)]}'
{
  "log": [
    {
      "commit": "2ac8a0f58a8782ff8024404a579eee260e8b2010",
      "tree": "b3712f056d64c6a4b1ce7b506fd96d2d59ba6896",
      "parents": [
        "1c8f63c2758096c3b6425f4ecb274901151d6f17"
      ],
      "author": {
        "name": "NeilBrown",
        "email": "neilb@suse.de",
        "time": "Thu Jul 19 15:59:18 2012 +1000"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Jul 29 08:04:17 2012 -0700"
      },
      "message": "md: avoid crash when stopping md array races with closing other open fds.\n\ncommit a05b7ea03d72f36edb0cec05e8893803335c61a0 upstream.\n\nmd will refuse to stop an array if any other fd (or mounted fs) is\nusing it.\nWhen any fs is unmounted of when the last open fd is closed all\npending IO will be flushed (e.g. sync_blockdev call in __blkdev_put)\nso there will be no pending IO to worry about when the array is\nstopped.\n\nHowever in order to send the STOP_ARRAY ioctl to stop the array one\nmust first get and open fd on the block device.\nIf some fd is being used to write to the block device and it is closed\nafter mdadm open the block device, but before mdadm issues the\nSTOP_ARRAY ioctl, then there will be no last-close on the md device so\n__blkdev_put will not call sync_blockdev.\n\nIf this happens, then IO can still be in-flight while md tears down\nthe array and bad things can happen (use-after-free and subsequent\nhavoc).\n\nSo in the case where do_md_stop is being called from an open file\ndescriptor, call sync_block after taking the mutex to ensure there\nwill be no new openers.\n\nThis is needed when setting a read-write device to read-only too.\n\nReported-by: majianpeng \u003cmajianpeng@gmail.com\u003e\nSigned-off-by: NeilBrown \u003cneilb@suse.de\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "1c8f63c2758096c3b6425f4ecb274901151d6f17",
      "tree": "015a3c82075ab8a65cd95a3c901d863b4bae10ce",
      "parents": [
        "016e7d822a72c4cbcbf7e4bc6d590cf50879ec26"
      ],
      "author": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Thu Jul 19 12:11:49 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Thu Jul 19 12:11:49 2012 -0700"
      },
      "message": "Linux 3.4.6\n"
    },
    {
      "commit": "016e7d822a72c4cbcbf7e4bc6d590cf50879ec26",
      "tree": "2655c509eaf1460f1ebfe8704f6d7ac2d55d5a14",
      "parents": [
        "3cdeda1e763ccb2287c6ee76ece14145027653a9"
      ],
      "author": {
        "name": "Samuel Ortiz",
        "email": "sameo@linux.intel.com",
        "time": "Thu May 10 19:45:51 2012 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Thu Jul 19 08:59:00 2012 -0700"
      },
      "message": "NFC: Export nfc.h to userland\n\ncommit dbd4fcaf8d664fab4163b1f8682e41ad8bff3444 upstream.\n\nThe netlink commands and attributes, along with the socket structure\ndefinitions need to be exported.\n\nSigned-off-by: Samuel Ortiz \u003csameo@linux.intel.com\u003e\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "3cdeda1e763ccb2287c6ee76ece14145027653a9",
      "tree": "c871a197eb48e9f4cf862e68bfaa43b86bd21007",
      "parents": [
        "6321a0a1a3a9d6c9cbd73d9a4159a97ac3bc0919"
      ],
      "author": {
        "name": "Thomas Gleixner",
        "email": "tglx@linutronix.de",
        "time": "Tue Jul 17 02:39:56 2012 -0400"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Thu Jul 19 08:59:00 2012 -0700"
      },
      "message": "timekeeping: Add missing update call in timekeeping_resume()\n\nThis is a backport of 3e997130bd2e8c6f5aaa49d6e3161d4d29b43ab0\n\nThe leap second rework unearthed another issue of inconsistent data.\n\nOn timekeeping_resume() the timekeeper data is updated, but nothing\ncalls timekeeping_update(), so now the update code in the timer\ninterrupt sees stale values.\n\nThis has been the case before those changes, but then the timer\ninterrupt was using stale data as well so this went unnoticed for quite\nsome time.\n\nAdd the missing update call, so all the data is consistent everywhere.\n\nReported-by: Andreas Schwab \u003cschwab@linux-m68k.org\u003e\nReported-and-tested-by: \"Rafael J. Wysocki\" \u003crjw@sisk.pl\u003e\nReported-and-tested-by: Martin Steigerwald \u003cMartin@lichtvoll.de\u003e\nCc: John Stultz \u003cjohnstul@us.ibm.com\u003e\nCc: Ingo Molnar \u003cmingo@kernel.org\u003e\nCc: Peter Zijlstra \u003ca.p.zijlstra@chello.nl\u003e,\nCc: Prarit Bhargava \u003cprarit@redhat.com\u003e\nSigned-off-by: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nSigned-off-by: John Stultz \u003cjohnstul@us.ibm.com\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nCc: Prarit Bhargava \u003cprarit@redhat.com\u003e\nCc: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nSigned-off-by: John Stultz \u003cjohnstul@us.ibm.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "6321a0a1a3a9d6c9cbd73d9a4159a97ac3bc0919",
      "tree": "2be51901d3e74c271f3fa1cb58ce73d7e5144ab3",
      "parents": [
        "765bdc4d82fadcddfec19222a545e904633c7816"
      ],
      "author": {
        "name": "John Stultz",
        "email": "johnstul@us.ibm.com",
        "time": "Tue Jul 17 02:39:55 2012 -0400"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Thu Jul 19 08:59:00 2012 -0700"
      },
      "message": "hrtimer: Update hrtimer base offsets each hrtimer_interrupt\n\nThis is a backport of 5baefd6d84163443215f4a99f6a20f054ef11236\n\nThe update of the hrtimer base offsets on all cpus cannot be made\natomically from the timekeeper.lock held and interrupt disabled region\nas smp function calls are not allowed there.\n\nclock_was_set(), which enforces the update on all cpus, is called\neither from preemptible process context in case of do_settimeofday()\nor from the softirq context when the offset modification happened in\nthe timer interrupt itself due to a leap second.\n\nIn both cases there is a race window for an hrtimer interrupt between\ndropping timekeeper lock, enabling interrupts and clock_was_set()\nissuing the updates. Any interrupt which arrives in that window will\nsee the new time but operate on stale offsets.\n\nSo we need to make sure that an hrtimer interrupt always sees a\nconsistent state of time and offsets.\n\nktime_get_update_offsets() allows us to get the current monotonic time\nand update the per cpu hrtimer base offsets from hrtimer_interrupt()\nto capture a consistent state of monotonic time and the offsets. The\nfunction replaces the existing ktime_get() calls in hrtimer_interrupt().\n\nThe overhead of the new function vs. ktime_get() is minimal as it just\nadds two store operations.\n\nThis ensures that any changes to realtime or boottime offsets are\nnoticed and stored into the per-cpu hrtimer base structures, prior to\nany hrtimer expiration and guarantees that timers are not expired early.\n\nSigned-off-by: John Stultz \u003cjohnstul@us.ibm.com\u003e\nReviewed-by: Ingo Molnar \u003cmingo@kernel.org\u003e\nAcked-by: Peter Zijlstra \u003ca.p.zijlstra@chello.nl\u003e\nAcked-by: Prarit Bhargava \u003cprarit@redhat.com\u003e\nLink: http://lkml.kernel.org/r/1341960205-56738-8-git-send-email-johnstul@us.ibm.com\nSigned-off-by: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nCc: Prarit Bhargava \u003cprarit@redhat.com\u003e\nCc: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nSigned-off-by: John Stultz \u003cjohnstul@us.ibm.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "765bdc4d82fadcddfec19222a545e904633c7816",
      "tree": "1086773f08d9e4727c1cb6f90543258372db5673",
      "parents": [
        "dd3cded0f516201d3b72999e588a6d67e00cb82f"
      ],
      "author": {
        "name": "Thomas Gleixner",
        "email": "tglx@linutronix.de",
        "time": "Tue Jul 17 02:39:54 2012 -0400"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Thu Jul 19 08:59:00 2012 -0700"
      },
      "message": "timekeeping: Provide hrtimer update function\n\nThis is a backport of f6c06abfb3972ad4914cef57d8348fcb2932bc3b\n\nTo finally fix the infamous leap second issue and other race windows\ncaused by functions which change the offsets between the various time\nbases (CLOCK_MONOTONIC, CLOCK_REALTIME and CLOCK_BOOTTIME) we need a\nfunction which atomically gets the current monotonic time and updates\nthe offsets of CLOCK_REALTIME and CLOCK_BOOTTIME with minimalistic\noverhead. The previous patch which provides ktime_t offsets allows us\nto make this function almost as cheap as ktime_get() which is going to\nbe replaced in hrtimer_interrupt().\n\nSigned-off-by: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nReviewed-by: Ingo Molnar \u003cmingo@kernel.org\u003e\nAcked-by: Peter Zijlstra \u003ca.p.zijlstra@chello.nl\u003e\nAcked-by: Prarit Bhargava \u003cprarit@redhat.com\u003e\nSigned-off-by: John Stultz \u003cjohnstul@us.ibm.com\u003e\nLink: http://lkml.kernel.org/r/1341960205-56738-7-git-send-email-johnstul@us.ibm.com\nSigned-off-by: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nCc: Prarit Bhargava \u003cprarit@redhat.com\u003e\nCc: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nSigned-off-by: John Stultz \u003cjohnstul@us.ibm.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "dd3cded0f516201d3b72999e588a6d67e00cb82f",
      "tree": "ab3f41eef24489b47ac0b1936e4b6f5be8ad84e0",
      "parents": [
        "7d1f07113b1b32da1eabce0dc74d9f96bbb7b90a"
      ],
      "author": {
        "name": "Thomas Gleixner",
        "email": "tglx@linutronix.de",
        "time": "Tue Jul 17 02:39:53 2012 -0400"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Thu Jul 19 08:58:59 2012 -0700"
      },
      "message": "hrtimers: Move lock held region in hrtimer_interrupt()\n\nThis is a backport of 196951e91262fccda81147d2bcf7fdab08668b40\n\nWe need to update the base offsets from this code and we need to do\nthat under base-\u003elock. Move the lock held region around the\nktime_get() calls. The ktime_get() calls are going to be replaced with\na function which gets the time and the offsets atomically.\n\nSigned-off-by: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nReviewed-by: Ingo Molnar \u003cmingo@kernel.org\u003e\nAcked-by: Peter Zijlstra \u003ca.p.zijlstra@chello.nl\u003e\nAcked-by: Prarit Bhargava \u003cprarit@redhat.com\u003e\nSigned-off-by: John Stultz \u003cjohnstul@us.ibm.com\u003e\nLink: http://lkml.kernel.org/r/1341960205-56738-6-git-send-email-johnstul@us.ibm.com\nSigned-off-by: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nCc: Prarit Bhargava \u003cprarit@redhat.com\u003e\nCc: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nSigned-off-by: John Stultz \u003cjohnstul@us.ibm.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "7d1f07113b1b32da1eabce0dc74d9f96bbb7b90a",
      "tree": "6bdc4407079c57126f96c0409eda6e031d618695",
      "parents": [
        "2e947d469fba2c2036ff50a2e58a1875ab2ea6b6"
      ],
      "author": {
        "name": "Thomas Gleixner",
        "email": "tglx@linutronix.de",
        "time": "Tue Jul 17 02:39:52 2012 -0400"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Thu Jul 19 08:58:59 2012 -0700"
      },
      "message": "timekeeping: Maintain ktime_t based offsets for hrtimers\n\nThis is a backport of 5b9fe759a678e05be4937ddf03d50e950207c1c0\n\nWe need to update the hrtimer clock offsets from the hrtimer interrupt\ncontext. To avoid conversions from timespec to ktime_t maintain a\nktime_t based representation of those offsets in the timekeeper. This\nputs the conversion overhead into the code which updates the\nunderlying offsets and provides fast accessible values in the hrtimer\ninterrupt.\n\nSigned-off-by: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nSigned-off-by: John Stultz \u003cjohnstul@us.ibm.com\u003e\nReviewed-by: Ingo Molnar \u003cmingo@kernel.org\u003e\nAcked-by: Peter Zijlstra \u003ca.p.zijlstra@chello.nl\u003e\nAcked-by: Prarit Bhargava \u003cprarit@redhat.com\u003e\nLink: http://lkml.kernel.org/r/1341960205-56738-4-git-send-email-johnstul@us.ibm.com\nSigned-off-by: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nCc: Prarit Bhargava \u003cprarit@redhat.com\u003e\nCc: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nSigned-off-by: John Stultz \u003cjohnstul@us.ibm.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "2e947d469fba2c2036ff50a2e58a1875ab2ea6b6",
      "tree": "7f9a44c90974ff3c380b8a798c82f55c9215248f",
      "parents": [
        "5e5006e64cae9603841405af9febb67064869d83"
      ],
      "author": {
        "name": "John Stultz",
        "email": "johnstul@us.ibm.com",
        "time": "Tue Jul 17 02:39:51 2012 -0400"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Thu Jul 19 08:58:59 2012 -0700"
      },
      "message": "timekeeping: Fix leapsecond triggered load spike issue\n\nThis is a backport of 4873fa070ae84a4115f0b3c9dfabc224f1bc7c51\n\nThe timekeeping code misses an update of the hrtimer subsystem after a\nleap second happened. Due to that timers based on CLOCK_REALTIME are\neither expiring a second early or late depending on whether a leap\nsecond has been inserted or deleted until an operation is initiated\nwhich causes that update. Unless the update happens by some other\nmeans this discrepancy between the timekeeping and the hrtimer data\nstays forever and timers are expired either early or late.\n\nThe reported immediate workaround - $ data -s \"`date`\" - is causing a\ncall to clock_was_set() which updates the hrtimer data structures.\nSee: http://www.sheeri.com/content/mysql-and-leap-second-high-cpu-and-fix\n\nAdd the missing clock_was_set() call to update_wall_time() in case of\na leap second event. The actual update is deferred to softirq context\nas the necessary smp function call cannot be invoked from hard\ninterrupt context.\n\nSigned-off-by: John Stultz \u003cjohnstul@us.ibm.com\u003e\nReported-by: Jan Engelhardt \u003cjengelh@inai.de\u003e\nReviewed-by: Ingo Molnar \u003cmingo@kernel.org\u003e\nAcked-by: Peter Zijlstra \u003ca.p.zijlstra@chello.nl\u003e\nAcked-by: Prarit Bhargava \u003cprarit@redhat.com\u003e\nLink: http://lkml.kernel.org/r/1341960205-56738-3-git-send-email-johnstul@us.ibm.com\nSigned-off-by: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nCc: Prarit Bhargava \u003cprarit@redhat.com\u003e\nCc: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nSigned-off-by: John Stultz \u003cjohnstul@us.ibm.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "5e5006e64cae9603841405af9febb67064869d83",
      "tree": "f3a41ebc96d577c9a9c726329d9093c7d477046d",
      "parents": [
        "738c88c1b8ebe16c3ecd1694871474b470275d82"
      ],
      "author": {
        "name": "John Stultz",
        "email": "johnstul@us.ibm.com",
        "time": "Tue Jul 17 02:39:50 2012 -0400"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Thu Jul 19 08:58:59 2012 -0700"
      },
      "message": "hrtimer: Provide clock_was_set_delayed()\n\nThis is a backport of f55a6faa384304c89cfef162768e88374d3312cb\n\nclock_was_set() cannot be called from hard interrupt context because\nit calls on_each_cpu().\n\nFor fixing the widely reported leap seconds issue it is necessary to\ncall it from hard interrupt context, i.e. the timer tick code, which\ndoes the timekeeping updates.\n\nProvide a new function which denotes it in the hrtimer cpu base\nstructure of the cpu on which it is called and raise the hrtimer\nsoftirq. We then execute the clock_was_set() notificiation from\nsoftirq context in run_hrtimer_softirq(). The hrtimer softirq is\nrarely used, so polling the flag there is not a performance issue.\n\n[ tglx: Made it depend on CONFIG_HIGH_RES_TIMERS. We really should get\n  rid of all this ifdeffery ASAP ]\n\nSigned-off-by: John Stultz \u003cjohnstul@us.ibm.com\u003e\nReported-by: Jan Engelhardt \u003cjengelh@inai.de\u003e\nReviewed-by: Ingo Molnar \u003cmingo@kernel.org\u003e\nAcked-by: Peter Zijlstra \u003ca.p.zijlstra@chello.nl\u003e\nAcked-by: Prarit Bhargava \u003cprarit@redhat.com\u003e\nLink: http://lkml.kernel.org/r/1341960205-56738-2-git-send-email-johnstul@us.ibm.com\nSigned-off-by: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nCc: Prarit Bhargava \u003cprarit@redhat.com\u003e\nCc: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nSigned-off-by: John Stultz \u003cjohnstul@us.ibm.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "738c88c1b8ebe16c3ecd1694871474b470275d82",
      "tree": "0304eeede8d31709ea9918b47c450e76fe743fdf",
      "parents": [
        "871d4f5e1d82cf0ad56ae076c8535004e7837416"
      ],
      "author": {
        "name": "Michal Kazior",
        "email": "michal.kazior@tieto.com",
        "time": "Fri Jun 08 10:55:44 2012 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Thu Jul 19 08:58:59 2012 -0700"
      },
      "message": "cfg80211: check iface combinations only when iface is running\n\ncommit f8cdddb8d61d16a156229f0910f7ecfc7a82c003 upstream.\n\nDon\u0027t validate interface combinations on a stopped\ninterface. Otherwise we might end up being able to\ncreate a new interface with a certain type, but\nwon\u0027t be able to change an existing interface\ninto that type.\n\nThis also skips some other functions when\ninterface is stopped and changing interface type.\n\nSigned-off-by: Michal Kazior \u003cmichal.kazior@tieto.com\u003e\nSigned-off-by: Johannes Berg \u003cjohannes.berg@intel.com\u003e\n[Fixes regression introduced by cherry pick of 463454b5dbd8]\nSigned-off-by: Paul Gortmaker \u003cpaul.gortmaker@windriver.com\u003e\n\n"
    },
    {
      "commit": "871d4f5e1d82cf0ad56ae076c8535004e7837416",
      "tree": "0f4fb7a7b182ecbaddec1b81df7f3451072ced51",
      "parents": [
        "c5e42b8d692877676fc3ba9fdf3dbcbd723b4c2b"
      ],
      "author": {
        "name": "Pawel Moll",
        "email": "pawel.moll@arm.com",
        "time": "Fri Jun 08 14:04:06 2012 +0100"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Thu Jul 19 08:58:59 2012 -0700"
      },
      "message": "clk: Check parent for NULL in clk_change_rate\n\ncommit bf47b4fd8f9f81cd5ce40e1945c6334d088226d1 upstream.\n\nclk_change_rate() is accessing parent\u0027s rate without checking\nif the parent exists at all. In case of root clocks this will\ncause NULL pointer dereference.\n\nThis patch follows what clk_calc_new_rates() does in such\nsituation.\n\nSigned-off-by: Pawel Moll \u003cpawel.moll@arm.com\u003e\nSigned-off-by: Mike Turquette \u003cmturquette@linaro.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "c5e42b8d692877676fc3ba9fdf3dbcbd723b4c2b",
      "tree": "ca785e6dbd28dbd000e6a7255aa80ba783b86564",
      "parents": [
        "256cf2738cb242af70ea6f6117446a98ed949a9c"
      ],
      "author": {
        "name": "Ryan Bourgeois",
        "email": "bluedragonx@gmail.com",
        "time": "Tue Jul 10 09:43:33 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Thu Jul 19 08:58:59 2012 -0700"
      },
      "message": "HID: add support for 2012 MacBook Pro Retina\n\ncommit b2e6ad7dfe26aac5bf136962d0b11d180b820d44 upstream.\n\nAdd support for the 15\u0027\u0027 MacBook Pro Retina. The keyboard is\nthe same as recent models.\n\nThe patch needs to be synchronized with the bcm5974 patch for\nthe trackpad - as usual.\n\nPatch originally written by clipcarl (forums.opensuse.org).\n\n[rydberg@euromail.se: Amended mouse ignore lines]\nSigned-off-by: Ryan Bourgeois \u003cbluedragonx@gmail.com\u003e\nSigned-off-by: Henrik Rydberg \u003crydberg@euromail.se\u003e\nAcked-by: Jiri Kosina \u003cjkosina@suse.cz\u003e\nSigned-off-by: Dmitry Torokhov \u003cdmitry.torokhov@gmail.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "256cf2738cb242af70ea6f6117446a98ed949a9c",
