{"push_id":2461131122,"size":60,"distinct_size":5,"ref":"refs/heads/ti-lsk-linux-4.14.y","head":"dc3e450dede7002f915539b67a02a6dc7aec9d66","before":"621462ad44bccfb11b0ccb24d49919b6f713402d","commits":[{"sha":"eb7e3d85ed3cdb70f1639e4ddf3ffe41e762f4b2","author":{"name":"Tero Kristo","email":"060a12f1fbc7e2e5d830b72f402ff04fdae8d312@ti.com"},"message":"ARM: dts: dra76x: add support for OPP_PLUS\n\nAdd support for the OPP_PLUS (1.8GHz) for MPU.\n\nSigned-off-by: Tero Kristo <t-kristo@ti.com>","distinct":false,"url":"https://api.github.com/repos/RobertCNelson/ti-linux-kernel/commits/eb7e3d85ed3cdb70f1639e4ddf3ffe41e762f4b2"},{"sha":"dbbf2d1e4077bab0c65ece2765d3fc69cf7d610f","author":{"name":"Soheil Hassas Yeganeh","email":"a5c27e3afa4826c35caae747888280b69fc54928@google.com"},"message":"tcp: reset sk_send_head in tcp_write_queue_purge\n\n\ntcp_write_queue_purge clears all the SKBs in the write queue\nbut does not reset the sk_send_head. As a result, we can have\na NULL pointer dereference anywhere that we use tcp_send_head\ninstead of the tcp_write_queue_tail.\n\nFor example, after a27fd7a8ed38 (tcp: purge write queue upon RST),\nwe can purge the write queue on RST. Prior to\n75c119afe14f (tcp: implement rb-tree based retransmit queue),\ntcp_push will only check tcp_send_head and then accesses\ntcp_write_queue_tail to send the actual SKB. As a result, it will\ndereference a NULL pointer.\n\nThis has been reported twice for 4.14 where we don't have\n75c119afe14f:\n\nBy Timofey Titovets:\n\n[  422.081094] BUG: unable to handle kernel NULL pointer dereference\nat 0000000000000038\n[  422.081254] IP: tcp_push+0x42/0x110\n[  422.081314] PGD 0 P4D 0\n[  422.081364] Oops: 0002 [#1] SMP PTI\n\nBy Yongjian Xu:\n\nBUG: unable to handle kernel NULL pointer dereference at 0000000000000038\nIP: tcp_push+0x48/0x120\nPGD 80000007ff77b067 P4D 80000007ff77b067 PUD 7fd989067 PMD 0\nOops: 0002 [#18] SMP PTI\nModules linked in: tcp_diag inet_diag tcp_bbr sch_fq iTCO_wdt\niTCO_vendor_support pcspkr ixgbe mdio i2c_i801 lpc_ich joydev input_leds shpchp\ne1000e igb dca ptp pps_core hwmon mei_me mei ipmi_si ipmi_msghandler sg ses\nscsi_transport_sas enclosure ext4 jbd2 mbcache sd_mod ahci libahci megaraid_sas\nwmi ast ttm dm_mirror dm_region_hash dm_log dm_mod dax\nCPU: 6 PID: 14156 Comm: [ET_NET 6] Tainted: G D 4.14.26-1.el6.x86_64 #1\nHardware name: LENOVO ThinkServer RD440 /ThinkServer RD440, BIOS A0TS80A\n09/22/2014\ntask: ffff8807d78d8140 task.stack: ffffc9000e944000\nRIP: 0010:tcp_push+0x48/0x120\nRSP: 0018:ffffc9000e947a88 EFLAGS: 00010246\nRAX: 00000000000005b4 RBX: ffff880f7cce9c00 RCX: 0000000000000000\nRDX: 0000000000000000 RSI: 0000000000000040 RDI: ffff8807d00f5000\nRBP: ffffc9000e947aa8 R08: 0000000000001c84 R09: 0000000000000000\nR10: ffff8807d00f5158 R11: 0000000000000000 R12: ffff8807d00f5000\nR13: 0000000000000020 R14: 00000000000256d4 R15: 0000000000000000\nFS: 00007f5916de9700(0000) GS:ffff88107fd00000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 0000000000000038 CR3: 00000007f8226004 CR4: 00000000001606e0\nCall Trace:\ntcp_sendmsg_locked+0x33d/0xe50\ntcp_sendmsg+0x37/0x60\ninet_sendmsg+0x39/0xc0\nsock_sendmsg+0x49/0x60\nsock_write_iter+0xb6/0x100\ndo_iter_readv_writev+0xec/0x130\n? rw_verify_area+0x49/0xb0\ndo_iter_write+0x97/0xd0\nvfs_writev+0x7e/0xe0\n? __wake_up_common_lock+0x80/0xa0\n? __fget_light+0x2c/0x70\n? __do_page_fault+0x1e7/0x530\ndo_writev+0x60/0xf0\n? inet_shutdown+0xac/0x110\nSyS_writev+0x10/0x20\ndo_syscall_64+0x6f/0x140\n? prepare_exit_to_usermode+0x8b/0xa0\nentry_SYSCALL_64_after_hwframe+0x3d/0xa2\nRIP: 0033:0x3135ce0c57\nRSP: 002b:00007f5916de4b00 EFLAGS: 00000293 ORIG_RAX: 0000000000000014\nRAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000003135ce0c57\nRDX: 0000000000000002 RSI: 00007f5916de4b90 RDI: 000000000000606f\nRBP: 0000000000000000 R08: 0000000000000000 R09: 00007f5916de8c38\nR10: 0000000000000000 R11: 0000000000000293 R12: 00000000000464cc\nR13: 00007f5916de8c30 R14: 00007f58d8bef080 R15: 0000000000000002\nCode: 48 