{"push_id":650113544,"size":197,"distinct_size":197,"ref":"refs/heads/lollipop-caf","head":"138cd90d126ee860ba3b77f93feed99626d0e00d","before":"dd0524ced0d84f14ff26ecaa1d5c914713dc8b66","commits":[{"sha":"e7f76c836ca734a861b57aed10eb78b30c3a71c7","author":{"email":"596727c8a0ea4db3ba2ceceedccbacd3d7b371b8@suse.cz","name":"Jan Kara"},"message":"ocfs2: fix quota file corruption\n\ncommit 15c34a760630ca2c803848fba90ca0646a9907dd upstream.\n\nGlobal quota files are accessed from different nodes.  Thus we cannot\ncache offset of quota structure in the quota file after we drop our node\nreference count to it because after that moment quota structure may be\nfreed and reallocated elsewhere by a different node resulting in\ncorruption of quota file.\n\nFix the problem by clearing dq_off when we are releasing dquot structure.\nWe also remove the DB_READ_B handling because it is useless -\nDQ_ACTIVE_B is set iff DQ_READ_B is set.\n\nSigned-off-by: Jan Kara <jack@suse.cz>\nCc: Goldwyn Rodrigues <rgoldwyn@suse.de>\nCc: Joel Becker <jlbec@evilplan.org>\nReviewed-by: Mark Fasheh <mfasheh@suse.de>\nSigned-off-by: Andrew Morton <akpm@linux-foundation.org>\nSigned-off-by: Linus Torvalds <torvalds@linux-foundation.org>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/KrustyFunHouse/android_kernel_oppo_n1/commits/e7f76c836ca734a861b57aed10eb78b30c3a71c7"},{"sha":"efcb9185af1155146326a850aaa6617a5bb55172","author":{"email":"de609eb4d5d70b1d38ec6642adbfc33a2781f63c@zeniv.linux.org.uk","name":"Al Viro"},"message":"ocfs2 syncs the wrong range...\n\ncommit 1b56e98990bcdbb20b9fab163654b9315bf158e8 upstream.\n\nSigned-off-by: Al Viro <viro@zeniv.linux.org.uk>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/KrustyFunHouse/android_kernel_oppo_n1/commits/efcb9185af1155146326a850aaa6617a5bb55172"},{"sha":"6ba4d1d9112b3f6bf0f634870bb950b5b59fa86f","author":{"email":"2dd0a47882f0f6e80e10cdc66eeecff982de281e@gmail.com","name":"George McCollister"},"message":"sched: Fix double normalization of vruntime\n\ncommit 791c9e0292671a3bfa95286bb5c08129d8605618 upstream.\n\ndequeue_entity() is called when p->on_rq and sets se->on_rq = 0\nwhich appears to guarentee that the !se->on_rq condition is met.\nIf the task has done set_current_state(TASK_INTERRUPTIBLE) without\nschedule() the second condition will be met and vruntime will be\nincorrectly adjusted twice.\n\nIn certain cases this can result in the task's vruntime never increasing\npast the vruntime of other tasks on the CFS' run queue, starving them of\nCPU time.\n\nThis patch changes switched_from_fair() to use !p->on_rq instead of\n!se->on_rq.\n\nI'm able to cause a task with a priority of 120 to starve all other\ntasks with the same priority on an ARM platform running 3.2.51-rt72\nPREEMPT RT by writing one character at time to a serial tty (16550 UART)\nin a tight loop. I'm also able to verify making this change corrects the\nproblem on that platform and kernel version.\n\nSigned-off-by: George McCollister <george.mccollister@gmail.com>\nSigned-off-by: Peter Zijlstra <peterz@infradead.org>\nLink: http://lkml.kernel.org/r/1392767811-28916-1-git-send-email-george.mccollister@gmail.com\nSigned-off-by: Ingo Molnar <mingo@kernel.org>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/KrustyFunHouse/android_kernel_oppo_n1/commits/6ba4d1d9112b3f6bf0f634870bb950b5b59fa86f"},{"sha":"73c64222444db00a7f3b3cf933f76f2a2a866fb6","author":{"email":"808efd45667dbd241e4e026b5673172419ecb43e@redhat.com","name":"Jason Wang"},"message":"virtio-net: alloc big buffers also when guest can receive UFO\n\n[ Upstream commit 0e7ede80d929ff0f830c44a543daa1acd590c749 ]\n\nWe should alloc big buffers also when guest can receive UFO\npackets to let the big packets fit into guest rx buffer.