      "tree": "129ba3317ed6e1ef37945a374b19bb7b1e4b4a3f",
      "parents": [
        "07793cd472f688c266eedff79f46f6c512d84ce4"
      ],
      "author": {
        "name": "Yuri Khan",
        "email": "yurivkhan@gmail.com",
        "time": "Wed Jul 11 22:12:31 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Thu Jul 19 08:58:58 2012 -0700"
      },
      "message": "Input: xpad - add Andamiro Pump It Up pad\n\ncommit e76b8ee25e034ab601b525abb95cea14aa167ed3 upstream.\n\nI couldn\u0027t find the vendor ID in any of the online databases, but this\nmat has a Pump It Up logo on the top side of the controller compartment,\nand a disclaimer stating that Andamiro will not be liable on the bottom.\n\nSigned-off-by: Yuri Khan \u003cyurivkhan@gmail.com\u003e\nSigned-off-by: Dmitry Torokhov \u003cdmitry.torokhov@gmail.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "07793cd472f688c266eedff79f46f6c512d84ce4",
      "tree": "9679a41867db5a88cd72cb4eeb2308a661a12e49",
      "parents": [
        "abee143740c3388cc34869b9320aed3fa28f9cdb"
      ],
      "author": {
        "name": "Ilia Katsnelson",
        "email": "k0009000@gmail.com",
        "time": "Wed Jul 11 00:54:20 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Thu Jul 19 08:58:58 2012 -0700"
      },
      "message": "Input: xpad - add signature for Razer Onza Tournament Edition\n\ncommit cc71a7e899cc6b2ff41e1be48756782ed004d802 upstream.\n\nSigned-off-by: Ilia Katsnelson \u003ck0009000@gmail.com\u003e\nSigned-off-by: Dmitry Torokhov \u003cdmitry.torokhov@gmail.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "abee143740c3388cc34869b9320aed3fa28f9cdb",
      "tree": "240b042b252d86082b0131df06da484d48a223c3",
      "parents": [
        "edb5132a255e3f594b662018acced9037c6989b5"
      ],
      "author": {
        "name": "Yuri Khan",
        "email": "yurivkhan@gmail.com",
        "time": "Wed Jul 11 00:49:18 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Thu Jul 19 08:58:58 2012 -0700"
      },
      "message": "Input: xpad - handle all variations of Mad Catz Beat Pad\n\ncommit 3ffb62cb9ac2430c2504c6ff9727d0f2476ef0bd upstream.\n\nThe device should be handled by xpad driver instead of generic HID driver.\n\nSigned-off-by: Yuri Khan \u003cyurivkhan@gmail.com\u003e\nAcked-by: Jiri Kosina \u003cjkosina@suse.cz\u003e\nSigned-off-by: Dmitry Torokhov \u003cdmitry.torokhov@gmail.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "edb5132a255e3f594b662018acced9037c6989b5",
      "tree": "dc88bf08afa97345b604e9131bb47a6038e31f3c",
      "parents": [
        "d418f998832c7fd8f783e05cec7da6125720360d"
      ],
      "author": {
        "name": "Henrik Rydberg",
        "email": "rydberg@euromail.se",
        "time": "Tue Jul 10 09:43:57 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Thu Jul 19 08:58:58 2012 -0700"
      },
      "message": "Input: bcm5974 - Add support for 2012 MacBook Pro Retina\n\ncommit 3dde22a98e94eb18527f0ff0068fb2fb945e58d4 upstream.\n\nAdd support for the 15\u0027\u0027 MacBook Pro Retina model (MacBookPro10,1).\n\nPatch originally written by clipcarl (forums.opensuse.org).\n\nSigned-off-by: Henrik Rydberg \u003crydberg@euromail.se\u003e\nSigned-off-by: Dmitry Torokhov \u003cdmitry.torokhov@gmail.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "d418f998832c7fd8f783e05cec7da6125720360d",
      "tree": "c480c50d912beb2afcd2c52aebf89653b1aef955",
      "parents": [
        "f4e2229ea5d49e338fce36b2c36f22b525fbeff6"
      ],
      "author": {
        "name": "Eric W. Biederman",
        "email": "ebiederm@xmission.com",
        "time": "Mon Jul 09 10:51:45 2012 +0000"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Thu Jul 19 08:58:58 2012 -0700"
      },
      "message": "bonding: Manage /proc/net/bonding/ entries from the netdev events\n\ncommit a64d49c3dd504b685f9742a2f3dcb11fb8e4345f upstream.\n\nIt was recently reported that moving a bonding device between network\nnamespaces causes warnings from /proc.  It turns out after the move we\nwere trying to add and to remove the /proc/net/bonding entries from the\nwrong network namespace.\n\nMove the bonding /proc registration code into the NETDEV_REGISTER and\nNETDEV_UNREGISTER events where the proc registration and unregistration\nwill always happen at the right time.\n\nSigned-off-by: \"Eric W. Biederman\" \u003cebiederm@xmission.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "f4e2229ea5d49e338fce36b2c36f22b525fbeff6",
      "tree": "6b3457bd78063b4d3e685087955385e908d6a902",
      "parents": [
        "b98522a7cf0ff60bcf49330d9467089515cf9dad"
      ],
      "author": {
        "name": "Eric W. Biederman",
        "email": "ebiederm@xmission.com",
        "time": "Mon Jul 09 10:52:43 2012 +0000"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Thu Jul 19 08:58:58 2012 -0700"
      },
      "message": "bonding: debugfs and network namespaces are incompatible\n\ncommit 96ca7ffe748bf91f851e6aa4479aa11c8b1122ba upstream.\n\nThe bonding debugfs support has been broken in the presence of network\nnamespaces since it has been added.  The debugfs support does not handle\nmultiple bonding devices with the same name in different network\nnamespaces.\n\nI haven\u0027t had any bug reports, and I\u0027m not interested in getting any.\nDisable the debugfs support when network namespaces are enabled.\n\nSigned-off-by: \"Eric W. Biederman\" \u003cebiederm@xmission.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "b98522a7cf0ff60bcf49330d9467089515cf9dad",
      "tree": "a46ff74e8e7acfdbb06ebd0382b25dedb61c5b3a",
      "parents": [
        "3cf16f7e388934d4458d0d6cebdf752e4424f226"
      ],
      "author": {
        "name": "Deepak Sikri",
        "email": "deepak.sikri@st.com",
        "time": "Sun Jul 08 21:14:45 2012 +0000"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Thu Jul 19 08:58:57 2012 -0700"
      },
      "message": "stmmac: Fix for nfs hang on multiple reboot\n\ncommit 8e83989106562326bfd6aaf92174fe138efd026b upstream.\n\nIt was observed that during multiple reboots nfs hangs. The status of\nreceive descriptors shows that all the descriptors were in control of\nCPU, and none were assigned to DMA.\nAlso the DMA status register confirmed that the Rx buffer is\nunavailable.\n\nThis patch adds the fix for the same by adding the memory barriers to\nascertain that the all instructions before enabling the Rx or Tx DMA are\ncompleted which involves the proper setting of the ownership bit in DMA\ndescriptors.\n\nSigned-off-by: Deepak Sikri \u003cdeepak.sikri@st.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "3cf16f7e388934d4458d0d6cebdf752e4424f226",
      "tree": "39ab80a575f7ad735c01cc6806fe9ead84034d34",
      "parents": [
        "c8ed7cf355f41b649524029c49f101d878499482"
      ],
      "author": {
        "name": "Eliad Peller",
        "email": "eliad@wizery.com",
        "time": "Mon Jul 02 14:42:03 2012 +0300"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Thu Jul 19 08:58:57 2012 -0700"
      },
      "message": "mac80211: destroy assoc_data correctly if assoc fails\n\ncommit 10a9109f2705fdc3caa94d768b2559587a9a050c upstream.\n\nIf association failed due to internal error (e.g. no\nsupported rates IE), we call ieee80211_destroy_assoc_data()\nwith assoc\u003dtrue, while we actually reject the association.\n\nThis results in the BSSID not being zeroed out.\n\nAfter passing assoc\u003dfalse, we no longer have to call\nsta_info_destroy_addr() explicitly. While on it, move\nthe \"associated\" message after the assoc_success check.\n\nSigned-off-by: Eliad Peller \u003celiad@wizery.com\u003e\nReviewed-by: Johannes Berg \u003cjohannes@sipsolutions.net\u003e\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "c8ed7cf355f41b649524029c49f101d878499482",
      "tree": "cac2bc33c83b69a8157c9f871b06e434232d1954",
      "parents": [
        "1214b7852425b78a2b73b0a759ec55210340396d"
      ],
      "author": {
        "name": "Federico Fuga",
        "email": "fuga@studiofuga.com",
        "time": "Mon Jul 16 10:36:51 2012 +0300"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Thu Jul 19 08:58:57 2012 -0700"
      },
      "message": "rpmsg: fix dependency on initialization order\n\ncommit 9634252617441991b01dacaf4040866feecaf36f upstream.\n\nWhen rpmsg drivers are built into the kernel, they must not initialize\nbefore the rpmsg bus does, otherwise they\u0027d trigger a BUG() in\ndrivers/base/driver.c line 169 (driver_register()).\n\nTo fix that, and to stop depending on arbitrary linkage ordering of\nthose built-in rpmsg drivers, we make the rpmsg bus initialize at\nsubsys_initcall.\n\nSigned-off-by: Federico Fuga \u003cfuga@studiofuga.com\u003e\n[ohad: rewrite the commit log]\nSigned-off-by: Ohad Ben-Cohen \u003cohad@wizery.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "1214b7852425b78a2b73b0a759ec55210340396d",
      "tree": "13a5b867d8d34fde6cbe9f5ff8a0ed6f127bb090",
      "parents": [
        "57cff816121720c80b39e3b3fb0ef36128fdc45b"
      ],
      "author": {
        "name": "Emmanuel Grumbach",
        "email": "emmanuel.grumbach@intel.com",
        "time": "Wed Jul 04 13:59:08 2012 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Thu Jul 19 08:58:57 2012 -0700"
      },
      "message": "iwlegacy: don\u0027t mess up the SCD when removing a key\n\ncommit b48d96652626b315229b1b82c6270eead6a77a6d upstream.\n\nWhen we remove a key, we put a key index which was supposed\nto tell the fw that we are actually removing the key. But\ninstead the fw took that index as a valid index and messed\nup the SRAM of the device.\n\nThis memory corruption on the device mangled the data of\nthe SCD. The impact on the user is that SCD queue 2 got\nstuck after having removed keys.\n\nReported-by: Paul Bolle \u003cpebolle@tiscali.nl\u003e\nSigned-off-by: Emmanuel Grumbach \u003cemmanuel.grumbach@intel.com\u003e\nSigned-off-by: Stanislaw Gruszka \u003csgruszka@redhat.com\u003e\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "57cff816121720c80b39e3b3fb0ef36128fdc45b",
      "tree": "1db355b0708c0fa71462fb8c23d940fa3fb5eca0",
      "parents": [
        "3cc4e0e187e4187a6ec13a79dafc1b0f72e31afa"
      ],
      "author": {
        "name": "Stanislaw Gruszka",
        "email": "sgruszka@redhat.com",
        "time": "Wed Jul 04 13:20:20 2012 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Thu Jul 19 08:58:57 2012 -0700"
      },
      "message": "iwlegacy: always monitor for stuck queues\n\ncommit c2ca7d92ed4bbd779516beb6eb226e19f7f7ab0f upstream.\n\nThis is iwlegacy version of:\n\ncommit 342bbf3fee2fa9a18147e74b2e3c4229a4564912\nAuthor: Johannes Berg \u003cjohannes.berg@intel.com\u003e\nDate:   Sun Mar 4 08:50:46 2012 -0800\n\n    iwlwifi: always monitor for stuck queues\n\n    If we only monitor while associated, the following\n    can happen:\n     - we\u0027re associated, and the queue stuck check\n       runs, setting the queue \"touch\" time to X\n     - we disassociate, stopping the monitoring,\n       which leaves the time set to X\n     - almost 2s later, we associate, and enqueue\n       a frame\n     - before the frame is transmitted, we monitor\n       for stuck queues, and find the time set to\n       X, although it is now later than X + 2000ms,\n       so we decide that the queue is stuck and\n       erroneously restart the device\n\nSigned-off-by: Stanislaw Gruszka \u003csgruszka@redhat.com\u003e\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "3cc4e0e187e4187a6ec13a79dafc1b0f72e31afa",
      "tree": "e3e02e5c32ed8b87d6f04f335b01815fbfebaa0a",
      "parents": [
        "a3c021d25debc6278951e0112b1a06d8b7376d22"
      ],
      "author": {
        "name": "Tushar Dave",
        "email": "tushar.n.dave@intel.com",
        "time": "Thu Jul 12 08:56:56 2012 +0000"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Thu Jul 19 08:58:57 2012 -0700"
      },
      "message": "e1000e: Correct link check logic for 82571 serdes\n\ncommit d0efa8f23a644f7cb7d1f8e78dd9a223efa412a3 upstream.\n\nSYNCH bit and IV bit of RXCW register are sticky. Before examining these bits,\nRXCW should be read twice to filter out one-time false events and have correct\nvalues for these bits. Incorrect values of these bits in link check logic can\ncause weird link stability issues if auto-negotiation fails.\n\nReported-by: Dean Nelson \u003cdnelson@redhat.com\u003e\nSigned-off-by: Tushar Dave \u003ctushar.n.dave@intel.com\u003e\nReviewed-by: Bruce Allan \u003cbruce.w.allan@intel.com\u003e\nTested-by: Jeff Pieper \u003cjeffrey.e.pieper@intel.com\u003e\nSigned-off-by: Jeff Kirsher \u003cjeffrey.t.kirsher@intel.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "a3c021d25debc6278951e0112b1a06d8b7376d22",
      "tree": "037ad23a6c7362bc5b8f42f0e924d0efed39dd81",
      "parents": [
        "b9311277c28fab089ee0816307035c3a5f546bcf"
      ],
      "author": {
        "name": "Stanislaw Gruszka",
        "email": "sgruszka@redhat.com",
        "time": "Wed Jul 04 13:10:02 2012 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Thu Jul 19 08:58:56 2012 -0700"
      },
      "message": "rt2x00usb: fix indexes ordering on RX queue kick\n\ncommit efd821182cec8c92babef6e00a95066d3252fda4 upstream.\n\nOn rt2x00_dmastart() we increase index specified by Q_INDEX and on\nrt2x00_dmadone() we increase index specified by Q_INDEX_DONE. So entries\nbetween Q_INDEX_DONE and Q_INDEX are those we currently process in the\nhardware. Entries between Q_INDEX and Q_INDEX_DONE are those we can\nsubmit to the hardware.\n\nAccording to that fix rt2x00usb_kick_queue(), as we need to submit RX\nentries that are not processed by the hardware. It worked before only\nfor empty queue, otherwise was broken.\n\nNote that for TX queues indexes ordering are ok. We need to kick entries\nthat have filled skb, but was not submitted to the hardware, i.e.\nstarted from Q_INDEX_DONE and have ENTRY_DATA_PENDING bit set.\n\nFrom practical standpoint this fixes RX queue stall, usually reproducible\nin AP mode, like for example reported here:\nhttps://bugzilla.redhat.com/show_bug.cgi?id\u003d828824\n\nReported-and-tested-by: Franco Miceli \u003cfmiceli@plan.ceibal.edu.uy\u003e\nReported-and-tested-by: Tom Horsley \u003chorsley1953@gmail.com\u003e\nSigned-off-by: Stanislaw Gruszka \u003csgruszka@redhat.com\u003e\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "b9311277c28fab089ee0816307035c3a5f546bcf",
      "tree": "16cc3ce94be533f607ffacf8f4057c4cdeac489a",
      "parents": [
        "665c7a83a1a64582c4393dd45430c848150a10dd"
      ],
      "author": {
        "name": "Anders Kaseorg",
        "email": "andersk@MIT.EDU",
        "time": "Sun Jul 15 17:14:25 2012 -0400"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Thu Jul 19 08:58:56 2012 -0700"
      },
      "message": "fifo: Do not restart open() if it already found a partner\n\ncommit 05d290d66be6ef77a0b962ebecf01911bd984a78 upstream.\n\nIf a parent and child process open the two ends of a fifo, and the\nchild immediately exits, the parent may receive a SIGCHLD before its\nopen() returns.  In that case, we need to make sure that open() will\nreturn successfully after the SIGCHLD handler returns, instead of\nthrowing EINTR or being restarted.  Otherwise, the restarted open()\nwould incorrectly wait for a second partner on the other end.\n\nThe following test demonstrates the EINTR that was wrongly thrown from\nthe parent’s open().  Change .sa_flags \u003d 0 to .sa_flags \u003d SA_RESTART\nto see a deadlock instead, in which the restarted open() waits for a\nsecond reader that will never come.  (On my systems, this happens\npretty reliably within about 5 to 500 iterations.  Others report that\nit manages to loop ~forever sometimes; YMMV.)\n\n  #include \u003csys/stat.h\u003e\n  #include \u003csys/types.h\u003e\n  #include \u003csys/wait.h\u003e\n  #include \u003cfcntl.h\u003e\n  #include \u003csignal.h\u003e\n  #include \u003cstdio.h\u003e\n  #include \u003cstdlib.h\u003e\n  #include \u003cunistd.h\u003e\n\n  #define CHECK(x) do if ((x) \u003d\u003d -1) {perror(#x); abort();} while(0)\n\n  void handler(int signum) {}\n\n  int main()\n  {\n      struct sigaction act \u003d {.sa_handler \u003d handler, .sa_flags \u003d 0};\n      CHECK(sigaction(SIGCHLD, \u0026act, NULL));\n      CHECK(mknod(\"fifo\", S_IFIFO | S_IRWXU, 0));\n      for (;;) {\n          int fd;\n          pid_t pid;\n          putc(\u0027.\u0027, stderr);\n          CHECK(pid \u003d fork());\n          if (pid \u003d\u003d 0) {\n              CHECK(fd \u003d open(\"fifo\", O_RDONLY));\n              _exit(0);\n          }\n          CHECK(fd \u003d open(\"fifo\", O_WRONLY));\n          CHECK(close(fd));\n          CHECK(waitpid(pid, NULL, 0));\n      }\n  }\n\nThis is what I suspect was causing the Git test suite to fail in\nt9010-svn-fe.sh:\n\n\thttp://bugs.debian.org/678852\n\nSigned-off-by: Anders Kaseorg \u003candersk@mit.edu\u003e\nReviewed-by: Jonathan Nieder \u003cjrnieder@gmail.com\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "665c7a83a1a64582c4393dd45430c848150a10dd",
      "tree": "bbd62e937d1448029ce5f4d63b6f6fc391f878bf",
      "parents": [
        "7490d0a4cfefa16f9d8ce636eb5b2e13d2432db3"
      ],
      "author": {
        "name": "Takashi Iwai",
        "email": "tiwai@suse.de",
        "time": "Mon Jun 25 15:07:17 2012 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Thu Jul 19 08:58:56 2012 -0700"
      },
      "message": "intel_ips: blacklist HP ProBook laptops\n\ncommit 88ca518b0bb4161e5f20f8a1d9cc477cae294e54 upstream.\n\nintel_ips driver spews the warning message\n  \"ME failed to update for more than 1s, likely hung\"\nat each second endlessly on HP ProBook laptops with IronLake.\n\nAs this has never worked, better to blacklist the driver for now.\n\nSigned-off-by: Takashi Iwai \u003ctiwai@suse.de\u003e\nSigned-off-by: Matthew Garrett \u003cmjg@redhat.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "7490d0a4cfefa16f9d8ce636eb5b2e13d2432db3",
      "tree": "70ee2418549bd1af674a7bda391140a45a5e11ce",
      "parents": [
        "667fb5508900340d657645e0bfc9bf210a1fc363"
      ],
      "author": {
        "name": "Peter Zijlstra",
        "email": "a.p.zijlstra@chello.nl",
        "time": "Fri Jun 22 15:52:09 2012 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Thu Jul 19 08:58:56 2012 -0700"
      },
      "message": "sched/nohz: Rewrite and fix load-avg computation -- again\n\ncommit 5167e8d5417bf5c322a703d2927daec727ea40dd upstream.\n\nThanks to Charles Wang for spotting the defects in the current code:\n\n - If we go idle during the sample window -- after sampling, we get a\n   negative bias because we can negate our own sample.\n\n - If we wake up during the sample window we get a positive bias\n   because we push the sample to a known active period.\n\nSo rewrite the entire nohz load-avg muck once again, now adding\ncopious documentation to the code.\n\nReported-and-tested-by: Doug Smythies \u003cdsmythies@telus.net\u003e\nReported-and-tested-by: Charles Wang \u003cmuming.wq@gmail.com\u003e\nSigned-off-by: Peter Zijlstra \u003ca.p.zijlstra@chello.nl\u003e\nCc: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nCc: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nLink: http://lkml.kernel.org/r/1340373782.18025.74.camel@twins\n[ minor edits ]\nSigned-off-by: Ingo Molnar \u003cmingo@kernel.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "667fb5508900340d657645e0bfc9bf210a1fc363",