8b 97 60 01 00 00 4c 8d 97 58 01 00 00 41 b9 00 00 00 00 41 89 f3 4c 39\nd2 49 0f 44 d1 41 81 e3 00 80 00 00 0f 85 b0 00 00 00 <80> 4a 38 08 44 8b 8f 74\n06 00 00 44 89 8f 7c 06 00 00 83 e6 01\nRIP: tcp_push+0x48/0x120 RSP: ffffc9000e947a88\nCR2: 0000000000000038\n---[ end trace 8d545c2e93515549 ]---\n\nFixes: a27fd7a8ed38 (tcp: purge write queue upon RST)\nReported-by: Timofey Titovets <nefelim4ag@gmail.com>\nReported-by: Yongjian Xu <yongjianchn@gmail.com>\nSigned-off-by: Eric Dumazet <edumazet@google.com>\nSigned-off-by: Soheil Hassas Yeganeh <soheil@google.com>\nTested-by: Yongjian Xu <yongjianchn@gmail.com>\n\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/RobertCNelson/ti-linux-kernel/commits/dbbf2d1e4077bab0c65ece2765d3fc69cf7d610f"},{"sha":"e44c1733059c69868e81f82eb09fcb6bbc492050","author":{"name":"Soheil Hassas Yeganeh","email":"a5c27e3afa4826c35caae747888280b69fc54928@google.com"},"message":"tcp: purge write queue upon aborting the connection\n\n\n[ Upstream commit e05836ac07c77dd90377f8c8140bce2a44af5fe7 ]\n\nWhen the connection is aborted, there is no point in\nkeeping the packets on the write queue until the connection\nis closed.\n\nSimilar to a27fd7a8ed38 ('tcp: purge write queue upon RST'),\nthis is essential for a correct MSG_ZEROCOPY implementation,\nbecause userspace cannot call close(fd) before receiving\nzerocopy signals even when the connection is aborted.\n\nFixes: f214f915e7db (\"tcp: enable MSG_ZEROCOPY\")\nSigned-off-by: Soheil Hassas Yeganeh <soheil@google.com>\nSigned-off-by: Neal Cardwell <ncardwell@google.com>\nReviewed-by: Eric Dumazet <edumazet@google.com>\nSigned-off-by: Yuchung Cheng <ycheng@google.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/RobertCNelson/ti-linux-kernel/commits/e44c1733059c69868e81f82eb09fcb6bbc492050"},{"sha":"497166d63780f0a7835f14d9cebb40cf098b1c55","author":{"name":"Michal Kalderon","email":"7456dd1a25837751f0ccc9b2ff255bd717073e1f@cavium.com"},"message":"qed: Fix non TCP packets should be dropped on iWARP ll2 connection\n\n\n[ Upstream commit 16da09047d3fb991dc48af41f6d255fd578e8ca2 ]\n\nFW workaround. The iWARP LL2 connection did not expect TCP packets\nto arrive on it's connection. The fix drops any non-tcp packets\n\nFixes b5c29ca (\"qed: iWARP CM - setup a ll2 connection for handling\nSYN packets\")\n\nSigned-off-by: Michal Kalderon <Michal.Kalderon@cavium.com>\nSigned-off-by: Ariel Elior <Ariel.Elior@cavium.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/RobertCNelson/ti-linux-kernel/commits/497166d63780f0a7835f14d9cebb40cf098b1c55"},{"sha":"223c542442527ca04cfd9843450ca103b822e558","author":{"name":"Grygorii Strashko","email":"bfa0a1520768723a1c60e18250fb841c342eb8d8@ti.com"},"message":"sysfs: symlink: export sysfs_create_link_nowarn()\n\n\n[ Upstream commit 2399ac42e762ab25c58420e25359b2921afdc55f ]\n\nThe sysfs_create_link_nowarn() is going to be used in phylib framework in\nsubsequent patch which can be built as module. Hence, export\nsysfs_create_link_nowarn() to avoid build errors.\n\nCc: Florian Fainelli <f.fainelli@gmail.com>\nCc: Andrew Lunn <andrew@lunn.ch>\nFixes: a3995460491d (\"net: phy: Relax error checking on sysfs_create_link()\")\nSigned-off-by: Grygorii Strashko <grygorii.strashko@ti.com>\nAcked-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/RobertCNelson/ti-linux-kernel/commits/223c542442527ca04cfd9843450ca103b822e558"},{"sha":"67a1dc5675670f17a77a0ac65f688d4b5adeeefa","author":{"name":"Grygorii Strashko","email":"bfa0a1520768723a1c60e18250fb841c342eb8d8@ti.com"},"message":"net: phy: relax error checking when creating sysfs link netdev->phydev\n\n\n[ Upstream commit 4414b3ed74be0e205e04e12cd83542a727d88255 ]\n\nSome ethernet drivers (like TI CPSW) may connect and manage >1 Net PHYs per\none netdevice, as result such drivers will produce warning during system\nboot and fail to connect second phy to netdevice when PHYLIB framework\nwill try to create sysfs link netdev->phydev for second PHY\nin phy_attach_direct(), because sysfs link with the same name has been\ncreated already for the first PHY. As result, second CPSW external\nport will became unusable.