KASAN: stack-out-of-bounds Write in ax25_getname

Status: upstream: reported C repro on 2018/12/29 19:11
First crash: 1370d, last: 951d

Cause bisection: the cause commit could be any of (bisect log):
  3d8e15dd6de6 KVM: new maintainer on the block
  541d8f4d59d7 Merge tag 'for-linus' of git://
  8d4a2ec1e0b4 assoc_array: don't call compare_object() on a node
  952cca6a724c ASN.1: fix open failure check on headername
  9cb5b787db70 Merge tag 'for-linus' of git://
  c4004b02f8e5 x86: remove the kernel code/data/bss resources from /proc/iomem
  4a6cd3ba6fc4 Merge tag 'kvm-arm-for-4.6-rc4' of git://
  7a98205deebf KVM: MMU: fix permission_fault()
  fc5b7f3bf1e1 kvm: x86: do not leak guest xcr0 into host interrupt handlers
  316314cae15f KVM: x86: mask CPUID(0xD,0x1).EAX against host value
  915e846d4b07 Merge tag 'imx-drm-next-2016-04-01' of git:// into drm-fixes
  5003bc6cc60e Merge tag 'spi-fix-v4.6-rc2' of git://
  4cf43e0ed476 Merge branch 'for-upstream/hdlcd' of git:// into drm-fixes
  30aab1897b95 Merge branch 'linux-4.6' of git:// into drm-fixes
  1b5caa3eaa5f Merge tag 'pinctrl-v4.6-2' of git://
  62d2def9a514 Merge tag 'media/v4.6-3' of git://
  1e1e5ce78ff0 Merge tag 'linux-kselftest-4.6-rc3' of git://
  fd8c61ebd426 Merge branch 'drm-fixes-4.6' of git:// into drm-fixes
  c3b1feb024d1 Merge branch 'upstream' of git://
  741f37b8ccf1 Merge branch 'drm-fixes' of git://
  d3436a1d03f9 Merge tag 'for_linus' of git://
  1c915b3ac4ec Merge branch 'for-linus' of git://
  636c8a8d85d0 Merge tag 'usb-serial-4.6-rc3' of git:// into usb-linus
  73659be769a4 Merge branches 'pm-core', 'powercap' and 'pm-tools'
  93e2aeaca520 Merge tag 'for-linus-4.6-rc2-tag' of git://
  fa81e66ec864 Merge branches 'pm-cpufreq', 'pm-cpuidle' and 'acpi-cppc'
  30d237a6c2e9 Merge tag 'mac80211-for-davem-2016-04-06' of git://
  93061f390f10 Merge tag 'ext4_for_linus_stable' of git://
  3c9688876ace Revert "ib_srpt: Convert to percpu_ida tag allocation"
  592570c950fb parisc: Handle R_PARISC_PCREL32 relocations in kernel modules
  a61b37ead514 mailbox: xgene-slimpro: Fix wrong test for devm_kzalloc
  e865f4965ff6 Merge branch 'for_linus' of git://
  17f5f28ffa6e mailbox: mailbox-test: Use more consistent format for calling copy_from_user()
  e3893027a300 parisc: Avoid function pointers for kernel exception routines
  d1c2f87c9a8f mailbox: mailbox-test: Prevent memory leak
  ef72f3110d8b parisc: Fix kernel crash with reversed copy_from_user()
  0c44d7896cbf mailbox: Stop using ENOSYS for anything other than unimplemented syscalls
  2ef4dfd9d9f2 parisc: Unbreak handling exceptions from kernel modules
  c7e82c648598 Merge tag 'f2fs-for-linus' of git://
  c44da62b55bb ALSA: hda - Fix inconsistent monitor_present state until repoll
  cb910c1714cc parisc: Update comment regarding relative extable support
  023d8218ec0d ALSA: hda - Fix regression of monitor_present flag in eld proc file
  1a59c53920ee Merge tag 'iommu-fixes-v4.6-rc2' of git://
  e56f49814250 orangefs: remove unused variable
  1917a6932870 orangefs: Add KERN_<LEVEL> to gossip_<level> macros
  adcdd0d5a1cb ALSA: usb-audio: Skip volume controls triggers hangup on Dell USB Dock
  0b74ecdfbea8 iommu/vt-d: Silence an uninitialized variable warning
  166c5a6ef765 gma500: remove annoying deprecation warning
  2eacea74cc46 orangefs: strncpy -> strscpy
  9b8e3ec34318 gpio: pca953x: Use correct u16 value for register word write
  c00bbcf86289 virtio: add VIRTIO_CONFIG_S_NEEDS_RESET device status bit
  c636b95ec598 ALSA: hda/realtek - Enable the ALC292 dock fixup on the Thinkpad T460s
  0dee6c82c2aa ARC: [plat-axs103] Enable loop block devices
  159f3cd92f17 gpiolib: Defer gpio device setup until after gpiolib initialization
  3430284feab3 bridge, netem: mark mailing lists as moderated
  4a2d057e4fc4 Merge branch 'PAGE_CACHE_SIZE-removal'
  dc5027a72369 ALSA: sscape: Use correct format identifier for size_t
  eeca9a671aaa MAINTAINERS: add entry for QEMU
  f83140c1467e orangefs: clean up truncate ctime and mtime setting
  fbedd9b9905c iommu/rockchip: Fix "is stall active" check
  016adb7260f4 tuntap: restore default qdisc
  2fa37fd71396 Orangefs: fix ifnullfree.cocci warnings
  476e2fc5cd43 gpiolib: Do not use devm functions when registering gpio chip
  6dc97ee6d983 Revert "ARC: [plat-axs10x] add Ethernet PHY description in .dts"
  a390180291dd libnvdimm, pfn: fix nvdimm_namespace_add_poison() vs section alignment
  b4203ff5464d ALSA: usb-audio: Add a quirk for Plantronics BT300
  cb39f732abbe Merge remote-tracking branches 'spi/fix/omap2' and 'spi/fix/rockchip' into spi-linus
  d48d5691ebf8 USB: option: add "D-Link DWM-221 B1" device id
  def7ac806a9a firmware: qemu_fw_cfg.c: hold ACPI global lock during device access
  eebb8034a5be iommu: Don't overwrite domain pointer when there is no default_domain
  05dbcb430795 virtio: virtio 1.0 cs04 spec compliance for reset
  07b48ac4bbe5 iommu/dma: Restore scatterlist offsets correctly
  16669befb077 PM / wakeirq: fix wakeirq setting after wakup re-configuration from sysfs
  2b657a586a84 Merge remote-tracking branch 'spi/fix/imx' into spi-linus
  2fe7857176ad i40iw: avoid potential uninitialized variable use
  47cd30608f3f hwrng: bcm63xx - fix device tree compilation
  7b8ba82ad4ad m68k/defconfig: Update defconfigs for v4.6-rc2
  94a57f1f8a9d mpls: find_outdev: check for err ptr in addition to NULL check
  a9bb3ba81fba Orangefs: optimize boilerplate code.