      "tree": "29bff7b22796496079e73d0b6feff3018dc183dd",
      "parents": [
        "af3a2390c0f80345516524c3fe7e717f465ce6bd"
      ],
      "author": {
        "name": "Thomas Renninger",
        "email": "trenn@suse.de",
        "time": "Thu Jul 12 12:24:33 2012 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Thu Jul 19 08:58:56 2012 -0700"
      },
      "message": "cpufreq / ACPI: Fix not loading acpi-cpufreq driver regression\n\ncommit c4686c71a9183f76e3ef59098da5c098748672f6 upstream.\n\nCommit d640113fe80e45ebd4a5b420b introduced a regression on SMP\nsystems where the processor core with ACPI id zero is disabled\n(typically should be the case because of hyperthreading).\nThe regression got spread through stable kernels.\nOn 3.0.X it got introduced via 3.0.18.\n\nSuch platforms may be rare, but do exist.\nLook out for a disabled processor with acpi_id 0 in dmesg:\nACPI: LAPIC (acpi_id[0x00] lapic_id[0x10] disabled)\n\nThis problem has been observed on a:\nHP Proliant BL280c G6 blade\n\nThis patch restricts the introduced workaround to platforms\nwith nr_cpu_ids \u003c\u003d 1.\n\nSigned-off-by: Thomas Renninger \u003ctrenn@suse.de\u003e\nSigned-off-by: Rafael J. Wysocki \u003crjw@sisk.pl\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "af3a2390c0f80345516524c3fe7e717f465ce6bd",
      "tree": "9c68b118f81314e06e7aeee192b0972324b8b870",
      "parents": [
        "5c77ea89ed79a692b0097dbca3652fbc83e30619"
      ],
      "author": {
        "name": "Bob Moore",
        "email": "robert.moore@intel.com",
        "time": "Wed Jul 04 10:02:32 2012 +0800"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Thu Jul 19 08:58:56 2012 -0700"
      },
      "message": "ACPICA: Fix possible fault in return package object repair code\n\ncommit 46befd6b38d802dfc5998e7d7938854578b45d9d upstream.\n\nFixes a problem that can occur when a lone package object is\nwrapped with an outer package object in order to conform to\nthe ACPI specification. Can affect these predefined names:\n_ALR,_MLS,_PSS,_TRT,_TSS,_PRT,_HPX,_DLM,_CSD,_PSD,_TSD\n\nhttps://bugzilla.kernel.org/show_bug.cgi?id\u003d44171\n\nThis problem was introduced in 3.4-rc1 by commit\n6a99b1c94d053b3420eaa4a4bc8b2883dd90a2f9\n(ACPICA: Object repair code: Support to add Package wrappers)\n\nReported-by: Vlastimil Babka \u003ccaster@gentoo.org\u003e\nSigned-off-by: Bob Moore \u003crobert.moore@intel.com\u003e\nSigned-off-by: Lin Ming \u003cming.m.lin@intel.com\u003e\nSigned-off-by: Len Brown \u003clen.brown@intel.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "5c77ea89ed79a692b0097dbca3652fbc83e30619",
      "tree": "a260a0925d36f5db62259914d38fc212b5d96fe6",
      "parents": [
        "e301f7b1dbbb0af6dcb8ed10c800fa95bb34917a"
      ],
      "author": {
        "name": "Todd Poynor",
        "email": "toddpoynor@google.com",
        "time": "Fri Jul 13 15:30:48 2012 +0900"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Thu Jul 19 08:58:55 2012 -0700"
      },
      "message": "ARM: SAMSUNG: fix race in s3c_adc_start for ADC\n\ncommit 8265981bb439f3ecc5356fb877a6c2a6636ac88a upstream.\n\nChecking for adc-\u003ets_pend already claimed should be done with the\nlock held.\n\nSigned-off-by: Todd Poynor \u003ctoddpoynor@google.com\u003e\nAcked-by: Ben Dooks \u003cben-linux@fluff.org\u003e\nSigned-off-by: Kukjin Kim \u003ckgene.kim@samsung.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "e301f7b1dbbb0af6dcb8ed10c800fa95bb34917a",
      "tree": "c583d4f8919432e04060582becd7af01f6d109d5",
      "parents": [
        "a3a13c9974160030550ae28b3fa2c1ea8992b9c5"
      ],
      "author": {
        "name": "NeilBrown",
        "email": "neilb@suse.de",
        "time": "Mon Jul 09 11:34:13 2012 +1000"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Thu Jul 19 08:58:55 2012 -0700"
      },
      "message": "md/raid1: fix use-after-free bug in RAID1 data-check code.\n\ncommit 2d4f4f3384d4ef4f7c571448e803a1ce721113d5 upstream.\n\nThis bug has been present ever since data-check was introduce\nin 2.6.16.  However it would only fire if a data-check were\ndone on a degraded array, which was only possible if the array\nhas 3 or more devices.  This is certainly possible, but is quite\nuncommon.\n\nSince hot-replace was added in 3.3 it can happen more often as\nthe same condition can arise if not all possible replacements are\npresent.\n\nThe problem is that as soon as we submit the last read request, the\n\u0027r1_bio\u0027 structure could be freed at any time, so we really should\nstop looking at it.  If the last device is being read from we will\nstop looking at it.  However if the last device is not due to be read\nfrom, we will still check the bio pointer in the r1_bio, but the\nr1_bio might already be free.\n\nSo use the read_targets counter to make sure we stop looking for bios\nto submit as soon as we have submitted them all.\n\nThis fix is suitable for any -stable kernel since 2.6.16.\n\nReported-by: Arnold Schulz \u003carnysch@gmx.net\u003e\nSigned-off-by: NeilBrown \u003cneilb@suse.de\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "a3a13c9974160030550ae28b3fa2c1ea8992b9c5",
      "tree": "5e5c407fa3b98445ea0cd71a96ed4b13f17b3e39",
      "parents": [
        "a3fa551238b526b7b345da724b988650468cf36e"
      ],
      "author": {
        "name": "Herton Ronaldo Krzesinski",
        "email": "herton.krzesinski@canonical.com",
        "time": "Wed May 16 16:21:52 2012 -0300"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Thu Jul 19 08:58:55 2012 -0700"
      },
      "message": "mtd: nandsim: don\u0027t open code a do_div helper\n\ncommit 596fd46268634082314b3af1ded4612e1b7f3f03 upstream.\n\nWe don\u0027t need to open code the divide function, just use div_u64 that\nalready exists and do the same job. While this is a straightforward\nclean up, there is more to that, the real motivation for this.\n\nWhile building on a cross compiling environment in armel, using gcc\n4.6.3 (Ubuntu/Linaro 4.6.3-1ubuntu5), I was getting the following build\nerror:\n\nERROR: \"__aeabi_uldivmod\" [drivers/mtd/nand/nandsim.ko] undefined!\n\nAfter investigating with objdump and hand built assembly version\ngenerated with the compiler, I narrowed __aeabi_uldivmod as being\ngenerated from the divide function. When nandsim.c is built with\n-fno-inline-functions-called-once, that happens when\nCONFIG_DEBUG_SECTION_MISMATCH is enabled, the do_div optimization in\narch/arm/include/asm/div64.h doesn\u0027t work as expected with the open\ncoded divide function: even if the do_div we are using doesn\u0027t have a\nconstant divisor, the compiler still includes the else parts of the\noptimized do_div macro, and translates the divisions there to use\n__aeabi_uldivmod, instead of only calling __do_div_asm -\u003e __do_div64 and\noptimizing/removing everything else out.\n\nSo to reproduce, gcc 4.6 plus CONFIG_DEBUG_SECTION_MISMATCH\u003dy and\nCONFIG_MTD_NAND_NANDSIM\u003dm should do it, building on armel.\n\nAfter this change, the compiler does the intended thing even with\n-fno-inline-functions-called-once, and optimizes out as expected the\nconstant handling in the optimized do_div on arm. As this also avoids a\nbuild issue, I\u0027m marking for Stable, as I think is applicable for this\ncase.\n\nSigned-off-by: Herton Ronaldo Krzesinski \u003cherton.krzesinski@canonical.com\u003e\nAcked-by: Nicolas Pitre \u003cnico@linaro.org\u003e\nSigned-off-by: Artem Bityutskiy \u003cartem.bityutskiy@linux.intel.com\u003e\nSigned-off-by: David Woodhouse \u003cDavid.Woodhouse@intel.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "a3fa551238b526b7b345da724b988650468cf36e",
      "tree": "475292427d977f8b1667fc69f4f50cf5212277b3",
      "parents": [
        "e2ea6a3e16a36e26af184f781ede7a12f6cff8b5"
      ],
      "author": {
        "name": "Santosh Nayak",
        "email": "santoshprasadnayak@gmail.com",
        "time": "Sat Jun 23 07:59:54 2012 -0300"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Thu Jul 19 08:58:55 2012 -0700"
      },
      "message": "media: dvb-core: Release semaphore on error path dvb_register_device()\n\ncommit 82163edcdfa4eb3d74516cc8e9f38dd3d039b67d upstream.\n\nThere is a missing \"up_write()\" here. Semaphore should be released\nbefore returning error value.\n\nSigned-off-by: Santosh Nayak \u003csantoshprasadnayak@gmail.com\u003e\nSigned-off-by: Mauro Carvalho Chehab \u003cmchehab@redhat.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "e2ea6a3e16a36e26af184f781ede7a12f6cff8b5",
      "tree": "368ca1b2ff510ee878e351bb8b7384066dcab9ff",
      "parents": [
        "175063bccaefa0b6a4934ffaf3a9639a4a7616d0"
      ],
      "author": {
        "name": "Jeff Moyer",
        "email": "jmoyer@redhat.com",
        "time": "Thu Jul 12 09:43:14 2012 -0400"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Thu Jul 19 08:58:55 2012 -0700"
      },
      "message": "block: fix infinite loop in __getblk_slow\n\ncommit 91f68c89d8f35fe98ea04159b9a3b42d0149478f upstream.\n\nCommit 080399aaaf35 (\"block: don\u0027t mark buffers beyond end of disk as\nmapped\") exposed a bug in __getblk_slow that causes mount to hang as it\nloops infinitely waiting for a buffer that lies beyond the end of the\ndisk to become uptodate.\n\nThe problem was initially reported by Torsten Hilbrich here:\n\n    https://lkml.org/lkml/2012/6/18/54\n\nand also reported independently here:\n\n    http://www.sysresccd.org/forums/viewtopic.php?f\u003d13\u0026t\u003d4511\n\nand then Richard W.M.  Jones and Marcos Mello noted a few separate\nbugzillas also associated with the same issue.  This patch has been\nconfirmed to fix:\n\n    https://bugzilla.redhat.com/show_bug.cgi?id\u003d835019\n\nThe main problem is here, in __getblk_slow:\n\n        for (;;) {\n                struct buffer_head * bh;\n                int ret;\n\n                bh \u003d __find_get_block(bdev, block, size);\n                if (bh)\n                        return bh;\n\n                ret \u003d grow_buffers(bdev, block, size);\n                if (ret \u003c 0)\n                        return NULL;\n                if (ret \u003d\u003d 0)\n                        free_more_memory();\n        }\n\n__find_get_block does not find the block, since it will not be marked as\nmapped, and so grow_buffers is called to fill in the buffers for the\nassociated page.  I believe the for (;;) loop is there primarily to\nretry in the case of memory pressure keeping grow_buffers from\nsucceeding.  However, we also continue to loop for other cases, like the\nblock lying beond the end of the disk.  So, the fix I came up with is to\nonly loop when grow_buffers fails due to memory allocation issues\n(return value of 0).\n\nThe attached patch was tested by myself, Torsten, and Rich, and was\nfound to resolve the problem in call cases.\n\nSigned-off-by: Jeff Moyer \u003cjmoyer@redhat.com\u003e\nReported-and-Tested-by: Torsten Hilbrich \u003ctorsten.hilbrich@secunet.com\u003e\nTested-by: Richard W.M. Jones \u003crjones@redhat.com\u003e\nReviewed-by: Josh Boyer \u003cjwboyer@redhat.com\u003e\n[ Jens is on vacation, taking this directly  - Linus ]\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "175063bccaefa0b6a4934ffaf3a9639a4a7616d0",
      "tree": "2f48e7b11eea3501b0585824ad15ad0feccc9dc8",
      "parents": [
        "9ab2f39f3ebbd4ccf2cdd75d564ee09c77c722ab"
      ],
      "author": {
        "name": "Jean Delvare",
        "email": "khali@linux-fr.org",
        "time": "Thu Jul 12 22:47:37 2012 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Thu Jul 19 08:58:55 2012 -0700"
      },
      "message": "hwmon: (it87) Preserve configuration register bits on init\n\ncommit 41002f8dd5938d5ad1d008ce5bfdbfe47fa7b4e8 upstream.\n\nWe were accidentally losing one bit in the configuration register on\ndevice initialization. It was reported to freeze one specific system\nright away. Properly preserve all bits we don\u0027t explicitly want to\nchange in order to prevent that.\n\nReported-by: Stevie Trujillo \u003cstevie.trujillo@gmail.com\u003e\nSigned-off-by: Jean Delvare \u003ckhali@linux-fr.org\u003e\nReviewed-by: Guenter Roeck \u003clinux@roeck-us.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "9ab2f39f3ebbd4ccf2cdd75d564ee09c77c722ab",
      "tree": "20d9a2e301f5fa5f91a98605baa1e4a4b546bd89",
      "parents": [
        "dfd45e89bc8040c45ad5df89fb01d7d0138ec953"
      ],
      "author": {
        "name": "David Dillow",
        "email": "dave@thedillows.org",
        "time": "Mon Jun 18 00:15:21 2012 -0300"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Thu Jul 19 08:58:54 2012 -0700"
      },
      "message": "media: cx231xx: don\u0027t DMA to random addresses\n\ncommit a7deca6fa79d5c65575532e780f3c93f6bf8ddad upstream.\n\nCommit 7a6f6c29d264cdd2fe0eb3d923217eed5f0ad134 (cx231xx: use\nURB_NO_TRANSFER_DMA_MAP) was intended to avoid mapping the DMA buffer\nfor URB twice. This works for the URBs allocated with usb_alloc_urb(),\nas those are allocated from cohernent DMA pools, but the flag was also\nadded for the VBI and audio URBs, which have a manually allocated area.\nThis leaves the random trash in the structure after allocation as the\nDMA address, corrupting memory and preventing VBI and audio from\nworking. Letting the USB core map the buffers solves the problem.\n\nSigned-off-by: David Dillow \u003cdave@thedillows.org\u003e\nCc: Sri Deevi \u003csrinivasa.deevi@conexant.com\u003e\nSigned-off-by: Mauro Carvalho Chehab \u003cmchehab@redhat.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "dfd45e89bc8040c45ad5df89fb01d7d0138ec953",
      "tree": "b1431982b85ae956972e5f4ac0ef265f3c1f8227",
      "parents": [
        "763c71b1319c56272e42cf6ada6994131f0193a7"
      ],
      "author": {
        "name": "Dave Jones",
        "email": "davej@redhat.com",
        "time": "Fri Jul 13 13:35:36 2012 -0400"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Thu Jul 19 08:58:54 2012 -0700"
      },
      "message": "Remove easily user-triggerable BUG from generic_setlease\n\ncommit 8d657eb3b43861064d36241e88d9d61c709f33f0 upstream.\n\nThis can be trivially triggered from userspace by passing in something unexpected.\n\n    kernel BUG at fs/locks.c:1468!\n    invalid opcode: 0000 [#1] SMP\n    RIP: 0010:generic_setlease+0xc2/0x100\n    Call Trace:\n      __vfs_setlease+0x35/0x40\n      fcntl_setlease+0x76/0x150\n      sys_fcntl+0x1c6/0x810\n      system_call_fastpath+0x1a/0x1f\n\nSigned-off-by: Dave Jones \u003cdavej@redhat.com\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "763c71b1319c56272e42cf6ada6994131f0193a7",
      "tree": "decc3d88295df3a1aa56ac7a778d537df59c9c89",
      "parents": [
        "bb2b649805527af1d823f871e7e3a95c4e6a018e"
      ],
      "author": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Jul 16 11:20:09 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Jul 16 11:20:09 2012 -0700"
      },
      "message": "Linux 3.4.5\n"
    },
    {
      "commit": "bb2b649805527af1d823f871e7e3a95c4e6a018e",
      "tree": "b247be4fc93d60ee914b2f78a02e97956682dc7e",
      "parents": [
        "7ad71f960f0f6e06cbded278809674afc515036a"
      ],
      "author": {
        "name": "Luis Henriques",
        "email": "luis.henriques@canonical.com",
        "time": "Wed Jul 11 14:02:10 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Jul 16 09:04:45 2012 -0700"
      },
      "message": "ocfs2: fix NULL pointer dereference in __ocfs2_change_file_space()\n\ncommit a4e08d001f2e50bb8b3c4eebadcf08e5535f02ee upstream.\n\nAs ocfs2_fallocate() will invoke __ocfs2_change_file_space() with a NULL\nas the first parameter (file), it may trigger a NULL pointer dereferrence\ndue to a missing check.\n\nAddresses http://bugs.launchpad.net/bugs/1006012\n\nSigned-off-by: Luis Henriques \u003cluis.henriques@canonical.com\u003e\nReported-by: Bret Towe \u003cmagnade@gmail.com\u003e\nTested-by: Bret Towe \u003cmagnade@gmail.com\u003e\nCc: Sunil Mushran \u003csunil.mushran@oracle.com\u003e\nAcked-by: Joel Becker \u003cjlbec@evilplan.org\u003e\nAcked-by: Mark Fasheh \u003cmfasheh@suse.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "7ad71f960f0f6e06cbded278809674afc515036a",
      "tree": "df62cd2fb579dc1ded7ec28c669ed03bf506ffe9",
      "parents": [
        "0fa627b15c842095b5147f381fa1943a6a46bb01"
      ],
      "author": {
        "name": "Yinghai Lu",
        "email": "yinghai@kernel.org",
        "time": "Wed Jul 11 14:02:56 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Jul 16 09:04:45 2012 -0700"
      },
      "message": "memblock: free allocated memblock_reserved_regions later\n\ncommit 29f6738609e40227dabcc63bfb3b84b3726a75bd upstream.\n\nmemblock_free_reserved_regions() calls memblock_free(), but\nmemblock_free() would double reserved.regions too, so we could free the\nold range for reserved.regions.\n\nAlso tj said there is another bug which could be related to this.\n\n| I don\u0027t think we\u0027re saving any noticeable\n| amount by doing this \"free - give it to page allocator - reserve\n| again\" dancing.  We should just allocate regions aligned to page\n| boundaries and free them later when memblock is no longer in use.\n\nin that case, when DEBUG_PAGEALLOC, will get panic:\n\n     memblock_free: [0x0000102febc080-0x0000102febf080] memblock_free_reserved_regions+0x37/0x39\n  BUG: unable to handle kernel paging request at ffff88102febd948\n  IP: [\u003cffffffff836a5774\u003e] __next_free_mem_range+0x9b/0x155\n  PGD 4826063 PUD cf67a067 PMD cf7fa067 PTE 800000102febd160\n  Oops: 0000 [#1] PREEMPT SMP DEBUG_PAGEALLOC\n  CPU 0\n  Pid: 0, comm: swapper Not tainted 3.5.0-rc2-next-20120614-sasha #447\n  RIP: 0010:[\u003cffffffff836a5774\u003e]  [\u003cffffffff836a5774\u003e] __next_free_mem_range+0x9b/0x155\n\nSee the discussion at https://lkml.org/lkml/2012/6/13/469\n\nSo try to allocate with PAGE_SIZE alignment and free it later.\n\nReported-by: Sasha Levin \u003clevinsasha928@gmail.com\u003e\nAcked-by: Tejun Heo \u003ctj@kernel.org\u003e\nCc: Benjamin Herrenschmidt \u003cbenh@kernel.crashing.org\u003e\nSigned-off-by: Yinghai Lu \u003cyinghai@kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "0fa627b15c842095b5147f381fa1943a6a46bb01",
      "tree": "4293cc0156d458583829aefff1eee7daa56df5fe",
      "parents": [
        "7a08b440fa93e036968102597c8a2ab809a9bdc4"
      ],
      "author": {
        "name": "Bob Liu",
        "email": "lliubbo@gmail.com",
        "time": "Wed Jul 11 14:02:35 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Jul 16 09:04:45 2012 -0700"
      },
