LKML Archive on lore.kernel.org
 help / Atom feed
From: Johannes Weiner <hannes@cmpxchg.org>
To: Ben Hutchings <ben@decadent.org.uk>
Cc: linux-kernel@vger.kernel.org, stable@vger.kernel.org,
	akpm@linux-foundation.org,
	Antonio SJ Musumeci <trapexit@spawn.link>,
	Linus Torvalds <torvalds@linux-foundation.org>
Subject: Re: [PATCH 3.16 327/346] mm: workingset: fix crash in shadow node shrinker caused by replace_page_cache_page()
Date: Mon, 14 Nov 2016 10:42:49 -0500
Message-ID: <20161114154249.GA3291@cmpxchg.org> (raw)
In-Reply-To: <lsq.1479082460.5738306@decadent.org.uk>

On Mon, Nov 14, 2016 at 12:14:20AM +0000, Ben Hutchings wrote:
> 3.16.39-rc1 review patch.  If anyone has any objections, please let me know.
> 
> ------------------
> 
> From: Johannes Weiner <hannes@cmpxchg.org>
> 
> commit 22f2ac51b6d643666f4db093f13144f773ff3f3a upstream.
> 
> Antonio reports the following crash when using fuse under memory pressure:
> 
>   kernel BUG at /build/linux-a2WvEb/linux-4.4.0/mm/workingset.c:346!
>   invalid opcode: 0000 [#1] SMP
>   Modules linked in: all of them
>   CPU: 2 PID: 63 Comm: kswapd0 Not tainted 4.4.0-36-generic #55-Ubuntu
>   Hardware name: System manufacturer System Product Name/P8H67-M PRO, BIOS 3904 04/27/2013
>   task: ffff88040cae6040 ti: ffff880407488000 task.ti: ffff880407488000
>   RIP: shadow_lru_isolate+0x181/0x190
>   Call Trace:
>     __list_lru_walk_one.isra.3+0x8f/0x130
>     list_lru_walk_one+0x23/0x30
>     scan_shadow_nodes+0x34/0x50
>     shrink_slab.part.40+0x1ed/0x3d0
>     shrink_zone+0x2ca/0x2e0
>     kswapd+0x51e/0x990
>     kthread+0xd8/0xf0
>     ret_from_fork+0x3f/0x70
> 
> which corresponds to the following sanity check in the shadow node
> tracking:
> 
>   BUG_ON(node->count & RADIX_TREE_COUNT_MASK);
> 
> The workingset code tracks radix tree nodes that exclusively contain
> shadow entries of evicted pages in them, and this (somewhat obscure)
> line checks whether there are real pages left that would interfere with
> reclaim of the radix tree node under memory pressure.
> 
> While discussing ways how fuse might sneak pages into the radix tree
> past the workingset code, Miklos pointed to replace_page_cache_page(),
> and indeed there is a problem there: it properly accounts for the old
> page being removed - __delete_from_page_cache() does that - but then
> does a raw raw radix_tree_insert(), not accounting for the replacement
> page.  Eventually the page count bits in node->count underflow while
> leaving the node incorrectly linked to the shadow node LRU.
> 
> To address this, make sure replace_page_cache_page() uses the tracked
> page insertion code, page_cache_tree_insert().  This fixes the page
> accounting and makes sure page-containing nodes are properly unlinked
> from the shadow node LRU again.
> 
> Also, make the sanity checks a bit less obscure by using the helpers for
> checking the number of pages and shadows in a radix tree node.
> 
> Fixes: 449dd6984d0e ("mm: keep page cache radix tree nodes in check")
> Link: http://lkml.kernel.org/r/20160919155822.29498-1-hannes@cmpxchg.org
> Signed-off-by: Johannes Weiner <hannes@cmpxchg.org>
> Reported-by: Antonio SJ Musumeci <trapexit@spawn.link>
> Debugged-by: Miklos Szeredi <miklos@szeredi.hu>
> Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
> [bwh: Backported to 3.16:
>  - Implementation of page_cache_tree_insert() is different
>  - Adjust context]
> Signed-off-by: Ben Hutchings <ben@decadent.org.uk>

The added sanity checks in this patch can crash kernels built with
CONFIG_DEBUG_VM. While I doubt many people run 3.16 with that enabled,
please also consider taking the following two changes. The first one
changes the new VM_BUG_ONs to mere warnings, and the second patch
addresses the underlying issue that triggered them in the first place.

21f54ddae449 Using BUG_ON() as an assert() is _never_ acceptable
d3798ae8c6f3 mm: filemap: don't plant shadow entries without radix tree node

Attaching the latter below, since it's drastically different than the
upstream change, but a lot simpler because it predates the DAX stuff.