\n\nFixes 5c5167515d80f78f6bb538492c423adcae31ad65\n(virtio-net: Allow UFO feature to be set and advertised.)\n\nCc: Rusty Russell <rusty@rustcorp.com.au>\nCc: Michael S. Tsirkin <mst@redhat.com>\nCc: Sridhar Samudrala <sri@us.ibm.com>\nSigned-off-by: Jason Wang <jasowang@redhat.com>\nAcked-by: Michael S. Tsirkin <mst@redhat.com>\nAcked-by: Rusty Russell <rusty@rustcorp.com.au>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/KrustyFunHouse/android_kernel_oppo_n1/commits/73c64222444db00a7f3b3cf933f76f2a2a866fb6"},{"sha":"fc8927f2d373d522e85ca497e9f6755f564b42ce","author":{"email":"6b52f9d672b6134057900fe608467612b789a84e@broadcom.com","name":"Michael Chan"},"message":"tg3: Don't check undefined error bits in RXBD\n\n[ Upstream commit d7b95315cc7f441418845a165ee56df723941487 ]\n\nRedefine the RXD_ERR_MASK to include only relevant error bits. This fixes\na customer reported issue of randomly dropping packets on the 5719.\n\nSigned-off-by: Michael Chan <mchan@broadcom.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/KrustyFunHouse/android_kernel_oppo_n1/commits/fc8927f2d373d522e85ca497e9f6755f564b42ce"},{"sha":"18684dfb8483c9bbd3cc4ecefc1d9784d8158608","author":{"email":"9ff04a02a69f376b2b9aeec27187017cbf3cf5f9@redhat.com","name":"Daniel Borkmann"},"message":"net: sctp: fix sctp_sf_do_5_1D_ce to verify if we/peer is AUTH capable\n\n[ Upstream commit ec0223ec48a90cb605244b45f7c62de856403729 ]\n\nRFC4895 introduced AUTH chunks for SCTP; during the SCTP\nhandshake RANDOM; CHUNKS; HMAC-ALGO are negotiated (CHUNKS\nbeing optional though):\n\n  ---------- INIT[RANDOM; CHUNKS; HMAC-ALGO] ---------->\n  <------- INIT-ACK[RANDOM; CHUNKS; HMAC-ALGO] ---------\n  -------------------- COOKIE-ECHO -------------------->\n  <-------------------- COOKIE-ACK ---------------------\n\nA special case is when an endpoint requires COOKIE-ECHO\nchunks to be authenticated:\n\n  ---------- INIT[RANDOM; CHUNKS; HMAC-ALGO] ---------->\n  <------- INIT-ACK[RANDOM; CHUNKS; HMAC-ALGO] ---------\n  ------------------ AUTH; COOKIE-ECHO ---------------->\n  <-------------------- COOKIE-ACK ---------------------\n\nRFC4895, section 6.3. Receiving Authenticated Chunks says:\n\n  The receiver MUST use the HMAC algorithm indicated in\n  the HMAC Identifier field. If this algorithm was not\n  specified by the receiver in the HMAC-ALGO parameter in\n  the INIT or INIT-ACK chunk during association setup, the\n  AUTH chunk and all the chunks after it MUST be discarded\n  and an ERROR chunk SHOULD be sent with the error cause\n  defined in Section 4.1. [...] If no endpoint pair shared\n  key has been configured for that Shared Key Identifier,\n  all authenticated chunks MUST be silently discarded. [...]\n\n  When an endpoint requires COOKIE-ECHO chunks to be\n  authenticated, some special procedures have to be followed\n  because the reception of a COOKIE-ECHO chunk might result\n  in the creation of an SCTP association. If a packet arrives\n  containing an AUTH chunk as a first chunk, a COOKIE-ECHO\n  chunk as the second chunk, and possibly more chunks after\n  them, and the receiver does not have an STCB for that\n  packet, then authentication is based on the contents of\n  the COOKIE-ECHO chunk. In this situation, the receiver MUST\n  authenticate the chunks in the packet by using the RANDOM\n  parameters, CHUNKS parameters and HMAC_ALGO parameters\n  obtained from the COOKIE-ECHO chunk, and possibly a local\n  shared secret as inputs to the authentication procedure\n  specified in Section 6.3. If authentication fails, then\n  the packet is discarded. If the authentication is successful,\n  the COOKIE-ECHO and all the chunks after the COOKIE-ECHO\n  MUST be processed. If the receiver has an STCB, it MUST\n  process the AUTH chunk as described above using the STCB\n  from the existing association to authenticate the\n  COOKIE-ECHO chunk and all the chunks after it. [...]