This bug was fixed in the package linux - 5.4.0-77.86
---------------
linux (5.4.0-77.86) focal; urgency=medium
* UAF on CAN J1939 j1939_can_recv (LP: #1932209)
- SAUCE: can: j1939: delay release of j1939_priv after synchronize_rcu
* UAF on CAN BCM bcm_rx_handler (LP: #1931855)
- SAUCE: can: bcm: delay release of struct bcm_op after synchronize_rcu
linux (5.4.0-76.85) focal; urgency=medium
* focal/linux: 5.4.0-76.85 -proposed tracker (LP: #1932123)
* Upstream v5.9 introduced 'module' patches that removed exported symbols
(LP: #1932065)
- SAUCE: Revert "modules: inherit TAINT_PROPRIETARY_MODULE"
- SAUCE: Revert "modules: return licensing information from find_symbol"
- SAUCE: Revert "modules: rename the licence field in struct symsearch to
license"
- SAUCE: Revert "modules: unexport __module_address"
- SAUCE: Revert "modules: unexport __module_text_address"
- SAUCE: Revert "modules: mark each_symbol_section static"
- SAUCE: Revert "modules: mark find_symbol static"
- SAUCE: Revert "modules: mark ref_module static"
linux (5.4.0-75.84) focal; urgency=medium
* focal/linux: 5.4.0-75.84 -proposed tracker (LP: #1930032)
* Packaging resync (LP: #1786013)
- update dkms package versions
* CVE-2021-33200
- bpf: Wrap aux data inside bpf_sanitize_info container
- bpf: Fix mask direction swap upon off reg sign change
- bpf: No need to simulate speculative domain for immediates
* Realtek USB hubs in Dell WD19SC/DC/TB fail to work after exiting s2idle
(LP: #1928242)
- USB: Verify the port status when timeout happens during port suspend
* CVE-2020-26145
- ath10k: drop fragments with multicast DA for SDIO
- ath10k: add CCMP PN replay protection for fragmented frames for PCIe
- ath10k: drop fragments with multicast DA for PCIe
* CVE-2020-26141
- ath10k: Fix TKIP Michael MIC verification for PCIe
* CVE-2020-24588
- mac80211: properly handle A-MSDUs that start with an RFC 1042 header
- cfg80211: mitigate A-MSDU aggregation attacks
- mac80211: drop A-MSDUs on old ciphers
- ath10k: drop MPDU which has discard flag set by firmware for SDIO
* CVE-2020-26139
- mac80211: do not accept/forward invalid EAPOL frames
* CVE-2020-24586 // CVE-2020-24587 // CVE-2020-24587 for such cases.
- mac80211: extend protection against mixed key and fragment cache attacks
* CVE-2020-24586 // CVE-2020-24587
- mac80211: prevent mixed key and fragment cache attacks
- mac80211: add fragment cache to sta_info
- mac80211: check defrag PN against current frame
- mac80211: prevent attacks on TKIP/WEP as well
* CVE-2020-26147
- mac80211: assure all fragments are encrypted
* raid10: Block discard is very slow, causing severe delays for mkfs and
fstrim operations (LP: #1896578)
- md: add md_submit_discard_bio() for submitting discard bio
- md/raid10: extend r10bio devs to raid disks
- md/raid10: pull the code that wait for blocked dev into one function
- md/raid10: improve raid10 discard request
- md/raid10: improve discard request for far layout
- dm raid: remove unnecessary discard limits for raid0 and raid10
* [SRU] mpt3sas: only one vSES is handy even IOC has multi vSES (LP: #1926517)
- scsi: mpt3sas: Only one vSES is present even when IOC has multi vSES
* kvm: properly tear down PV features on hibernate (LP: #1920944)
- x86/kvm: Fix pr_info() for async PF setup/teardown
- x86/kvm: Teardown PV features on boot CPU as well
- x86/kvm: Disable kvmclock on all CPUs on shutdown