Thanks

---

>From 06313bb20559e6da67dcc7fe6c66e928f713d061 Mon Sep 17 00:00:00 2001
From: Johannes Weiner <hannes@cmpxchg.org>
Date: Tue, 4 Oct 2016 22:02:08 +0200
Subject: [PATCH] mm: filemap: don't plant shadow entries without radix tree
 node

commit d3798ae8c6f3767c726403c2ca6ecc317752c9dd upstream.

When the underflow checks were added to workingset_node_shadow_dec(),
they triggered immediately:

  kernel BUG at ./include/linux/swap.h:276!
  invalid opcode: 0000 [#1] SMP
  Modules linked in: isofs usb_storage fuse xt_CHECKSUM ipt_MASQUERADE nf_nat_masquerade_ipv4 tun nf_conntrack_netbios_ns nf_conntrack_broadcast ip6t_REJECT nf_reject_ipv6
   soundcore wmi acpi_als pinctrl_sunrisepoint kfifo_buf tpm_tis industrialio acpi_pad pinctrl_intel tpm_tis_core tpm nfsd auth_rpcgss nfs_acl lockd grace sunrpc dm_crypt
  CPU: 0 PID: 20929 Comm: blkid Not tainted 4.8.0-rc8-00087-gbe67d60ba944 #1
  Hardware name: System manufacturer System Product Name/Z170-K, BIOS 1803 05/06/2016
  task: ffff8faa93ecd940 task.stack: ffff8faa7f478000
  RIP: page_cache_tree_insert+0xf1/0x100
  Call Trace:
    __add_to_page_cache_locked+0x12e/0x270
    add_to_page_cache_lru+0x4e/0xe0
    mpage_readpages+0x112/0x1d0
    blkdev_readpages+0x1d/0x20
    __do_page_cache_readahead+0x1ad/0x290
    force_page_cache_readahead+0xaa/0x100
    page_cache_sync_readahead+0x3f/0x50
    generic_file_read_iter+0x5af/0x740
    blkdev_read_iter+0x35/0x40
    __vfs_read+0xe1/0x130
    vfs_read+0x96/0x130
    SyS_read+0x55/0xc0
    entry_SYSCALL_64_fastpath+0x13/0x8f
  Code: 03 00 48 8b 5d d8 65 48 33 1c 25 28 00 00 00 44 89 e8 75 19 48 83 c4 18 5b 41 5c 41 5d 41 5e 5d c3 0f 0b 41 bd ef ff ff ff eb d7 <0f> 0b e8 88 68 ef ff 0f 1f 84 00
  RIP  page_cache_tree_insert+0xf1/0x100

This is a long-standing bug in the way shadow entries are accounted in
the radix tree nodes. The shrinker needs to know when radix tree nodes
contain only shadow entries, no pages, so node->count is split in half
to count shadows in the upper bits and pages in the lower bits.

Unfortunately, the radix tree implementation doesn't know of this and
assumes all entries are in node->count. When there is a shadow entry
directly in root->rnode and the tree is later extended, the radix tree
implementation will copy that entry into the new node and and bump its
node->count, i.e. increases the page count bits. Once the shadow gets
removed and we subtract from the upper counter, node->count underflows
and triggers the warning. Afterwards, without node->count reaching 0
again, the radix tree node is leaked.

Limit shadow entries to when we have actual radix tree nodes and can
count them properly. That means we lose the ability to detect refaults
from files that had only the first page faulted in at eviction time.

Fixes: 449dd6984d0e ("mm: keep page cache radix tree nodes in check")
Signed-off-by: Johannes Weiner <hannes@cmpxchg.org>
Reported-and-tested-by: Linus Torvalds <torvalds@linux-foundation.org>
Reviewed-by: Jan Kara <jack@suse.cz>
Cc: Andrew Morton <akpm@linux-foundation.org>
Cc: stable@vger.kernel.org
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
---
 mm/filemap.c | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/mm/filemap.c b/mm/filemap.c
index 900edfaf6df5..eb228111ae6e 100644
--- a/mm/filemap.c
+++ b/mm/filemap.c
@@ -121,6 +121,13 @@ static void page_cache_tree_delete(struct address_space *mapping,
 