\n\nCommit bbd0d59809f9 introduced the possibility to receive\nand verification of AUTH chunk, including the edge case for\nauthenticated COOKIE-ECHO. On reception of COOKIE-ECHO,\nthe function sctp_sf_do_5_1D_ce() handles processing,\nunpacks and creates a new association if it passed sanity\nchecks and also tests for authentication chunks being\npresent. After a new association has been processed, it\ninvokes sctp_process_init() on the new association and\nwalks through the parameter list it received from the INIT\nchunk. It checks SCTP_PARAM_RANDOM, SCTP_PARAM_HMAC_ALGO\nand SCTP_PARAM_CHUNKS, and copies them into asoc->peer\nmeta data (peer_random, peer_hmacs, peer_chunks) in case\nsysctl -w net.sctp.auth_enable=1 is set. If in INIT's\nSCTP_PARAM_SUPPORTED_EXT parameter SCTP_CID_AUTH is set,\npeer_random != NULL and peer_hmacs != NULL the peer is to be\nassumed asoc->peer.auth_capable=1, in any other case\nasoc->peer.auth_capable=0.\n\nNow, if in sctp_sf_do_5_1D_ce() chunk->auth_chunk is\navailable, we set up a fake auth chunk and pass that on to\nsctp_sf_authenticate(), which at latest in\nsctp_auth_calculate_hmac() reliably dereferences a NULL pointer\nat position 0..0008 when setting up the crypto key in\ncrypto_hash_setkey() by using asoc->asoc_shared_key that is\nNULL as condition key_id == asoc->active_key_id is true if\nthe AUTH chunk was injected correctly from remote. This\nhappens no matter what net.sctp.auth_enable sysctl says.\n\nThe fix is to check for net->sctp.auth_enable and for\nasoc->peer.auth_capable before doing any operations like\nsctp_sf_authenticate() as no key is activated in\nsctp_auth_asoc_init_active_key() for each case.\n\nNow as RFC4895 section 6.3 states that if the used HMAC-ALGO\npassed from the INIT chunk was not used in the AUTH chunk, we\nSHOULD send an error; however in this case it would be better\nto just silently discard such a maliciously prepared handshake\nas we didn't even receive a parameter at all. Also, as our\nendpoint has no shared key configured, section 6.3 says that\nMUST silently discard, which we are doing from now onwards.\n\nBefore calling sctp_sf_pdiscard(), we need not only to free\nthe association, but also the chunk->auth_chunk skb, as\ncommit bbd0d59809f9 created a skb clone in that case.\n\nI have tested this locally by using netfilter's nfqueue and\nre-injecting packets into the local stack after maliciously\nmodifying the INIT chunk (removing RANDOM; HMAC-ALGO param)\nand the SCTP packet containing the COOKIE_ECHO (injecting\nAUTH chunk before COOKIE_ECHO). Fixed with this patch applied.\n\nFixes: bbd0d59809f9 (\"[SCTP]: Implement the receive and verification of AUTH chunk\")\nSigned-off-by: Daniel Borkmann <dborkman@redhat.com>\nCc: Vlad Yasevich <yasevich@gmail.com>\nCc: Neil Horman <nhorman@tuxdriver.com>\nAcked-by: Vlad Yasevich <vyasevich@gmail.com>\nSigned-off-by: David S. Miller <davem@davemloft.net>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/KrustyFunHouse/android_kernel_oppo_n1/commits/18684dfb8483c9bbd3cc4ecefc1d9784d8158608"},{"sha":"46a5a5493360f995b834eb3b828eb59da4604509","author":{"email":"643a80aaf16a8332d6a70921c14d4bb265446494@intel.com","name":"Emmanuel Grumbach"},"message":"mac80211: fix AP powersave TX vs. wakeup race\n\ncommit 1d147bfa64293b2723c4fec50922168658e613ba upstream.\n\nThere is a race between the TX path and the STA wakeup: while\na station is sleeping, mac80211 buffers frames until it wakes\nup, then the frames are transmitted. However, the RX and TX\npath are concurrent, so the packet indicating wakeup can be\nprocessed while a packet is being transmitted.