  c4e5ffb6f224 gpio: pxa: fix legacy non pinctrl aware builds
  cddc9434e3dc USB: serial: cp210x: Adding GE Healthcare Device ID
  e5670563f588 libnvdimm, pfn: fix uuid validation
  e5e0a65cd20a arc: Add our own implementation of fb_pgprotect()
  f03b24a851d3 ALSA: usb-audio: Add a sample rate quirk for Phoenix Audio TMX320
  0eb2c80c393d m68k: Wire up preadv2 and pwritev2
  211291126698 libnvdimm: fix smart data retrieval
  2224d879c7c0 rbd: use GFP_NOIO consistently for request allocations
  25487533ff31 gpio / ACPI: ignore GpioInt() GPIOs when requesting GPIO_OUT_*
  2d09a2ca6a6c Orangefs: xattr.c cleanup
  3ba3458fb9c0 ipv6: Count in extension headers in skb->network_header
  732dc97baec0 ARC: Don't source drivers/pci/pcie/Kconfig ourselves
  8fd2910e3115 PM / runtime: Document steps for device removal
  9967c70abc92 IB/mlx5: fix VFs callback function prototypes
  b70bb9844893 iommu: provide of_xlate pointer unconditionally
  bfa5fb14fb9e ALSA: hda - Bind with i915 only when Intel graphics is present
  c12d2da56d0e mm/gup: Remove the macro overload API migration helpers from the get_user*() APIs
  d7124d69a519 Merge remote-tracking branch 'spi/fix/core' into spi-linus
  e8aabc64d7f5 qemu_fw_cfg: don't leak kobj on init error
  ea6db90e7503 USB: serial: ftdi_sio: Add support for ICP DAS I-756xU devices
  ef609c238a8e sunrpc: Fix skcipher/shash conversion
  579ba855524c RDS: fix congestion map corruption for PAGE_SIZE > 4k
  9735a22799b9 Linux 4.6-rc2
  4c3b73c6a2ee Merge branch 'perf-urgent-for-linus' of git://
  6759212640fd Merge tag 'for-linus-4.6-ofs1' of git://
  e98499ac6397 RDS: memory allocated must be align to 8
  7b367f5dba5c Merge branch 'core-urgent-for-linus' of git://
  839a3f765728 Merge branch 'for-linus-4.6' of git://
  a0ca153f98db GRE: Disable segmentation offloads w/ CSUM and we are encapsulated via FOU
  0a1a37b6d62e net: add the AF_KCM entries to family name tables
  eff471b1b947 MAINTAINERS: intel-wired-lan list is moderated
  9c94f6c8e0d3 lib/test_bpf: Add additional BPF_ADD tests
  b64b50eac470 lib/test_bpf: Add test to check for result of 32-bit add that overflows
  c7395d6bd7cc lib/test_bpf: Add tests for unsigned BPF_JGT
  9f134c34fbce lib/test_bpf: Fix JMP_JSET tests
  8ab18d71de8b VSOCK: Detach QP check should filter out non matching QPs.
  17084b7e0790 v4l2-mc: avoid warning about unused variable
  52f95bbfcf72 stmmac: fix adjust link call in case of a switch is attached
  30cebb6ca1e0 Merge branch 'x86-urgent-for-linus' of git://
  6ae81ced3788 af_packet: tone down the Tx-ring unsupported spew.
  18fcf49f87f4 net_sched: fix a memory leak in tc action
  138d6153a139 samples/bpf: Enable powerpc support
  128d1514be35 samples/bpf: Use llc in PATH, rather than a hardcoded value
  77e63534d679 samples/bpf: Fix build breakage with map_perf_test_user.c
  32fa270c8a39 Revert "bridge: Fix incorrect variable assignment on error path in br_sysfs_addbr"
  529927f952c5 cxgb4: Add pci device id for chelsio t520-cr adapter
  b4201cc4fc6e mac80211: fix "warning: β€˜target_metric’ may be used uninitialized"
  b6ee376cb0b7 ip6_tunnel: set rtnl_link_ops before calling register_netdevice
  f6d4671a0881 mac80211: close the SP when we enqueue frames during the SP
  4b559ec0bfc3 mac80211: Fix BW upgrade for TDLS peers
  727ceaa49bb8 Revert "netpoll: Fix extra refcount release in netpoll_cleanup()"
  f7eeb8a87c03 Merge tag 'rproc-v4.6-rc1' of git://
  aa4f069e167b Merge branch 'master' of git://
  facde7f332f9 mac80211: don't send deferred frames outside the SP
  a4605fef7132 e1000: Double Tx descriptors needed check for 82544
  c2d45923e3df mac80211: remove description of dropped member
  847a1d6796c7 e1000: Do not overestimate descriptor counts in Tx pre-check
  84ea3a18c06c mac80211: add doc for RX_FLAG_DUP_VALIDATED flag
  d6c24df08255 Merge git://
  8e2cc0e67f4a i40e: fix errant PCIe bandwidth message
  b6bf8c688e07 mac80211: ensure no limits on station rhashtable
  62b14b241ca6 mac80211: properly deal with station hashtable insert errors
  eb8e97715f29 sctp: use list_* in sctp_list_dequeue
  aa507a7bc5ab mac80211: recalc min_def chanctx even when chandef is identical
  e43569e6d3c7 sctp: flush if we can't fit another DATA chunk
  59021c675995 mac80211: TDLS: change BW calculation for WIDER_BW peers
  c862cc9b7052 bridge: Fix incorrect variable assignment on error path in br_sysfs_addbr
  be447f305494 ipv6: l2tp: fix a potential issue in l2tp_ip6_recv
  cb107161df3c Convert straggling drivers to new six-argument get_user_pages()
  db8d99774c26 mac80211: TDLS: always downgrade invalid chandefs
  264800b5ecc7 Merge tag 'configfs-for-linus-2' of git://
  5745b8232e94 ipv4: l2tp: fix a potential issue in l2tp_ip_recv
  c3732a7b37bc mac80211: fix AP buffered multicast frames with queue control and txq
  05cf8077e54b Merge git://
  cf78031a659c Merge tag 'clk-fixes-for-linus' of git://
  1826907c1f59 Merge tag 'pm+acpi-4.6-rc2' of git://
  4e19fd9395f9 Merge branch 'akpm' (patches from Andrew)
  7c0ecda15b01 drm/amdgpu: total vram size also reduces pin size
  9ef11ceb0d38 Merge git://
  916282314520 drm/amd/powerplay: add uvd/vce dpm enabling flag default.
  0168f78fe197 drm/amd/powerplay: fix issue that resume back, dpm can't work on FIJI.
  d23be4e34c2b drm/amdgpu: save and restore the firwmware cache part when suspend resume
  394532e4b639 .mailmap: add Christophe Ricard
  3f99dd814a6f drm/amdgpu: save and restore UVD context with suspend and resume
  749b48faaf64 drm/ttm: use phys_addr_t for ttm_bus_placement
  f76be61755c5 Make CONFIG_FHANDLE default y
  5e916a3ada5f drm/radeon: Only call drm_vblank_on/off between drm_vblank_init/cleanup
  82d2a348bb9a Merge branch 'for-linus-4.6' of git://
  ec3b68825091 mm/page_isolation.c: fix the function comments
  22fed39775c6 Merge tag 'for-linus' of git://
  af8e15cc85a2 oom, oom_reaper: do not enqueue task if it is on the oom_reaper_list head
  fc387a0b1831 drm/amdgpu: fence wait old rcu slot
  ab7e9c137a85 drm/amdgpu: fix leaking fence in the pageflip code
  bbe3de256028 mm/page_isolation: fix tracepoint to mirror check function behavior
  1f8628c76454 drm/amdgpu: print vram type rather than just DDR
  858eaaa71170 mm/rmap: batched invalidations should use existing api
  18c98243ddf0 x86/mm: TLB_REMOTE_SEND_IPI should count pages
  4fff50566003 Merge tag 'arm64-fixes' of git://
  b634de4f446c drm/amdgpu/gmc: use proper register for vram type on Fiji
  6f25a14a7053 mm: fix invalid node in alloc_migrate_target()
  d1518a1db31a drm/amdgpu/gmc: move vram type fetching into sw_init
  354edd8e94e9 drm/amdgpu: Set vblank_disable_allowed = true
  969e8d7e47f9 include/linux/huge_mm.h: return NULL instead of false for pmd_trans_huge_lock()
  0b355eaaaae9 mm, kasan: fix compilation for CONFIG_SLAB
  978ccad69f8d drm/radeon: Set vblank_disable_allowed = true
  2708d17d07d2 Merge tag 'sound-4.6-rc2' of git://
  b39c3cf44cda MAINTAINERS: orangefs mailing list is subscribers-only
  e0c771637f5a drm/amd/powerplay: Need to change boot to performance state in resume.