 	__radix_tree_lookup(&mapping->page_tree, page->index, &node, &slot);
 
+	/*
+	 * We need a node to properly account shadow
+	 * entries. Don't plant any without. XXX
+	 */
+	if (!node)
+		shadow = NULL;
+
 	if (shadow) {
 		mapping->nrshadows++;
 		/*
-- 
2.10.1

  reply index

Thread overview: 352+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2016-11-14  0:14 [PATCH 3.16 000/346] 3.16.39-rc1 review Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 282/346] openrisc: fix copy_from_user() Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 130/346] drm/nouveau/fbcon: fix font width not divisible by 8 Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 046/346] drm/radeon: add a delay after ATPX dGPU power off Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 277/346] metag: copy_from_user() should zero the destination on access_ok() failure Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 093/346] target: Fix missing complete during ABORT_TASK + CMD_T_FABRIC_STOP Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 102/346] libceph: set 'exists' flag for newly up osd Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 189/346] usb: xhci: Fix panic if disconnect Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 170/346] ARC: Call trace_hardirqs_on() before enabling irqs Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 227/346] drm/msm: use mutex_lock_interruptible for submit ioctl Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 238/346] ipv6: add missing netconf notif when 'all' is updated Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 121/346] MIPS: c-r4k: Fix protected_writeback_scache_line for EVA Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 281/346] mn10300: copy_from_user() should zero on access_ok() failure Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 216/346] timekeeping: Cap array access in timekeeping_debug Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 326/346] MIPS: Malta: Fix IOCU disable switch read for MIPS64 Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 084/346] netfilter: x_tables: speed up jump target validation Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 320/346] ip6_gre: fix flowi6_proto value in ip6gre_xmit_other() Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 005/346] s5p-mfc: Add release callback for memory region devs Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 201/346] USB: serial: option: add WeTelecom WM-D200 Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 051/346] ppp: defer netns reference release for ppp channel Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 265/346] NFSv4.1: Fix the CREATE_SESSION slot number accounting Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 001/346] lib/mpi: mpi_read_raw_data(): fix nbits calculation Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 232/346] ALSA: timer: fix NULL pointer dereference on memory allocation failure Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 134/346] tcp: consider recv buf for the initial window scale Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 175/346] MIPS: KVM: Fix mapped fault broken commpage handling Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 318/346] tcp: fix a compile error in DBGUNDO() Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 259/346] xfrm_user: propagate sec ctx allocation errors Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 296/346] fix minor infoleak in get_user_ex() Ben Hutchings
     [not found]   ` <CA+55aFyrySgb5rGq=0aON5tPu5_UR5CNn8T0FUqonMqSJUTXrQ@mail.gmail.com>
2016-11-14  2:27     ` Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 298/346] USB: change bInterval default to 10 ms Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 087/346] tpm: read burstcount from TPM_STS in one 32-bit transaction Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 242/346] x86/paravirt: Do not trace _paravirt_ident_*() functions Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 028/346] usb: renesas_usbhs: protect the CFIFOSEL setting in usbhsg_ep_enable() Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 039/346] batman-adv: Fix non-atomic bla_claim::backbone_gw access Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 271/346] nl80211: validate number of probe response CSA counters Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 050/346] net: mvneta: set real interrupt per packet for tx_done Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 263/346] asm-generic: make copy_from_user() zero the destination properly Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 324/346] mm,ksm: fix endless looping in allocating memory when ksm enable Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 162/346] netfilter: nfnetlink_queue: reject verdict request from different portid Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 217/346] x86/apic: Do not init irq remapping if ioapic is disabled Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 331/346] KEYS: Fix short sprintf buffer in /proc/keys show function Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 280/346] mn10300: failing __get_user() and get_user() should zero Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 166/346] cpuset: make sure new tasks conform to the current config of the cpuset Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 067/346] s390/mm: fix gmap tlb flush issues Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 192/346] bcache: register_bcache(): call blkdev_put() when cache_alloc() fails Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 226/346] fs/seq_file: fix out-of-bounds read Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 021/346] tty/serial: atmel: fix RS485 half duplex with DMA Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 269/346] crypto: arm64/aes-ctr - fix NULL dereference in tail processing Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 276/346] ia64: copy_from_user() should zero the destination on access_ok() failure Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 157/346] drm/edid: Add 6 bpc quirk for display AEO model 0 Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 014/346] usb: dwc3: fix for the isoc transfer EP_BUSY flag Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 237/346] serial: 8250: added acces i/o products quad and octal serial cards Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 018/346] drm/nouveau: Don't leak runtime pm ref on driver unload Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 198/346] Input: i8042 - set up shared ps2_cmd_mutex for AUX ports Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 010/346] random: print a warning for the first ten uninitialized random users Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 031/346] ext4: check for extents that wrap around Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 009/346] gpio: pca953x: Fix NBANK calculation for PCA9536 Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 107/346] tools/vm/slabinfo: fix an unintentional printf Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 246/346] l2tp: fix use-after-free during module unload Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 002/346] HID: uhid: fix timeout when probe races with IO Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 193/346] bcache: RESERVE_PRIO is too small by one when prio_buckets() is a power of two Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 306/346] xfrm: Fix memory leak of aead algorithm name Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 036/346] batman-adv: Fix orig_node_vlan leak on orig_node_release Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 045/346] batman-adv: Fix speedy join in gateway client mode Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 185/346] iio: proximity: as3935: set up buffer timestamps for non-zero values Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 106/346] radix-tree: fix radix_tree_iter_retry() for tagged iterators Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 029/346] Input: xpad - validate USB endpoint count during probe Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 