\n\nFix it by relaxing error checking when PHYLIB framework is creating sysfs\nlink netdev->phydev in phy_attach_direct(), suppressing warning by using\nsysfs_create_link_nowarn() and adding error message instead.\nAfter this change links (phy->netdev and netdev->phy) creation failure is not\nfatal any more and system can continue working, which fixes TI CPSW issue.\n\nCc: Florian Fainelli <f.fainelli@gmail.com>\nCc: Andrew Lunn <andrew@lunn.ch>\nFixes: a3995460491d (\"net: phy: Relax error checking on sysfs_create_link()\")\nSigned-off-by: Grygorii Strashko <grygorii.strashko@ti.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/RobertCNelson/ti-linux-kernel/commits/67a1dc5675670f17a77a0ac65f688d4b5adeeefa"},{"sha":"b51eb57dac9cbd09e1ad3b1aed68ea11bcb83743","author":{"name":"Arkadi Sharshevsky","email":"71c1f397b9b7824bcc217e60fa39ea2093b6e6e2@mellanox.com"},"message":"devlink: Remove redundant free on error path\n\n\n[ Upstream commit 7fe4d6dcbcb43fe0282d4213fc52be178bb30e91 ]\n\nThe current code performs unneeded free. Remove the redundant skb freeing\nduring the error path.\n\nFixes: 1555d204e743 (\"devlink: Support for pipeline debug (dpipe)\")\nSigned-off-by: Arkadi Sharshevsky <arkadis@mellanox.com>\nAcked-by: Jiri Pirko <jiri@mellanox.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/RobertCNelson/ti-linux-kernel/commits/b51eb57dac9cbd09e1ad3b1aed68ea11bcb83743"},{"sha":"82fb817863e3a853715e8cc606ea4ed37b9a55ce","author":{"name":"Shannon Nelson","email":"14bbe8f00ad7c6d888a504d41f5500c00531af99@oracle.com"},"message":"macvlan: filter out unsupported feature flags\n\n\n[ Upstream commit 13fbcc8dc573482dd3f27568257fd7087f8935f4 ]\n\nAdding a macvlan device on top of a lowerdev that supports\nthe xfrm offloads fails with a new regression:\n  # ip link add link ens1f0 mv0 type macvlan\n  RTNETLINK answers: Operation not permitted\n\nTracing down the failure shows that the macvlan device inherits\nthe NETIF_F_HW_ESP and NETIF_F_HW_ESP_TX_CSUM feature flags\nfrom the lowerdev, but with no dev->xfrmdev_ops API filled\nin, it doesn't actually support xfrm.  When the request is\nmade to add the new macvlan device, the XFRM listener for\nNETDEV_REGISTER calls xfrm_api_check() which fails the new\nregistration because dev->xfrmdev_ops is NULL.\n\nThe macvlan creation succeeds when we filter out the ESP\nfeature flags in macvlan_fix_features(), so let's filter them\nout like we're already filtering out ~NETIF_F_NETNS_LOCAL.\nWhen XFRM support is added in the future, we can add the flags\ninto MACVLAN_FEATURES.\n\nThis same problem could crop up in the future with any other\nnew feature flags, so let's filter out any flags that aren't\ndefined as supported in macvlan.\n\nFixes: d77e38e612a0 (\"xfrm: Add an IPsec hardware offloading API\")\nReported-by: Alexey Kodanev <alexey.kodanev@oracle.com>\nSigned-off-by: Shannon Nelson <shannon.nelson@oracle.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/RobertCNelson/ti-linux-kernel/commits/82fb817863e3a853715e8cc606ea4ed37b9a55ce"},{"sha":"a8f02befc87d6f1a882c9b14a31bcfa1fbd3d430","author":{"name":"Paolo Abeni","email":"6e4ffc2e3438feb7acb34f6b67e6ae17e700099c@redhat.com"},"message":"net: ipv6: keep sk status consistent after datagram connect failure\n\n\n[ Upstream commit 2f987a76a97773beafbc615b9c4d8fe79129a7f4 ]\n\nOn unsuccesful ip6_datagram_connect(), if the failure is caused by\nip6_datagram_dst_update(), the sk peer information are cleared, but\nthe sk->sk_state is preserved.\n\nIf the socket was already in an established status, the overall sk\nstatus is inconsistent and fouls later checks in datagram code.\n\nFix this saving the old peer information and restoring them in\ncase of failure. This also aligns ipv6 datagram connect() behavior\nwith ipv4.\n\nv1 -> v2:\n - added missing Fixes tag\n\nFixes: 85cb73ff9b74 (\"net: ipv6: reset daddr and dport in sk if connect() fails\")\nSigned-off-by: Paolo Abeni <pabeni@redhat.