      "message": "fs: ramfs: file-nommu: add SetPageUptodate()\n\ncommit fea9f718b3d68147f162ed2d870183ce5e0ad8d8 upstream.\n\nThere is a bug in the below scenario for !CONFIG_MMU:\n\n 1. create a new file\n 2. mmap the file and write to it\n 3. read the file can\u0027t get the correct value\n\nBecause\n\n  sys_read() -\u003e generic_file_aio_read() -\u003e simple_readpage() -\u003e clear_page()\n\nwhich causes the page to be zeroed.\n\nAdd SetPageUptodate() to ramfs_nommu_expand_for_mapping() so that\ngeneric_file_aio_read() do not call simple_readpage().\n\nSigned-off-by: Bob Liu \u003clliubbo@gmail.com\u003e\nCc: Hugh Dickins \u003chughd@google.com\u003e\nCc: David Howells \u003cdhowells@redhat.com\u003e\nCc: Geert Uytterhoeven \u003cgeert@linux-m68k.org\u003e\nCc: Greg Ungerer \u003cgerg@uclinux.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "7a08b440fa93e036968102597c8a2ab809a9bdc4",
      "tree": "97d9a1b575eb0c18de1649253c8062bfc7d4daa4",
      "parents": [
        "ae555e19b697bc90ea3ec004dc0e5541983593fa"
      ],
      "author": {
        "name": "David Rientjes",
        "email": "rientjes@google.com",
        "time": "Wed Jul 11 14:02:13 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Jul 16 09:04:44 2012 -0700"
      },
      "message": "mm, thp: abort compaction if migration page cannot be charged to memcg\n\ncommit 4bf2bba3750f10aa9e62e6949bc7e8329990f01b upstream.\n\nIf page migration cannot charge the temporary page to the memcg,\nmigrate_pages() will return -ENOMEM.  This isn\u0027t considered in memory\ncompaction however, and the loop continues to iterate over all\npageblocks trying to isolate and migrate pages.  If a small number of\nvery large memcgs happen to be oom, however, these attempts will mostly\nbe futile leading to an enormous amout of cpu consumption due to the\npage migration failures.\n\nThis patch will short circuit and fail memory compaction if\nmigrate_pages() returns -ENOMEM.  COMPACT_PARTIAL is returned in case\nsome migrations were successful so that the page allocator will retry.\n\nSigned-off-by: David Rientjes \u003crientjes@google.com\u003e\nAcked-by: Mel Gorman \u003cmgorman@suse.de\u003e\nCc: Minchan Kim \u003cminchan@kernel.org\u003e\nCc: Kamezawa Hiroyuki \u003ckamezawa.hiroyu@jp.fujitsu.com\u003e\nCc: Rik van Riel \u003criel@redhat.com\u003e\nCc: Andrea Arcangeli \u003caarcange@redhat.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "ae555e19b697bc90ea3ec004dc0e5541983593fa",
      "tree": "690329c27b9f0254a6194814681d5a412c0814a7",
      "parents": [
        "a61046645665398124b7353999713c02fc4a89eb"
      ],
      "author": {
        "name": "Benoît Thébaudeau",
        "email": "benoit.thebaudeau@advansee.com",
        "time": "Wed Jul 11 14:02:32 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Jul 16 09:04:44 2012 -0700"
      },
      "message": "drivers/rtc/rtc-mxc.c: fix irq enabled interrupts warning\n\ncommit b59f6d1febd6cbe9fae4589bf72da0ed32bc69e0 upstream.\n\nFixes\n\n  WARNING: at irq/handle.c:146 handle_irq_event_percpu+0x19c/0x1b8()\n  irq 25 handler mxc_rtc_interrupt+0x0/0xac enabled interrupts\n  Modules linked in:\n   (unwind_backtrace+0x0/0xf0) from (warn_slowpath_common+0x4c/0x64)\n   (warn_slowpath_common+0x4c/0x64) from (warn_slowpath_fmt+0x30/0x40)\n   (warn_slowpath_fmt+0x30/0x40) from (handle_irq_event_percpu+0x19c/0x1b8)\n   (handle_irq_event_percpu+0x19c/0x1b8) from (handle_irq_event+0x28/0x38)\n   (handle_irq_event+0x28/0x38) from (handle_level_irq+0x80/0xc4)\n   (handle_level_irq+0x80/0xc4) from (generic_handle_irq+0x24/0x38)\n   (generic_handle_irq+0x24/0x38) from (handle_IRQ+0x30/0x84)\n   (handle_IRQ+0x30/0x84) from (avic_handle_irq+0x2c/0x4c)\n   (avic_handle_irq+0x2c/0x4c) from (__irq_svc+0x40/0x60)\n  Exception stack(0xc050bf60 to 0xc050bfa8)\n  bf60: 00000001 00000000 003c4208 c0018e20 c050a000 c050a000 c054a4c8 c050a000\n  bf80: c05157a8 4117b363 80503bb4 00000000 01000000 c050bfa8 c0018e2c c000e808\n  bfa0: 60000013 ffffffff\n   (__irq_svc+0x40/0x60) from (default_idle+0x1c/0x30)\n   (default_idle+0x1c/0x30) from (cpu_idle+0x68/0xa8)\n   (cpu_idle+0x68/0xa8) from (start_kernel+0x22c/0x26c)\n\nSigned-off-by: Benoît Thébaudeau \u003cbenoit.thebaudeau@advansee.com\u003e\nCc: Alessandro Zummo \u003ca.zummo@towertech.it\u003e\nCc: Sascha Hauer \u003ckernel@pengutronix.de\u003e\nAcked-by: Uwe Kleine-König \u003cu.kleine-koenig@pengutronix.de\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "a61046645665398124b7353999713c02fc4a89eb",
      "tree": "3596d70704fbf7b3395f83fa9906310dd11be4ad",
      "parents": [
        "0bf51a8f8756511b382aac13a3c1c7abeb8b0bec"
      ],
      "author": {
        "name": "Lee Jones",
        "email": "lee.jones@linaro.org",
        "time": "Wed Jul 11 14:02:16 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Jul 16 09:04:44 2012 -0700"
      },
      "message": "drivers/rtc/rtc-ab8500.c: use IRQF_ONESHOT when requesting a threaded IRQ\n\ncommit 3cfd16a551dc0c188160e1765168a04baf2d3198 upstream.\n\nThis driver\u0027s IRQ registration is failing because the kernel now forces\nIRQs to be ONESHOT if no IRQ handler is passed.\n\nSigned-off-by: Lee Jones \u003clee.jones@linaro.org\u003e\nCc: Alessandro Zummo \u003ca.zummo@towertech.it\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "0bf51a8f8756511b382aac13a3c1c7abeb8b0bec",
      "tree": "a86c6510d43a1ca4a5d876f5e381510ccb591dfa",
      "parents": [
        "0e343dbe08acb440f7914d989bcc32c1d1576735"
      ],
      "author": {
        "name": "Devendra Naga",
        "email": "devendra.aaru@gmail.com",
        "time": "Wed Jul 11 14:01:53 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Jul 16 09:04:44 2012 -0700"
      },
      "message": "drivers/rtc/rtc-spear.c: fix use-after-free in spear_rtc_remove()\n\ncommit 2a643893e50fde71d7ba84b5592ec61b467b9ab6 upstream.\n\n`config\u0027 is freed and is then used in the rtc_device_unregister() call,\ncausing a kernel panic.\n\nSigned-off-by: Devendra Naga \u003cdevendra.aaru@gmail.com\u003e\nReviewed-by: Viresh Kumar \u003cviresh.linux@gmail.com\u003e\nCc: Alessandro Zummo \u003ca.zummo@towertech.it\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "0e343dbe08acb440f7914d989bcc32c1d1576735",
      "tree": "224d26c553fc27c2a556cb52ffd8d8b692a64f8f",
      "parents": [
        "a2db97f10ba81ce924323e580a223ce8d17d685c"
      ],
      "author": {
        "name": "Jiang Liu",
        "email": "jiang.liu@huawei.com",
        "time": "Wed Jul 11 14:01:52 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Jul 16 09:04:44 2012 -0700"
      },
      "message": "memory hotplug: fix invalid memory access caused by stale kswapd pointer\n\ncommit d8adde17e5f858427504725218c56aef90e90fc7 upstream.\n\nkswapd_stop() is called to destroy the kswapd work thread when all memory\nof a NUMA node has been offlined.  But kswapd_stop() only terminates the\nwork thread without resetting NODE_DATA(nid)-\u003ekswapd to NULL.  The stale\npointer will prevent kswapd_run() from creating a new work thread when\nadding memory to the memory-less NUMA node again.  Eventually the stale\npointer may cause invalid memory access.\n\nAn example stack dump as below. It\u0027s reproduced with 2.6.32, but latest\nkernel has the same issue.\n\n  BUG: unable to handle kernel NULL pointer dereference at (null)\n  IP: [\u003cffffffff81051a94\u003e] exit_creds+0x12/0x78\n  PGD 0\n  Oops: 0000 [#1] SMP\n  last sysfs file: /sys/devices/system/memory/memory391/state\n  CPU 11\n  Modules linked in: cpufreq_conservative cpufreq_userspace cpufreq_powersave acpi_cpufreq microcode fuse loop dm_mod tpm_tis rtc_cmos i2c_i801 rtc_core tpm serio_raw pcspkr sg tpm_bios igb i2c_core iTCO_wdt rtc_lib mptctl iTCO_vendor_support button dca bnx2 usbhid hid uhci_hcd ehci_hcd usbcore sd_mod crc_t10dif edd ext3 mbcache jbd fan ide_pci_generic ide_core ata_generic ata_piix libata thermal processor thermal_sys hwmon mptsas mptscsih mptbase scsi_transport_sas scsi_mod\n  Pid: 7949, comm: sh Not tainted 2.6.32.12-qiuxishi-5-default #92 Tecal RH2285\n  RIP: 0010:exit_creds+0x12/0x78\n  RSP: 0018:ffff8806044f1d78  EFLAGS: 00010202\n  RAX: 0000000000000000 RBX: ffff880604f22140 RCX: 0000000000019502\n  RDX: 0000000000000000 RSI: 0000000000000202 RDI: 0000000000000000\n  RBP: ffff880604f22150 R08: 0000000000000000 R09: ffffffff81a4dc10\n  R10: 00000000000032a0 R11: ffff880006202500 R12: 0000000000000000\n  R13: 0000000000c40000 R14: 0000000000008000 R15: 0000000000000001\n  FS:  00007fbc03d066f0(0000) GS:ffff8800282e0000(0000) knlGS:0000000000000000\n  CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b\n  CR2: 0000000000000000 CR3: 000000060f029000 CR4: 00000000000006e0\n  DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n  DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400\n  Process sh (pid: 7949, threadinfo ffff8806044f0000, task ffff880603d7c600)\n  Stack:\n   ffff880604f22140 ffffffff8103aac5 ffff880604f22140 ffffffff8104d21e\n   ffff880006202500 0000000000008000 0000000000c38000 ffffffff810bd5b1\n   0000000000000000 ffff880603d7c600 00000000ffffdd29 0000000000000003\n  Call Trace:\n    __put_task_struct+0x5d/0x97\n    kthread_stop+0x50/0x58\n    offline_pages+0x324/0x3da\n    memory_block_change_state+0x179/0x1db\n    store_mem_state+0x9e/0xbb\n    sysfs_write_file+0xd0/0x107\n    vfs_write+0xad/0x169\n    sys_write+0x45/0x6e\n    system_call_fastpath+0x16/0x1b\n  Code: ff 4d 00 0f 94 c0 84 c0 74 08 48 89 ef e8 1f fd ff ff 5b 5d 31 c0 41 5c c3 53 48 8b 87 20 06 00 00 48 89 fb 48 8b bf 18 06 00 00 \u003c8b\u003e 00 48 c7 83 18 06 00 00 00 00 00 00 f0 ff 0f 0f 94 c0 84 c0\n  RIP  exit_creds+0x12/0x78\n   RSP \u003cffff8806044f1d78\u003e\n  CR2: 0000000000000000\n\n[akpm@linux-foundation.org: add pglist_data.kswapd locking comments]\nSigned-off-by: Xishi Qiu \u003cqiuxishi@huawei.com\u003e\nSigned-off-by: Jiang Liu \u003cjiang.liu@huawei.com\u003e\nAcked-by: KAMEZAWA Hiroyuki \u003ckamezawa.hiroyu@jp.fujitsu.com\u003e\nAcked-by: KOSAKI Motohiro \u003ckosaki.motohiro@jp.fujitsu.com\u003e\nAcked-by: Mel Gorman \u003cmgorman@suse.de\u003e\nAcked-by: David Rientjes \u003crientjes@google.com\u003e\nReviewed-by: Minchan Kim \u003cminchan@kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "a2db97f10ba81ce924323e580a223ce8d17d685c",
      "tree": "1028fc4c57b5cbde57866dc2107e0702471d2eaf",
      "parents": [
        "d3f940223c31cffd977864cdc13c69e89f03ce55"
      ],
      "author": {
        "name": "Lars-Peter Clausen",
        "email": "lars@metafoo.de",
        "time": "Tue Jun 05 18:16:31 2012 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Jul 16 09:04:43 2012 -0700"
      },
      "message": "staging:iio:ad7606: Re-add missing scale attribute\n\ncommit 279bf2e57c30c9a4482b2b6ede11b31c41e35e78 upstream.\n\nCommit 50ac23be (\"staging:iio:adc:ad7606 add local define for chan_spec\nstructures.\") accidentally removed the scale info_mask flag. This patch\nadds it back again.\n\nSigned-off-by: Lars-Peter Clausen \u003clars@metafoo.de\u003e\nAcked-by: Jonathan Cameron \u003cjic23@kernel.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n[herton: Backported to 3.4: info_mask was not used yet with another flag]\nSigned-off-by: Herton R. Krzesinski \u003cherton@canonical.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "d3f940223c31cffd977864cdc13c69e89f03ce55",
      "tree": "09ba2e45102876e10f8bc9bb1f04a689193fbbc8",
      "parents": [
        "0c4ad5cc8c01f62fe5211b5ce9563c27f795a4ab"
      ],
      "author": {
        "name": "majianpeng",
        "email": "majianpeng@gmail.com",
        "time": "Tue Jun 12 08:31:10 2012 +0800"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Jul 16 09:04:43 2012 -0700"
      },
      "message": "md/raid5: Do not add data_offset before call to is_badblock\n\ncommit 6c0544e255dd6582a9899572e120fb55d9f672a4 upstream.\n\nIn chunk_aligned_read() we are adding data_offset before calling\nis_badblock.  But is_badblock also adds data_offset, so that is bad.\n\nSo move the addition of data_offset to after the call to\nis_badblock.\n\nThis bug was introduced by commit 31c176ecdf3563140e639\n     md/raid5: avoid reading from known bad blocks.\nwhich first appeared in 3.0.  So that patch is suitable for any\n-stable kernel from 3.0.y onwards.  However it will need minor\nrevision for most of those (as the comment didn\u0027t appear until\nrecently).\n\nSigned-off-by: majianpeng \u003cmajianpeng@gmail.com\u003e\nSigned-off-by: NeilBrown \u003cneilb@suse.de\u003e\n[bwh: Backported to 3.2: ignored missing comment]\nSigned-off-by: Ben Hutchings \u003cben@decadent.org.uk\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "0c4ad5cc8c01f62fe5211b5ce9563c27f795a4ab",
      "tree": "a387acf3d19362ad7812134b3fdff5eb81f92c4a",
      "parents": [
        "c9bb51fb8c7a9d8b230c0bd184d9af919350383b"
      ],
      "author": {
        "name": "Andy Lutomirski",
        "email": "luto@amacapital.net",
        "time": "Thu Jul 05 16:00:11 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Jul 16 09:04:43 2012 -0700"
      },
      "message": "mm: Hold a file reference in madvise_remove\n\ncommit 9ab4233dd08036fe34a89c7dc6f47a8bf2eb29eb upstream.\n\nOtherwise the code races with munmap (causing a use-after-free\nof the vma) or with close (causing a use-after-free of the struct\nfile).\n\nThe bug was introduced by commit 90ed52ebe481 (\"[PATCH] holepunch: fix\nmmap_sem i_mutex deadlock\")\n\nCc: Hugh Dickins \u003chugh@veritas.com\u003e\nCc: Miklos Szeredi \u003cmszeredi@suse.cz\u003e\nCc: Badari Pulavarty \u003cpbadari@us.ibm.com\u003e\nCc: Nick Piggin \u003cnpiggin@suse.de\u003e\nSigned-off-by: Andy Lutomirski \u003cluto@amacapital.net\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n[bwh: Backported to 3.2:\n - Adjust context\n - madvise_remove() calls vmtruncate_range(), not do_fallocate()]\nSigned-off-by: Ben Hutchings \u003cben@decadent.org.uk\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "c9bb51fb8c7a9d8b230c0bd184d9af919350383b",
      "tree": "16437af34b27be0f9db436cfefbe918a622da22a",
      "parents": [
        "a08fae601d01ab177dbef90778f87f7c5467b792"
      ],
      "author": {
        "name": "Daniel Vetter",
        "email": "daniel.vetter@ffwll.ch",
        "time": "Thu Jun 21 14:55:22 2012 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Jul 16 09:04:43 2012 -0700"
      },
      "message": "drm/i915: rip out the PM_IIR WARN\n\ncommit 58bf8062d0b293b8e1028e5b0342082002886bd4 upstream.\n\nAfter banging my head against this for the past few months, I still\ndon\u0027t see how this could possible race under the premise that once an\nirq bit is masked in PM_IMR and reset in PM_IIR it won\u0027t show up again\nuntil we unmask it in PM_IMR.\n\nStill, we have reports of this being seen in the wild. Now Bspec has\nthis little bit of lovely language in the PMIIR register:\n\nPublic SNB Docs, Vol3Part2, 2.5.14 \"PMIIR\":\n\n\"For each bit, the IIR can store a second pending interrupt if two or\nmore of the same interrupt conditions occur before the first condition\nis cleared. Upon clearing the interrupt, the IIR bit will momentarily\ngo low, then return high to indicate there is another interrupt\npending.\"\n\nNow if we presume that PMIMR only prevent new interrupts from being\nqueued, we could easily end up masking an interrupt and clearing it,\nbut the 2nd pending interrupt setting the bit in PMIIR right away\nagain. Which leads, the next time the irq handler runs, to hitting the\nWARN.\n\nAlso, no bad side effects of this have ever been reported. And we\u0027ve\ntracked down our issues with the gpu turbo getting stuck to bogus\ninterrupt generation limits in th RPLIMIT register.\n\nSo let\u0027s just rip out this WARN as bogus and call it a day. The only\nshallow thing here is that this 2-deep irq queue in the hw makes you\nwonder how racy the windows irq handler is ...\n\nBugzilla: https://bugzilla.kernel.org/show_bug.cgi?id\u003d42907\nAcked-by: Chris Wilson \u003cchris@chris-wilson.co.uk\u003e\nSigned-Off-by: Daniel Vetter \u003cdaniel.vetter@ffwll.ch\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "a08fae601d01ab177dbef90778f87f7c5467b792",
      "tree": "54e13312ca7cceab6f3330668cfac89276bd6ed9",
      "parents": [
        "2c07f25ea7800adb36cd8da9b58c4ecd3fc3d064"
      ],
      "author": {
        "name": "Chris Wilson",
        "email": "chris@chris-wilson.co.uk",
        "time": "Sun Apr 15 11:56:03 2012 +0100"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Jul 16 09:04:43 2012 -0700"
      },
      "message": "drm/i915: Refactor the deferred PM_IIR handling into a single function\n\ncommit fc6826d1dcd65f3d1e9a5377678882e4e08f02be upstream.\n\nThis function, along with the registers and deferred work hander, are\nall shared with SandyBridge, IvyBridge and their variants. So remove the\nduplicate code into a single function.\n\nSigned-off-by: Chris Wilson \u003cchris@chris-wilson.co.uk\u003e\nReviewed-by: Ben Widawsky \u003cben@bwidawsk.net\u003e\nSigned-Off-by: Daniel Vetter \u003cdaniel.vetter@ffwll.ch\u003e\n[bwh: Backported to 3.2: adjust context; drop changes for Valley View]\nSigned-off-by: Ben Hutchings \u003cben@decadent.org.uk\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "2c07f25ea7800adb36cd8da9b58c4ecd3fc3d064",
      "tree": "b312e3b679b544de20569f8e31dd1469e8a72be1",
      "parents": [
        "5318edefb61eddf91d4c4a089644fcee3ccfda62"
      ],
      "author": {
        "name": "Eric Dumazet",
        "email": "edumazet@google.com",
        "time": "Tue Jun 12 15:24:40 2012 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Jul 16 09:04:42 2012 -0700"
      },
      "message": "splice: fix racy pipe-\u003ebuffers uses\n\ncommit 047fe3605235888f3ebcda0c728cb31937eadfe6 upstream.\n\nDave Jones reported a kernel BUG at mm/slub.c:3474! triggered\nby splice_shrink_spd() called from vmsplice_to_pipe()\n\ncommit 35f3d14dbbc5 (pipe: add support for shrinking and growing pipes)\nadded capability to adjust pipe-\u003ebuffers.\n\nProblem is some paths don\u0027t hold pipe mutex and assume pipe-\u003ebuffers\ndoesn\u0027t change for their duration.\n\nFix this by adding nr_pages_max field in struct splice_pipe_desc, and\nuse it in place of pipe-\u003ebuffers where appropriate.\n\nsplice_shrink_spd() loses its struct pipe_inode_info argument.\n\nReported-by: Dave Jones \u003cdavej@redhat.com\u003e\nSigned-off-by: Eric Dumazet \u003cedumazet@google.com\u003e\nCc: Jens Axboe \u003caxboe@kernel.dk\u003e\nCc: Alexander Viro \u003cviro@zeniv.linux.org.uk\u003e\nCc: Tom Herbert \u003ctherbert@google.com\u003e\nTested-by: Dave Jones \u003cdavej@redhat.com\u003e\nSigned-off-by: Jens Axboe \u003caxboe@kernel.dk\u003e\n[bwh: Backported to 3.2:\n - Adjust context in vmsplice_to_pipe()\n - Update one more call to splice_shrink_spd(), from skb_splice_bits()]\nSigned-off-by: Ben Hutchings \u003cben@decadent.org.uk\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "5318edefb61eddf91d4c4a089644fcee3ccfda62",
      "tree": "d48914c3a6f6fdcbb59431f30188b6b95cdbf293",
      "parents": [
        "6d0535e8f0406ba353c06a5417e9caa498733372"
      ],
      "author": {
        "name": "Stanislav Yakovlev",
        "email": "stas.yakovlev@gmail.com",
        "time": "Tue Apr 10 21:44:47 2012 -0400"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Jul 16 09:04:42 2012 -0700"