178/346] MIPS: KVM: Propagate kseg0/mapped tlb fault errors Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 037/346] batman-adv: Fix kerneldoc member names in for main structs Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 230/346] powerpc/powernv : Drop reference added by kset_find_obj() Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 319/346] ip6_gre: Set flowi6_proto as IPPROTO_GRE in xmit path Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 190/346] xhci: don't dereference a xhci member after removing xhci Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 096/346] cifs: fix crash due to race in hmac(md5) handling Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 004/346] s5p-mfc: Set device name for reserved memory region devs Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 152/346] USB: serial: ftdi_sio: add PIDs for Ivium Technologies devices Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 205/346] iio: accel: kxsd9: Fix raw read return Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 057/346] x86/quirks: Add early quirk to reset Apple AirPort card Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 075/346] ext4: short-cut orphan cleanup on error Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 153/346] USB: serial: ftdi_sio: add device ID for WICED USB UART dev board Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 139/346] balloon: check the number of available pages in leak balloon Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 105/346] nfs: don't create zero-length requests Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 240/346] kernel/fork: fix CLONE_CHILD_CLEARTID regression in nscd Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 080/346] xfrm: fix crash in XFRM_MSG_GETSA netlink handler Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 085/346] crypto: nx - off by one bug in nx_of_update_msc() Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 327/346] mm: workingset: fix crash in shadow node shrinker caused by replace_page_cache_page() Ben Hutchings
2016-11-14 15:42   ` Johannes Weiner [this message]
2016-11-20  1:13     ` Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 135/346] s390: Define AT_VECTOR_SIZE_ARCH for ARCH_DLINFO Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 161/346] netfilter: nf_ct_expect: remove the redundant slash when policy name is empty Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 047/346] drm/radeon: Poll for both connect/disconnect on analog connectors Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 143/346] sysv, ipc: fix security-layer leaking Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 101/346] bpf, mips: fix off-by-one in ctx offset allocation Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 186/346] iio: adc: at91: unbreak channel adc channel 3 Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 262/346] alpha: fix copy_from_user() Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 070/346] ARM: 8561/3: dma-mapping: Don't use outer_flush_range when the L2C is coherent Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 307/346] can: flexcan: fix resume function Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 111/346] net/irda: fix NULL pointer dereference on memory allocation failure Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 025/346] hp-wmi: Fix wifi cannot be hard-unblocked Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 286/346] score: fix __get_user/get_user Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 065/346] cifs: Check for existing directory when opening file with O_CREAT Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 177/346] MIPS: KVM: Fix gfn range check in kseg0 tlb faults Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 329/346] arm64: perf: reject groups spanning multiple HW PMUs Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 035/346] batman-adv: Avoid nullptr dereference in dat after vlan_insert_tag Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 059/346] ALSA: hda - fix use-after-free after module unload Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 151/346] USB: serial: option: add D-Link DWM-156/A3 Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 125/346] fuse: fuse_flush must check mapping->flags for errors Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 117/346] CIFS: Fix a possible invalid memory access in smb2_query_symlink() Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 174/346] usb: misc: usbtest: add fix for driver hang Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 171/346] arm: oabi compat: add missing access checks Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 049/346] ALSA: pcm: Free chmap at PCM free callback, too Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 184/346] cdc-acm: fix wrong pipe type on rx interrupt xfers Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 264/346] mtd: nand: davinci: Reinitialize the HW ECC engine in 4bit hwctl Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 156/346] vfio/pci: Fix NULL pointer oops in error interrupt setup handling Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 206/346] powerpc/pseries: use pci_host_bridge.release_fn() to kfree(phb) Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 017/346] IB/mlx5: Fix MODIFY_QP command input structure Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 231/346] ALSA: timer: fix division by zero after SNDRV_TIMER_IOCTL_CONTINUE Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 030/346] ath9k: Fix programming of minCCA power threshold Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 124/346] fuse: fsync() did not return IO errors Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 063/346] Bluetooth: Add support of 13d3:3490 AR3012 device Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 247/346] iio: fix pressure data output unit in hid-sensor-attributes Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 023/346] serial: samsung: Fix possible out of bounds access on non-DT platform Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 006/346] netlabel: add address family checks to netlbl_{sock,req}_delattr() Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 328/346] ARM: 8618/1: decompressor: reset ttbcr fields to use TTBR0 on ARMv7 Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 176/346] MIPS: KVM: Add missing gfn range check Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 013/346] ARM: mvebu: fix HW I/O coherency related deadlocks Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 158/346] drm/i915/dp: Revert "drm/i915/dp: fall back to 18 bpp when sink capability is unknown" Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 137/346] ALSA: hda - On-board speaker fixup on ACER Veriton Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 334/346] brcmfmac: avoid potential stack overflow in brcmf_cfg80211_start_ap() Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 123/346] avr32: off by one in at32_init_pio() Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 196/346] MIPS: KVM: Check for pfn noslot case Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 144/346] ALSA: hda: Fix krealloc() with __GFP_ZERO usage Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 314/346] i2c: mux: pca954x: retry updating the mux selection on failure Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 245/346] x86/AMD: Apply erratum 665 on machines without a BIOS fix Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 109/346] ARM: OMAP3: hwmod data: Add sysc information for DSI Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 305/346] openrisc: fix the fix of copy_from_user() Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 330/346] Bluetooth: Fix potential NULL dereference in RFCOMM bind callback Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 115/346] Input: i8042 - break load dependency between atkbd/psmouse and i8042 Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 210/346] Input: tegra-kbc - fix inverted reset logic Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 221/346] ARM: kirkwood: ib62x0: fix size of u-boot environment partition Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 295/346] avr32: fix copy_from_user() Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 288/346] sh64: failing __get_user() should zero Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 099/346] tty/vt/keyboard: fix OOB access in do_compute_shiftstate() Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 146/346] metag: Fix __cmpxchg_u32 asm constraint for CMP Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 141/346] dm flakey: error READ bios during the down_interval Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 098/346] iscsi-target: Fix panic when adding second TCP connection to iSCSI session Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 138/346] x86/syscalls/64: Add compat_sys_keyctl for 32-bit userspace Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 236/346] ALSA: fireworks: accessing to user space outside spinlock Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 131/346] drm/nouveau/acpi: ensure matching ACPI handle and supported functions Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 172/346] megaraid_sas: Fix probing cards without io port Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 094/346] target: Fix race between iscsi-target connection shutdown + ABORT_TASK Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 260/346] kvm-arm: Unmap shadow pagetables properly Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 224/346] ARM: sa1100: clear reset status prior to reboot Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 256/346] crypto: cryptd - initialize child shash_desc on import Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 308/346] ocfs2/dlm: fix race between convert and migration Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 234/346] dm crypt: fix free of bad values after tfm allocation failure Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 147/346] block: fix use-after-free in seq file Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 223/346] clocksource/drivers/sun4i: Clear interrupts after stopping timer in probe function Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 194/346] tcp: fix use after free in tcp_xmit_retransmit_queue() Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 008/346] PCI: Mark Atheros AR9485 and QCA9882 to avoid bus reset Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 163/346] powerpc/book3s: Fix MCE console messages for unrecoverable MCE Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 097/346] hwmon: (adt7411) set bit 3 in CFG1 register Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 285/346] s390: get_user() should zero on failure Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 081/346] crypto: scatterwalk - Fix test in scatterwalk_done Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 322/346] ipmr, ip6mr: fix scheduling while atomic and a deadlock with ipmr_get_route Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 244/346] IB/ipoib: Fix memory corruption in ipoib cm mode connect flow Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 233/346] NFSv4.x: Fix a refcount leak in nfs_callback_up_net Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 086/346] i2c: efm32: fix a failure path in efm32_i2c_probe() Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 268/346] crypto: skcipher - Fix blkcipher walk OOM crash Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 150/346] SUNRPC: allow for upcalls for same uid but different gss service Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 027/346] usb: renesas_usbhs: fix NULL pointer dereference in xfer_work() Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 228/346] drm/msm: fix use of copy_from_user() while holding spinlock Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 294/346] microblaze: fix __get_user() Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 164/346] crypto: caam - fix non-hmac hashes Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 133/346] drm/nouveau/acpi: check for function 0x1B before using it Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 290/346] sparc32: fix copy_from_user() Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 058/346] posix_cpu_timer: Exit early when process has been reaped Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 218/346] USB: serial: option: add WeTelecom 0x6802 and 0x6803 products Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 160/346] powerpc/powernv: Fix MCE handler to avoid trashing CR0/CR1 registers Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 092/346] mtd: nand: fix bug writing 1 byte less than page size Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 309/346] fsnotify: add a way to stop queueing events on group shutdown Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 066/346] net: ethoc: Fix early error paths Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 038/346] batman-adv: lock crc access in bridge loop avoidance Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 173/346] usb: gadget: fsl_qe_udc: off by one in setup_received_handle() Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 179/346] power: supply: max17042_battery: fix model download bug Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 335/346] vfio/pci: Fix integer overflows, bitmask check Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 074/346] ext4: fix reference counting bug on block allocation error Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 183/346] USB: serial: mos7840: fix non-atomic allocation in write path Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 297/346] perf/x86/amd: Make HW_CACHE_REFERENCES and HW_CACHE_MISSES measure L2 Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 090/346] brcmsmac: Free packet if dma_mapping_error() fails in dma_rxfill Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 197/346] drm/radeon: fix radeon_move_blit on 32bit systems Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 222/346] batman-adv: Add missing refcnt for last_candidate Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 241/346] ALSA: timer: fix NULL pointer dereference in read()/ioctl() race Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 108/346] pps: do not crash when failed to register Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 200/346] parisc: Fix order of EREFUSED define in errno.h Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 279/346] mips: copy_from_user() must zero the destination on access_ok() failure Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 024/346] hwrng: omap - Fix assumption that runtime_get_sync will always succeed Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 119/346] KEYS: 64-bit MIPS needs to use compat_sys_keyctl for 32-bit userspace Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 255/346] ipv6: addrconf: fix dev refcont leak when DAD failed Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 180/346] PM / hibernate: Restore processor state before using per-CPU variables Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 140/346] ftrace/recordmcount: Work around for addition of metag magic but not relocations Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 312/346] fix fault_in_multipages_...