cleared\nPORT_HOTPLUG_STAT, or we just give up and WARN.\n\nv2: Don't frob with PORT_HOTPLUG_EN\n\nCc: stable@vger.kernel.org\nSigned-off-by: Ville Syrjälä <ville.syrjala@linux.intel.com>\nLink: https://patchwork.freedesktop.org/patch/msgid/20180614175625.1615-1-ville.syrjala@linux.intel.com\nReviewed-by: Imre Deak <imre.deak@intel.com>\n(cherry picked from commit 0ba7c51a6fd80a89236f6ceb52e63f8a7f62bfd3)\nSigned-off-by: Rodrigo Vivi <rodrigo.vivi@intel.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/mwilky/op6/commits/1e02c4f403c0b7f53e9b31ca76352e5351163c7e"},{"sha":"ec6a6039d7323abd1f28dafcf435700f072a1537","author":{"name":"Toke Høiland-Jørgensen","email":"c739cf9ea9032889618db8b95a03da66fcc9867e@toke.dk"},"message":"gen_stats: Fix netlink stats dumping in the presence of padding\n\n[ Upstream commit d5a672ac9f48f81b20b1cad1d9ed7bbf4e418d4c ]\n\nThe gen_stats facility will add a header for the toplevel nlattr of type\nTCA_STATS2 that contains all stats added by qdisc callbacks. A reference\nto this header is stored in the gnet_dump struct, and when all the\nper-qdisc callbacks have finished adding their stats, the length of the\ncontaining header will be adjusted to the right value.\n\nHowever, on architectures that need padding (i.e., that don't set\nCONFIG_HAVE_EFFICIENT_UNALIGNED_ACCESS), the padding nlattr is added\nbefore the stats, which means that the stored pointer will point to the\npadding, and so when the header is fixed up, the result is just a very\nbig padding nlattr. Because most qdiscs also supply the legacy TCA_STATS\nstruct, this problem has been mostly invisible, but we exposed it with\nthe netlink attribute-based statistics in CAKE.\n\nFix the issue by fixing up the stored pointer if it points to a padding\nnlattr.\n\nTested-by: Pete Heist <pete@heistp.net>\nTested-by: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk>\nSigned-off-by: Toke Høiland-Jørgensen <toke@toke.dk>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/mwilky/op6/commits/ec6a6039d7323abd1f28dafcf435700f072a1537"},{"sha":"79870c6c659713772c8969fd8c21dcba8fd253be","author":{"name":"Tyler Hicks","email":"93eeee00a2beb1fbd6106ad8f59025f171ca91c6@canonical.com"},"message":"ipv4: Return EINVAL when ping_group_range sysctl doesn't map to user ns\n\n[ Upstream commit 70ba5b6db96ff7324b8cfc87e0d0383cf59c9677 ]\n\nThe low and high values of the net.ipv4.ping_group_range sysctl were\nbeing silently forced to the default disabled state when a write to the\nsysctl contained GIDs that didn't map to the associated user namespace.\nConfusingly, the sysctl's write operation would return success and then\na subsequent read of the sysctl would indicate that the low and high\nvalues are the overflowgid.\n\nThis patch changes the behavior by clearly returning an error when the\nsysctl write operation receives a GID range that doesn't map to the\nassociated user namespace. In such a situation, the previous value of\nthe sysctl is preserved and that range will be returned in a subsequent\nread of the sysctl.\n\nSigned-off-by: Tyler Hicks <tyhicks@canonical.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/mwilky/op6/commits/79870c6c659713772c8969fd8c21dcba8fd253be"},{"sha":"8582bbfb8629d0dd7f29db5091e308bfcaf7af16","author":{"name":"Colin Ian King","email":"d100aa70785e45ee8deab668147d941941915c21@canonical.com"},"message":"ipv6: fix useless rol32 call on hash\n\n[ Upstream commit 169dc027fb02492ea37a0575db6a658cf922b854 ]\n\nThe rol32 call is currently rotating hash but the rol'd value is\nbeing discarded. I believe the current code is incorrect and hash\nshould be assigned the rotated value returned from rol32.\n\nThanks to David Lebrun for spotting this.\n\nSigned-off-by: Colin Ian King <colin.king@canonical.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/mwilky/op6/commits/8582bbfb8629d0dd7f29db5091e308bfcaf7af16"},{"sha":"09ae0085ceb613fa94d82bc8bba5b5b9e2b9b2f6","author":{"name":"Davidlohr Bueso","email":"bfcdf3e6ca6cef45543bfbb57509c92aec9a39fb@stgolabs.net"},"message":"lib/rhashtable: consider param->min_size when setting initial table size\n\n[ Upstream commit 107d01f5ba10f4162c38109496607eb197059064 ]\n\nrhashtable_init() currently does not take into account the user-passed\nmin_size parameter unless param->nelem_hint is set as well. As such,\nthe default size (number of buckets) will always be HASH_DEFAULT_SIZE\neven if the smallest allowed size is larger than that. Remediate this\nby unconditionally calling into rounded_hashtable_size() and handling\nthings accordingly.