      },
      "message": "net/wireless: ipw2x00: add supported cipher suites to wiphy initialization\n\ncommit a141e6a0097118bb35024485f1faffc0d9042f5c upstream.\n\nDriver doesn\u0027t report its supported cipher suites through cfg80211\ninterface. It still uses wext interface and probably will not work\nthrough nl80211, but will at least correctly advertise supported\nfeatures.\n\nBug was reported by Omar Siam.\nhttps://bugzilla.kernel.org/show_bug.cgi?id\u003d43049\n\nSigned-off-by: Stanislav Yakovlev \u003cstas.yakovlev@gmail.com\u003e\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\nCc: Josh Boyer \u003cjwboyer@redhat.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "6d0535e8f0406ba353c06a5417e9caa498733372",
      "tree": "bac8428aa8261f7faa92ea9cebc177896953ab0c",
      "parents": [
        "21359ac3aef0455038f6295d6f8b3aca7beabfd9"
      ],
      "author": {
        "name": "Jason Wang",
        "email": "jasowang@redhat.com",
        "time": "Wed May 02 11:42:15 2012 +0800"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Jul 16 09:04:42 2012 -0700"
      },
      "message": "macvtap: zerocopy: validate vectors before building skb\n\ncommit b92946e2919134ebe2a4083e4302236295ea2a73 upstream.\n\nThere\u0027re several reasons that the vectors need to be validated:\n\n- Return error when caller provides vectors whose num is greater than UIO_MAXIOV.\n- Linearize part of skb when userspace provides vectors grater than MAX_SKB_FRAGS.\n- Return error when userspace provides vectors whose total length may exceed\n- MAX_SKB_FRAGS * PAGE_SIZE.\n\nSigned-off-by: Jason Wang \u003cjasowang@redhat.com\u003e\nSigned-off-by: Michael S. Tsirkin \u003cmst@redhat.com\u003e\nCc: Josh Boyer \u003cjwboyer@redhat.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "21359ac3aef0455038f6295d6f8b3aca7beabfd9",
      "tree": "ab0d8b01a7dcc265521b0575afd62eed204fb845",
      "parents": [
        "acf8fbd7c1182204ed723dee365bc5ba9a503dd6"
      ],
      "author": {
        "name": "Stanislaw Gruszka",
        "email": "sgruszka@redhat.com",
        "time": "Wed May 16 11:06:21 2012 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Jul 16 09:04:42 2012 -0700"
      },
      "message": "rtl8187: -\u003ebrightness_set can not sleep\n\ncommit 0fde0a8cfd0ede7f310d6a681c8e5a7cb3e32406 upstream.\n\nFix:\n\nBUG: sleeping function called from invalid context at kernel/workqueue.c:2547\nin_atomic(): 1, irqs_disabled(): 0, pid: 629, name: wpa_supplicant\n2 locks held by wpa_supplicant/629:\n #0:  (rtnl_mutex){+.+.+.}, at: [\u003cc08b2b84\u003e] rtnl_lock+0x14/0x20\n #1:  (\u0026trigger-\u003eleddev_list_lock){.+.?..}, at: [\u003cc0867f41\u003e] led_trigger_event+0x21/0x80\nPid: 629, comm: wpa_supplicant Not tainted 3.3.0-0.rc3.git5.1.fc17.i686\nCall Trace:\n [\u003cc046a9f6\u003e] __might_sleep+0x126/0x1d0\n [\u003cc0457d6c\u003e] wait_on_work+0x2c/0x1d0\n [\u003cc045a09a\u003e] __cancel_work_timer+0x6a/0x120\n [\u003cc045a160\u003e] cancel_delayed_work_sync+0x10/0x20\n [\u003cf7dd3c22\u003e] rtl8187_led_brightness_set+0x82/0xf0 [rtl8187]\n [\u003cc0867f7c\u003e] led_trigger_event+0x5c/0x80\n [\u003cf7ff5e6d\u003e] ieee80211_led_radio+0x1d/0x40 [mac80211]\n [\u003cf7ff3583\u003e] ieee80211_stop_device+0x13/0x230 [mac80211]\n\nRemoving _sync is ok, because if led_on work is currently running\nit will be finished before led_off work start to perform, since\nthey are always queued on the same mac80211 local-\u003eworkqueue.\n\nBugzilla: https://bugzilla.redhat.com/show_bug.cgi?id\u003d795176\n\nSigned-off-by: Stanislaw Gruszka \u003csgruszka@redhat.com\u003e\nAcked-by: Larry Finger \u003cLarry.Finger@lwfinger.net\u003e\nAcked-by: Hin-Tak Leung \u003chtl10@users.sourceforge.net\u003e\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\nCc: Josh Boyer \u003cjwboyer@redhat.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "acf8fbd7c1182204ed723dee365bc5ba9a503dd6",
      "tree": "6479ee55435b097d79e5e1fe45a1c1e7a3f030d6",
      "parents": [
        "ff99851d5277c6131301a09f687aa3976ced31e7"
      ],
      "author": {
        "name": "Andrea Arcangeli",
        "email": "aarcange@redhat.com",
        "time": "Wed Jun 20 12:52:57 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Jul 16 09:04:42 2012 -0700"
      },
      "message": "thp: avoid atomic64_read in pmd_read_atomic for 32bit PAE\n\ncommit e4eed03fd06578571c01d4f1478c874bb432c815 upstream.\n\nIn the x86 32bit PAE CONFIG_TRANSPARENT_HUGEPAGE\u003dy case while holding the\nmmap_sem for reading, cmpxchg8b cannot be used to read pmd contents under\nXen.\n\nSo instead of dealing only with \"consistent\" pmdvals in\npmd_none_or_trans_huge_or_clear_bad() (which would be conceptually\nsimpler) we let pmd_none_or_trans_huge_or_clear_bad() deal with pmdvals\nwhere the low 32bit and high 32bit could be inconsistent (to avoid having\nto use cmpxchg8b).\n\nThe only guarantee we get from pmd_read_atomic is that if the low part of\nthe pmd was found null, the high part will be null too (so the pmd will be\nconsidered unstable).  And if the low part of the pmd is found \"stable\"\nlater, then it means the whole pmd was read atomically (because after a\npmd is stable, neither MADV_DONTNEED nor page faults can alter it anymore,\nand we read the high part after the low part).\n\nIn the 32bit PAE x86 case, it is enough to read the low part of the pmdval\natomically to declare the pmd as \"stable\" and that\u0027s true for THP and no\nTHP, furthermore in the THP case we also have a barrier() that will\nprevent any inconsistent pmdvals to be cached by a later re-read of the\n*pmd.\n\nSigned-off-by: Andrea Arcangeli \u003caarcange@redhat.com\u003e\nCc: Jonathan Nieder \u003cjrnieder@gmail.com\u003e\nCc: Ulrich Obergfell \u003cuobergfe@redhat.com\u003e\nCc: Mel Gorman \u003cmgorman@suse.de\u003e\nCc: Hugh Dickins \u003chughd@google.com\u003e\nCc: Larry Woodman \u003clwoodman@redhat.com\u003e\nCc: Petr Matousek \u003cpmatouse@redhat.com\u003e\nCc: Rik van Riel \u003criel@redhat.com\u003e\nCc: Jan Beulich \u003cjbeulich@suse.com\u003e\nCc: KOSAKI Motohiro \u003ckosaki.motohiro@gmail.com\u003e\nTested-by: Andrew Jones \u003cdrjones@redhat.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "ff99851d5277c6131301a09f687aa3976ced31e7",
      "tree": "1a7d2b5c47af230cb78978aefe87ba6655a8af45",
      "parents": [
        "e5982925c66c542aa41b17ee35fc233ae1521898"
      ],
      "author": {
        "name": "Andrea Arcangeli",
        "email": "aarcange@redhat.com",
        "time": "Tue May 29 15:06:49 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Jul 16 09:04:41 2012 -0700"
      },
      "message": "mm: pmd_read_atomic: fix 32bit PAE pmd walk vs pmd_populate SMP race condition\n\ncommit 26c191788f18129af0eb32a358cdaea0c7479626 upstream.\n\nWhen holding the mmap_sem for reading, pmd_offset_map_lock should only\nrun on a pmd_t that has been read atomically from the pmdp pointer,\notherwise we may read only half of it leading to this crash.\n\nPID: 11679  TASK: f06e8000  CPU: 3   COMMAND: \"do_race_2_panic\"\n #0 [f06a9dd8] crash_kexec at c049b5ec\n #1 [f06a9e2c] oops_end at c083d1c2\n #2 [f06a9e40] no_context at c0433ded\n #3 [f06a9e64] bad_area_nosemaphore at c043401a\n #4 [f06a9e6c] __do_page_fault at c0434493\n #5 [f06a9eec] do_page_fault at c083eb45\n #6 [f06a9f04] error_code (via page_fault) at c083c5d5\n    EAX: 01fb470c EBX: fff35000 ECX: 00000003 EDX: 00000100 EBP:\n    00000000\n    DS:  007b     ESI: 9e201000 ES:  007b     EDI: 01fb4700 GS:  00e0\n    CS:  0060     EIP: c083bc14 ERR: ffffffff EFLAGS: 00010246\n #7 [f06a9f38] _spin_lock at c083bc14\n #8 [f06a9f44] sys_mincore at c0507b7d\n #9 [f06a9fb0] system_call at c083becd\n                         start           len\n    EAX: ffffffda  EBX: 9e200000  ECX: 00001000  EDX: 6228537f\n    DS:  007b      ESI: 00000000  ES:  007b      EDI: 003d0f00\n    SS:  007b      ESP: 62285354  EBP: 62285388  GS:  0033\n    CS:  0073      EIP: 00291416  ERR: 000000da  EFLAGS: 00000286\n\nThis should be a longstanding bug affecting x86 32bit PAE without THP.\nOnly archs with 64bit large pmd_t and 32bit unsigned long should be\naffected.\n\nWith THP enabled the barrier() in pmd_none_or_trans_huge_or_clear_bad()\nwould partly hide the bug when the pmd transition from none to stable,\nby forcing a re-read of the *pmd in pmd_offset_map_lock, but when THP is\nenabled a new set of problem arises by the fact could then transition\nfreely in any of the none, pmd_trans_huge or pmd_trans_stable states.\nSo making the barrier in pmd_none_or_trans_huge_or_clear_bad()\nunconditional isn\u0027t good idea and it would be a flakey solution.\n\nThis should be fully fixed by introducing a pmd_read_atomic that reads\nthe pmd in order with THP disabled, or by reading the pmd atomically\nwith cmpxchg8b with THP enabled.\n\nLuckily this new race condition only triggers in the places that must\nalready be covered by pmd_none_or_trans_huge_or_clear_bad() so the fix\nis localized there but this bug is not related to THP.\n\nNOTE: this can trigger on x86 32bit systems with PAE enabled with more\nthan 4G of ram, otherwise the high part of the pmd will never risk to be\ntruncated because it would be zero at all times, in turn so hiding the\nSMP race.\n\nThis bug was discovered and fully debugged by Ulrich, quote:\n\n----\n[..]\npmd_none_or_trans_huge_or_clear_bad() loads the content of edx and\neax.\n\n    496 static inline int pmd_none_or_trans_huge_or_clear_bad(pmd_t\n    *pmd)\n    497 {\n    498         /* depend on compiler for an atomic pmd read */\n    499         pmd_t pmdval \u003d *pmd;\n\n                                // edi \u003d pmd pointer\n0xc0507a74 \u003csys_mincore+548\u003e:   mov    0x8(%esp),%edi\n...\n                                // edx \u003d PTE page table high address\n0xc0507a84 \u003csys_mincore+564\u003e:   mov    0x4(%edi),%edx\n...\n                                // eax \u003d PTE page table low address\n0xc0507a8e \u003csys_mincore+574\u003e:   mov    (%edi),%eax\n\n[..]\n\nPlease note that the PMD is not read atomically. These are two \"mov\"\ninstructions where the high order bits of the PMD entry are fetched\nfirst. Hence, the above machine code is prone to the following race.\n\n-  The PMD entry {high|low} is 0x0000000000000000.\n   The \"mov\" at 0xc0507a84 loads 0x00000000 into edx.\n\n-  A page fault (on another CPU) sneaks in between the two \"mov\"\n   instructions and instantiates the PMD.\n\n-  The PMD entry {high|low} is now 0x00000003fda38067.\n   The \"mov\" at 0xc0507a8e loads 0xfda38067 into eax.\n----\n\nReported-by: Ulrich Obergfell \u003cuobergfe@redhat.com\u003e\nSigned-off-by: Andrea Arcangeli \u003caarcange@redhat.com\u003e\nCc: Mel Gorman \u003cmgorman@suse.de\u003e\nCc: Hugh Dickins \u003chughd@google.com\u003e\nCc: Larry Woodman \u003clwoodman@redhat.com\u003e\nCc: Petr Matousek \u003cpmatouse@redhat.com\u003e\nCc: Rik van Riel \u003criel@redhat.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "e5982925c66c542aa41b17ee35fc233ae1521898",
      "tree": "1f761b55d38af49cf028b1b0944a399b828850f2",
      "parents": [
        "5250def1935443f4bbddce101281e0aaf2e66838"
      ],
      "author": {
        "name": "Tom Hughes",
        "email": "tom@compton.nu",
        "time": "Wed Jun 27 18:21:15 2012 +0100"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Jul 16 09:04:41 2012 -0700"
      },
      "message": "ath9k: fix panic caused by returning a descriptor we have queued for reuse\n\ncommit 6bb51c70cabaadddc54a6454844eceba91a56083 upstream.\n\nCommit 3a2923e83c introduced a bug when a corrupt descriptor\nis encountered - although the following descriptor is discarded\nand returned to the queue for reuse the associated frame is\nalso returned for processing. This leads to a panic:\n\nBUG: unable to handle kernel NULL pointer dereference at 000000000000003a\nIP: [\u003cffffffffa02599a5\u003e] ath_rx_tasklet+0x165/0x1b00 [ath9k]\nCall Trace:\n\u003cIRQ\u003e\n[\u003cffffffff812d7fa0\u003e] ? map_single+0x60/0x60\n[\u003cffffffffa028f044\u003e] ? ath9k_ioread32+0x34/0x90 [ath9k]\n[\u003cffffffffa0292eec\u003e] athk9k_tasklet+0xdc/0x160 [ath9k]\n[\u003cffffffff8105e133\u003e] tasklet_action+0x63/0xd0\n[\u003cffffffff8105dbc0\u003e] __do_softirq+0xc0/0x1e0\n[\u003cffffffff8101a873\u003e] ? native_sched_clock+0x13/0x80\n[\u003cffffffff815f9d5c\u003e] call_softirq+0x1c/0x30\n[\u003cffffffff810151f5\u003e] do_softirq+0x75/0xb0\n[\u003cffffffff8105df95\u003e] irq_exit+0xb5/0xc0\n[\u003cffffffff815fa5b3\u003e] do_IRQ+0x63/0xe0\n[\u003cffffffff815f0cea\u003e] common_interrupt+0x6a/0x6a\n\u003cEOI\u003e\n[\u003cffffffff8131840a\u003e] ? intel_idle+0xea/0x150\n[\u003cffffffff813183eb\u003e] ? intel_idle+0xcb/0x150\n[\u003cffffffff814a1db9\u003e] cpuidle_enter+0x19/0x20\n[\u003cffffffff814a23d9\u003e] cpuidle_idle_call+0xa9/0x240\n[\u003cffffffff8101c4bf\u003e] cpu_idle+0xaf/0x120\n[\u003cffffffff815cda8e\u003e] rest_init+0x72/0x74\n[\u003cffffffff81cf4c1a\u003e] start_kernel+0x3b7/0x3c4\n[\u003cffffffff81cf4662\u003e] ? repair_env_string+0x5e/0x5e\n[\u003cffffffff81cf4346\u003e] x86_64_start_reservations+0x131/0x135\n[\u003cffffffff81cf444a\u003e] x86_64_start_kernel+0x100/0x10f\n\nMaking sure bf is cleared to NULL in this case restores the\nold behaviour.\n\nSigned-off-by: Tom Hughes \u003ctom@compton.nu\u003e\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\nCc: Josh Boyer \u003cjwboyer@redhat.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "5250def1935443f4bbddce101281e0aaf2e66838",
      "tree": "2cf73e11a54c5d57373938bdd6d991eedc33e806",
      "parents": [
        "5bbbd747918d241b41f3220ff26323d7ed943c52"
      ],
      "author": {
        "name": "Matt Carlson",
        "email": "mcarlson@broadcom.com",
        "time": "Thu Jun 07 12:56:54 2012 +0000"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Jul 16 09:04:41 2012 -0700"
      },
      "message": "tg3: Apply short DMA frag workaround to 5906\n\ncommit b7abee6ef888117f92db370620ebf116a38e3f4d upstream.\n\n5906 devices also need the short DMA fragment workaround.  This patch\nmakes the necessary change.\n\nSigned-off-by: Matt Carlson \u003cmcarlson@broadcom.com\u003e\nTested-by: Christian Kujau \u003clists@nerdbynature.de\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nCc: Josh Boyer \u003cjwboyer@redhat.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "5bbbd747918d241b41f3220ff26323d7ed943c52",
      "tree": "b465bd87040429da89b324935074c8e3fc90a9d7",
      "parents": [
        "c412589f74ab4f1e30bb25b685fe6d95f2befd4d"
      ],
      "author": {
        "name": "Shaohua Li",
        "email": "shli@kernel.org",
        "time": "Tue Jul 03 15:57:19 2012 +1000"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Jul 16 09:04:41 2012 -0700"
      },
      "message": "raid5: delayed stripe fix\n\ncommit fab363b5ff502d1b39ddcfec04271f5858d9f26e upstream.\n\nThere isn\u0027t locking setting STRIPE_DELAYED and STRIPE_PREREAD_ACTIVE bits, but\nthe two bits have relationship. A delayed stripe can be moved to hold list only\nwhen preread active stripe count is below IO_THRESHOLD. If a stripe has both\nthe bits set, such stripe will be in delayed list and preread count not 0,\nwhich will make such stripe never leave delayed list.\n\nSigned-off-by: Shaohua Li \u003cshli@fusionio.com\u003e\nSigned-off-by: NeilBrown \u003cneilb@suse.de\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "c412589f74ab4f1e30bb25b685fe6d95f2befd4d",
      "tree": "3140fd355675d9355c6b864a22e59dad858abd6d",
      "parents": [
        "445006de7c59a9086b00025f9c3c97c75effd3c5"
      ],
      "author": {
        "name": "Hans de Goede",
        "email": "hdegoede@redhat.com",
        "time": "Thu Jul 05 10:23:17 2012 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Jul 16 09:04:41 2012 -0700"
      },
      "message": "gspca-core: Fix buffers staying in queued state after a stream_off\n\ncommit af05ef01e9cde84620c6855a8d8ab9c8a1db9009 upstream.\n\n[Backport to linux-stable by Antonio Ospite \u003cospite@studenti.unina.it\u003e]\n\nThis fixes a regression introduced by commit f7059ea and should be\nbackported to all supported stable kernels which have this commit.\n\nSigned-off-by: Antonio Ospite \u003cospite@studenti.unina.it\u003e\nSigned-off-by: Hans de Goede \u003chdegoede@redhat.com\u003e\nTested-by: Antonio Ospite \u003cospite@studenti.unina.it\u003e\nSigned-off-by: Mauro Carvalho Chehab \u003cmchehab@redhat.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "445006de7c59a9086b00025f9c3c97c75effd3c5",
      "tree": "c7f4c6ed7a2225054fd262f741ba5460e1332268",
      "parents": [
        "4943d9cb7d82218d196ccc034ecaf933298e7e95"
      ],
      "author": {
        "name": "Bing Zhao",
        "email": "bzhao@marvell.com",
        "time": "Tue Jul 03 20:43:56 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Jul 16 09:04:40 2012 -0700"
      },
      "message": "mwifiex: fix wrong return values in add_virtual_intf() error cases\n\ncommit 858faa57dd9e2b91f3f870fbb1185982e42f5a2b upstream\n\nadd_virtual_intf() needs to return an ERR_PTR(), instead of NULL,\non errors, otherwise cfg80211 will crash.\n\nReported-by: Johannes Berg \u003cjohannes@sipsolutions.net\u003e\nSigned-off-by: Bing Zhao \u003cbzhao@marvell.com\u003e\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "4943d9cb7d82218d196ccc034ecaf933298e7e95",
      "tree": "9ded95e170894ee15f798fa118ed2ebced2ec9ab",
      "parents": [
        "dbb3e108234bf8e4bf43d2fed8bc57792e3dbd2f"
      ],
      "author": {
        "name": "Vaibhav Nagarnaik",
        "email": "vnagarnaik@google.com",
        "time": "Thu May 03 18:59:52 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Jul 16 09:04:40 2012 -0700"
      },
      "message": "tracing: change CPU ring buffer state from tracing_cpumask\n\ncommit 71babb2705e2203a64c27ede13ae3508a0d2c16c upstream.\n\nAccording to Documentation/trace/ftrace.txt:\n\ntracing_cpumask:\n\n        This is a mask that lets the user only trace\n        on specified CPUS. The format is a hex string\n        representing the CPUS.\n\nThe tracing_cpumask currently doesn\u0027t affect the tracing state of\nper-CPU ring buffers.\n\nThis patch enables/disables CPU recording as its corresponding bit in\ntracing_cpumask is set/unset.\n\nLink: http://lkml.kernel.org/r/1336096792-25373-3-git-send-email-vnagarnaik@google.com\n\nCc: Frederic Weisbecker \u003cfweisbec@gmail.com\u003e\nCc: Ingo Molnar \u003cmingo@redhat.com\u003e\nCc: Laurent Chavey \u003cchavey@google.com\u003e\nCc: Justin Teravest \u003cteravest@google.com\u003e\nCc: David Sharp \u003cdhsharp@google.com\u003e\nSigned-off-by: Vaibhav Nagarnaik \u003cvnagarnaik@google.com\u003e\nSigned-off-by: Steven Rostedt \u003crostedt@goodmis.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "dbb3e108234bf8e4bf43d2fed8bc57792e3dbd2f",
      "tree": "f92fe6fcd04be00f5580dae5c695935222dd88f2",
      "parents": [
        "bf2370ff886b0059f574d78c7dfc9c1cb6fd38e0"
      ],
      "author": {
        "name": "Johannes Berg",
        "email": "johannes.berg@intel.com",
        "time": "Wed Jun 20 08:46:25 2012 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Jul 16 09:04:40 2012 -0700"