  6ddf37da05cd Merge branch 'drm-fixes' of git://
  bbe6aa9953b2 drm/amd/powerplay: add new Fiji function for not setting same ps.
  5349ece70600 drm/amdgpu: check dpm state before pm system fs initialized.
  4cd05a74cc60 drm/amd/powerplay: notify amdgpu whether dpm is enabled or not.
  1587f6e40b94 drm/amdgpu: Not support disable dpm in powerplay.
  4c90080b19aa drm/amdgpu: add an cgs interface to notify amdgpu the dpm state.
  f9e9c08e20d7 drm/amd/powerplay: fix segment fault issue in multi-display case.
  52bef0cb107d Merge tag 'powerpc-4.6-2' of git://
  72b9ff0612ad drm/udl: Use unlocked gem unreferencing
  40bca9dbab4d Merge tag 'pm+acpi-4.6-rc3' of git://
  7779c5e23c51 drm/dp: move hw_mutex up the call stack
  f9a67b1182e5 md/bitmap: clear bitmap if bitmap_create failed
  1fa64f198b9f mm: drop PAGE_CACHE_* and page_cache_{get,release} definition
  5456248d6647 Merge branch 'drm-rockchip-next-fixes-2016-03-28' of into drm-fixes
  ed3b98c71cd9 MD: add rdev reference for super write
  466ad292235b md: fix a trivial typo in comments
  90516d89cd02 Merge branch 'msm-fixes-4.6-rc1' of git:// into drm-fixes
  ea1754a08476 mm, fs: remove remaining PAGE_CACHE_* and page_cache_{get,release} usage
  09cbfeaf1a5a mm, fs: get rid of PAGE_CACHE_* and page_cache_{get,release} macros
  2f4fcb3eafd7 Merge branch 'drm-next-4.6' of git:// into drm-fixes
  816b0acf3deb md:raid1: fix a dead loop when read from a WriteMostly disk
  dc8a64ee1ab3 Merge branch 'for-linus' of git://
  c05c2ec96bb8 Merge branch 'parisc-4.6-2' of git://
  63b106a87dd8 Merge tag 'md/4.6-rc2-fix' of git://
  e9dcfaff0105 Merge branch 'for-linus' of git://
  39ec5cbed0bb Merge tag 'fixes-for-v4.6-rc3' of git:// into usb-linus
  ca4572042e41 Merge tag 'gpio-v4.6-2' of git://
  fb41b4be0027 Merge tag 'scsi-fixes' of git://
  0b24f7a8d6e0 Merge tag 'mvebu-fixes-4.6-1' of git:// into fixes
  95272c29378e compiler-gcc: disable -ftracer for __noclone functions
  61abdbe0bcc2 kvm: x86: make lapic hrtimer pinned
  c5bce408e4b5 Merge branch 'libnvdimm-for-next' of git://
  3d50a7fb4299 MIPS: traps.c: Verify the ISA for microMIPS RDHWR emulation
  452a31fd3625 ARM: sa1100: remove references to the defunct
  9c650d09a9c3 s390/mm/kvm: fix mis-merge in gmap handling
  13ab2c80e2aa Merge tag 'pxa-fixes-v4.6' of into fixes
  14f4760562e4 kvm: set page dirty only if page has been writable
  1e6d88ccf41c Merge tag 'nios2-v4.6-rc2' of git://
  353def94606f MAINTAINERS: Update my email address
  6870e707c6d9 MIPS: BMIPS: Fix gisb-arb compatible string for 7435
  04211a574641 MIPS: Bail on unsupported module relocs
  14ebda3394fd KVM: x86: reduce default value of halt_poll_ns parameter
  39e2e173fb1f locking/lockdep: Print chain_key collision information
  adf9a3ab90eb usb: dwc3: keystone: drop dma_mask configuration
  283d75737837 uapi/linux/stddef.h: Provide __always_inline to userspace headers
  2e1d18c6997d Merge tag 'omap-for-v4.6/fixes-rc1' of git:// into fixes
  62f444e0548e Merge branch 'linus' of git://
  79171e9b90b1 usb: gadget: udc-core: remove manual dma configuration
  a2b5c3c0c8ee KVM: Hyper-V: do not do hypercall userspace exits if SynIC is disabled
  f7f797cfc6c8 MIPS: dts: qca: ar9132_tl_wr1043nd_v1.dts: use "ref" for reference clock name
  07c0db771dff Merge tag 'dlm-4.6-fixes' of git://
  1ffb4d5cc78a usb: dwc3: pci: add ID for one more Intel Broxton platform
  321c5658c5e9 KVM: x86: Inject pending interrupt even if pending nmi exist
  a189c017ded0 tools/lib/lockdep: Fix unsupported 'basename -s' in
  f4c87b7a944a MIPS: ath79: Fix the ar913x reference clock rate
  4fccb0767fdb usb: renesas_usbhs: fix to avoid using a disabled ep in usbhsg_queue_done()
  5529578a2728 locking/atomic, sched: Unexport fetch_or()
  5a07975ad0a3 USB: digi_acceleport: do sanity checking for the number of ports
  c26e5f303a1e Merge tag 'kvm-arm-for-4.6-rc2' of git:// into HEAD
  c338d59d12dc MIPS: ath79: Fix the ar724x clock calculation
  2b885ea66f4c dt-bindings: clock: qca,ath79-pll: fix copy-paste typos
  8b8c877febd2 Merge tag 'hwmon-for-linus-v4.6-rc2' of git://
  8f9e8f5fcc05 ocfs2: Fix Q_GETNEXTQUOTA for filesystem without quotas
  c55aee1bf0e6 USB: cypress_m8: add endpoint sanity check
  ecd9a7ad453c usb: dwc2: do not override forced dr_mode in gadget setup
  f009a7a767e7 timers/nohz: Convert tick dependency mask to atomic_t
  17e8a8936c3f quota: Handle Q_GETNEXTQUOTA when quota is disabled
  3b143cca6e13 MIPS: traps: Correct the SIGTRAP debug ABI in `do_watch' and `do_trap_or_bp'
  4e9a0b05257f USB: mct_u232: add sanity checking in probe
  4fc50ba5965a usb: gadget: f_midi: unlock on error
  53c43c5ca133 Revert "Staging: olpc_dcon: Remove obsolete driver"
  5acba71e1883 locking/atomic: Introduce atomic_fetch_or()
  e1641c9d174e Revert "Revert "pinctrl: lantiq: Implement gpio_chip.to_irq""
  1993b176a822 Merge git://
  59b9023c356c usb: fix regression in SuperSpeed endpoint descriptor parsing
  6490865c6782 usb: renesas_usbhs: disable TX IRQ before starting TX DMAC transfer
  6d79b6c761dd staging/rdma/hfi1: select CRC32
  748ac56bb953 FIRMWARE: Broadcom: Fix grammar of warning messages in bcm47xx_sprom.c.
  a3125494cff0 x86/mce: Avoid using object after free in genpool
  a9b0b1fe9ecc pinctrl: qcom: ipq4019: fix register offsets
  5a269ca9a602 Merge tag 'iio-fixes-for-4.6b' of git:// into staging-linus
  732d4ba61be8 MIPS: ci20: Enable NAND and UBIFS support in defconfig.