() on architectures with no-op access_ok() Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 003/346] macvlan: Fix potential use-after free for broadcasts Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 321/346] tracing: Move mutex to protect against resetting of seq data Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 132/346] drm/nouveau/acpi: return supported DSM functions Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 253/346] Btrfs: add missing blk_finish_plug in btrfs_sync_log() Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 069/346] usb: quirks: Add no-lpm quirk for Elan Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 169/346] x86/mm: Disable preemption during CR3 read+write Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 142/346] mm/hugetlb: avoid soft lockup in set_max_huge_pages() Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 019/346] drm/radeon: Don't leak runtime pm ref on driver unload Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 289/346] sh: fix copy_from_user() Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 026/346] usb: renesas_usbhs: fix the sequence in xfer_work() Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 015/346] crypto: gcm - Filter out async ghash if necessary Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 061/346] NFS: Don't drop CB requests with invalid principals Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 333/346] firewire: net: guard against rx buffer overflows Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 022/346] serial: samsung: Fix ERR pointer dereference on deferred probe Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 202/346] staging: comedi: daqboard2000: bug fix board type matching code Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 136/346] ext4: validate that metadata blocks do not overlap superblock Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 071/346] KVM: nVMX: fix lifetime issues for vmcs02 Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 088/346] arm64: debug: unmask PSTATE.D earlier Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 091/346] brcmsmac: Initialize power in brcms_c_stf_ss_algo_channel_get() Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 120/346] drm/radeon: fix firmware info version checks Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 235/346] kernfs: don't depend on d_find_any_alias() when generating notifications Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 311/346] ocfs2: fix start offset to ocfs2_zero_range_for_truncate() Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 270/346] MIPS: paravirt: Fix undefined reference to smp_bootstrap Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 214/346] ubifs: Fix assertion in layout_in_gaps() Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 191/346] KVM: nVMX: postpone VMCS changes on MSR_IA32_APICBASE write Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 252/346] iio:core: fix IIO_VAL_FRACTIONAL sign handling Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 323/346] drm/radeon/si/dpm: add workaround for for Jet parts Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 064/346] qxl: check for kmap failures Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 077/346] mtd: pmcmsp-flash: Allocating too much in init_msp_flash() Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 062/346] Bluetooth: Add USB ID 13D3:3487 to ath3k Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 204/346] iio: adc: ti_am335x_adc: Protect FIFO1 from concurrent access Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 072/346] KVM: nVMX: Fix memory corruption when using VMCS shadowing Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 188/346] xhci: always handle "Command Ring Stopped" events Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 044/346] MIPS: Fix page table corruption on THP permission changes Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 302/346] IB/mlx4: Use correct subnet-prefix in QP1 mads under SR-IOV Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 052/346] rtc: ds1307: Fix relying on reset value for weekday Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 060/346] svc: Avoid garbage replies when pc_func() returns rpc_drop_reply Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 122/346] arm64: Define AT_VECTOR_SIZE_ARCH for ARCH_DLINFO Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 159/346] aacraid: Check size values after double-fetch from user Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 325/346] ARM: 8617/1: dma: fix dma_max_pfn() Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 209/346] usb: gadget: fsl_qe_udc: signedness bug in qe_get_frame() Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 083/346] netfilter: x_tables: validate targets of jumps Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 313/346] i2c-eg20t: fix race between i2c init and interrupt enable Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 293/346] microblaze: fix copy_from_user() Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 215/346] tun: fix transmit timestamp support Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 043/346] iwlwifi: pcie: fix access to scratch buffer Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 257/346] ALSA: timer: Fix zero-division by continue of uninitialized instance Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 048/346] ALSA: ctl: Stop notification after disconnection Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 207/346] powerpc/prom: Fix sub-processor option passed to ibm, client-architecture-support Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 100/346] MIPS: RM7000: Double locking bug in rm7k_tc_disable() Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 284/346] ppc32: fix copy_from_user() Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 243/346] IB/core: Fix use after free in send_leave function Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 303/346] irda: Free skb on irda_accept error path Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 073/346] drm/radeon: support backlight control for UNIPHY3 Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 068/346] USB: quirks: Fix another ELAN touchscreen Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 199/346] net/mlx5: Added missing check of msg length in verifying its signature Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 154/346] USB: serial: option: add support for Telit LE920A4 Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 112/346] l2tp: Correctly return -EBADF from pppol2tp_getname Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 258/346] ALSA: rawmidi: Fix possible deadlock with virmidi registration Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 278/346] ARC: uaccess: get_user to zero out dest in cause of fault Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 053/346] [media] ngene: properly handle __user ptr Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 110/346] tile: Define AT_VECTOR_SIZE_ARCH for ARCH_DLINFO Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 250/346] usb: renesas_usbhs: fix clearing the {BRDY,BEMP}STS condition Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 283/346] parisc: fix copy_from_user() Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 007/346] [media] em28xx-i2c: rt_mutex_trylock() returns zero on failure Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 299/346] IB/ipoib: Don't allow MC joins during light MC flush Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 113/346] module: Invalidate signatures on force-loaded modules Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 229/346] drm/msm: protect against faults from copy_from_user() in submit ioctl Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 212/346] ASoC: omap-mcpdm: Fix irq resource handling Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 219/346] usb: gadget: udc: core: don't starve DMA resources Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 275/346] hexagon: fix strncpy_from_user() error return Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 041/346] batman-adv: Free last_bonding_candidate on release of orig_node Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 273/346] cris: buggered copy_from_user/copy_to_user/clear_user Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 034/346] batman-adv: Avoid nullptr dereference in bla after vlan_insert_tag Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 114/346] Documentation/module-signing.txt: Note need for version info if reusing a key Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 155/346] USB: serial: fix memleak in driver-registration error path Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 316/346] can: dev: fix deadlock reported after bus-off Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 267/346] ARM: sa1111: fix pcmcia suspend/resume Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 300/346] IB/mlx4: Fix incorrect MC join state bit-masking on SR-IOV Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 208/346] drm: Reject page_flip for !DRIVER_MODESET Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 213/346] USB: avoid left shift by -1 Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 187/346] scsi: fix upper bounds check of sense key in scsi_sense_key_string() Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 304/346] avr32: fix 'undefined reference to `___copy_from_user' Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 292/346] m32r: fix __get_user() Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 011/346] random: add interrupt callback to VMBus IRQ handler Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 103/346] libceph: apply new_state before new_up_client on incrementals Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 182/346] USB: serial: mos7720: fix non-atomic allocation in write path Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 104/346] gpio: intel-mid: Remove potentially harmful code Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 095/346] target: Fix max_unmap_lba_count calc overflow Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 181/346] ipv6: suppress sparse warnings in IP6_ECN_set_ce() Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 042/346] ext4: validate s_reserved_gdt_blocks on mount Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 116/346] ceph: Correctly return NXIO errors from ceph_llseek Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 317/346] i2c: qup: skip qup_i2c_suspend if the device is already runtime suspended Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 055/346] x86/quirks: Apply nvidia_bugs quirk only on root bus Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 248/346] iio: accel: kxsd9: Fix scaling bug Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 274/346] frv: fix clear_user() Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 195/346] gpio: Fix OF build problem on UM Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 078/346] USB: serial: option: add support for Telit LE910 PID 0x1206 Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 020/346] drm/radeon: Don't leak runtime pm ref on driver load Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 082/346] mmc: block: fix packed command header endianness Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 056/346] x86/quirks: Reintroduce scanning of secondary buses Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 211/346] USB: fix typo in wMaxPacketSize validation Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 126/346] fuse: fix wrong assignment of ->flags in fuse_send_init() Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 310/346] fanotify: fix list corruption in fanotify_get_response() Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 079/346] Bluetooth: Fix l2cap_sock_setsockopt() with optname BT_RCVMTU Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 254/346] Btrfs: remove root_log_ctx from ctx list before btrfs_sync_log returns Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 332/346] scsi: arcmsr: Buffer overflow in arcmsr_iop_message_xfer() Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 128/346] ubi: Make volume resize power cut aware Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 165/346] USB: validate wMaxPacketValue entries in endpoint descriptors Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 261/346] arm64: spinlocks: implement smp_mb__before_spinlock() as smp_mb() Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 225/346] printk: fix parsing of "brl=" option Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 089/346] brcmfmac: Fix glob_skb leak in brcmf_sdiod_recv_chain Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 315/346] btrfs: ensure that file descriptor used with subvol ioctls is a dir Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 145/346] hostfs: Freeing an ERR_PTR in hostfs_fill_sb_common() Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 203/346] staging: comedi: ni_mio_common: fix AO inttrig backwards compatibility Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 127/346] ubi: Fix race condition between ubi device creation and udev Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 016/346] ARM: AM43XX: hwmod: Fix RSTST register offset for pruss Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 076/346] powerpc/tm: Fix stack pointer corruption in __tm_recheckpoint() Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 118/346] sparc: serial: sunhv: fix a double lock bug Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 040/346] batman-adv: Fix reference leak in batadv_find_router Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 272/346] asm-generic: make get_user() clear the destination on errors Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 301/346] IB/mlx4: Fix code indentation in QP1 MAD flow Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 251/346] efi/libstub: Allocate headspace in efi_get_memory_map() Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 239/346] tcp: fastopen: fix rcv_wup initialization for TFO server on SYN/data Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 168/346] usb: dwc3: gadget: increment request->actual once Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 266/346] USB: serial: simple: add support for another Infineon flashloader Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 220/346] qdisc: fix a module refcount leak in qdisc_create_dflt() Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 287/346] score: fix copy_from_user() and friends Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 148/346] block: fix bdi vs gendisk lifetime mismatch Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 054/346] [media] media: dvb_ringbuffer: Add memory barriers Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 012/346] sched/cputime: Fix prev steal time accouting during CPU hotplug Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 033/346] ext4: don't call ext4_should_journal_data() on the journal inode Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 167/346] s390/dasd: fix hanging device after clear subchannel Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 149/346] mac80211: fix purging multicast PS buffer queue Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 032/346] ext4: fix deadlock during page writeback Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 249/346] sched/core: Fix a race between try_to_wake_up() and a woken up task Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 291/346] blackfin: fix copy_from_user() Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 129/346] ubi: Be more paranoid while seaching for the most recent Fastmap Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 340/346] [media] usbvision: revert commit 588afcc1 Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 341/346] staging: comedi: ni_mio_common: fix wrong insn_write handler Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 342/346] xenbus: don't BUG() on user mode induced condition Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 337/346] fs: Avoid premature clearing of capabilities Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 336/346] fs: Give dentry to inode_change_ok() instead of inode Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 338/346] posix_acl: Clear SGID bit when setting file permissions Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 346/346] KVM: MIPS: Drop other CPU ASIDs on guest MMU changes Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 339/346] ARC: use ASL assembler mnemonic Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 344/346] compiler-gcc: disable -ftracer for __noclone functions Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 343/346] xenbus: don't look up transaction IDs for ordinary writes Ben Hutchings
2016-11-14  0:14 ` [PATCH 3.16 345/346] PM / devfreq: Fix incorrect type issue Ben Hutchings
2016-11-14  5:49 ` [PATCH 3.16 000/346] 3.16.39-rc1 review Guenter Roeck
2016-11-14 17:10   ` Ben Hutchings