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/RobertCNelson/ti-linux-kernel/commits/a8f02befc87d6f1a882c9b14a31bcfa1fbd3d430"},{"sha":"5defa8c9269a4c5e7b284631e9a60abe1d57f20b","author":{"name":"Stefano Brivio","email":"efa1d7a1f7e06da157cba8418bde1140b06b0968@redhat.com"},"message":"ipv6: old_dport should be a __be16 in __ip6_datagram_connect()\n\n\n[ Upstream commit 5f2fb802eee1df0810b47ea251942fe3fd36589a ]\n\nFixes: 2f987a76a977 (\"net: ipv6: keep sk status consistent after datagram connect failure\")\nSigned-off-by: Stefano Brivio <sbrivio@redhat.com>\nAcked-by: Paolo Abeni <pabeni@redhat.com>\nAcked-by: Guillaume Nault <g.nault@alphalink.fr>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/RobertCNelson/ti-linux-kernel/commits/5defa8c9269a4c5e7b284631e9a60abe1d57f20b"},{"sha":"cb4963b49426fb6d86fde623366460dadac2908e","author":{"name":"David Lebrun","email":"c262cfc2d15f6c47123595607d22147706fb1776@google.com"},"message":"ipv6: sr: fix NULL pointer dereference when setting encap source address\n\n\n[ Upstream commit 8936ef7604c11b5d701580d779e0f5684abc7b68 ]\n\nWhen using seg6 in encap mode, we call ipv6_dev_get_saddr() to set the\nsource address of the outer IPv6 header, in case none was specified.\nUsing skb->dev can lead to BUG() when it is in an inconsistent state.\nThis patch uses the net_device attached to the skb's dst instead.\n\n[940807.667429] BUG: unable to handle kernel NULL pointer dereference at 000000000000047c\n[940807.762427] IP: ipv6_dev_get_saddr+0x8b/0x1d0\n[940807.815725] PGD 0 P4D 0\n[940807.847173] Oops: 0000 [#1] SMP PTI\n[940807.890073] Modules linked in:\n[940807.927765] CPU: 6 PID: 0 Comm: swapper/6 Tainted: G        W        4.16.0-rc1-seg6bpf+ #2\n[940808.028988] Hardware name: HP ProLiant DL120 G6/ProLiant DL120 G6, BIOS O26    09/06/2010\n[940808.128128] RIP: 0010:ipv6_dev_get_saddr+0x8b/0x1d0\n[940808.187667] RSP: 0018:ffff88043fd836b0 EFLAGS: 00010206\n[940808.251366] RAX: 0000000000000005 RBX: ffff88042cb1c860 RCX: 00000000000000fe\n[940808.338025] RDX: 00000000000002c0 RSI: ffff88042cb1c860 RDI: 0000000000004500\n[940808.424683] RBP: ffff88043fd83740 R08: 0000000000000000 R09: ffffffffffffffff\n[940808.511342] R10: 0000000000000040 R11: 0000000000000000 R12: ffff88042cb1c850\n[940808.598012] R13: ffffffff8208e380 R14: ffff88042ac8da00 R15: 0000000000000002\n[940808.684675] FS:  0000000000000000(0000) GS:ffff88043fd80000(0000) knlGS:0000000000000000\n[940808.783036] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[940808.852975] CR2: 000000000000047c CR3: 00000004255fe000 CR4: 00000000000006e0\n[940808.939634] Call Trace:\n[940808.970041]  <IRQ>\n[940808.995250]  ? ip6t_do_table+0x265/0x640\n[940809.043341]  seg6_do_srh_encap+0x28f/0x300\n[940809.093516]  ? seg6_do_srh+0x1a0/0x210\n[940809.139528]  seg6_do_srh+0x1a0/0x210\n[940809.183462]  seg6_output+0x28/0x1e0\n[940809.226358]  lwtunnel_output+0x3f/0x70\n[940809.272370]  ip6_xmit+0x2b8/0x530\n[940809.313185]  ? ac6_proc_exit+0x20/0x20\n[940809.359197]  inet6_csk_xmit+0x7d/0xc0\n[940809.404173]  tcp_transmit_skb+0x548/0x9a0\n[940809.453304]  __tcp_retransmit_skb+0x1a8/0x7a0\n[940809.506603]  ? ip6_default_advmss+0x40/0x40\n[940809.557824]  ? tcp_current_mss+0x24/0x90\n[940809.605925]  tcp_retransmit_skb+0xd/0x80\n[940809.654016]  tcp_xmit_retransmit_queue.part.17+0xf9/0x210\n[940809.719797]  tcp_ack+0xa47/0x1110\n[940809.760612]  tcp_rcv_established+0x13c/0x570\n[940809.812865]  tcp_v6_do_rcv+0x151/0x3d0\n[940809.858879]  tcp_v6_rcv+0xa5c/0xb10\n[940809.901770]  ? seg6_output+0xdd/0x1e0\n[940809.946745]  ip6_input_finish+0xbb/0x460\n[940809.994837]  ip6_input+0x74/0x80\n[940810.034612]  ? ip6_rcv_finish+0xb0/0xb0\n[940810.081663]  ipv6_rcv+0x31c/0x4c0\n...\n\nFixes: 6c8702c60b886 (\"ipv6: sr: add support for SRH encapsulation and injection with lwtunnels\")\nReported-by: Tom Herbert <tom@quantonium.net>\nSigned-off-by: David Lebrun <dlebrun@google.