  894f2fc44f2f usb: renesas_usbhs: avoid NULL pointer derefernce in usbhsf_pkt_handler()
  b348d7dddb6c USB: usbip: fix potential out-of-bounds write
  c6e6e58cc8a6 Merge tag 'staging-4.6-rc3' of git://
  cdbac7349f97 pinctrl: qcom: ipq4019: fix the function enum for gpio mode
  e51f17a049d1 drm/imx: Don't set a gamma table size
  f87e0434a3be lguest, x86/entry/32: Fix handling of guest syscalls using interrupt gates
  03d27ade4941 usb: gadget: f_midi: Fixed a bug when buflen was smaller than wMaxPacketSize
  2aac7ddf9a41 clk: qcom: ipq4019: add some fixed clocks for ddrppl and fepll
  5303f7827fcd pinctrl: qcom: ipq4019: set ngpios to correct value
  6bcaf0c58191 drm/imx: ipuv3-plane: Configure DMFC wait4eot bit after slots are determined
  6d92bc9d483a x86/build: Build compressed x86 kernels as PIE
  8ef34aa5a1b4 Merge tag 'fixes-for-v4.6-rc2' of git:// into usb-linus
  92a76f6d8545 MIPS: Fix misspellings in comments.
  091bc3a4049c MIPS: tlb-r4k: panic if the MMU doesn't support PAGE_SIZE
  27630c206bb0 gpu: ipu-v3: ipu-dmfc: Rename ipu_dmfc_init_channel to ipu_dmfc_config_wait4eot
  591b1d8d8607 x86/mm/pkeys: Add missing Documentation
  6ee334559324 pinctrl: nomadik: fix pull debug print inversion
  6f40fed1c911 ARM: dts: am335x-baltos-ir5221: fix cpsw_emac0 link type
  7e8ac87a4474 usb: phy: qcom-8x16: fix regulator API abuse
  bc95d4f0a920 clk: qcom: ipq4019: switch remaining defines to enums
  d4dc3b24427f Merge git://
  2bbe32f7398c gpu: ipu-v3: ipu-dmfc: Make function ipu_dmfc_init_channel() return void
  34a4cceb78e4 x86/cpu: Add advanced power management bits
  3de7beebddf8 bus: uniphier-system-bus: fix condition of overlap check
  405ddbfa6817 [media] Revert "[media] media: au0828 change to use Managed Media Controller API"
  44b03c105106 MAINTAINERS: pinctrl: samsung: Add two new maintainers
  6b4725743100 ARM: OMAP: Correct interrupt type for ARM TWD
  743bc4b06951 usb: ch9: Fix SSP Device Cap wFunctionalitySupport type
  8961b28f09dd MIPS: zboot: Remove copied source files on clean
  add479eeb1a2 clk: qcom: Make reset_control_ops const
  06a71a24bae5 arm64: KVM: unregister notifiers in hyp mode teardown path
  08f8cabf7156 usb: gadget: composite: Access SSP Dev Cap fields properly
  101ecde56696 MAINTAINERS: xen: Konrad to step down and Juergen to pick up
  3137b716568f ARM: uniphier: drop weird sizeof()
  32c26a56af3a gpu: ipu-v3: ipu-dmfc: Protect function ipu_dmfc_init_channel() with mutex
  5f870a3f7188 x86/thread_info: Merge two !__ASSEMBLY__ sections
  6b532c4a66f4 ARM: DRA722: Add ID detect for Silicon Rev 2.0
  7ba256d2aa2a clk: tegra: Make reset_control_ops const
  a939bb57cd47 pinctrl: intel: implement gpio_irq_enable
  c50ec6787536 MIPS: zboot: Fix the build with XZ compression on older GCC versions
  c89178f57a19 [media] Revert "[media] sound/usb: Use Media Controller API to share media resources"
  caf280800aaf i2c: jz4780: really prevent potential division by zero
  1cc9daea2a79 drm/imx: dw_hdmi: Don't call platform_set_drvdata()
  309fdeb55723 Merge tag 'meson8-dt-fix' of into fixes
  38e58986e6fc usb: gadget: udc: atmel: don't disable enpdoints we don't own
  4a6772f51489 x86/cpufreq: Remove duplicated TDP MSR macro definitions
  4ececb7d173f Revert "i2c: jz4780: prevent potential division by zero"
  5e7bc9c6cee6 clk: sunxi: Make reset_control_ops const
  6141570c36f0 arm64: KVM: Warn when PARange is less than 40 bits
  62d8e64423ad MIPS: Wire up preadv2 and pwrite2 syscalls.
  bf380cfa60db pinctrl: intel: make the high level interrupt working
  d41676ddddef ARM: dts: am43xx: fix edma memcpy channel allocation
  e8e3039f5b94 [media] au0828: Fix dev_state handling
  ec3c07377bd8 Merge git://
  ff1e22e7a638 xen/events: Mask a moving irq
  1c5631c73fc2 KVM: arm/arm64: Handle forward time correction gracefully
  34cf2acdafaa i2c: jz4780: prevent potential division by zero
  788c8ddb4f67 drm/imx: dw_hdmi: Call drm_encoder_cleanup() in error path
  839559e10601 target: add a new add_wwn_groups fabrics method
  85d1a29de8e4 Xen on ARM and ARM64: update MAINTAINERS info
  9a4f424531da pinctrl: freescale: imx: fix bogus check of of_iomap() return value
  b1b69c5dd5ad clk: atlas7: Make reset_control_ops const
  cfe1580a6415 ARM: dts: AM43x-epos: Fix clk parent for synctimer
  e901aa159dac usb: dwc3: gadget: fix endpoint renaming
  e95008a121e3 MIPS: cpu_name_string: Use raw_smp_processor_id().
  ed940cd27416 [media] au0828: fix au0828_v4l2_close() dev_state race condition
  f7be8610bca8 x86/Documentation: Start documenting x86 topology
  208fae5c3b94 ARM: 8550/1: protect idiv patching against undefined gcc behavior
  39b132b0fadf i2c: mux: demux-pinctrl: Update docs to new sysfs-attributes
  3fb950fea6e1 clk: rockchip: Make reset_control_ops const
  431597bb9556 arm64: defconfig: updates for 4.6
  456e8d534825 ARM: OMAP2: Fix up interconnect barrier initialization for DRA7
  5e7515ba78ff pinctrl: sunxi: Fix A33 external interrupts not working
  6ac217eef5d4 drm/imx: ipuv3-plane: fix planar YUV 4:2:0 support
  71528d8bd7a8 powerpc: Correct used_vsr comment
  7d4bd1d2819e arm64: KVM: Add braces to multi-line if statement in virtual PMU code
  8196dab4fc15 x86/cpu: Get rid of compute_unit_id
  ad14d4e0308a usb: dwc3: gadget: release spin lock during gadget resume
  b2dde6fca37e f2fs: retrieve IO write stat from the right place
  ccc7d5a1cdae sh: fix function signature of cpu_coregroup_mask to match pointer type
  dc6416f1d711 xen/x86: Call cpu_startup_entry(CPUHP_AP_ONLINE_IDLE) from xen_play_dead()
  e34b6fcf9b09 pcmcia: db1xxx_ss: fix last irq_to_gpio user
  e6e202edf000 target: initialize the nacl base CIT begfore init_nodeacl
  ffa8576a5380 [media] media: au0828 fix to clear enable/disable/change source handlers
  01d6b2a40a0f mmc: sdhci-pci: Add support and PCI IDs for more Broxton host controllers
  01d7c2a2de47 powerpc/process: Fix altivec SPR not being saved
  0fed3fcef48a [media] v4l2-mc: cleanup a warning
  11ca873574c2 documentation: Fix pinctrl documentation for Meson8 / Meson8b
  1809de7e7d37 Merge tag 'for-v4.6-rc/omap-fixes-a' of git:// into omap-for-v4.6/fixes
  199831c77c50 ARM: mvebu: Correct unit address for linksys
  32b62f446827 perf/x86/amd: Cleanup Fam10h NB event constraints
  505ce68c6da3 selftest/seccomp: Fix the seccomp(2) signature
  5e00bbfbc5ec tty: Fix merge of "tty: Refactor tty_open()"
  5f5560b1c5f3 arm64: KVM: Register CPU notifiers when the kernel runs at HYP
  67ca6b60a72a drm/imx: ipuv3-plane: Add more thorough checks for plane parameter limitations
  69c2565a3cca drm: ARM HDLCD - fix an error code
  8041dcc881c9 Merge tag 'v4.6-rc1' into for-linus-4.6
  878dfd3210e0 orangefs: minimum userspace version is 2.9.3
  8d8ee18cc707 gpio: xgene: Prevent NULL pointer dereference
  8fbd4ade93dc Merge branch 'acpi-processor'
  b8cfadfcefdc arm64: perf: Move PMU register related defines to asm/perf_event.h
  c0c508a418f9 i2c: mux: demux-pinctrl: Clean up sysfs attributes
  c90e09f7fb49 f2fs crypto: fix corrupted symlink in encrypted case
  ce7043fd903e target: remove ->fabric_cleanup_nodeacl
  d75868496ca0 MAINTAINERS: Add mailing list for remote processor subsystems
  e6cc3be552f9 arm64: dts: vulcan: Update PCI ranges
  e9adb336d0bf pinctrl: pistachio: fix mfio84-89 function description and pinmux.