      },
      "message": "iwlwifi: remove log_event debugfs file debugging is disabled\n\ncommit 882b7b7d11d65e8eccce738f1ce97cdfdb998f9f upstream.\n\nWhen debugging is disabled, the event log functions aren\u0027t\nfunctional in the way that the debugfs file expects. This\nleads to the debugfs access crashing. Since the event log\nfunctions aren\u0027t functional then, remove the debugfs file\nwhen CONFIG_IWLWIFI_DEBUG is not set.\n\nReported-by: Lekensteyn \u003clekensteyn@gmail.com\u003e\nReviewed-by: Emmanuel Grumbach \u003cemmanuel.grumbach@intel.com\u003e\nSigned-off-by: Johannes Berg \u003cjohannes.berg@intel.com\u003e\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\n[bwh: Backported to 3.2: adjust filename, context]\nSigned-off-by: Ben Hutchings \u003cben@decadent.org.uk\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "bf2370ff886b0059f574d78c7dfc9c1cb6fd38e0",
      "tree": "bf03c36857ac7529a4caadbe4e5f1c23fb97ff10",
      "parents": [
        "f183282bb88ffa944449cf3a24a649c754d9e7af"
      ],
      "author": {
        "name": "Johannes Berg",
        "email": "johannes.berg@intel.com",
        "time": "Wed Jun 27 18:11:56 2012 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Jul 16 09:04:40 2012 -0700"
      },
      "message": "mac80211: fix queues stuck issue with HT bandwidth change\n\nNo upstream commit, the buggy code was removed in 3.5 in commit\n7213cf2cb0dfbb4d6b55a1da000d34338f76c0e3 and others.\n\nRajkumar changed code for handling channel switching in\nmac80211 to stop the queues in\n\n  commit 7cc44ed48d0ec0937c1f098642540b6c9ca38de5\n  Author: Rajkumar Manoharan \u003crmanohar@qca.qualcomm.com\u003e\n  Date:   Fri Sep 16 15:32:34 2011 +0530\n\n      mac80211: Fix regression on queue stop during 2040 bss change\n\nwhich went into 3.2. In the 3.4 cycle, Paul\u0027s change\n\n  commit 3117bbdb7899d43927c8ce4fe885ab7c1231c121\n  Author: Paul Stewart \u003cpstew@chromium.org\u003e\n  Date:   Tue Mar 13 07:46:18 2012 -0700\n\n      mac80211: Don\u0027t let regulatory make us deaf\n\nwent in and changed the TX/RX enable logic, but now\nthe conditions for stopping and restarting the queues\nwere different so that now, if the AP changes between\n20/40 MHz bandwidth, it can happen that we stop but\nnever restart the queues. This breaks the connection\nand the module actually has to be reloaded to get it\nback to work.\n\nFix this by making sure the queues are always started\nwhen they were stopped.\n\nReported-by: Florian Manschwetus \u003cmanschwetus@googlemail.com\u003e\nSigned-off-by: Johannes Berg \u003cjohannes.berg@intel.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "f183282bb88ffa944449cf3a24a649c754d9e7af",
      "tree": "efcdf28280b9d42d895f83de42a7b0847269638e",
      "parents": [
        "ee92389156c2cdb45b94866186a4174858b820cd"
      ],
      "author": {
        "name": "Stanislav Kinsbursky",
        "email": "skinsbursky@parallels.com",
        "time": "Mon Jun 25 16:40:10 2012 -0400"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Jul 16 09:04:40 2012 -0700"
      },
      "message": "NFS: hard-code init_net for NFS callback transports\n\nupstream commit 12918b10d59e975fd5241eef03ef9e6d5ea3dcfe.\n\nIn case of destroying mount namespace on child reaper exit, nsproxy is zeroed\nto the point already. So, dereferencing of it is invalid.\nThis patch hard-code \"init_net\" for all network namespace references for NFS\ncallback services. This will be fixed with proper NFS callback\ncontainerization.\n\nSigned-off-by: Stanislav Kinsbursky \u003cskinsbursky@parallels.com\u003e\nSigned-off-by: J. Bruce Fields \u003cbfields@redhat.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "ee92389156c2cdb45b94866186a4174858b820cd",
      "tree": "ce025a20a1c679a511d174df4a0818f8146cbf0a",
      "parents": [
        "10762419cafd82a9a3a6f68bef54c29f1af75842"
      ],
      "author": {
        "name": "Stanislav Kinsbursky",
        "email": "skinsbursky@parallels.com",
        "time": "Mon Jun 25 16:40:09 2012 -0400"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Jul 16 09:04:39 2012 -0700"
      },
      "message": "SUNRPC: move per-net operations from svc_destroy()\n\nupstream commit 786185b5f8abefa6a8a16695bb4a59c164d5a071.\n\nThe idea is to separate service destruction and per-net operations,\nbecause these are two different things and the mix looks ugly.\n\nNotes:\n\n1) For NFS server this patch looks ugly (sorry for that). But these\nplace will be rewritten soon during NFSd containerization.\n\n2) LockD per-net counter increase int lockd_up() was moved prior to\nmake_socks() to make lockd_down_net() call safe in case of error.\n\nSigned-off-by: Stanislav Kinsbursky \u003cskinsbursky@parallels.com\u003e\nSigned-off-by: J. Bruce Fields \u003cbfields@redhat.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "10762419cafd82a9a3a6f68bef54c29f1af75842",
      "tree": "45e0a1689e4ffa4c94fc09c9c72d454fab1e6639",
      "parents": [
        "0bbc9d1b4b011e83ba65852b1d652561c7f562f1"
      ],
      "author": {
        "name": "Stanislav Kinsbursky",
        "email": "skinsbursky@parallels.com",
        "time": "Mon Jun 25 16:40:08 2012 -0400"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Jul 16 09:04:39 2012 -0700"
      },
      "message": "SUNRPC: new svc_bind() routine introduced\n\nupstream commit 9793f7c88937e7ac07305ab1af1a519225836823.\n\nThis new routine is responsible for service registration in a specified\nnetwork context.\n\nThe idea is to separate service creation from per-net operations.\n\nNote also: since registering service with svc_bind() can fail, the\nservice will be destroyed and during destruction it will try to\nunregister itself from rpcbind. In this case unregistration has to be\nskipped.\n\nSigned-off-by: Stanislav Kinsbursky \u003cskinsbursky@parallels.com\u003e\nSigned-off-by: J. Bruce Fields \u003cbfields@redhat.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "0bbc9d1b4b011e83ba65852b1d652561c7f562f1",
      "tree": "0a6e76d8b7e1d473ca92f5358ff2c5fab7f16ba1",
      "parents": [
        "0e924ae7ac646cf8aa95a3bc5671d19f920417c5"
      ],
      "author": {
        "name": "Stanislav Kinsbursky",
        "email": "skinsbursky@parallels.com",
        "time": "Mon Jun 25 16:40:07 2012 -0400"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Jul 16 09:04:39 2012 -0700"
      },
      "message": "Lockd: pass network namespace to creation and destruction routines\n\nupstream commit e3f70eadb7dddfb5a2bb9afff7abfc6ee17a29d0.\n\nv2: dereference of most probably already released nlm_host removed in\nnlmclnt_done() and reclaimer().\n\nThese routines are called from locks reclaimer() kernel thread. This thread\nworks in \"init_net\" network context and currently relays on persence on lockd\nthread and it\u0027s per-net resources. Thus lockd_up() and lockd_down() can\u0027t relay\non current network context. So let\u0027s pass corrent one into them.\n\nSigned-off-by: Stanislav Kinsbursky \u003cskinsbursky@parallels.com\u003e\nSigned-off-by: J. Bruce Fields \u003cbfields@redhat.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "0e924ae7ac646cf8aa95a3bc5671d19f920417c5",
      "tree": "efb882fdeab34758438b25e0c699d5d8d674694c",
      "parents": [
        "0659cf9dcd148f6771c056fa95976fda9c5abf9d"
      ],
      "author": {
        "name": "Davide Gerhard",
        "email": "rainbow@irh.it",
        "time": "Mon Jun 25 09:04:47 2012 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Jul 16 09:04:39 2012 -0700"
      },
      "message": "ipheth: add support for iPad\n\ncommit 6de0298ec9c1edaf330b71b57346241ece8f3346 upstream.\n\nThis adds support for the iPad to the ipheth driver.\n(product id \u003d 0x129a)\n\nSigned-off-by: Davide Gerhard \u003crainbow@irh.it\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "0659cf9dcd148f6771c056fa95976fda9c5abf9d",
      "tree": "4f6cc56b2e5a4ca1ada1320a9961e6a86805de58",
      "parents": [
        "b62d32b9166b085a487916eca514b59b5ffdf2b7"
      ],
      "author": {
        "name": "Alan Stern",
        "email": "stern@rowland.harvard.edu",
        "time": "Mon Jul 09 11:09:21 2012 -0400"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Jul 16 09:04:39 2012 -0700"
      },
      "message": "PCI: EHCI: fix crash during suspend on ASUS computers\n\ncommit dbf0e4c7257f8d684ec1a3c919853464293de66e upstream.\n\nQuite a few ASUS computers experience a nasty problem, related to the\nEHCI controllers, when going into system suspend.  It was observed\nthat the problem didn\u0027t occur if the controllers were not put into the\nD3 power state before starting the suspend, and commit\n151b61284776be2d6f02d48c23c3625678960b97 (USB: EHCI: fix crash during\nsuspend on ASUS computers) was created to do this.\n\nIt turned out this approach messed up other computers that didn\u0027t have\nthe problem -- it prevented USB wakeup from working.  Consequently\ncommit c2fb8a3fa25513de8fedb38509b1f15a5bbee47b (USB: add\nNO_D3_DURING_SLEEP flag and revert 151b61284776be2) was merged; it\nreverted the earlier commit and added a whitelist of known good board\nnames.\n\nNow we know the actual cause of the problem.  Thanks to AceLan Kao for\ntracking it down.\n\nAccording to him, an engineer at ASUS explained that some of their\nBIOSes contain a bug that was added in an attempt to work around a\nproblem in early versions of Windows.  When the computer goes into S3\nsuspend, the BIOS tries to verify that the EHCI controllers were first\nquiesced by the OS.  Nothing\u0027s wrong with this, but the BIOS does it\nby checking that the PCI COMMAND registers contain 0 without checking\nthe controllers\u0027 power state.  If the register isn\u0027t 0, the BIOS\nassumes the controller needs to be quiesced and tries to do so.  This\ninvolves making various MMIO accesses to the controller, which don\u0027t\nwork very well if the controller is already in D3.  The end result is\na system hang or memory corruption.\n\nSince the value in the PCI COMMAND register doesn\u0027t matter once the\ncontroller has been suspended, and since the value will be restored\nanyway when the controller is resumed, we can work around the BIOS bug\nsimply by setting the register to 0 during system suspend.  This patch\n(as1590) does so and also reverts the second commit mentioned above,\nwhich is now unnecessary.\n\nIn theory we could do this for every PCI device.  However to avoid\nintroducing new problems, the patch restricts itself to EHCI host\ncontrollers.\n\nFinally the affected systems can suspend with USB wakeup working\nproperly.\n\nReference: https://bugzilla.kernel.org/show_bug.cgi?id\u003d37632\nReference: https://bugzilla.kernel.org/show_bug.cgi?id\u003d42728\nBased-on-patch-by: AceLan Kao \u003cacelan.kao@canonical.com\u003e\nSigned-off-by: Alan Stern \u003cstern@rowland.harvard.edu\u003e\nTested-by: Dâniel Fraga \u003cfragabr@gmail.com\u003e\nTested-by: Javier Marcet \u003cjmarcet@gmail.com\u003e\nTested-by: Andrey Rahmatullin \u003cwrar@wrar.name\u003e\nTested-by: Oleksij Rempel \u003cbug-track@fisher-privat.net\u003e\nTested-by: Pavel Pisa \u003cpisa@cmp.felk.cvut.cz\u003e\nAcked-by: Bjorn Helgaas \u003cbhelgaas@google.com\u003e\nAcked-by: Rafael J. Wysocki \u003crjw@sisk.pl\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "b62d32b9166b085a487916eca514b59b5ffdf2b7",
      "tree": "52d8e233c0286ca59d9fd33b5cc328934c6c0710",
      "parents": [
        "e171ce5cc675f30e226b72eb693cee6832bf0a09"
      ],
      "author": {
        "name": "Sarah Sharp",
        "email": "sarah.a.sharp@linux.intel.com",
        "time": "Thu Jun 21 16:28:30 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Jul 16 09:04:38 2012 -0700"
      },
      "message": "xhci: Fix hang on back-to-back Set TR Deq Ptr commands.\n\ncommit 0d9f78a92ef5e97d9fe51d9215ebe22f6f0d289d upstream.\n\nThe Microsoft LifeChat 3000 USB headset was causing a very reproducible\nhang whenever it was plugged in.  At first, I thought the host\ncontroller was producing bad transfer events, because the log was filled\nwith errors like:\n\nxhci_hcd 0000:00:14.0: ERROR Transfer event TRB DMA ptr not part of current TD\n\nHowever, it turned out to be an xHCI driver bug in the ring expansion\npatches.  The bug is triggered When there are two ring segments, and a\nTD that ends just before a link TRB, like so:\n\n ______________                     _____________\n|              |              ---\u003e | setup TRB B |\n ______________               |     _____________\n|              |              |    |  data TRB B |\n ______________               |     _____________\n| setup TRB A  | \u003c-- deq      |    |  data TRB B |\n ______________               |     _____________\n| data TRB A   |              |    |             | \u003c-- enq, deq\u0027\u0027\n ______________               |     _____________\n| status TRB A |              |    |             |\n ______________               |     _____________\n|  link TRB    |---------------    |  link TRB   |\n _____________  \u003c--- deq\u0027           _____________\n\nTD A (the first control transfer) stalls on the data phase.  That halts\nthe ring.  The xHCI driver moves the hardware dequeue pointer to the\nfirst TRB after the stalled transfer, which happens to be the link TRB.\n\nOnce the Set TR dequeue pointer command completes, the function\nupdate_ring_for_set_deq_completion runs.  That function is supposed to\nupdate the xHCI driver\u0027s dequeue pointer to match the internal hardware\ndequeue pointer.  On the first call this would work fine, and the\nsoftware dequeue pointer would move to deq\u0027.\n\nHowever, if the transfer immediately after that stalled (TD B in this\ncase), another Set TR Dequeue command would be issued.  That would move\nthe hardware dequeue pointer to deq\u0027\u0027.  Once that command completed,\nupdate_ring_for_set_deq_completion would run again.\n\nThe original code would unconditionally increment the software dequeue\npointer, which moved the pointer off the ring segment into la-la-land.\nThe while loop would happy increment the dequeue pointer (possibly\nwrapping it) until it matched the hardware pointer value.\n\nThe while loop would also access all the memory in between the first\nring segment and the second ring segment to determine if it was a link\nTRB.  This could cause general protection faults, although it was\nunlikely because the ring segments came from a DMA pool, and would often\nhave consecutive memory addresses.\n\nIf nothing in that space looked like a link TRB, the deq_seg pointer for\nthe ring would remain on the first segment.  Thus, the deq_seg and the\nsoftware dequeue pointer would get out of sync.\n\nWhen the next transfer event came in after the stalled transfer, the\nxHCI driver code would attempt to convert the software dequeue pointer\ninto a DMA address in order to compare the DMA address for the completed\ntransfer.  Since the deq_seg and the dequeue pointer were out of sync,\nxhci_trb_virt_to_dma would return NULL.\n\nThe transfer event would get ignored, the transfer would eventually\ntimeout, and we would mistakenly convert the finished transfer to no-op\nTRBs.  Some kernel driver (maybe xHCI?) would then get stuck in an\ninfinite loop in interrupt context, and the whole machine would hang.\n\nThis patch should be backported to kernels as old as 3.4, that contain\nthe commit b008df60c6369ba0290fa7daa177375407a12e07 \"xHCI: count free\nTRBs on transfer ring\"\n\nSigned-off-by: Sarah Sharp \u003csarah.a.sharp@linux.intel.com\u003e\nCc: Andiry Xu \u003candiry.xu@amd.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "e171ce5cc675f30e226b72eb693cee6832bf0a09",
      "tree": "a3a99a8646d9558095c2b9b3c95d87dfd256d075",
      "parents": [
        "9da79f9050c87ede10fef8a2f723fdf41c5caf57"
      ],
      "author": {
        "name": "Stanislaw Ledwon",
        "email": "staszek.ledwon@linux.jf.intel.com",
        "time": "Mon Jun 18 15:20:00 2012 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Jul 16 09:04:38 2012 -0700"
      },
      "message": "usb: Add support for root hub port status CAS\n\ncommit 8bea2bd37df08aaa599aa361a9f8b836ba98e554 upstream.\n\nThe host controller port status register supports CAS (Cold Attach\nStatus) bit. This bit could be set when USB3.0 device is connected\nwhen system is in Sx state. When the system wakes to S0 this port\nstatus with CAS bit is reported and this port can\u0027t be used by any\ndevice.\n\nWhen CAS bit is set the port should be reset by warm reset. This\nwas not supported by xhci driver.\n\nThe issue was found when pendrive was connected to suspended\nplatform. The link state of \"Compliance Mode\" was reported together\nwith CAS bit. This link state was also not supported by xhci and\ncore/hub.c.\n\nThe CAS bit is defined only for xhci root hub port and it is\nnot supported on regular hubs. The link status is used to force\nwarm reset on port. Make the USB core issue a warm reset when port\nis in ether the \u0027inactive\u0027 or \u0027compliance mode\u0027. Change the xHCI driver\nto report \u0027compliance mode\u0027 when the CAS is set. This force warm reset\non the root hub port.\n\nThis patch should be backported to stable kernels as old as 3.2, that\ncontain the commit 10d674a82e553cb8a1f41027bb3c3e309b3f6804 \"USB: When\nhot reset for USB3 fails, try warm reset.\"\n\nSigned-off-by: Stanislaw Ledwon \u003cstaszek.ledwon@linux.intel.com\u003e\nSigned-off-by: Sarah Sharp \u003csarah.a.sharp@linux.intel.com\u003e\nAcked-by: Andiry Xu \u003candiry.xu@amd.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "9da79f9050c87ede10fef8a2f723fdf41c5caf57",
      "tree": "73db126e53e8b700c6ea73b9871cde1e7c254ac9",
      "parents": [
        "62e4449435b38fbb423f53de5731a18c4d8ddc54"
      ],
      "author": {
        "name": "Gaosen Zhang",
        "email": "gaosen.zhang@mediatek.com",
        "time": "Thu Jul 05 21:49:00 2012 +0800"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Jul 16 09:04:38 2012 -0700"
      },
      "message": "USB: option: Add MEDIATEK product ids\n\ncommit aacef9c561a693341566a6850c451ce3df68cb9a upstream.\n\nSigned-off-by: Gaosen Zhang \u003cgaosen.zhang@mediatek.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "62e4449435b38fbb423f53de5731a18c4d8ddc54",
      "tree": "5b8fc17f74b2bb3b2e3e4736a986529128d5d470",
      "parents": [
        "b80f6db790f07c06e35bb56b1e682df1e09e2865"
      ],
      "author": {
        "name": "Bjørn Mork",
        "email": "bjorn@mork.no",
        "time": "Mon Jul 02 19:53:55 2012 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Jul 16 09:04:38 2012 -0700"
      },