\n\nSigned-off-by: Davidlohr Bueso <dbueso@suse.de>\nAcked-by: Herbert Xu <herbert@gondor.apana.org.au>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/mwilky/op6/commits/09ae0085ceb613fa94d82bc8bba5b5b9e2b9b2f6"},{"sha":"66a7cfa05740341e6cceab4694b4ace7ce88475f","author":{"name":"Lorenzo Colitti","email":"86995a091f8a1385082bd10715048b52ee386a6a@google.com"},"message":"net: diag: Don't double-free TCP_NEW_SYN_RECV sockets in tcp_abort\n\n[ Upstream commit acc2cf4e37174646a24cba42fa53c668b2338d4e ]\n\nWhen tcp_diag_destroy closes a TCP_NEW_SYN_RECV socket, it first\nfrees it by calling inet_csk_reqsk_queue_drop_and_and_put in\ntcp_abort, and then frees it again by calling sock_gen_put.\n\nSince tcp_abort only has one caller, and all the other codepaths\nin tcp_abort don't free the socket, just remove the free in that\nfunction.\n\nCc: David Ahern <dsa@cumulusnetworks.com>\nTested: passes Android sock_diag_test.py, which exercises this codepath\nFixes: d7226c7a4dd1 (\"net: diag: Fix refcnt leak in error path destroying socket\")\nSigned-off-by: Lorenzo Colitti <lorenzo@google.com>\nSigned-off-by: Eric Dumazet <edumazet@google.com>\nReviewed-by: David Ahern <dsa@cumulusnetworks.com>\nTested-by: David Ahern <dsa@cumulusnetworks.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/mwilky/op6/commits/66a7cfa05740341e6cceab4694b4ace7ce88475f"},{"sha":"f08ca4c8b423c3cbfc254b73d1c12e622bd63c10","author":{"name":"David Ahern","email":"b80c1600f604d3b0d768f26f90a76757e76005dd@gmail.com"},"message":"net/ipv4: Set oif in fib_compute_spec_dst\n\n[ Upstream commit e7372197e15856ec4ee66b668020a662994db103 ]\n\nXin reported that icmp replies may not use the address on the device the\necho request is received if the destination address is broadcast. Instead\na route lookup is done without considering VRF context. Fix by setting\noif in flow struct to the master device if it is enslaved. That directs\nthe lookup to the VRF table. If the device is not enslaved, oif is still\n0 so no affect.\n\nFixes: cd2fbe1b6b51 (\"net: Use VRF device index for lookups on RX\")\nReported-by: Xin Long <lucien.xin@gmail.com>\nSigned-off-by: David Ahern <dsahern@gmail.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/mwilky/op6/commits/f08ca4c8b423c3cbfc254b73d1c12e622bd63c10"},{"sha":"77befb4bd1083bb2001851c6a4439b2467055423","author":{"name":"Heiner Kallweit","email":"688f3b22cb68c85c90f972acb3bbdba2c5ca2ae1@gmail.com"},"message":"net: phy: fix flag masking in __set_phy_supported\n\n[ Upstream commit df8ed346d4a806a6eef2db5924285e839604b3f9 ]\n\nCurrently also the pause flags are removed from phydev->supported because\nthey're not included in PHY_DEFAULT_FEATURES. I don't think this is\nintended, especially when considering that this function can be called\nvia phy_set_max_speed() anywhere in a driver. Change the masking to mask\nout only the values we're going to change. In addition remove the\nmisleading comment, job of this small function is just to adjust the\nsupported and advertised speeds.\n\nFixes: f3a6bd393c2c (\"phylib: Add phy_set_max_speed helper\")\nSigned-off-by: Heiner Kallweit <hkallweit1@gmail.com>\nReviewed-by: Andrew Lunn <andrew@lunn.ch>\nReviewed-by: Florian Fainelli <f.fainelli@gmail.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/mwilky/op6/commits/77befb4bd1083bb2001851c6a4439b2467055423"},{"sha":"5ac2bc675cfc0c77da9a1dcd72b6340acbcd8a29","author":{"name":"Gustavo A. R. Silva","email":"beac5f8171fcde5e2ec734cc5d25d03e7362e8de@embeddedor.com"},"message":"ptp: fix missing break in switch\n\n[ Upstream commit 9ba8376ce1e2cbf4ce44f7e4bee1d0648e10d594 ]\n\nIt seems that a *break* is missing in order to avoid falling through\nto the default case. Otherwise, checking *chan* makes no sense.\n\nFixes: 72df7a7244c0 (\"ptp: Allow reassigning calibration pin function\")\nSigned-off-by: Gustavo A. R. Silva <gustavo@embeddedor.com>\nAcked-by: Richard Cochran <richardcochran@gmail.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/mwilky/op6/commits/5ac2bc675cfc0c77da9a1dcd72b6340acbcd8a29"}]}
{"actor":{"display_login":"mwilky"}}