- x86/kvm: Disable all PV features on crash
- x86/kvm: Unify kvm_pv_guest_cpu_reboot() with kvm_guest_cpu_offline()
* Focal update: v5.4.119 upstream stable release (LP: #1929615)
- Bluetooth: verify AMP hci_chan before amp_destroy
- hsr: use netdev_err() instead of WARN_ONCE()
- bluetooth: eliminate the potential race condition when removing the HCI
controller
- net/nfc: fix use-after-free llcp_sock_bind/connect
- Revert "USB: cdc-acm: fix rounding error in TIOCSSERIAL"
- tty: moxa: fix TIOCSSERIAL jiffies conversions
- tty: amiserial: fix TIOCSSERIAL permission check
- USB: serial: usb_wwan: fix TIOCSSERIAL jiffies conversions
- staging: greybus: uart: fix TIOCSSERIAL jiffies conversions
- USB: serial: ti_usb_3410_5052: fix TIOCSSERIAL permission check
- staging: fwserial: fix TIOCSSERIAL jiffies conversions
- tty: moxa: fix TIOCSSERIAL permission check
- staging: fwserial: fix TIOCSSERIAL permission check
- usb: typec: tcpm: Address incorrect values of tcpm psy for fixed supply
- usb: typec: tcpm: Address incorrect values of tcpm psy for pps supply
- usb: typec: tcpm: update power supply once partner accepts
- usb: xhci-mtk: remove or operator for setting schedule parameters
- usb: xhci-mtk: improve bandwidth scheduling with TT
- ASoC: samsung: tm2_wm5110: check of of_parse return value
- ASoC: Intel: kbl_da7219_max98927: Fix kabylake_ssp_fixup function
- MIPS: pci-mt7620: fix PLL lock check
- MIPS: pci-rt2880: fix slot 0 configuration
- FDDI: defxx: Bail out gracefully with unassigned PCI resource for CSR
- PCI: Allow VPD access for QLogic ISP2722
- iio:accel:adis16201: Fix wrong axis assignment that prevents loading
- misc: lis3lv02d: Fix false-positive WARN on various HP models
- misc: vmw_vmci: explicitly initialize vmci_notify_bm_set_msg struct
- misc: vmw_vmci: explicitly initialize vmci_datagram payload
- md/bitmap: wait for external bitmap writes to complete during tear down
- md-cluster: fix use-after-free issue when removing rdev
- md: split mddev_find
- md: factor out a mddev_find_locked helper from mddev_find
- md: md_open returns -EBUSY when entering racing area
- md: Fix missing unused status line of /proc/mdstat
- ipw2x00: potential buffer overflow in libipw_wx_set_encodeext()
- cfg80211: scan: drop entry from hidden_list on overflow
- rtw88: Fix array overrun in rtw_get_tx_power_params()
- drm/panfrost: Clear MMU irqs before handling the fault
- drm/panfrost: Don't try to map pages that are already mapped
- drm/radeon: fix copy of uninitialized variable back to userspace
- drm/amd/display: Reject non-zero src_y and src_x for video planes
- ALSA: hda/realtek: Re-order ALC882 Acer quirk table entries
- ALSA: hda/realtek: Re-order ALC882 Sony quirk table entries
- ALSA: hda/realtek: Re-order ALC882 Clevo quirk table entries
- ALSA: hda/realtek: Re-order ALC269 HP quirk table entries
- ALSA: hda/realtek: Re-order ALC269 Acer quirk table entries
- ALSA: hda/realtek: Re-order ALC269 Dell quirk table entries
- ALSA: hda/realtek: Re-order ALC269 ASUS quirk table entries
- ALSA: hda/realtek: Re-order ALC269 Sony quirk table entries
- ALSA: hda/realtek: Re-order ALC269 Lenovo quirk table entries
- ALSA: hda/realtek: Re-order remaining ALC269 quirk table entries
- ALSA: hda/realtek: Re-order ALC662 quirk table entries
- ALSA: hda/realtek: Remove redundant entry for ALC861 Haier/Uniwill devices