  ef21b32a60fb sh: fix smp-shx3 build regression from removal of arch localtimer
  f2335a2a0a59 ARM: wire up preadv2 and pwritev2 syscalls
  f59dcab17629 usb: dwc3: core: improve reset sequence
  fa8ff601d72b MIPS: Fix MSA ld unaligned failure cases
  fd92f41dc252 clk: mmp: Make reset_control_ops const
  0129801be4b8 pinctrl: sh-pfc: only use dummy states for non-DT platforms
  08a5bb2921e4 powerpc/mm: Fixup preempt underflow with huge pages
  0fc03d4c8761 ARM: SMP enable of cache maintanence broadcast
  16b02d711f40 Merge tag 'v4.6-rc1'
  19fb5818ed60 MIPS: Fix broken malta qemu
  1dceb0415aa0 mmc: sdhci: Fix regression setting power on Trats2 board
  2e208c64e3aa [media] au0828: disable tuner links and cache tuner/decoder
  3c2e2266a5bd hwmon: (max1111) Return -ENODEV from max1111_read_channel if not instantiated
  3ca4a238106d ARM: OMAP2+: hwmod: Fix updating of sysconfig register
  427b1d3faa44 ARM: u8500_defconfig: turn on the Synaptics RMI4 driver
  4b28038fd60d remoteproc: st: fix check of syscon_regmap_lookup_by_phandle() return value
  4c35430ad18f ARM: pxa: fix the number of DMA requestor lines
  572a143489a1 iser-target: Use ib_drain_qp
  61a6dcd77af7 drm: ARM HDLCD - get rid of devm_clk_put()
  641bb3246dbb orangefs: don't put readdir slot twice
  6c045d07bb30 selftest/seccomp: Fix the flag name SECCOMP_FILTER_FLAG_TSYNC
  6ea7e3873e52 Merge branch 'fixes-base' into fixes
  7500c38ac325 fix the braino in "namei: massage lookup_slow() to be usable by lookup_one_len_unlocked()"
  77644ad86abd bus: mvebu-mbus: use %pa to print phys_addr_t
  82c7d823cc31 dlm: config: Fix ENOMEM failures in make_cluster()
  8dcf32175b4e i2c: prevent endless uevent loop with CONFIG_I2C_DEBUG_CORE
  8fe889274c7a nios2: Replace fdt_translate_address with of_flat_dt_translate_address
  90195c365180 gpu: ipu-cpmem: modify ipu_cpmem_set_yuv_planar_full for better control
  9acdf4df2fc4 usb: gadget: f_midi: added spinlock on transmit function
  a34d5df85ebb Merge tag 'iio-fixes-for-4.6a' of git:// into usb-linus
  a6002ec5a8c6 arm64: opcodes.h: Add arm big-endian config options before including arm header
  ad06fdeeef1c pwm: fsl-ftm: Use flat regmap cache
  b60e1157d8fa ARM: dts: amlogic: Split pinctrl device for Meson8 / Meson8b
  cb678d601651 arm64: kvm: 4.6-rc1: Fix VTCR_EL2 VS setting
  da5a0fc6743d tty: Fix UML console breakage
  ee6825c80e87 x86/topology: Fix AMD core count
  f39bb4579cbf clk: mediatek: Make reset_control_ops const
  fc0c2028135c x86, pmem: use memcpy_mcsafe() for memcpy_from_pmem()
  fd694733d523 f2fs: cover large section in sanity check of super
  fd975a7b180c gpio: menz127: Drop lock field from struct men_z127_gpio
  f55532a0c0b8 Linux 4.6-rc1
  d5a38f6e4668 Merge branch 'for-linus' of git://
  ffb927d1dce0 Merge tag 'usb-4.6-rc3' of git://
  183c948a3cb3 Merge tag 'tty-4.6-rc3' of git://
  289b7bfd483c Merge tag 'gpio-v4.6-3' of git://
  239467e852a4 Merge branch 'libnvdimm-fixes' of git://
  698f415cf575 Merge tag 'ofs-pull-tag-1' of git://
  b4cec5f66849 Merge tag 'ntb-4.6' of git://
  5b5b7fd185e9 Merge branch 'parisc-4.6-3' of git://
  895a1067d5b8 Merge tag 'scsi-misc' of git://
  02fc59a0d28f f2fs/crypto: fix xts_tweak initialization
  9f2394c9be47 Revert "ext4: allow readdir()'s of large empty directories to be interrupted"
  606c61a05796 Merge branch 'akpm' (patches from Andrew)
  0fda2788b03c thp: fix typo in khugepaged_scan_pmd()
  0ba1d91df93b MAINTAINERS: fill entries for KASAN
  6a7c924314dd Merge branch 'i2c/for-current' of git://
  e7080a439a6f mm/filemap: generic_file_read_iter(): check for zero reads unconditionally
  9dcadd381b1d kasan: test fix: warn if the UAF could not be detected in kmalloc_uaf2
  2f422f94eea8 Merge tag 'mmc-v4.6-rc1' of git://
  cd11016e5f52 mm, kasan: stackdepot implementation. Enable stackdepot for SLAB
  be7635e7287e arch, ftrace: for KASAN put hard/soft IRQ entries into separate sections
  505f5dcb1c41 mm, kasan: add GFP flags to KASAN API
  7ed2f9e66385 mm, kasan: SLAB support
  08b15d138642 Merge branch 'fixes' of git://
  e6e8379c876d kasan: modify kmalloc_large_oob_right(), add kmalloc_pagealloc_oob_right()
  aaf4fb712b83 include/linux/oom.h: remove undefined oom_kills_count()/note_oom_kill()
  bf1620068911 Linux 4.6-rc3
  072623de1f96 dm: fix dm_target_io leak if clone_bio() returns an error
  2763ee644809 m68k/gpio: remove arch specific sysfs bus device
  d7d753528904 fscrypto: use dget_parent() in fscrypt_d_revalidate()
  d9dddbf55667 mm/page_alloc: prevent merging between isolated and other pageblocks
  33b1395124c6 f2fs: use dget_parent and file_dentry in f2fs_file_open
  9567366fefdd dm cache metadata: fix READ_LOCK macros and cleanup WRITE_LOCK macros
  f419a08fb329 drivers/memstick/host/r592.c: avoid gcc-6 warning
  102c2595aa19 ocfs2: extend enough credits for freeing one truncate record while replaying truncate records
  b32e4482aadf fscrypto: don't let data integrity writebacks fail with ENOMEM
  03a8bb0e53d9 ext4/fscrypto: avoid RCU lookup in d_revalidate
  1721598985dc ocfs2: extend transaction for ocfs2_remove_rightmost_path() and ocfs2_update_edge_lengths() before to avoid inconsistency between inode and et
  a56711fa0b41 Merge tag 'arc-4.6-rc4-fixes' of git://
  e5054c9aefd2 ocfs2/dlm: move lock to the tail of grant queue while doing in-place convert
  584dca344073 ocfs2: solve a problem of crossing the boundary in updating backups
  35ddf78e4185 ocfs2: fix occurring deadlock by changing ocfs2_wq from global to local
  6c6563a48942 Merge branch 'for-linus' of git://
  be12b299a83f ocfs2/dlm: fix BUG in dlm_move_lockres_to_recovery_list
  1c74a7f812b1 Merge branch 'for-linus' of git://
  ac7cf246dfdb ocfs2/dlm: fix race between convert and recovery
  28888681b4f6 ocfs2: fix a deadlock issue in ocfs2_dio_end_io_write()
  ce170828e249 ocfs2: fix disk file size and memory file size mismatch