\n\nThis can lead to a situation where the buffered frames list\nis emptied on the one side, while a frame is being added on\nthe other side, as the station is still seen as sleeping in\nthe TX path.\n\nAs a result, the newly added frame will not be send anytime\nsoon. It might be sent much later (and out of order) when the\nstation goes to sleep and wakes up the next time.\n\nAdditionally, it can lead to the crash below.\n\nFix all this by synchronising both paths with a new lock.\nBoth path are not fastpath since they handle PS situations.\n\nIn a later patch we'll remove the extra skb queue locks to\nreduce locking overhead.\n\nBUG: unable to handle kernel\nNULL pointer dereference at 000000b0\nIP: [<ff6f1791>] ieee80211_report_used_skb+0x11/0x3e0 [mac80211]\n*pde = 00000000\nOops: 0000 [#1] SMP DEBUG_PAGEALLOC\nEIP: 0060:[<ff6f1791>] EFLAGS: 00210282 CPU: 1\nEIP is at ieee80211_report_used_skb+0x11/0x3e0 [mac80211]\nEAX: e5900da0 EBX: 00000000 ECX: 00000001 EDX: 00000000\nESI: e41d00c0 EDI: e5900da0 EBP: ebe458e4 ESP: ebe458b0\n DS: 007b ES: 007b FS: 00d8 GS: 00e0 SS: 0068\nCR0: 8005003b CR2: 000000b0 CR3: 25a78000 CR4: 000407d0\nDR0: 00000000 DR1: 00000000 DR2: 00000000 DR3: 00000000\nDR6: ffff0ff0 DR7: 00000400\nProcess iperf (pid: 3934, ti=ebe44000 task=e757c0b0 task.ti=ebe44000)\niwlwifi 0000:02:00.0: I iwl_pcie_enqueue_hcmd Sending command LQ_CMD (#4e), seq: 0x0903, 92 bytes at 3[3]:9\nStack:\n e403b32c ebe458c4 00200002 00200286 e403b338 ebe458cc c10960bb e5900da0\n ff76a6ec ebe458d8 00000000 e41d00c0 e5900da0 ebe458f0 ff6f1b75 e403b210\n ebe4598c ff723dc1 00000000 ff76a6ec e597c978 e403b758 00000002 00000002\nCall Trace:\n [<ff6f1b75>] ieee80211_free_txskb+0x15/0x20 [mac80211]\n [<ff723dc1>] invoke_tx_handlers+0x1661/0x1780 [mac80211]\n [<ff7248a5>] ieee80211_tx+0x75/0x100 [mac80211]\n [<ff7249bf>] ieee80211_xmit+0x8f/0xc0 [mac80211]\n [<ff72550e>] ieee80211_subif_start_xmit+0x4fe/0xe20 [mac80211]\n [<c149ef70>] dev_hard_start_xmit+0x450/0x950\n [<c14b9aa9>] sch_direct_xmit+0xa9/0x250\n [<c14b9c9b>] __qdisc_run+0x4b/0x150\n [<c149f732>] dev_queue_xmit+0x2c2/0xca0\n\nReported-by: Yaara Rozenblum <yaara.rozenblum@intel.com>\nSigned-off-by: Emmanuel Grumbach <emmanuel.grumbach@intel.com>\nReviewed-by: Stanislaw Gruszka <sgruszka@redhat.com>\n[reword commit log, use a separate lock]\nSigned-off-by: Johannes Berg <johannes.berg@intel.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/KrustyFunHouse/android_kernel_oppo_n1/commits/46a5a5493360f995b834eb3b828eb59da4604509"},{"sha":"8509583a3094c4dfc1448e0b2fbadfb5b436378f","author":{"email":"1240f8b9a8d4f8f6d54c4d059a9fef2470495ad4@qca.qualcomm.com","name":"Sujith Manoharan"},"message":"ath9k: Fix ETSI compliance for AR9462 2.0\n\ncommit b3050248c167871ca52cfdb2ce78aa2460249346 upstream.\n\nThe minimum CCA power threshold values have to be adjusted\nfor existing cards to be in compliance with new regulations.\nNewer cards will make use of the values obtained from EEPROM,\nsupport for this was added earlier. To make sure that cards\nthat are already in use and don't have proper values in EEPROM,\ndo not violate regulations, use the initvals instead.\n\nReported-by: Jeang Daniel <dyjeong@qca.qualcomm.com>\nSigned-off-by: Sujith Manoharan <c_manoha@qca.qualcomm.com>\nSigned-off-by: John W. Linville <linville@tuxdriver.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/KrustyFunHouse/android_kernel_oppo_n1/commits/8509583a3094c4dfc1448e0b2fbadfb5b436378f"},{"sha":"c7fc368e0c6b01aef43d00fcfd59159f0acdf0cd","author":{"email":"7343c7ffb424bf4c3ebd1cd0c94117b3c12118ff@marvell.com","name":"Amitkumar Karwar"},"message":"mwifiex: copy AP's HT capability info correctly\n\ncommit c99b1861c232e1f641f13b8645e0febb3712cc71 upstream.