kernel - merge m_pulldown() bug fix