  58976eef9dc0 Merge tag 'keys-fixes-20160412' of git:// into for-linus
  a86a72a4a4e0 ocfs2: take ip_alloc_sem in ocfs2_dio_get_block & ocfs2_dio_end_io_write
  e63890f38ade ocfs2: fix ip_unaligned_aio deadlock with dio work queue
  f1f973ffce96 ocfs2: code clean up for direct io
  c15471f79506 ocfs2: fix sparse file & data ordering issue in direct io
  4506cfb6f8ca ocfs2: record UNWRITTEN extents when populate write desc
  2de6a3c73180 ocfs2: return the physical address in ocfs2_write_cluster
  46e625565950 ocfs2: do not change i_size in write_end for direct io
  5e1b59abef69 Merge tag 'for-linus' of git://
  65c4db8c8282 ocfs2: test target page before change it
  b46637d59f11 ocfs2: use c_new to indicate newly allocated extents
  c1ad1e3ca306 ocfs2: add ocfs2_write_type_t type to identify the caller of write
  9e13f1f9de1c ocfs2: o2hb: fix double free bug
  b8b4ead11e9d drivers/input: eliminate INPUT_COMPAT_TEST macro
  bb29902a7515 oom, oom_reaper: protect oom_reaper_list using simpler way
  e26796066fdf oom: make oom_reaper freezable
  29c696e1c6ec oom: make oom_reaper_list single linked
  855b01832573 oom, oom_reaper: disable oom_reaper for oom_kill_allocating_task
  03049269de43 mm, oom_reaper: implement OOM victims queuing
  15dbc136dff6 Merge tag 'pm+acpi-4.6-rc1-3' of git://
  bc448e897b6d mm, oom_reaper: report success/failure
  36324a990cf5 oom: clear TIF_MEMDIE after oom_reaper managed to unmap the address space
  dad44decc242 Merge tag 'please-pull-preadv2' of git://
  aac453635549 mm, oom: introduce oom reaper
  2d5ae5c2c702 [IA64] Enable preadv2 and pwritev2 syscalls for ia64
  69b27baf00fa sched: add schedule_timeout_idle()
  c155c7492c9a Merge branch 'for-linus' of git://
  1701f680407c Revert "ppdev: use new parport device model"
  b475c59b113d iio: gyro: bmg160: fix buffer read values
  3b3b3bd97788 Merge tag 'firewire-update2' of git://
  95e7ff034175 iio: gyro: bmg160: fix endianness when reading axes
  2215f31dc6f8 iio: accel: bmc150: fix endianness when reading axes
  f98c2135f8e7 Merge branch 'drm-next' of git://
  11caf57f6a4b Merge tag 'asm-generic-4.6' of git://
  9b090a98e95c iio: st_magn: always define ST_MAGN_TRIGGER_SET_STATE
  1bef2c1d4e4f iio: fix config watermark initial value
  3d66c6ba3f97 Merge tag 'pm+acpi-4.6-rc1-2' of git://
  8407ef468589 Merge tag 'rtc-4.6-2' of git://
  b74fccad751d iio: health: max30100: correct FIFO check condition
  b4ae78edf77f Merge tag 'hwmon-for-linus-v4.6-2' of git://
  f7072198f217 iio: imu: Fix inv_mpu6050 dependencies
  8a665d2f2f83 iio: adc: Fix build error of missing devm_ioremap_resource on UM
  1d02369dba2c Merge branch 'for-linus' of git://
  8f40842e4260 Merge tag 'for-linus-20160324' of git://
  e012766258ad Merge tag 'armsoc-fixes' of git://
  88875667ebbc Merge tag 'upstream-4.6-rc1' of git://
  5b523ff281b9 Merge branch 'for-linus' of git://
  8b306a2e7c8b Merge tag 'nfsd-4.6-1' of git://
  90de6800c240 Merge tag 'sh-fixes-4.6-rc1' of git://
  4046d6e81f33 Revert "x86: remove the kernel code/data/bss resources from /proc/iomem"
  34dbbcdbf633 Make file credentials available to the seqfile interfaces
  ab0fa82b2df9 pci-sysfs: use proper file capability helper function
  51d7b120418e /proc/iomem: only expose physical resource addresses to privileged users
  4c0b1c67c625 Merge branch 'for-linus' of git://
  5ee61e95b6b3 libceph: use KMEM_CACHE macro
  70c5eb84738c Merge branch 'misc' of git://
  99ec269779f1 ceph: use kmem_cache_zalloc
  03d944067616 rbd: use KMEM_CACHE macro
  3a1ef0e03eee Merge branch 'kconfig' of git://
  16382ed978cb Merge branch 'linus' of git://
  200fd27c8fa2 ceph: use lookup request to revalidate dentry
  2162b80fcadf Merge branch 'kbuild' of git://
  641235d8f823 ceph: kill ceph_get_dentry_parent_inode()
  976fb3f7b92e Merge branch 'parisc-4.6-1' of git://
  315f24088048 ceph: fix security xattr deadlock
  29dccfa5af38 ceph: don't request vxattrs from MDS
  132ca7e1de1e ceph: fix mounting same fs multiple times
  4531126753aa ceph: remove unnecessary NULL check
  dfe70581c1b7 Merge tag 'for-linus-4.6-rc4' of git://
  a3d714c33632 ceph: avoid updating directory inode's i_size accidentally
  9d854607f900 Merge tag 'arm64-upstream' of git://
  af5e5eb57477 ceph: fix race during filling readdir cache
  89f081730c49 libceph: use sizeof_footer() more
  34b759b4a22b ceph: kill ceph_empty_snapc
  a7109a2ca79c Merge branch 'mailbox-devel' of git://
  ce4355932a94 ceph: fix a wrong comparison
  8bbd47140cf0 ceph: replace CURRENT_TIME by current_fs_time()
  5b64640cf65b ceph: scattered page writeback
  2c63f49a724a libceph: add helper that duplicates last extent operation
  3f1af42ad0fa libceph: enable large, variable-sized OSD requests
  8a20a04bda46 Merge tag 'armsoc-dt2' of git://
  9e767adbd396 libceph: osdc->req_mempool should be backed by a slab pool
  ae458f5a171b libceph: make r_request msg_size calculation clearer
  6fe35ab77de9 Merge tag 'at91-fixes' of git:// into next/dt2
  7665d85b7307 libceph: move r_reply_op_{len,result} into struct ceph_osd_req_op
  c325a67c7290 ext4: ignore quota mount options if the quota feature is enabled
  4762cc3fbbd8 ext4 crypto: fix some error handling
  de2aa102ea46 libceph: rename ceph_osd_req_op::payload_len to indata_len
  3ce093d4de75 intel_idle: Add KBL support
  8f0e8746b4d5 ext4: avoid calling dquot_get_next_id() if quota is not enabled
  a587d71b0a4b ceph: remove useless BUG_ON
  c8c52850e642 Merge tag 'sound-4.6-rc4' of git://
  133e91566ced ceph: don't enable rbytes mount option by default
  413b321b32a8 ARM: dts: uniphier: add pinmux node for I2C ch4
  e84dfbe2bf17 ext4: retry block allocation for failed DIO and DAX writes
  f9e71657c2c0 intel_idle: Add SKX support
  090f41f40634 ARM: dts: uniphier: add @{address} to EEPROM node
  0a3f5af188c4 Merge tag 'pwm/for-4.6-rc4' of git://
  3e66a9ab5364 intel_idle: Clean up all registered devices on exit.