      "message": "USB: option: add ZTE MF60\n\ncommit 8e16e33c168a6efd0c9f7fa9dd4c1e1db9a74553 upstream.\n\nSwitches into a composite device by ejecting the initial\ndriver CD.  The four interfaces are: QCDM, AT, QMI/wwan\nand mass storage.  Let this driver manage the two serial\ninterfaces:\n\nT:  Bus\u003d02 Lev\u003d01 Prnt\u003d01 Port\u003d01 Cnt\u003d01 Dev#\u003d 28 Spd\u003d480  MxCh\u003d 0\nD:  Ver\u003d 2.00 Cls\u003d00(\u003eifc ) Sub\u003d00 Prot\u003d00 MxPS\u003d64 #Cfgs\u003d  1\nP:  Vendor\u003d19d2 ProdID\u003d1402 Rev\u003d 0.00\nS:  Manufacturer\u003dZTE,Incorporated\nS:  Product\u003dZTE WCDMA Technologies MSM\nS:  SerialNumber\u003dxxxxx\nC:* #Ifs\u003d 4 Cfg#\u003d 1 Atr\u003dc0 MxPwr\u003d500mA\nI:* If#\u003d 0 Alt\u003d 0 #EPs\u003d 2 Cls\u003dff(vend.) Sub\u003dff Prot\u003dff Driver\u003doption\nE:  Ad\u003d81(I) Atr\u003d02(Bulk) MxPS\u003d 512 Ivl\u003d0ms\nE:  Ad\u003d01(O) Atr\u003d02(Bulk) MxPS\u003d 512 Ivl\u003d4ms\nI:* If#\u003d 1 Alt\u003d 0 #EPs\u003d 2 Cls\u003dff(vend.) Sub\u003dff Prot\u003dff Driver\u003doption\nE:  Ad\u003d82(I) Atr\u003d02(Bulk) MxPS\u003d 512 Ivl\u003d0ms\nE:  Ad\u003d02(O) Atr\u003d02(Bulk) MxPS\u003d 512 Ivl\u003d4ms\nI:* If#\u003d 2 Alt\u003d 0 #EPs\u003d 3 Cls\u003dff(vend.) Sub\u003dff Prot\u003dff Driver\u003dqmi_wwan\nE:  Ad\u003d83(I) Atr\u003d03(Int.) MxPS\u003d  64 Ivl\u003d2ms\nE:  Ad\u003d84(I) Atr\u003d02(Bulk) MxPS\u003d 512 Ivl\u003d0ms\nE:  Ad\u003d03(O) Atr\u003d02(Bulk) MxPS\u003d 512 Ivl\u003d4ms\nI:* If#\u003d 3 Alt\u003d 0 #EPs\u003d 2 Cls\u003d08(stor.) Sub\u003d06 Prot\u003d50 Driver\u003dusb-storage\nE:  Ad\u003d04(O) Atr\u003d02(Bulk) MxPS\u003d 512 Ivl\u003d0ms\nE:  Ad\u003d85(I) Atr\u003d02(Bulk) MxPS\u003d 512 Ivl\u003d0ms\n\nSigned-off-by: Bjørn Mork \u003cbjorn@mork.no\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "b80f6db790f07c06e35bb56b1e682df1e09e2865",
      "tree": "a77db386d7414d397a158541c246163b585217b9",
      "parents": [
        "b46b5ba5e79e61732af41dde4a9fd302a5f3184d"
      ],
      "author": {
        "name": "Bjørn Mork",
        "email": "bjorn@mork.no",
        "time": "Mon Jul 02 10:33:14 2012 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Jul 16 09:04:37 2012 -0700"
      },
      "message": "USB: cdc-wdm: fix lockup on error in wdm_read\n\ncommit b086b6b10d9f182cd8d2f0dcfd7fd11edba93fc9 upstream.\n\nClear the WDM_READ flag on empty reads to avoid running\nforever in an infinite tight loop, causing lockups:\n\nJul  1 21:58:11 nemi kernel: [ 3658.898647] qmi_wwan 2-1:1.2: Unexpected error -71\nJul  1 21:58:36 nemi kernel: [ 3684.072021] BUG: soft lockup - CPU#0 stuck for 23s! [qmi.pl:12235]\nJul  1 21:58:36 nemi kernel: [ 3684.072212] CPU 0\nJul  1 21:58:36 nemi kernel: [ 3684.072355]\nJul  1 21:58:36 nemi kernel: [ 3684.072367] Pid: 12235, comm: qmi.pl Tainted: P           O 3.5.0-rc2+ #13 LENOVO 2776LEG/2776LEG\nJul  1 21:58:36 nemi kernel: [ 3684.072383] RIP: 0010:[\u003cffffffffa0635008\u003e]  [\u003cffffffffa0635008\u003e] spin_unlock_irq+0x8/0xc [cdc_wdm]\nJul  1 21:58:36 nemi kernel: [ 3684.072388] RSP: 0018:ffff88022dca1e70  EFLAGS: 00000282\nJul  1 21:58:36 nemi kernel: [ 3684.072393] RAX: ffff88022fc3f650 RBX: ffffffff811c56f7 RCX: 00000001000ce8c1\nJul  1 21:58:36 nemi kernel: [ 3684.072398] RDX: 0000000000000010 RSI: 000000000267d810 RDI: ffff88022fc3f650\nJul  1 21:58:36 nemi kernel: [ 3684.072403] RBP: ffff88022dca1eb0 R08: ffffffffa063578e R09: 0000000000000000\nJul  1 21:58:36 nemi kernel: [ 3684.072407] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002\nJul  1 21:58:36 nemi kernel: [ 3684.072412] R13: 0000000000000246 R14: ffffffff00000002 R15: ffff8802281d8c88\nJul  1 21:58:36 nemi kernel: [ 3684.072418] FS:  00007f666a260700(0000) GS:ffff88023bc00000(0000) knlGS:0000000000000000\nJul  1 21:58:36 nemi kernel: [ 3684.072423] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nJul  1 21:58:36 nemi kernel: [ 3684.072428] CR2: 000000000270d9d8 CR3: 000000022e865000 CR4: 00000000000007f0\nJul  1 21:58:36 nemi kernel: [ 3684.072433] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nJul  1 21:58:36 nemi kernel: [ 3684.072438] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400\nJul  1 21:58:36 nemi kernel: [ 3684.072444] Process qmi.pl (pid: 12235, threadinfo ffff88022dca0000, task ffff88022ff76380)\nJul  1 21:58:36 nemi kernel: [ 3684.072448] Stack:\nJul  1 21:58:36 nemi kernel: [ 3684.072458]  ffffffffa063592e 0000000100020000 ffff88022fc3f650 ffff88022fc3f6a8\nJul  1 21:58:36 nemi kernel: [ 3684.072466]  0000000000000200 0000000100000000 000000000267d810 0000000000000000\nJul  1 21:58:36 nemi kernel: [ 3684.072475]  0000000000000000 ffff880212cfb6d0 0000000000000200 ffff880212cfb6c0\nJul  1 21:58:36 nemi kernel: [ 3684.072479] Call Trace:\nJul  1 21:58:36 nemi kernel: [ 3684.072489]  [\u003cffffffffa063592e\u003e] ? wdm_read+0x1a0/0x263 [cdc_wdm]\nJul  1 21:58:36 nemi kernel: [ 3684.072500]  [\u003cffffffff8110adb7\u003e] ? vfs_read+0xa1/0xfb\nJul  1 21:58:36 nemi kernel: [ 3684.072509]  [\u003cffffffff81040589\u003e] ? alarm_setitimer+0x35/0x64\nJul  1 21:58:36 nemi kernel: [ 3684.072517]  [\u003cffffffff8110aec7\u003e] ? sys_read+0x45/0x6e\nJul  1 21:58:36 nemi kernel: [ 3684.072525]  [\u003cffffffff813725f9\u003e] ? system_call_fastpath+0x16/0x1b\nJul  1 21:58:36 nemi kernel: [ 3684.072557] Code: \u003c66\u003e 66 90 c3 83 ff ed 89 f8 74 16 7f 06 83 ff a1 75 0a c3 83 ff f4\n\nThe WDM_READ flag is normally cleared by wdm_int_callback\nbefore resubmitting the read urb, and set by wdm_in_callback\nwhen this urb returns with data or an error.  But a crashing\ndevice may cause both a read error and cancelling all urbs.\nMake sure that the flag is cleared by wdm_read if the buffer\nis empty.\n\nWe don\u0027t clear the flag on errors, as there may be pending\ndata in the buffer which should be processed.  The flag will\ninstead be cleared on the next wdm_read call.\n\nSigned-off-by: Bjørn Mork \u003cbjorn@mork.no\u003e\nAcked-by: Oliver Neukum \u003coneukum@suse.de\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "b46b5ba5e79e61732af41dde4a9fd302a5f3184d",
      "tree": "b9a10e605b5cf216f06a0fd7b597b64349def21f",
      "parents": [
        "d63d3985914e19816e9c19faab7abe336d80be89"
      ],
      "author": {
        "name": "Johan Hovold",
        "email": "jhovold@gmail.com",
        "time": "Mon Jul 02 12:34:24 2012 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Jul 16 09:04:37 2012 -0700"
      },
      "message": "USB: metro-usb: fix tty_flip_buffer_push use\n\ncommit b7d28e32c93801d60c1a7a817f774a02b7bdde43 upstream.\n\nDo not set low_latency flag at open as tty_flip_buffer_push must not be\ncalled in IRQ context with low_latency set.\n\nSigned-off-by: Johan Hovold \u003cjhovold@gmail.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "d63d3985914e19816e9c19faab7abe336d80be89",
      "tree": "175210571a40c98ac2962fdb8c5ed18f59ce08f8",
      "parents": [
        "76c6b958de9e72947ef08b1c9509f094c34abd8f"
      ],
      "author": {
        "name": "Jonathan Nieder",
        "email": "jrnieder@gmail.com",
        "time": "Sun Jul 08 21:55:14 2012 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Jul 16 09:04:37 2012 -0700"
      },
      "message": "ACPI / PM: Leave Bus Master Arbitration enabled for suspend/resume\n\ncommit dc332fdf9f373a87b1e2f423b5b004b2a3c37e1a upstream.\n\nThis is an old suspend/resume lockup fix:\n\n\tcommit 2780cc4660e1\n\tAuthor: Len Brown \u003clen.brown@intel.com\u003e\n\tDate:   Thu Dec 23 13:43:30 2004 -0500\n\n\t    [ACPI] Fix suspend/resume lockup issue\n\t    by leaving Bus Master Arbitration enabled.\n\t    The ACPI spec mandates it be disabled only for C3.\n\n\t    http://bugzilla.kernel.org/show_bug.cgi?id\u003d3599\n\n\t    Signed-off-by: David Shaohua Li \u003cshaohua.li@intel.com\u003e\n\t    Signed-off-by: Len Brown \u003clen.brown@intel.com\u003e\n\nThe bug snuck back in in commit 2feec47d4c5f (ACPICA: ACPI 5: Support\nfor new FADT SleepStatus, SleepControl registers, 2012-02-14),\npresumably by copy/pasting a copy of the code without that fix for the\nlegacy case.\n\nOn affected machines, after that commit, the machine locks up hard on\nresume from suspend.  The same fix as seven years ago still works.\n\nAddresses \u003chttps://bugzilla.kernel.org/show_bug.cgi?id\u003d43641\u003e.\n\nReported-bisected-and-tested-by: Octavio Alvarez \u003calvarezp@alvarezp.com\u003e\nReported-by: Adrian Knoth \u003cadi@drcomp.erfurt.thur.de\u003e\nSigned-off-by: Jonathan Nieder \u003cjrnieder@gmail.com\u003e\nSigned-off-by: Rafael J. Wysocki \u003crjw@sisk.pl\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "76c6b958de9e72947ef08b1c9509f094c34abd8f",
      "tree": "2d6c6f2f668b3a846cb25904e7845e576e1486f2",
      "parents": [
        "5a89aae8085ef69a2ea9034ff8f5624327cd4efc"
      ],
      "author": {
        "name": "Dan Williams",
        "email": "dan.j.williams@intel.com",
        "time": "Fri Jun 22 10:52:34 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Jul 16 09:04:37 2012 -0700"
      },
      "message": "SCSI: libsas: fix taskfile corruption in sas_ata_qc_fill_rtf\n\ncommit 6ef1b512f4e6f936d89aa20be3d97a7ec7c290ac upstream.\n\nfill_result_tf() grabs the taskfile flags from the originating qc which\nsas_ata_qc_fill_rtf() promptly overwrites.  The presence of an\nata_taskfile in the sata_device makes it tempting to just copy the full\ncontents in sas_ata_qc_fill_rtf().  However, libata really only wants\nthe fis contents and expects the other portions of the taskfile to not\nbe touched by -\u003eqc_fill_rtf.  To that end store a fis buffer in the\nsata_device and use ata_tf_from_fis() like every other -\u003eqc_fill_rtf()\nimplementation.\n\nReported-by: Praveen Murali \u003cpmurali@logicube.com\u003e\nTested-by: Praveen Murali \u003cpmurali@logicube.com\u003e\nSigned-off-by: Dan Williams \u003cdan.j.williams@intel.com\u003e\nSigned-off-by: James Bottomley \u003cJBottomley@Parallels.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "5a89aae8085ef69a2ea9034ff8f5624327cd4efc",
      "tree": "763432902ba6edd688976716291b0645f28d29b1",
      "parents": [
        "7c2c0261ce56126b72fbff0d67d9b1ac06f3c971"
      ],
      "author": {
        "name": "Mark Rustad",
        "email": "mark.d.rustad@intel.com",
        "time": "Thu Jun 21 12:23:42 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Jul 16 09:04:30 2012 -0700"
      },
      "message": "SCSI: Fix NULL dereferences in scsi_cmd_to_driver\n\ncommit 222a806af830fda34ad1f6bc991cd226916de060 upstream.\n\nAvoid crashing if the private_data pointer happens to be NULL. This has\nbeen seen sometimes when a host reset happens, notably when there are\nmany LUNs:\n\nhost3: Assigned Port ID 0c1601\nscsi host3: libfc: Host reset succeeded on port (0c1601)\nBUG: unable to handle kernel NULL pointer dereference at 0000000000000350\nIP: [\u003cffffffff81352bb8\u003e] scsi_send_eh_cmnd+0x58/0x3a0\n\u003csnip\u003e\nProcess scsi_eh_3 (pid: 4144, threadinfo ffff88030920c000, task ffff880326b160c0)\nStack:\n 000000010372e6ba 0000000000000282 000027100920dca0 ffffffffa0038ee0\n 0000000000000000 0000000000030003 ffff88030920dc80 ffff88030920dc80\n 00000002000e0000 0000000a00004000 ffff8803242f7760 ffff88031326ed80\nCall Trace:\n [\u003cffffffff8105b590\u003e] ? lock_timer_base+0x70/0x70\n [\u003cffffffff81352fbe\u003e] scsi_eh_tur+0x3e/0xc0\n [\u003cffffffff81353a36\u003e] scsi_eh_test_devices+0x76/0x170\n [\u003cffffffff81354125\u003e] scsi_eh_host_reset+0x85/0x160\n [\u003cffffffff81354291\u003e] scsi_eh_ready_devs+0x91/0x110\n [\u003cffffffff813543fd\u003e] scsi_unjam_host+0xed/0x1f0\n [\u003cffffffff813546a8\u003e] scsi_error_handler+0x1a8/0x200\n [\u003cffffffff81354500\u003e] ? scsi_unjam_host+0x1f0/0x1f0\n [\u003cffffffff8106ec3e\u003e] kthread+0x9e/0xb0\n [\u003cffffffff81509264\u003e] kernel_thread_helper+0x4/0x10\n [\u003cffffffff8106eba0\u003e] ? kthread_freezable_should_stop+0x70/0x70\n [\u003cffffffff81509260\u003e] ? gs_change+0x13/0x13\nCode: 25 28 00 00 00 48 89 45 c8 31 c0 48 8b 87 80 00 00 00 48 8d b5 60 ff ff ff 89 d1 48 89 fb 41 89 d6 4c 89 fa 48 8b 80 b8 00 00 00\n \u003c48\u003e 8b 80 50 03 00 00 48 8b 00 48 89 85 38 ff ff ff 48 8b 07 4c\nRIP  [\u003cffffffff81352bb8\u003e] scsi_send_eh_cmnd+0x58/0x3a0\n RSP \u003cffff88030920dc50\u003e\nCR2: 0000000000000350\n\n\nSigned-off-by: Mark Rustad \u003cmark.d.rustad@intel.com\u003e\nTested-by: Marcus Dennis \u003cmarcusx.e.dennis@intel.com\u003e\nSigned-off-by: James Bottomley \u003cJBottomley@Parallels.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "7c2c0261ce56126b72fbff0d67d9b1ac06f3c971",
      "tree": "ade640b61a5ced0a22442a81ff7d0b8243fada47",
      "parents": [
        "099fddaa7a49187a9405cb05c6373814884dfcff"
      ],
      "author": {
        "name": "Rafael J. Wysocki",
        "email": "rjw@sisk.pl",
        "time": "Tue May 29 21:21:07 2012 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Jul 16 09:04:28 2012 -0700"
      },
      "message": "ACPI / PM: Make acpi_pm_device_sleep_state() follow the specification\n\ncommit dbe9a2edd17d843d80faf2b99f20a691c1853418 upstream.\n\nThe comparison between the system sleep state being entered\nand the lowest system sleep state the given device may wake up\nfrom in acpi_pm_device_sleep_state() is reversed, because the\nspecification (ACPI 5.0) says that for wakeup to work:\n\n\"The sleeping state being entered must be less than or equal to the\n power state declared in element 1 of the _PRW object.\"\n\nIn other words, the state returned by _PRW is the deepest\n(lowest-power) system sleep state the device is capable of waking up\nthe system from.\n\nMoreover, acpi_pm_device_sleep_state() also should check if the\nwakeup capability is supported through ACPI, because in principle it\nmay be done via native PCIe PME, for example, in which case _SxW\nshould not be evaluated.\n\nSigned-off-by: Rafael J. Wysocki \u003crjw@sisk.pl\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "099fddaa7a49187a9405cb05c6373814884dfcff",
      "tree": "5c3689ef1e5fd3c40b450c1201f1182fe9065576",
      "parents": [
        "e831cf2d290e1ecf7825d2ecfabeb0d6733b133d"
      ],
      "author": {
        "name": "Benjamin Tissoires",
        "email": "benjamin.tissoires@enac.fr",
        "time": "Fri May 04 14:53:46 2012 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Jul 16 09:04:28 2012 -0700"
      },
      "message": "HID: hid-multitouch: fix wrong protocol detection\n\ncommit 3ac36d15557d1bedfb1151d9911b9587b2d40759 upstream.\n\nThe previous implementation introduced a randomness in the splitting\nof the different touches reported by the device. This version is more\nrobust as we don\u0027t rely on hi-\u003einput-\u003eabsbit, but on our own structure.\n\nThis also prepares hid-multitouch to better support Win8 devices.\n\n[Jiri Kosina \u003cjkosina@suse.cz\u003e: fix build]\n\nSigned-off-by: Benjamin Tissoires \u003cbenjamin.tissoires@enac.fr\u003e\nAcked-by: Henrik Rydberg \u003crydberg@euromail.se\u003e\nSigned-off-by: Jiri Kosina \u003cjkosina@suse.cz\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n\n"
    },
    {
      "commit": "e831cf2d290e1ecf7825d2ecfabeb0d6733b133d",
      "tree": "d73bc72313bbeb4970d96456461a1b21454b4bb8",
      "parents": [
        "f33f0eaff50112270a9e629569729ce5d5d620fa"
      ],
      "author": {
        "name": "Bruce Allan",
        "email": "bruce.w.allan@intel.com",
        "time": "Sat May 26 06:08:48 2012 +0000"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Jul 16 09:04:27 2012 -0700"
      },
      "message": "e1000e: test for valid check_reset_block function pointer\n\ncommit 470a54207ccf7045a59df727573bd9d148988582 upstream.\n\ncommit 44abd5c12767a8c567dc4e45fd9aec3b13ca85e0 introduced NULL pointer\ndereferences when attempting to access the check_reset_block function\npointer on 8257x and 80003es2lan non-copper devices.\n\nThis fix should be applied back through 3.4.\n\nSigned-off-by: Bruce Allan \u003cbruce.w.allan@intel.com\u003e\nTested-by: Jeff Pieper \u003cjeffrey.e.pieper@intel.com\u003e\nSigned-off-by: Jeff Kirsher \u003cjeffrey.t.kirsher@intel.com\u003e\nAcked-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "f33f0eaff50112270a9e629569729ce5d5d620fa",
      "tree": "47a6b419c58d8345807cae3ac88cf83846c953d7",
      "parents": [
        "757fcf2b6df4814604764a4abb54d2b58f422fb5"
      ],
      "author": {
        "name": "Tomi Valkeinen",
        "email": "tomi.valkeinen@ti.com",
        "time": "Tue May 15 15:31:01 2012 +0300"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Jul 16 09:04:27 2012 -0700"
      },
      "message": "OMAPDSS: use DSI_FIFO_BUG workaround only for manual update displays\n\ncommit 3568f2a46f2a73bab18c914df06afd98a97e0e0e upstream.\n\nThere is a problem related to DSS FIFO thresholds and power management\non OMAP3. It seems that when the full PM hits in, we get underflows. The\ncore reason is unknown, but after experiments it looks like only\nparticular FIFO thresholds work correctly.\n\nThis bug is related to an earlier patch, which added special FIFO\nthreshold configuration for OMAP3, because DSI command mode output\ndidn\u0027t work with the normal threshold configuration.\n\nHowever, as the above work-around worked fine for other output types\nalso, we currently always configure thresholds in this special way on\nOMAP3. In theory there should be negligible difference with this special\nway and the standard way. The first paragraph explains what happens in\npractice.\n\nThis patch changes the driver to use the special threshold configuration\nonly when the output is a manual update display on OMAP3. This does\ninclude RFBI displays also, and although it hasn\u0027t been tested (no\nboards using RFBI) I suspect the similar behaviour is present there\nalso, as the DISPC side should work similarly for DSI command mode and\nRFBI.\n\nSigned-off-by: Tomi Valkeinen \u003ctomi.valkeinen@ti.com\u003e\nCc: Joe Woodward \u003cjw@terrafix.co.uk\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "757fcf2b6df4814604764a4abb54d2b58f422fb5",
      "tree": "ee257387804848688860cee1ae7c349bb46d233e",
      "parents": [
        "659586507ac1f4219d1b2f2d471381e39f7e6961"
      ],
      "author": {
        "name": "Greg Pearson",
        "email": "greg.pearson@hp.com",
        "time": "Wed Jun 20 12:53:05 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Jul 16 09:04:27 2012 -0700"
      },
      "message": "mm/memblock: fix overlapping allocation when doubling reserved array\n\ncommit 48c3b583bbddad2220ca4c22319ca5d1f78b2090 upstream.\n\n__alloc_memory_core_early() asks memblock for a range of memory then try\nto reserve it.  If the reserved region array lacks space for the new\nrange, memblock_double_array() is called to allocate more space for the\narray.  If memblock is used to allocate memory for the new array it can\nend up using a range that overlaps with the range originally allocated in\n__alloc_memory_core_early(), leading to possible data corruption.\n\nWith this patch memblock_double_array() now calls memblock_find_in_range()\nwith a narrowed candidate range (in cases where the reserved.regions array\nis being doubled) so any memory allocated will not overlap with the\noriginal range that was being reserved.  The range is narrowed by passing\nin the starting address and size of the previously allocated range.  Then\nthe range above the ending address is searched and if a candidate is not\nfound, the range below the starting address is searched.\n\nSigned-off-by: Greg Pearson \u003cgreg.pearson@hp.com\u003e\nSigned-off-by: Yinghai Lu \u003cyinghai@kernel.org\u003e\nAcked-by: Tejun Heo \u003ctj@kernel.org\u003e\nCc: Benjamin Herrenschmidt \u003cbenh@kernel.crashing.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "659586507ac1f4219d1b2f2d471381e39f7e6961",