\n\nWhile preparing association request, intersection of device's HT\ncapability information and corresponding fields advertised by AP\nis used.\n\nThis patch fixes an error while copying this field from AP's\nbeacon.\n\nSigned-off-by: Amitkumar Karwar <akarwar@marvell.com>\nSigned-off-by: Bing Zhao <bzhao@marvell.com>\nSigned-off-by: John W. Linville <linville@tuxdriver.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/KrustyFunHouse/android_kernel_oppo_n1/commits/c7fc368e0c6b01aef43d00fcfd59159f0acdf0cd"},{"sha":"cf828d9fed64eda7a0b3aefd90d1eb2fada2b544","author":{"email":"cd5a0f7f4b4ca57459752912ff2c1e5688a9582a@redhat.com","name":"Rob Clark"},"message":"drm/ttm: don't oops if no invalidate_caches()\n\ncommit 9ef7506f7eff3fc42724269f62e30164c141661f upstream.\n\nA few of the simpler TTM drivers (cirrus, ast, mgag200) do not implement\nthis function.  Yet can end up somehow with an evicted bo:\n\n  BUG: unable to handle kernel NULL pointer dereference at           (null)\n  IP: [<          (null)>]           (null)\n  PGD 16e761067 PUD 16e6cf067 PMD 0\n  Oops: 0010 [#1] SMP\n  Modules linked in: bnep bluetooth rfkill fuse ip6t_rpfilter ip6t_REJECT ipt_REJECT xt_conntrack ebtable_nat ebtable_broute bridge stp llc ebtable_filter ebtables ip6table_nat nf_conntrack_ipv6 nf_defrag_ipv6 nf_nat_ipv6 ip6table_mangle ip6table_security ip6table_raw ip6table_filter ip6_tables iptable_nat nf_conntrack_ipv4 nf_defrag_ipv4 nf_nat_ipv4 nf_nat nf_conntrack iptable_mangle iptable_security iptable_raw iptable_filter ip_tables sg btrfs zlib_deflate raid6_pq xor dm_queue_length iTCO_wdt iTCO_vendor_support coretemp kvm dcdbas dm_service_time microcode serio_raw pcspkr lpc_ich mfd_core i7core_edac edac_core ses enclosure ipmi_si ipmi_msghandler shpchp acpi_power_meter mperf nfsd auth_rpcgss nfs_acl lockd uinput sunrpc dm_multipath xfs libcrc32c ata_generic pata_acpi sr_mod cdrom\n   sd_mod usb_storage mgag200 syscopyarea sysfillrect sysimgblt i2c_algo_bit lpfc drm_kms_helper ttm crc32c_intel ata_piix bfa drm ixgbe libata i2c_core mdio crc_t10dif ptp crct10dif_common pps_core scsi_transport_fc dca scsi_tgt megaraid_sas bnx2 dm_mirror dm_region_hash dm_log dm_mod\n  CPU: 16 PID: 2572 Comm: X Not tainted 3.10.0-86.el7.x86_64 #1\n  Hardware name: Dell Inc. PowerEdge R810/0H235N, BIOS 0.3.0 11/14/2009\n  task: ffff8801799dabc0 ti: ffff88016c884000 task.ti: ffff88016c884000\n  RIP: 0010:[<0000000000000000>]  [<          (null)>]           (null)\n  RSP: 0018:ffff88016c885ad8  EFLAGS: 00010202\n  RAX: ffffffffa04e94c0 RBX: ffff880178937a20 RCX: 0000000000000000\n  RDX: 0000000000000000 RSI: 0000000000240004 RDI: ffff880178937a00\n  RBP: ffff88016c885b60 R08: 00000000000171a0 R09: ffff88007cf171a0\n  R10: ffffea0005842540 R11: ffffffff810487b9 R12: ffff880178937b30\n  R13: ffff880178937a00 R14: ffff88016c885b78 R15: ffff880179929400\n  FS:  00007f81ba2ef980(0000) GS:ffff88007cf00000(0000) knlGS:0000000000000000\n  CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n  CR2: 0000000000000000 CR3: 000000016e763000 CR4: 00000000000007e0\n  DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n  DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400\n  Stack:\n   ffffffffa0306fae ffff8801799295c0 0000000000260004 0000000000000001\n   ffff88016c885b60 ffffffffa0307669 00ff88007cf17738 ffff88017cf17700\n   ffff880178937a00 ffff880100000000 ffff880100000000 0000000079929400\n  Call Trace:\n   [<ffffffffa0306fae>] ? ttm_bo_handle_move_mem+0x54e/0x5b0 [ttm]\n   [<ffffffffa0307669>] ? ttm_bo_mem_space+0x169/0x340 [ttm]\n   [<ffffffffa0307bd7>] ttm_bo_move_buffer+0x117/0x130 [ttm]\n   [<ffffffff81130001>] ? perf_event_init_context+0x141/0x220\n   [<ffffffffa0307cb1>] ttm_bo_validate+0xc1/0x130 [ttm]\n   [<ffffffffa04e7377>] mgag200_bo_pin+0x87/0xc0 [mgag200]\n   [<ffffffffa04e56c4>] mga_crtc_cursor_set+0x474/0xbb0 [mgag200]\n   [<ffffffff811971d2>] ? __mem_cgroup_commit_charge+0x152/0x3b0\n   [<ffffffff815c4182>] ? mutex_lock+0x12/0x2f\n   [<ffffffffa0201433>] drm_mode_cursor_common+0x123/0x170 [drm]\n   [<ffffffffa0205231>] drm_mode_cursor_ioctl+0x41/0x50 [drm]\n   [<ffffffffa01f5ca2>] drm_ioctl+0x502/0x630 [drm]\n   [<ffffffff815cbab4>] ? __do_page_fault+0x1f4/0x510\n   [<ffffffff8101cb68>] ? __restore_xstate_sig+0x218/0x4f0\n   [<ffffffff811b4445>] do_vfs_ioctl+0x2e5/0x4d0\n   [<ffffffff8124488e>] ? file_has_perm+0x8e/0xa0\n   [<ffffffff811b46b1>] SyS_ioctl+0x81/0xa0\n   [<ffffffff815d05d9>] system_call_fastpath+0x16/0x1b\n  Code:  Bad RIP value.\n  RIP  [<          (null)>]           (null)\n   RSP <ffff88016c885ad8>\n  CR2: 0000000000000000\n\nSigned-off-by: Rob Clark <rclark@redhat.com>\nReviewed-by: Jérôme Glisse <jglisse@redhat.com>\nReviewed-by: Thomas Hellstrom <thellstrom@vmware.com>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/KrustyFunHouse/android_kernel_oppo_n1/commits/cf828d9fed64eda7a0b3aefd90d1eb2fada2b544"},{"sha":"99792c01fe46e0c8d9ccdf6cdefa2061a7ea7f36","author":{"email":"69e0b8d2011e17a945fe8eaf92a481dab4dbbe4c@mail.ru","name":"Roman Volkov"},"message":"ALSA: oxygen: Xonar DG(X): capture from I2S channel 1, not 2\n\ncommit 3dd77654fb1d7f68b9739f3039bad8dbbc0739f8 upstream.\n\nActually CS4245 connected to the I2S channel 1 for\ncapture, not channel 2. Otherwise capturing and\nplayback does not work for CS4245.\n\nSigned-off-by: Roman Volkov <v1ron@mail.ru>\nSigned-off-by: Clemens Ladisch <clemens@ladisch.de>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/KrustyFunHouse/android_kernel_oppo_n1/commits/99792c01fe46e0c8d9ccdf6cdefa2061a7ea7f36"},{"sha":"377f8ac2e07858b912ca791e6a80c3290986ffc1","author":{"email":"4596b3305151c7ee743192a95d394341e3d3b644@suse.de","name":"Takashi Iwai"},"message":"ALSA: usb-audio: Add quirk for Logitech Webcam C500\n\ncommit e805ca8b0a9b6c91099c0eaa4b160a1196a4ae25 upstream.\n\nLogitech C500 (046d:0807) needs the same workaround like other\nLogitech Webcams.\n\nSigned-off-by: Takashi Iwai <tiwai@suse.de>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/KrustyFunHouse/android_kernel_oppo_n1/commits/377f8ac2e07858b912ca791e6a80c3290986ffc1"},{"sha":"ec012303c26a1d4d6251d74401ee290a063154ac","author":{"email":"14deb5e5e417133e888bf47bb6a3555c9bb7d81c@samba.org","name":"Anton Blanchard"},"message":"powerpc: Align p_dyn, p_rela and p_st symbols\n\ncommit a5b2cf5b1af424ee3dd9e3ce6d5cea18cb927e67 upstream.\n\nThe 64bit relocation code places a few symbols in the text segment.\nThese symbols are only 4 byte aligned where they need to be 8 byte\naligned. Add an explicit alignment.\n\nSigned-off-by: Anton Blanchard <anton@samba.org>\nTested-by: Laurent Dufour <ldufour@linux.vnet.ibm.com>\nSigned-off-by: Benjamin Herrenschmidt <benh@kernel.crashing.org>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/KrustyFunHouse/android_kernel_oppo_n1/commits/ec012303c26a1d4d6251d74401ee290a063154ac"},{"sha":"8271b4d83a6f070ba1cd3a6e4fab36dcf7c2207a","author":{"email":"9cd9d802d23c0ed5e224beabf4ae4a5c478746ef@linaro.org","name":"Linus Walleij"},"message":"ARM: 7991/1: sa1100: fix compile problem on Collie\n\ncommit 052450fdc55894a39fbae93d9bbe43947956f663 upstream.\n\nDue to a problem in the MFD Kconfig it was not possible to\ncompile the UCB battery driver for the Collie SA1100 system,\nin turn making it impossible to compile in the battery driver.\n(See patch \"mfd: include all drivers in subsystem menu\".)