Reply instructions:

You may reply publically to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20161114154249.GA3291@cmpxchg.org \
    --to=hannes@cmpxchg.org \
    --cc=akpm@linux-foundation.org \
    --cc=ben@decadent.org.uk \
    --cc=linux-kernel@vger.kernel.org \
    --cc=stable@vger.kernel.org \
    --cc=torvalds@linux-foundation.org \
    --cc=trapexit@spawn.link \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link

LKML Archive on lore.kernel.org

Archives are clonable:
	git clone --mirror https://lore.kernel.org/lkml/0 lkml/git/0.git
	git clone --mirror https://lore.kernel.org/lkml/1 lkml/git/1.git
	git clone --mirror https://lore.kernel.org/lkml/2 lkml/git/2.git
	git clone --mirror https://lore.kernel.org/lkml/3 lkml/git/3.git
	git clone --mirror https://lore.kernel.org/lkml/4 lkml/git/4.git
	git clone --mirror https://lore.kernel.org/lkml/5 lkml/git/5.git
	git clone --mirror https://lore.kernel.org/lkml/6 lkml/git/6.git

	# If you have public-inbox 1.1+ installed, you may
	# initialize and index your mirror using the following commands:
	public-inbox-init -V2 lkml lkml/ https://lore.kernel.org/lkml \
		linux-kernel@vger.kernel.org linux-kernel@archiver.kernel.org
	public-inbox-index lkml


Newsgroup available over NNTP:
	nntp://nntp.lore.kernel.org/org.kernel.vger.linux-kernel


AGPL code for this site: git clone https://public-inbox.org/ public-inbox