  d1eee0c0e13a ceph: encode ctime in cap message
  daf647d2dd58 ext4: add lockdep annotations for i_data_sem
  08820546e4c3 intel_idle: Propagate hot plug errors.
  1028b55bafb7 ext4: allow readdir()'s of large empty directories to be interrupted
  4f8b8c60ec50 ARM: dts: uniphier: add PH1-Pro4 Sanji board support
  b5d91704f53e libceph: behave in mon_fault() if cur_mon < 0
  ac503e4a309a nfsd: use short read as well as i_size to set eof
  b69ef2c099c3 intel_idle: Don't overreact to a cpuidle registration failure.
  bee3a37c470e libceph: reschedule tick in mon_fault()
  d2522f9731f4 ARM: dts: uniphier: add PH1-Pro4 Ace board support
  de17e793b104 btrfs: fix crash/invalid memory access on fsync when using overlayfs
  1752b50ca240 libceph: introduce and switch to reopen_session()
  2259a819a8d3 intel_idle: Setup the timer broadcast only on successful driver load.
  3d43bcfef5f0 ext4 crypto: use dget_parent() in ext4_d_revalidate()
  4755723992be ARM: dts: uniphier: enable I2C channel 2 of ProXstream2 Gentil board
  4b15da44e742 nfsd: better layoutupdate bounds-checking
  63a1281b651b Merge tag 'dm-4.6-fixes' of git://
  691b1e2ebf72 arm64: mm: allow preemption in copy_to_user_page
  10c4de10b262 nfsd: block and scsi layout drivers need to depend on CONFIG_BLOCK
  168b9090c739 libceph: monc hunt rate is 3s with backoff up to 30s
  3bdf9e4271c3 ARM: dts: uniphier: add EEPROM node for ProXstream2 Gentil board
  c0a37d487884 ext4: use file_dentry()
  c661cb1c537e arm64: consistently use p?d_set_huge
  ca42489d9ee3 intel_idle: Avoid a double free of the per-CPU data.
  119a0a3c13ef parisc: Wire up preadv2 and pwritev2 syscalls
  58d81b1294f0 libceph: monc ping rate is 10s
  61f838c7faad ARM: dts: uniphier: add reference clock nodes
  9dd78d8c9a7b ext4: use dget_parent() in ext4_file_open()
  a1f983174dd7 Merge branch 'mm-urgent-for-linus' of git://
  b318556479cc cpufreq: dt: Drop stale comment
  d5e5743797ad arm64: kaslr: use callee saved register to preserve SCTLR across C call
  e9df69ccd132 intel_idle: Fix dangling registration on error path.
  f99d4fbdae67 nfsd: add SCSI layout support
  0de798584bde parisc: Use generic extable search and sort routines
  0e04dc26cc59 libceph: pick a different monitor when reconnecting
  13ad7701f9d0 cpufreq: intel_pstate: Documenation for structures
  14bae133b871 ARM: dts: uniphier: rework UniPhier System Bus nodes
  35b90a2939a5 tile: Fix misspellings in comments.
  368248eeb14d nfsd: move some blocklayout code
  51319918bcc3 intel_idle: Fix deallocation order on the driver exit path.
  be62a1a8fd11 nfs: use file_dentry()
  c27cb97218b3 ubifs: Remove unused header
  f09f1bacfe2b arm64: Split pr_notice("Virtual kernel memory layout...") into multiple pr_cont()
  30a3915385f1 cpufreq: intel_pstate: fix inconsistency in setting policy limits
  4a3dfb3fc0fb intel_idle: Remove redundant initialization calls.
  5c5154e42905 ARM: dts: uniphier: factor out ranges property of support card
  81c39329010d nfsd: add a new config option for the block layout driver
  82dcabad750a libceph: revamp subs code, switch to SUBSCRIBE2 protocol
  8c34d8d9bec0 MAINTAINERS: update web link for tile architecture
  a78599368117 MAINTAINERS: Update UBIFS entry
  c95a23da2ea5 parisc: Panic immediately when panic_on_oops
  cc7c0cda8f8c arm64: drop unused __local_flush_icache_all()
  d101a125954e fs: add file_dentry()
  0d7ef45cdeeb ide: palm_bk3710: test clock rate to avoid division by 0
  0f9af169a1db libceph: decouple hunting and subs management
  5469c827d20a intel_idle: Fix a helper function's return value.
  58d303def2a1 mtd: ubi: Add logging functions ubi_msg, ubi_warn and ubi_err
  65e43389c394 arm64: dts: uniphier: rename PH1-LD10 to PH1-LD20
  6c31da3464b4 parisc,metag: Implement CONFIG_DEBUG_STACK_USAGE option
  9ef595d83aea sparc: Convert naked unsigned uses to unsigned int
  b02acd4e6260 ARM: dts: at91: sama5d4 Xplained: don't disable hsmci regulator
  b90b4a608ea2 arm64: fix KASLR boot-time I-cache maintenance
  b9a279f60101 MAINTAINERS: update arch/tile maintainer email domain
  c9af28fdd449 ext4 crypto: don't let data integrity writebacks fail with ENOMEM
  d9186c039765 nfs/blocklayout: add SCSI layout support
  febce40febcf intel_pstate: Avoid extra invocation of intel_pstate_sample()
  02ac956c42c6 libceph: move debugfs initialization into __ceph_open_session()
  08f80073039a sparc: Fix misspellings in comments.
  3e7f2c5104a0 ubifs: Add logging functions for ubifs_msg, ubifs_err and ubifs_warn
  40cf446b9482 nfs4.h: add SCSI layout definitions
  56649be9e67c parisc: Drop alloc_hugepages and free_hugepages syscalls
  732b84eece43 Merge tag 'for-4.6' of git://
  77ef8f517759 tile kgdb: fix bug in copy to gdb regs, and optimize memset
  968ce1b1f45a MAINTAINERS: Update mailing list and web page for hwmon subsystem
  9e92f48c34eb ext4: check if in-inode xattr is corrupted in ext4_expand_extra_isize_ea()
  a21211672c9a ACPI / processor: Request native thermal interrupt handling via _OSC
  aae31813d3b0 Merge tag 'imx-dt-4.6' of git:// into next/dt2
  ae3fc8ea08e4 ARM: dts: at91: sama5d3 Xplained: don't disable hsmci regulator
  b660950c60a7 arm64/kernel: fix incorrect EL0 check in inv_entry macro
  bb6ab52f2bef intel_pstate: Do not set utilization update hook too early
  eccf432f6542 ide: icside: remove incorrect initconst annotation
  ed6069be7204 xen/apic: Provide Xen-specific version of cpu_present_to_apicid APIC op
  f70415496d5d intel_idle: remove useless return from void function.