\n\nAfter fixing the MFD Kconfig (separate patch) a compile error\nappears in the Collie battery driver due to the <mach/collie.h>\nimplicitly requiring <mach/hardware.h> through <linux/gpio.h>\nvia <mach/gpio.h> prior to commit\n40ca061b \"ARM: 7841/1: sa1100: remove complex GPIO interface\".\n\nFix this up by including the required header into\n<mach/collie.h>.\n\nCc: Andrea Adami <andrea.adami@gmail.com>\nCc: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com>\nSigned-off-by: Linus Walleij <linus.walleij@linaro.org>\nSigned-off-by: Russell King <rmk+kernel@arm.linux.org.uk>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/KrustyFunHouse/android_kernel_oppo_n1/commits/8271b4d83a6f070ba1cd3a6e4fab36dcf7c2207a"},{"sha":"bb7d79fc8250eaa01ac6f82f9001ffcec0e7ca36","author":{"email":"3d0f3b9ddcacec30c4008c5e030e6c13a478cb4f@numascale.com","name":"Daniel J Blueman"},"message":"x86/amd/numa: Fix northbridge quirk to assign correct NUMA node\n\ncommit 847d7970defb45540735b3fb4e88471c27cacd85 upstream.\n\nFor systems with multiple servers and routed fabric, all\nnorthbridges get assigned to the first server. Fix this by also\nusing the node reported from the PCI bus. For single-fabric\nsystems, the northbriges are on PCI bus 0 by definition, which\nare on NUMA node 0 by definition, so this is invarient on most\nsystems.\n\nTested on fam10h and fam15h single and multi-fabric systems and\ncandidate for stable.\n\nSigned-off-by: Daniel J Blueman <daniel@numascale.com>\nAcked-by: Steffen Persvold <sp@numascale.com>\nAcked-by: Borislav Petkov <bp@suse.de>\nLink: http://lkml.kernel.org/r/1394710981-3596-1-git-send-email-daniel@numascale.com\nSigned-off-by: Ingo Molnar <mingo@kernel.org>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/KrustyFunHouse/android_kernel_oppo_n1/commits/bb7d79fc8250eaa01ac6f82f9001ffcec0e7ca36"},{"sha":"b46741f24d1c0d0d8dcfb3c63439338d2dc0337e","author":{"email":"858732b0d97598091e89a0d1be1593caf0442efe@intel.com","name":"Chuansheng Liu"},"message":"genirq: Remove racy waitqueue_active check\n\ncommit c685689fd24d310343ac33942e9a54a974ae9c43 upstream.\n\nWe hit one rare case below:\n\nT1 calling disable_irq(), but hanging at synchronize_irq()\nalways;\nThe corresponding irq thread is in sleeping state;\nAnd all CPUs are in idle state;\n\nAfter analysis, we found there is one possible scenerio which\ncauses T1 is waiting there forever:\nCPU0                                       CPU1\n synchronize_irq()\n  wait_event()\n    spin_lock()\n                                           atomic_dec_and_test(&threads_active)\n      insert the __wait into queue\n    spin_unlock()\n                                           if(waitqueue_active)\n    atomic_read(&threads_active)\n                                             wake_up()\n\nHere after inserted the __wait into queue on CPU0, and before\ntest if queue is empty on CPU1, there is no barrier, it maybe\ncause it is not visible for CPU1 immediately, although CPU0 has\nupdated the queue list.\nIt is similar for CPU0 atomic_read() threads_active also.\n\nSo we'd need one smp_mb() before waitqueue_active.that, but removing\nthe waitqueue_active() check solves it as wel l and it makes\nthings simple and clear.\n\nSigned-off-by: Chuansheng Liu <chuansheng.liu@intel.com>\nCc: Xiaoming Wang <xiaoming.wang@intel.com>\nLink: http://lkml.kernel.org/r/1393212590-32543-1-git-send-email-chuansheng.liu@intel.com\nSigned-off-by: Thomas Gleixner <tglx@linutronix.de>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/KrustyFunHouse/android_kernel_oppo_n1/commits/b46741f24d1c0d0d8dcfb3c63439338d2dc0337e"},{"sha":"c5ad4fdec0ae15d197508185643c68470868121d","author":{"email":"a8167b9d27aca9c6624754deb52c4c6420eded04@huawei.com","name":"Li Zefan"},"message":"cpuset: fix a race condition in __cpuset_node_allowed_softwall()\n\ncommit 99afb0fd5f05aac467ffa85c36778fec4396209b upstream.