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/RobertCNelson/ti-linux-kernel/commits/cb4963b49426fb6d86fde623366460dadac2908e"},{"sha":"dbad5abd2b167a3e7b981e833fd7f21747e3b47b","author":{"name":"David Lebrun","email":"c262cfc2d15f6c47123595607d22147706fb1776@google.com"},"message":"ipv6: sr: fix scheduling in RCU when creating seg6 lwtunnel state\n\n\n[ Upstream commit 191f86ca8ef27f7a492fd1c03620498c6e94f0ac ]\n\nThe seg6_build_state() function is called with RCU read lock held,\nso we cannot use GFP_KERNEL. This patch uses GFP_ATOMIC instead.\n\n[   92.770271] =============================\n[   92.770628] WARNING: suspicious RCU usage\n[   92.770921] 4.16.0-rc4+ #12 Not tainted\n[   92.771277] -----------------------------\n[   92.771585] ./include/linux/rcupdate.h:302 Illegal context switch in RCU read-side critical section!\n[   92.772279]\n[   92.772279] other info that might help us debug this:\n[   92.772279]\n[   92.773067]\n[   92.773067] rcu_scheduler_active = 2, debug_locks = 1\n[   92.773514] 2 locks held by ip/2413:\n[   92.773765]  #0:  (rtnl_mutex){+.+.}, at: [<00000000e5461720>] rtnetlink_rcv_msg+0x441/0x4d0\n[   92.774377]  #1:  (rcu_read_lock){....}, at: [<00000000df4f161e>] lwtunnel_build_state+0x59/0x210\n[   92.775065]\n[   92.775065] stack backtrace:\n[   92.775371] CPU: 0 PID: 2413 Comm: ip Not tainted 4.16.0-rc4+ #12\n[   92.775791] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1.fc27 04/01/2014\n[   92.776608] Call Trace:\n[   92.776852]  dump_stack+0x7d/0xbc\n[   92.777130]  __schedule+0x133/0xf00\n[   92.777393]  ? unwind_get_return_address_ptr+0x50/0x50\n[   92.777783]  ? __sched_text_start+0x8/0x8\n[   92.778073]  ? rcu_is_watching+0x19/0x30\n[   92.778383]  ? kernel_text_address+0x49/0x60\n[   92.778800]  ? __kernel_text_address+0x9/0x30\n[   92.779241]  ? unwind_get_return_address+0x29/0x40\n[   92.779727]  ? pcpu_alloc+0x102/0x8f0\n[   92.780101]  _cond_resched+0x23/0x50\n[   92.780459]  __mutex_lock+0xbd/0xad0\n[   92.780818]  ? pcpu_alloc+0x102/0x8f0\n[   92.781194]  ? seg6_build_state+0x11d/0x240\n[   92.781611]  ? save_stack+0x9b/0xb0\n[   92.781965]  ? __ww_mutex_wakeup_for_backoff+0xf0/0xf0\n[   92.782480]  ? seg6_build_state+0x11d/0x240\n[   92.782925]  ? lwtunnel_build_state+0x1bd/0x210\n[   92.783393]  ? ip6_route_info_create+0x687/0x1640\n[   92.783846]  ? ip6_route_add+0x74/0x110\n[   92.784236]  ? inet6_rtm_newroute+0x8a/0xd0\n\nFixes: 6c8702c60b886 (\"ipv6: sr: add support for SRH encapsulation and injection with lwtunnels\")\nSigned-off-by: David Lebrun <dlebrun@google.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/RobertCNelson/ti-linux-kernel/commits/dbad5abd2b167a3e7b981e833fd7f21747e3b47b"},{"sha":"42cf2a1e5ac4a8c4b66d89fe674e79a8d17f806a","author":{"name":"Ido Schimmel","email":"1b0ab106fb837225790a9df447125d75029db946@mellanox.com"},"message":"mlxsw: spectrum_buffers: Set a minimum quota for CPU port traffic\n\n\n[ Upstream commit bcdd5de80a2275f7879dc278bfc747f1caf94442 ]\n\nIn commit 9ffcc3725f09 (\"mlxsw: spectrum: Allow packets to be trapped\nfrom any PG\") I fixed a problem where packets could not be trapped to\nthe CPU due to exceeded shared buffer quotas. The mentioned commit\nexplains the problem in detail.\n\nThe problem was fixed by assigning a minimum quota for the CPU port and\nthe traffic class used for scheduling traffic to the CPU.\n\nHowever, commit 117b0dad2d54 (\"mlxsw: Create a different trap group list\nfor each device\") assigned different traffic classes to different\npacket types and rendered the fix useless.\n\nFix the problem by assigning a minimum quota for the CPU port and all\nthe traffic classes that are currently in use.\n\nFixes: 117b0dad2d54 (\"mlxsw: Create a different trap group list for each device\")\nSigned-off-by: Ido Schimmel <idosch@mellanox.com>\nReported-by: Eddie Shklaer <eddies@mellanox.com>\nTested-by: Eddie Shklaer <eddies@mellanox.com>\nAcked-by: Jiri Pirko <jiri@mellanox.