  806fdcce017d Merge branch 'x86-urgent-for-linus' of git://

Fix bisection: failed (bisect log)
similar bugs (2):
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-4.19 KASAN: stack-out-of-bounds Write in ax25_getname C done 4 953d 1249d 1/1 fixed on 2020/03/17 21:24
linux-4.14 KASAN: stack-out-of-bounds Write in ax25_getname C done 4 953d 1249d 1/1 fixed on 2020/03/17 21:24
Patch testing requests:
Created Duration User Patch Repo Result
2022/09/15 07:29 17m upstream OK log
2022/09/15 04:29 15m upstream OK log
2022/09/15 01:29 16m upstream OK log
2022/09/14 22:29 17m upstream OK log
2022/09/14 19:29 16m upstream OK log
2022/09/12 12:27 18m upstream OK log
2022/09/12 07:27 17m upstream OK log
2022/09/12 03:27 16m upstream OK log
2022/09/11 09:27 17m upstream OK log
2022/09/11 06:27 15m upstream OK log
2022/09/11 03:27 15m upstream OK log
2022/09/10 23:27 15m upstream OK log
2022/09/10 20:27 17m upstream OK log
2022/09/10 17:27 17m linux-next error
2022/09/10 14:27 16m linux-next error
2022/09/10 10:27 16m linux-next error
2022/09/10 07:27 17m linux-next error

Sample crash report:
BUG: KASAN: stack-out-of-bounds in memset include/linux/string.h:410 [inline]
BUG: KASAN: stack-out-of-bounds in ax25_getname+0x58/0x7a0 net/ax25/af_ax25.c:1405
Write of size 72 at addr ffffc90002337c78 by task syz-executor.0/9319

CPU: 0 PID: 9319 Comm: syz-executor.0 Not tainted 5.4.0-next-20191204-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x197/0x210 lib/dump_stack.c:118
 print_address_description.constprop.0.cold+0x5/0x30b mm/kasan/report.c:374
 __kasan_report.cold+0x1b/0x41 mm/kasan/report.c:506
 kasan_report+0x12/0x20 mm/kasan/common.c:639
 check_memory_region_inline mm/kasan/generic.c:185 [inline]
 check_memory_region+0x134/0x1a0 mm/kasan/generic.c:192
 memset+0x24/0x40 mm/kasan/common.c:108
 memset include/linux/string.h:410 [inline]
 ax25_getname+0x58/0x7a0 net/ax25/af_ax25.c:1405
 get_raw_socket drivers/vhost/net.c:1451 [inline]
 get_socket drivers/vhost/net.c:1507 [inline]
 vhost_net_set_backend drivers/vhost/net.c:1542 [inline]
 vhost_net_ioctl+0x120a/0x1960 drivers/vhost/net.c:1733
 vfs_ioctl fs/ioctl.c:47 [inline]
 file_ioctl fs/ioctl.c:545 [inline]
 do_vfs_ioctl+0x977/0x14e0 fs/ioctl.c:732
 ksys_ioctl+0xab/0xd0 fs/ioctl.c:749
 __do_sys_ioctl fs/ioctl.c:756 [inline]
 __se_sys_ioctl fs/ioctl.c:754 [inline]
 __x64_sys_ioctl+0x73/0xb0 fs/ioctl.c:754
 do_syscall_64+0xfa/0x790 arch/x86/entry/common.c:294
RIP: 0033:0x45a679
Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007fa37e85bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a679
RDX: 0000000020d7c000 RSI: 000000004008af30 RDI: 0000000000000003
RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa37e85c6d4
R13: 00000000004c62d7 R14: 00000000004dc718 R15: 00000000ffffffff

addr ffffc90002337c78 is located in stack of task syz-executor.0/9319 at offset 128 in frame:
 vhost_net_ioctl+0x0/0x1960 drivers/vhost/net.c:389

this frame has 4 objects:
 [48, 52) 'r'
 [64, 72) 'features'
 [96, 104) 'backend'
 [128, 180) 'uaddr'

Memory state around the buggy address:
 ffffc90002337b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f1
 ffffc90002337c00: f1 f1 f1 f1 f1 04 f2 00 f2 f2 f2 00 f2 f2 f2 00
>ffffc90002337c80: 00 00 00 00 00 04 f3 f3 f3 f3 f3 00 00 00 00 00
 ffffc90002337d00: 00 00 00 00 00 00 00 00 00 00 00 00 f1 f1 f1 f1
 ffffc90002337d80: 00 f2 f2 f2 00 00 00 f2 f2 f2 f2 f2 00 00 00 00

Crashes (21):
Manager Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Title
ci-upstream-linux-next-kasan-gce-root 2019/12/04 17:38 linux-next c7c32c43e831 b2088328 .config log report syz
ci-upstream-linux-next-kasan-gce-root 2019/04/24 07:38 linux-next 76c938fcaa4b 4d3d6a50 .config log report syz
ci-upstream-linux-next-kasan-gce-root 2019/02/14 09:59 linux-next b3418f8bddf4 6a46f448 .config log report syz
ci-upstream-linux-next-kasan-gce-root 2018/12/28 14:53 linux-next 6a1d293238c1 fc6ae81a .config log report syz
ci-upstream-kasan-gce-selinux-root 2020/02/18 08:46 upstream 11a48a5a18c6 1ce142dc .config log report syz C
ci-upstream-kasan-gce-root 2020/02/17 04:44 upstream 11a48a5a18c6 1f448cd6 .config log report syz C
ci-upstream-kasan-gce-selinux-root 2019/11/18 09:42 upstream cbb104f91dfe d5696d51 .config log report syz
ci-upstream-kasan-gce-root 2019/11/16 03:23 upstream eb70e26cd79d cdac920b .config log report syz
ci-upstream-kasan-gce-smack-root 2019/04/24 13:08 upstream ba25b50d582f 8e3c52b1 .config log report syz
ci-upstream-kasan-gce-root 2019/04/24 07:37 upstream 7142eaa58b49 4d3d6a50 .config log report syz
ci-upstream-kasan-gce-selinux-root 2019/04/24 07:16 upstream 7142eaa58b49 4d3d6a50 .config log report syz
ci-upstream-kasan-gce-root 2019/02/14 17:38 upstream 1f947a7a011f 76dd003f .config log report syz
ci-upstream-kasan-gce-smack-root 2019/02/14 10:02 upstream 1f947a7a011f 6a46f448 .config log report syz
ci-upstream-kasan-gce-selinux-root 2019/02/14 09:32 upstream 1f947a7a011f 6a46f448 .config log report syz
ci-upstream-kasan-gce-root 2018/12/27 01:54 upstream eed9688f8513 e747ec98 .config log report syz
ci-upstream-kasan-gce-selinux-root 2018/12/26 16:22 upstream 5694cecdb092 8a41a0ad .config log report syz
ci-upstream-kasan-gce-smack-root 2018/12/25 19:02 upstream 8fe28cb58bcb 8a41a0ad .config log report syz
ci-upstream-kasan-gce-selinux-root 2019/08/30 12:33 upstream 6525771f58cb fd37b39e .config log report
ci-upstream-kasan-gce-selinux-root 2019/04/24 06:47 upstream 7142eaa58b49 4d3d6a50 .config log report
ci-upstream-kasan-gce-selinux-root 2019/02/14 09:06 upstream 1f947a7a011f 6a46f448 .config log report
ci-upstream-kasan-gce-smack-root 2018/12/25 18:09 upstream 8fe28cb58bcb 8a41a0ad .config log report
* Struck through repros no longer work on HEAD.