\n\nIt's not safe to access task's cpuset after releasing task_lock().\nHolding callback_mutex won't help.\n\nSigned-off-by: Li Zefan <lizefan@huawei.com>\nSigned-off-by: Tejun Heo <tj@kernel.org>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/KrustyFunHouse/android_kernel_oppo_n1/commits/c5ad4fdec0ae15d197508185643c68470868121d"},{"sha":"a299804140325db7b93173419b0724056b60f34d","author":{"email":"43232e92d70cc7aa53504ad0397085ee47bad87f@goodmis.org","name":"Steven Rostedt (Red Hat)"},"message":"tracing: Do not add event files for modules that fail tracepoints\n\ncommit 45ab2813d40d88fc575e753c38478de242d03f88 upstream.\n\nIf a module fails to add its tracepoints due to module tainting, do not\ncreate the module event infrastructure in the debugfs directory. As the events\nwill not work and worse yet, they will silently fail, making the user wonder\nwhy the events they enable do not display anything.\n\nHaving a warning on module load and the events not visible to the users\nwill make the cause of the problem much clearer.\n\nLink: http://lkml.kernel.org/r/20140227154923.265882695@goodmis.org\n\nFixes: 6d723736e472 \"tracing/events: add support for modules to TRACE_EVENT\"\nAcked-by: Mathieu Desnoyers <mathieu.desnoyers@efficios.com>\nCc: Rusty Russell <rusty@rustcorp.com.au>\nSigned-off-by: Steven Rostedt <rostedt@goodmis.org>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/KrustyFunHouse/android_kernel_oppo_n1/commits/a299804140325db7b93173419b0724056b60f34d"},{"sha":"f37058b88772ed4de812d1716634649ee1e6480e","author":{"email":"fbd796546fc801b34e01e453c6fd30283e012038@s5r6.in-berlin.de","name":"Stefan Richter"},"message":"firewire: net: fix use after free\n\ncommit 8987583366ae9e03c306c2b7d73bdb952df1d08d upstream.\n\nCommit 8408dc1c14c1 \"firewire: net: use dev_printk API\" introduced a\nuse-after-free in a failure path.  fwnet_transmit_packet_failed(ptask)\nmay free ptask, then the dev_err() call dereferenced it.  The fix is\nstraightforward; simply reorder the two calls.\n\nReported-by: Dan Carpenter <dan.carpenter@oracle.com>\nSigned-off-by: Stefan Richter <stefanr@s5r6.in-berlin.de>\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/KrustyFunHouse/android_kernel_oppo_n1/commits/f37058b88772ed4de812d1716634649ee1e6480e"},{"sha":"f8637162b3632012f6d418076e84701086fb83b5","author":{"email":"546b05909706652891a87f7bfe385ae147f61f91@kernel.org","name":"Tejun Heo"},"message":"firewire: don't use PREPARE_DELAYED_WORK\n\ncommit 70044d71d31d6973665ced5be04ef39ac1c09a48 upstream.\n\nPREPARE_[DELAYED_]WORK() are being phased out.  They have few users\nand a nasty surprise in terms of reentrancy guarantee as workqueue\nconsiders work items to be different if they don't have the same work\nfunction.\n\nfirewire core-device and sbp2 have been been multiplexing work items\nwith multiple work functions.  Introduce fw_device_workfn() and\nsbp2_lu_workfn() which invoke fw_device->workfn and\nsbp2_logical_unit->workfn respectively and always use the two\nfunctions as the work functions and update the users to set the\n->workfn fields instead of overriding work functions using\nPREPARE_DELAYED_WORK().\n\nThis fixes a variety of possible regressions since a2c1c57be8d9\n\"workqueue: consider work function when searching for busy work items\"\ndue to which fw_workqueue lost its required non-reentrancy property.\n\nSigned-off-by: Tejun Heo <tj@kernel.org>\nAcked-by: Stefan Richter <stefanr@s5r6.in-berlin.de>\nCc: linux1394-devel@lists.sourceforge.net\nSigned-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>","distinct":true,"url":"https://api.github.com/repos/KrustyFunHouse/android_kernel_oppo_n1/commits/f8637162b3632012f6d418076e84701086fb83b5"}]}