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/RobertCNelson/ti-linux-kernel/commits/42cf2a1e5ac4a8c4b66d89fe674e79a8d17f806a"},{"sha":"2274d77c36752d80e3bc91eb289c601c3f3795d9","author":{"name":"Brad Mouring","email":"58d99a887450796456131638ba4c43b5ba95afcf@ni.com"},"message":"net: phy: Tell caller result of phy_change()\n\n\n[ Upstream commit a2c054a896b8ac794ddcfc7c92e2dc7ec4ed4ed5 ]\n\nIn 664fcf123a30e (net: phy: Threaded interrupts allow some simplification)\nthe phy_interrupt system was changed to use a traditional threaded\ninterrupt scheme instead of a workqueue approach.\n\nWith this change, the phy status check moved into phy_change, which\ndid not report back to the caller whether or not the interrupt was\nhandled. This means that, in the case of a shared phy interrupt,\nonly the first phydev's interrupt registers are checked (since\nphy_interrupt() would always return IRQ_HANDLED). This leads to\ninterrupt storms when it is a secondary device that's actually the\ninterrupt source.\n\nSigned-off-by: Brad Mouring <brad.mouring@ni.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/RobertCNelson/ti-linux-kernel/commits/2274d77c36752d80e3bc91eb289c601c3f3795d9"},{"sha":"28b488f7cb3a6af9f4512981b113f6e5d7e9752e","author":{"name":"Roman Mashak","email":"501cd27f09fd14f7ef8446a0706e245115dac3e9@mojatatu.com"},"message":"net sched actions: return explicit error when tunnel_key mode is not specified\n\n\n[ Upstream commit 51d4740f88affd85d49c04e3c9cd129c0e33bcb9 ]\n\nIf set/unset mode of the tunnel_key action is not provided, ->init() still\nreturns 0, and the caller proceeds with bogus 'struct tc_action *' object,\nthis results in crash:\n\n% tc actions add action tunnel_key src_ip 1.1.1.1 dst_ip 2.2.2.1 id 7 index 1\n\n[   35.805515] general protection fault: 0000 [#1] SMP PTI\n[   35.806161] Modules linked in: act_tunnel_key kvm_intel kvm irqbypass\ncrct10dif_pclmul crc32_pclmul ghash_clmulni_intel pcbc aesni_intel aes_x86_64\ncrypto_simd glue_helper cryptd serio_raw\n[   35.808233] CPU: 1 PID: 428 Comm: tc Not tainted 4.16.0-rc4+ #286\n[   35.808929] RIP: 0010:tcf_action_init+0x90/0x190\n[   35.809457] RSP: 0018:ffffb8edc068b9a0 EFLAGS: 00010206\n[   35.810053] RAX: 1320c000000a0003 RBX: 0000000000000001 RCX: 0000000000000000\n[   35.810866] RDX: 0000000000000070 RSI: 0000000000007965 RDI: ffffb8edc068b910\n[   35.811660] RBP: ffffb8edc068b9d0 R08: 0000000000000000 R09: ffffb8edc068b808\n[   35.812463] R10: ffffffffc02bf040 R11: 0000000000000040 R12: ffffb8edc068bb38\n[   35.813235] R13: 0000000000000000 R14: 0000000000000000 R15: ffffb8edc068b910\n[   35.814006] FS:  00007f3d0d8556c0(0000) GS:ffff91d1dbc40000(0000)\nknlGS:0000000000000000\n[   35.814881] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[   35.815540] CR2: 000000000043f720 CR3: 0000000019248001 CR4: 00000000001606a0\n[   35.816457] Call Trace:\n[   35.817158]  tc_ctl_action+0x11a/0x220\n[   35.817795]  rtnetlink_rcv_msg+0x23d/0x2e0\n[   35.818457]  ? __slab_alloc+0x1c/0x30\n[   35.819079]  ? __kmalloc_node_track_caller+0xb1/0x2b0\n[   35.819544]  ? rtnl_calcit.isra.30+0xe0/0xe0\n[   35.820231]  netlink_rcv_skb+0xce/0x100\n[   35.820744]  netlink_unicast+0x164/0x220\n[   35.821500]  netlink_sendmsg+0x293/0x370\n[   35.822040]  sock_sendmsg+0x30/0x40\n[   35.822508]  ___sys_sendmsg+0x2c5/0x2e0\n[   35.823149]  ? pagecache_get_page+0x27/0x220\n[   35.823714]  ? filemap_fault+0xa2/0x640\n[   35.824423]  ? page_add_file_rmap+0x108/0x200\n[   35.825065]  ? alloc_set_pte+0x2aa/0x530\n[   35.825585]  ? finish_fault+0x4e/0x70\n[   35.826140]  ? __handle_mm_fault+0xbc1/0x10d0\n[   35.826723]  ? __sys_sendmsg+0x41/0x70\n[   35.827230]  __sys_sendmsg+0x41/0x70\n[   35.827710]  do_syscall_64+0x68/0x120\n[   35.828195]  entry_SYSCALL_64_after_hwframe+0x3d/0xa2\n[   35.828859] RIP: 0033:0x7f3d0ca4da67\n[   35.829331] RSP: 002b:00007ffc9f284338 EFLAGS: 00000246 ORIG_RAX:\n000000000000002e\n[   35.830304] RAX: ffffffffffffffda RBX: 00007ffc9f284460 RCX: 00007f3d0ca4da67\n[   35.831247] RDX: 0000000000000000 RSI: 00007ffc9f2843b0 RDI: 0000000000000003\n[   35.832167] RBP: 000000005aa6a7a9 R08: 0000000000000001 R09: 