      "tree": "dee631105393f2c9f17908abf2470bb762cd7350",
      "parents": [
        "40e0484473ac43b557796c9f392c2cb69b1f55ae"
      ],
      "author": {
        "name": "Gavin Shan",
        "email": "shangw@linux.vnet.ibm.com",
        "time": "Tue May 29 15:06:50 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Jul 16 09:04:27 2012 -0700"
      },
      "message": "mm/memblock: fix memory leak on extending regions\n\ncommit 181eb39425f2b9275afcb015eaa547d11f71a02f upstream.\n\nThe overall memblock has been organized into the memory regions and\nreserved regions.  Initially, the memory regions and reserved regions are\nstored in the predetermined arrays of \"struct memblock _region\".  It\u0027s\npossible for the arrays to be enlarged when we have newly added regions,\nbut no free space left there.  The policy here is to create double-sized\narray either by slab allocator or memblock allocator.  Unfortunately, we\ndidn\u0027t free the old array, which might be allocated through slab allocator\nbefore.  That would cause memory leak.\n\nThe patch introduces 2 variables to trace where (slab or memblock) the\nmemory and reserved regions come from.  The memory for the memory or\nreserved regions will be deallocated by kfree() if that was allocated by\nslab allocator.  Thus to fix the memory leak issue.\n\nSigned-off-by: Gavin Shan \u003cshangw@linux.vnet.ibm.com\u003e\nCc: Johannes Weiner \u003channes@cmpxchg.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "40e0484473ac43b557796c9f392c2cb69b1f55ae",
      "tree": "702bfacb275fc681fb940786c5e186ab9e8604a8",
      "parents": [
        "b6855f6d78cee5d72adc8f07be2646dd83c171c3"
      ],
      "author": {
        "name": "Gavin Shan",
        "email": "shangw@linux.vnet.ibm.com",
        "time": "Tue May 29 15:06:50 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Jul 16 09:04:27 2012 -0700"
      },
      "message": "mm/memblock: cleanup on duplicate VA/PA conversion\n\ncommit 4e2f07750d9a94e8f23e86408df5ab95be88bf11 upstream.\n\nThe overall memblock has been organized into the memory regions and\nreserved regions.  Initially, the memory regions and reserved regions are\nstored in the predetermined arrays of \"struct memblock _region\".  It\u0027s\npossible for the arrays to be enlarged when we have newly added regions\nfor them, but no enough space there.  Under the situation, We will created\ndouble-sized array to meet the requirement.  However, the original\nimplementation converted the VA (Virtual Address) of the newly allocated\narray of regions to PA (Physical Address), then translate back when we\nallocates the new array from slab.  That\u0027s actually unnecessary.\n\nThe patch removes the duplicate VA/PA conversion.\n\nSigned-off-by: Gavin Shan \u003cshangw@linux.vnet.ibm.com\u003e\nCc: Johannes Weiner \u003channes@cmpxchg.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "b6855f6d78cee5d72adc8f07be2646dd83c171c3",
      "tree": "ba67ce52faf0e783dc649f013a0a16fd83b16450",
      "parents": [
        "b6d7c70709e324e074d3a69249980bba1529fd01"
      ],
      "author": {
        "name": "Tyler Hicks",
        "email": "tyhicks@canonical.com",
        "time": "Tue Jun 12 11:17:01 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Jul 16 09:04:26 2012 -0700"
      },
      "message": "eCryptfs: Properly check for O_RDONLY flag before doing privileged open\n\ncommit 9fe79d7600497ed8a95c3981cbe5b73ab98222f0 upstream.\n\nIf the first attempt at opening the lower file read/write fails,\neCryptfs will retry using a privileged kthread. However, the privileged\nretry should not happen if the lower file\u0027s inode is read-only because a\nread/write open will still be unsuccessful.\n\nThe check for determining if the open should be retried was intended to\nbe based on the access mode of the lower file\u0027s open flags being\nO_RDONLY, but the check was incorrectly performed. This would cause the\nopen to be retried by the privileged kthread, resulting in a second\nfailed open of the lower file. This patch corrects the check to\ndetermine if the open request should be handled by the privileged\nkthread.\n\nSigned-off-by: Tyler Hicks \u003ctyhicks@canonical.com\u003e\nReported-by: Dan Carpenter \u003cdan.carpenter@oracle.com\u003e\nAcked-by: Dan Carpenter \u003cdan.carpenter@oracle.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "b6d7c70709e324e074d3a69249980bba1529fd01",
      "tree": "42baeff62ad963da452231a44da38a70893556ec",
      "parents": [
        "6dfa530c0b33f1ccd2d8b103a2dea6ec559de66c"
      ],
      "author": {
        "name": "Tyler Hicks",
        "email": "tyhicks@canonical.com",
        "time": "Mon Jun 11 10:21:34 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Jul 16 09:04:26 2012 -0700"
      },
      "message": "eCryptfs: Fix lockdep warning in miscdev operations\n\ncommit 60d65f1f07a7d81d3eb3b91fc13fca80f2fdbb12 upstream.\n\nDon\u0027t grab the daemon mutex while holding the message context mutex.\nAddresses this lockdep warning:\n\n ecryptfsd/2141 is trying to acquire lock:\n  (\u0026ecryptfs_msg_ctx_arr[i].mux){+.+.+.}, at: [\u003cffffffffa029c213\u003e] ecryptfs_miscdev_read+0x143/0x470 [ecryptfs]\n\n but task is already holding lock:\n  (\u0026(*daemon)-\u003emux){+.+...}, at: [\u003cffffffffa029c2ec\u003e] ecryptfs_miscdev_read+0x21c/0x470 [ecryptfs]\n\n which lock already depends on the new lock.\n\n the existing dependency chain (in reverse order) is:\n\n -\u003e #1 (\u0026(*daemon)-\u003emux){+.+...}:\n        [\u003cffffffff810a3b8d\u003e] lock_acquire+0x9d/0x220\n        [\u003cffffffff8151c6da\u003e] __mutex_lock_common+0x5a/0x4b0\n        [\u003cffffffff8151cc64\u003e] mutex_lock_nested+0x44/0x50\n        [\u003cffffffffa029c5d7\u003e] ecryptfs_send_miscdev+0x97/0x120 [ecryptfs]\n        [\u003cffffffffa029b744\u003e] ecryptfs_send_message+0x134/0x1e0 [ecryptfs]\n        [\u003cffffffffa029a24e\u003e] ecryptfs_generate_key_packet_set+0x2fe/0xa80 [ecryptfs]\n        [\u003cffffffffa02960f8\u003e] ecryptfs_write_metadata+0x108/0x250 [ecryptfs]\n        [\u003cffffffffa0290f80\u003e] ecryptfs_create+0x130/0x250 [ecryptfs]\n        [\u003cffffffff811963a4\u003e] vfs_create+0xb4/0x120\n        [\u003cffffffff81197865\u003e] do_last+0x8c5/0xa10\n        [\u003cffffffff811998f9\u003e] path_openat+0xd9/0x460\n        [\u003cffffffff81199da2\u003e] do_filp_open+0x42/0xa0\n        [\u003cffffffff81187998\u003e] do_sys_open+0xf8/0x1d0\n        [\u003cffffffff81187a91\u003e] sys_open+0x21/0x30\n        [\u003cffffffff81527d69\u003e] system_call_fastpath+0x16/0x1b\n\n -\u003e #0 (\u0026ecryptfs_msg_ctx_arr[i].mux){+.+.+.}:\n        [\u003cffffffff810a3418\u003e] __lock_acquire+0x1bf8/0x1c50\n        [\u003cffffffff810a3b8d\u003e] lock_acquire+0x9d/0x220\n        [\u003cffffffff8151c6da\u003e] __mutex_lock_common+0x5a/0x4b0\n        [\u003cffffffff8151cc64\u003e] mutex_lock_nested+0x44/0x50\n        [\u003cffffffffa029c213\u003e] ecryptfs_miscdev_read+0x143/0x470 [ecryptfs]\n        [\u003cffffffff811887d3\u003e] vfs_read+0xb3/0x180\n        [\u003cffffffff811888ed\u003e] sys_read+0x4d/0x90\n        [\u003cffffffff81527d69\u003e] system_call_fastpath+0x16/0x1b\n\nSigned-off-by: Tyler Hicks \u003ctyhicks@canonical.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "6dfa530c0b33f1ccd2d8b103a2dea6ec559de66c",
      "tree": "df4f53ead7bb20b2ca77c173cd5ed8eb5d155762",
      "parents": [
        "6d442d8f7e1a6920aad3d3f3ea544f6f8e6898b8"
      ],
      "author": {
        "name": "Tyler Hicks",
        "email": "tyhicks@canonical.com",
        "time": "Mon Jun 11 09:24:11 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Jul 16 09:04:26 2012 -0700"
      },
      "message": "eCryptfs: Gracefully refuse miscdev file ops on inherited/passed files\n\ncommit 8dc6780587c99286c0d3de747a2946a76989414a upstream.\n\nFile operations on /dev/ecryptfs would BUG() when the operations were\nperformed by processes other than the process that originally opened the\nfile. This could happen with open files inherited after fork() or file\ndescriptors passed through IPC mechanisms. Rather than calling BUG(), an\nerror code can be safely returned in most situations.\n\nIn ecryptfs_miscdev_release(), eCryptfs still needs to handle the\nrelease even if the last file reference is being held by a process that\ndidn\u0027t originally open the file. ecryptfs_find_daemon_by_euid() will not\nbe successful, so a pointer to the daemon is stored in the file\u0027s\nprivate_data. The private_data pointer is initialized when the miscdev\nfile is opened and only used when the file is released.\n\nhttps://launchpad.net/bugs/994247\n\nSigned-off-by: Tyler Hicks \u003ctyhicks@canonical.com\u003e\nReported-by: Sasha Levin \u003clevinsasha928@gmail.com\u003e\nTested-by: Sasha Levin \u003clevinsasha928@gmail.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "6d442d8f7e1a6920aad3d3f3ea544f6f8e6898b8",
      "tree": "bd5a572130cb49bba9a456ccb7340e4b1534e5ee",
      "parents": [
        "7723bfa90d8a1f75f41ade1a13b9b32c9255b15c"
      ],
      "author": {
        "name": "Mike Snitzer",
        "email": "snitzer@redhat.com",
        "time": "Tue Jul 03 12:55:37 2012 +0100"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Jul 16 09:04:26 2012 -0700"
      },
      "message": "dm persistent data: fix allocation failure in space map checker init\n\ncommit b0239faaf87c38bb419c9264bf20817438ddc3a9 upstream.\n\nIf CONFIG_DM_DEBUG_SPACE_MAPS is enabled and memory is fragmented and a\nsufficiently-large metadata device is used in a thin pool then the space\nmap checker will fail to allocate the memory it requires.\n\nSwitch from kmalloc to vmalloc to allow larger virtually contiguous\nallocations for the space map checker\u0027s internal count arrays.\n\nReported-by: Vivek Goyal \u003cvgoyal@redhat.com\u003e\nSigned-off-by: Mike Snitzer \u003csnitzer@redhat.com\u003e\nSigned-off-by: Alasdair G Kergon \u003cagk@redhat.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "7723bfa90d8a1f75f41ade1a13b9b32c9255b15c",
      "tree": "4e671f0460e5909c24e1c0e6c9a43ac079c086b1",
      "parents": [
        "672c65731d62930439b91ff8a160830085d42a51"
      ],
      "author": {
        "name": "Mike Snitzer",
        "email": "snitzer@redhat.com",
        "time": "Tue Jul 03 12:55:35 2012 +0100"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Jul 16 09:04:26 2012 -0700"
      },
      "message": "dm persistent data: handle space map checker creation failure\n\ncommit 62662303e7f590fdfbb0070ab820a0ad4267c119 upstream.\n\nIf CONFIG_DM_DEBUG_SPACE_MAPS is enabled and dm_sm_checker_create()\nfails, dm_tm_create_internal() would still return success even though it\ncleaned up all resources it was supposed to have created.  This will\nlead to a kernel crash:\n\ngeneral protection fault: 0000 [#1] SMP DEBUG_PAGEALLOC\n...\nRIP: 0010:[\u003cffffffff81593659\u003e]  [\u003cffffffff81593659\u003e] dm_bufio_get_block_size+0x9/0x20\nCall Trace:\n  [\u003cffffffff81599bae\u003e] dm_bm_block_size+0xe/0x10\n  [\u003cffffffff8159b8b8\u003e] sm_ll_init+0x78/0xd0\n  [\u003cffffffff8159c1a6\u003e] sm_ll_new_disk+0x16/0xa0\n  [\u003cffffffff8159c98e\u003e] dm_sm_disk_create+0xfe/0x160\n  [\u003cffffffff815abf6e\u003e] dm_pool_metadata_open+0x16e/0x6a0\n  [\u003cffffffff815aa010\u003e] pool_ctr+0x3f0/0x900\n  [\u003cffffffff8158d565\u003e] dm_table_add_target+0x195/0x450\n  [\u003cffffffff815904c4\u003e] table_load+0xe4/0x330\n  [\u003cffffffff815917ea\u003e] ctl_ioctl+0x15a/0x2c0\n  [\u003cffffffff81591963\u003e] dm_ctl_ioctl+0x13/0x20\n  [\u003cffffffff8116a4f8\u003e] do_vfs_ioctl+0x98/0x560\n  [\u003cffffffff8116aa51\u003e] sys_ioctl+0x91/0xa0\n  [\u003cffffffff81869f52\u003e] system_call_fastpath+0x16/0x1b\n\nFix the space map checker code to return an appropriate ERR_PTR and have\ndm_sm_disk_create() and dm_tm_create_internal() check for it with\nIS_ERR.\n\nReported-by: Vivek Goyal \u003cvgoyal@redhat.com\u003e\nSigned-off-by: Mike Snitzer \u003csnitzer@redhat.com\u003e\nSigned-off-by: Alasdair G Kergon \u003cagk@redhat.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "672c65731d62930439b91ff8a160830085d42a51",
      "tree": "ec07304750f68c74ffcdafbe9e82cfec24e657d1",
      "parents": [
        "a712c8097b28c4c4f705db4102c0eed117806162"
      ],
      "author": {
        "name": "Mike Snitzer",
        "email": "snitzer@redhat.com",
        "time": "Tue Jul 03 12:55:33 2012 +0100"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Jul 16 09:04:26 2012 -0700"
      },
      "message": "dm persistent data: fix shadow_info_leak on dm_tm_destroy\n\ncommit 25d7cd6faa7ae6ed2565617c3ee2500ccb8a9f7f upstream.\n\nCleanup the shadow table before destroying the transaction manager.\n\nReference: leak was identified with kmemleak when running\ntest_discard_random_sectors in the thinp-test-suite.\n\nSigned-off-by: Mike Snitzer \u003csnitzer@redhat.com\u003e\nSigned-off-by: Alasdair G Kergon \u003cagk@redhat.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "a712c8097b28c4c4f705db4102c0eed117806162",
      "tree": "5ce798151349ed00e1b7cefa5b6e2bf18d8a4ab4",
      "parents": [
        "8d9369807370331cebf3e237b95ecce068af80f1"
      ],
      "author": {
        "name": "Milan Broz",
        "email": "mbroz@redhat.com",
        "time": "Tue Jul 03 12:55:41 2012 +0100"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Jul 16 09:04:25 2012 -0700"
      },
      "message": "dm: verity fix documentation\n\ncommit 18068bdd5f59229623b2fa518a6389e346642b0d upstream.\n\nVeritysetup is now part of cryptsetup package.\nRemove on-disk header description (which is not parsed in kernel)\nand point users to cryptsetup where it the format is documented.\nMention units for block size paramaters.\nFix target line specification and dmsetup parameters.\n\nSigned-off-by: Milan Broz \u003cmbroz@redhat.com\u003e\nSigned-off-by: Alasdair G Kergon \u003cagk@redhat.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "8d9369807370331cebf3e237b95ecce068af80f1",
      "tree": "45d0c283ffd7f058e28a17d6b55e0a8a3d567502",
      "parents": [
        "65c3f18b9032f7237fc74403ce3a92176eaebd8c"
      ],
      "author": {
        "name": "majianpeng",
        "email": "majianpeng@gmail.com",
        "time": "Tue Jul 03 12:11:54 2012 +1000"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Jul 16 09:04:25 2012 -0700"
      },
      "message": "md/raid5: In ops_run_io, inc nr_pending before calling md_wait_for_blocked_rdev\n\ncommit 1850753d2e6d9ca7856581ca5d3cf09521e6a5d7 upstream.\n\nIn ops_run_io(), the call to md_wait_for_blocked_rdev will decrement\nnr_pending so we lose the reference we hold on the rdev.\nSo atomic_inc it first to maintain the reference.\n\nThis bug was introduced by commit  73e92e51b7969ef5477d\n    md/raid5.  Don\u0027t write to known bad block on doubtful devices.\n\nwhich appeared in 3.0, so patch is suitable for stable kernels since\nthen.\n\nSigned-off-by: majianpeng \u003cmajianpeng@gmail.com\u003e\nSigned-off-by: NeilBrown \u003cneilb@suse.de\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "65c3f18b9032f7237fc74403ce3a92176eaebd8c",
      "tree": "2088abe208befd572ef07a2f41b5330f1d6a0dfb",
      "parents": [
        "04e0f69d135f6cf10534282fc09cf3efd6973c5b"
      ],
      "author": {
        "name": "NeilBrown",
        "email": "neilb@suse.de",
        "time": "Tue Jul 03 15:55:33 2012 +1000"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Jul 16 09:04:25 2012 -0700"
      },
      "message": "md/raid10: fix failure when trying to repair a read error.\n\ncommit 055d3747dbf00ce85c6872ecca4d466638e80c22 upstream.\n\ncommit 58c54fcca3bac5bf9290cfed31c76e4c4bfbabaf\n     md/raid10: handle further errors during fix_read_error better.\n\nin 3.1 added \"r10_sync_page_io\" which takes an IO size in sectors.\nBut we were passing the IO size in bytes!!!\nThis resulting in bio_add_page failing, and empty request being sent\ndown, and a consequent BUG_ON in scsi_lib.\n\n[fix missing space in error message at same time]\n\nThis fix is suitable for 3.1.y and later.\n\nReported-by: Christian Balzer \u003cchibi@gol.com\u003e\nSigned-off-by: NeilBrown \u003cneilb@suse.de\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "04e0f69d135f6cf10534282fc09cf3efd6973c5b",
      "tree": "a5d1d20670b6c24a78112446f51009aee13ed267",
      "parents": [
        "10ff23ae117665e886fed089cb5a2e015cd8b7b4"
      ],
      "author": {
        "name": "NeilBrown",
        "email": "neilb@suse.de",
        "time": "Tue Jul 03 10:37:30 2012 +1000"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Jul 16 09:04:25 2012 -0700"
      },
      "message": "md/raid10: Don\u0027t try to recovery unmatched (and unused) chunks.\n\ncommit fc448a18ae6219af9a73257b1fbcd009efab4a81 upstream.\n\nIf a RAID10 has an odd number of chunks - as might happen when there\nare an odd number of devices - the last chunk has no pair and so is\nnot mirrored.  We don\u0027t store data there, but when recovering the last\ndevice in an array we retry to recover that last chunk from a\nnon-existent location.  This results in an error, and the recovery\naborts.\n\nWhen we get to that last chunk we should just stop - there is nothing\nmore to do anyway.\n\nThis bug has been present since the introduction of RAID10, so the\npatch is appropriate for any -stable kernel.\n\nReported-by: Christian Balzer \u003cchibi@gol.com\u003e\nTested-by: Christian Balzer \u003cchibi@gol.com\u003e\nSigned-off-by: NeilBrown \u003cneilb@suse.de\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "10ff23ae117665e886fed089cb5a2e015cd8b7b4",
      "tree": "991cf610e97fb1fbafc708e045af549f06c6fe13",
      "parents": [
        "0ea4ad38312422221b1b8a4fd820f38119bfce92"
      ],
      "author": {
        "name": "Shinya Kuribayashi",
        "email": "shinya.kuribayashi.px@renesas.com",
        "time": "Sat Jul 07 13:37:42 2012 +0300"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Jul 16 09:04:25 2012 -0700"
      },
      "message": "hwspinlock/core: use global ID to register hwspinlocks on multiple devices\n\ncommit 476a7eeb60e70ddab138e7cb4bc44ef5ac20782e upstream.\n\nCommit 300bab9770 (hwspinlock/core: register a bank of hwspinlocks in a\nsingle API call, 2011-09-06) introduced \u0027hwspin_lock_register_single()\u0027\nto register numerous (a bank of) hwspinlock instances in a single API,\n\u0027hwspin_lock_register()\u0027.\n\nAt which time, \u0027hwspin_lock_register()\u0027 accidentally passes \u0027local IDs\u0027\nto \u0027hwspin_lock_register_single()\u0027, despite that ..._single() requires\n\u0027global IDs\u0027 to register hwspinlocks.\n\nWe have to convert into global IDs by supplying the missing \u0027base_id\u0027.\n\nSigned-off-by: Shinya Kuribayashi \u003cshinya.kuribayashi.px@renesas.com\u003e\n[ohad: fix error path of hwspin_lock_register, too]\nSigned-off-by: Ohad Ben-Cohen \u003cohad@wizery.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    }
  ],
  "next": "0ea4ad38312422221b1b8a4fd820f38119bfce92"
}