0000000000000000\n[   35.833075] R10: 00000000000005f1 R11: 0000000000000246 R12: 0000000000000000\n[   35.833997] R13: 00007ffc9f2884c0 R14: 0000000000000001 R15: 0000000000674640\n[   35.834923] Code: 24 30 bb 01 00 00 00 45 31 f6 eb 5e 8b 50 08 83 c2 07 83 e2\nfc 83 c2 70 49 8b 07 48 8b 40 70 48 85 c0 74 10 48 89 14 24 4c 89 ff <ff> d0 48\n8b 14 24 48 01 c2 49 01 d6 45 85 ed 74 05 41 83 47 2c\n[   35.837442] RIP: tcf_action_init+0x90/0x190 RSP: ffffb8edc068b9a0\n[   35.838291] ---[ end trace a095c06ee4b97a26 ]---\n\nFixes: d0f6dd8a914f (\"net/sched: Introduce act_tunnel_key\")\nSigned-off-by: Roman Mashak <mrv@mojatatu.com>\nAcked-by: Cong Wang <xiyou.wangcong@gmail.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/RobertCNelson/ti-linux-kernel/commits/28b488f7cb3a6af9f4512981b113f6e5d7e9752e"},{"sha":"090da7ced80b738e5ea0a055e8dc982740a951b5","author":{"name":"Guillaume Nault","email":"c9cf31cb6c9821bed82e940f06145b026ca536b5@alphalink.fr"},"message":"ppp: avoid loop in xmit recursion detection code\n\n\n[ Upstream commit 6d066734e9f09cdea4a3b9cb76136db3f29cfb02 ]\n\nWe already detect situations where a PPP channel sends packets back to\nits upper PPP device. While this is enough to avoid deadlocking on xmit\nlocks, this doesn't prevent packets from looping between the channel\nand the unit.\n\nThe problem is that ppp_start_xmit() enqueues packets in ppp->file.xq\nbefore checking for xmit recursion. Therefore, __ppp_xmit_process()\nmight dequeue a packet from ppp->file.xq and send it on the channel\nwhich, in turn, loops it back on the unit. Then ppp_start_xmit()\nqueues the packet back to ppp->file.xq and __ppp_xmit_process() picks\nit up and sends it again through the channel. Therefore, the packet\nwill loop between __ppp_xmit_process() and ppp_start_xmit() until some\nother part of the xmit path drops it.\n\nFor L2TP, we rapidly fill the skb's headroom and pppol2tp_xmit() drops\nthe packet after a few iterations. But PPTP reallocates the headroom\nif necessary, letting the loop run and exhaust the machine resources\n(as reported in https://bugzilla.kernel.org/show_bug.cgi?id=199109).\n\nFix this by letting __ppp_xmit_process() enqueue the skb to\nppp->file.xq, so that we can check for recursion before adding it to\nthe queue. Now ppp_xmit_process() can drop the packet when recursion is\ndetected.\n\n__ppp_channel_push() is a bit special. It calls __ppp_xmit_process()\nwithout having any actual packet to send. This is used by\nppp_output_wakeup() to re-enable transmission on the parent unit (for\nimplementations like ppp_async.c, where the .start_xmit() function\nmight not consume the skb, leaving it in ppp->xmit_pending and\ndisabling transmission).\nTherefore, __ppp_xmit_process() needs to handle the case where skb is\nNULL, dequeuing as many packets as possible from ppp->file.xq.\n\nReported-by: xu heng <xuheng333@zoho.com>\nFixes: 55454a565836 (\"ppp: avoid dealock on recursive xmit\")\nSigned-off-by: Guillaume Nault <g.nault@alphalink.fr>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/RobertCNelson/ti-linux-kernel/commits/090da7ced80b738e5ea0a055e8dc982740a951b5"},{"sha":"07cf9d303c7ce8620ea34e3407e08facf65c732d","author":{"name":"Paul Blakey","email":"ea6ccc96e935d58f46ebd44c8a14dfcede3a2d8d@mellanox.com"},"message":"rhashtable: Fix rhlist duplicates insertion\n\n\n[ Upstream commit d3dcf8eb615537526bd42ff27a081d46d337816e ]\n\nWhen inserting duplicate objects (those with the same key),\ncurrent rhlist implementation messes up the chain pointers by\nupdating the bucket pointer instead of prev next pointer to the\nnewly inserted node. This causes missing elements on removal and\ntravesal.\n\nFix that by properly updating pprev pointer to point to\nthe correct rhash_head next pointer.\n\nIssue: 1241076\nChange-Id: I86b2c140bcb4aeb10b70a72a267ff590bb2b17e7\nFixes: ca26893f05e8 ('rhashtable: Add rhlist interface')\nSigned-off-by: Paul Blakey <paulb@mellanox.com>\nAcked-by: Herbert Xu <herbert@gondor.apana.org.au>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/RobertCNelson/ti-linux-kernel/commits/07cf9d303c7ce8620ea34e3407e08facf65c732d"},{"sha":"515bc34124f3aaf7ea2508fa2707906623eba748","author":{"name":"Tom Herbert","email":"96835dd8bfa718bd6447ccc87af89ae1675daeca@quantonium.net"},"message":"kcm: lock lower socket in kcm_attach\n\n\n[ Upstream commit 2cc683e88c0c993ac3721d9b702cb0630abe2879 ]\n\nNeed to lock lower socket in order to provide mutual exclusion\nwith kcm_unattach.\n\nv2: Add Reported-by for syzbot\n\nFixes: ab7ac4eb9832e32a09f4e804 (\"kcm: Kernel Connection Multiplexor module\")\nReported-by: syzbot+ea75c0ffcd353d32515f064aaebefc5279e6161e@syzkaller.appspotmail.com\nSigned-off-by: Tom Herbert <tom@quantonium.net>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/RobertCNelson/ti-linux-kernel/commits/515bc34124f3aaf7ea2508fa2707906623eba748"},{"sha":"f77ff13a06c1185491169b78e33bfb6a169a933c","author":{"name":"Alexey Kodanev","email":"230f550b09df4d04cb9a8036b198a530acf758d3@oracle.com"},"message":"sch_netem: fix skb leak in netem_enqueue()\n\n\n[ Upstream commit 35d889d10b649fda66121891ec05eca88150059d ]\n\nWhen we exceed current packets limit and we have more than one\nsegment in the list returned by skb_gso_segment(), netem drops\nonly the first one, skipping the rest, hence kmemleak reports:\n\nunreferenced object 0xffff880b5d23b600 (size 1024):\n  comm \"softirq\", pid 0, jiffies 4384527763 (age 2770.629s)\n  hex dump (first 32 bytes):\n    00 80 23 5d 0b 88 ff ff 00 00 00 00 00 00 00 00  ..#]............\n    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................\n  backtrace:\n    [<00000000d8a19b9d>] __alloc_skb+0xc9/0x520\n    [<000000001709b32f>] skb_segment+0x8c8/0x3710\n    [<00000000c7b9bb88>] tcp_gso_segment+0x331/0x1830\n    [<00000000c921cba1>] inet_gso_segment+0x476/0x1370\n    [<000000008b762dd4>] skb_mac_gso_segment+0x1f9/0x510\n    [<000000002182660a>] __skb_gso_segment+0x1dd/0x620\n    [<00000000412651b9>] netem_enqueue+0x1536/0x2590 [sch_netem]\n    [<0000000005d3b2a9>] __dev_queue_xmit+0x1167/0x2120\n    [<00000000fc5f7327>] ip_finish_output2+0x998/0xf00\n    [<00000000d309e9d3>] ip_output+0x1aa/0x2c0\n    [<000000007ecbd3a4>] tcp_transmit_skb+0x18db/0x3670\n    [<0000000042d2a45f>] tcp_write_xmit+0x4d4/0x58c0\n    [<0000000056a44199>] tcp_tasklet_func+0x3d9/0x540\n    [<0000000013d06d02>] tasklet_action+0x1ca/0x250\n    [<00000000fcde0b8b>] __do_softirq+0x1b4/0x5a3\n    [<00000000e7ed027c>] irq_exit+0x1e2/0x210\n\nFix it by adding the rest of the segments, if any, to skb 'to_free'\nlist. Add new __qdisc_drop_all() and qdisc_drop_all() functions\nbecause they can be useful in the future if we need to drop segmented\nGSO packets in other places.\n\nFixes: 6071bd1aa13e (\"netem: Segment GSO packets on enqueue\")\nSigned-off-by: Alexey Kodanev <alexey.kodanev@oracle.com>\nAcked-by: Neil Horman <nhorman@tuxdriver.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/RobertCNelson/ti-linux-kernel/commits/f77ff13a06c1185491169b78e33bfb6a169a933c"},{"sha":"f6cdb675ca0a0f1e1913b48060414933dbd08565","author":{"name":"Eric Dumazet","email":"312c7d941f03386814be517ffdb3e0eb6624e275@google.com"},"message":"ieee802154: 6lowpan: fix possible NULL deref in lowpan_device_event()\n\n\n[ Upstream commit ca0edb131bdf1e6beaeb2b8289fd6b374b74147d ]\n\nA tun device type can trivially be set to arbitrary value using\nTUNSETLINK ioctl().\n\nTherefore, lowpan_device_event() must really check that ieee802154_ptr\nis not NULL.\n\nFixes: 2c88b5283f60d (\"ieee802154: 6lowpan: remove check on null\")\nSigned-off-by: Eric Dumazet <edumazet@google.com>\nCc: Alexander Aring <alex.aring@gmail.com>\nCc: Stefan Schmidt <stefan@osg.samsung.com>\nReported-by: syzbot <syzkaller@googlegroups.com>\nAcked-by: Stefan Schmidt <stefan@osg.samsung.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":false,"url":"https://api.github.com/repos/RobertCNelson/ti-linux-kernel/commits/f6cdb675ca0a0f1e1913b48060414933dbd08565"}]}
{"actor":{"display_login":"RobertCNelson"}}