- ALSA: hda/realtek: ALC285 Thinkpad jack pin quirk is unreachable
- KVM: s390: split kvm_s390_logical_to_effective
- KVM: s390: fix guarded storage control register handling
- s390: fix detection of vector enhancements facility 1 vs. vector packed
decimal facility
- KVM: s390: split kvm_s390_real_to_abs
- KVM: nVMX: Truncate bits 63:32 of VMCS field on nested check in !64-bit
- KVM: Stop looking for coalesced MMIO zones if the bus is destroyed
- Revert "i3c master: fix missing destroy_workqueue() on error in
i3c_master_register"
- ovl: fix missing revert_creds() on error path
- usb: gadget: pch_udc: Revert d3cb25a12138 completely
- memory: gpmc: fix out of bounds read and dereference on gpmc_cs[]
- ARM: dts: exynos: correct fuel gauge interrupt trigger level on Midas
family
- ARM: dts: exynos: correct MUIC interrupt trigger level on Midas family
- ARM: dts: exynos: correct PMIC interrupt trigger level on Midas family
- ARM: dts: exynos: correct PMIC interrupt trigger level on Odroid X/U3
family
- ARM: dts: exynos: correct PMIC interrupt trigger level on SMDK5250
- ARM: dts: exynos: correct PMIC interrupt trigger level on Snow
- serial: stm32: fix incorrect characters on console
- serial: stm32: fix tx_empty condition
- usb: typec: tcpci: Check ROLE_CONTROL while interpreting CC_STATUS
- regmap: set debugfs_name to NULL after it is freed
- mtd: rawnand: fsmc: Fix error code in fsmc_nand_probe()
- mtd: rawnand: brcmnand: fix OOB R/W with Hamming ECC
- mtd: Handle possible -EPROBE_DEFER from parse_mtd_partitions()
- mtd: rawnand: qcom: Return actual error code instead of -ENODEV
- arm64: dts: qcom: sm8150: fix number of pins in 'gpio-ranges'
- spi: stm32: drop devres version of spi_register_master
- arm64: dts: renesas: r8a77980: Fix vin4-7 endpoint binding
- x86/microcode: Check for offline CPUs before requesting new microcode
- usb: gadget: pch_udc: Replace cpu_to_le32() by lower_32_bits()
- usb: gadget: pch_udc: Check if driver is present before calling ->setup()
- usb: gadget: pch_udc: Check for DMA mapping error
- crypto: qat - don't release uninitialized resources
- crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init
- fotg210-udc: Fix DMA on EP0 for length > max packet size
- fotg210-udc: Fix EP0 IN requests bigger than two packets
- fotg210-udc: Remove a dubious condition leading to fotg210_done
- fotg210-udc: Mask GRP2 interrupts we don't handle
- fotg210-udc: Don't DMA more than the buffer can take
- fotg210-udc: Complete OUT requests on short packets
- mtd: require write permissions for locking and badblock ioctls
- bus: qcom: Put child node before return
- soundwire: bus: Fix device found flag correctly
- phy: marvell: ARMADA375_USBCLUSTER_PHY should not default to y,
unconditionally
- crypto: qat - fix error path in adf_isr_resource_alloc()
- usb: gadget: aspeed: fix dma map failure
- USB: gadget: udc: fix wrong pointer passed to IS_ERR() and PTR_ERR()
- memory: pl353: fix mask of ECC page_size config register
- soundwire: stream: fix memory leak in stream config error path
- m68k: mvme147,mvme16x: Don't wipe PCC timer config bits
- mtd: rawnand: gpmi: Fix a double free in gpmi_nand_init
- irqchip/gic-v3: Fix OF_BAD_ADDR error handling
- staging: rtl8192u: Fix potential infinite loop
- staging: greybus: uart: fix unprivileged TIOCCSERIAL
- PM / devfreq: Use more accurate returned new_freq as resume_freq
- spi: Fix use-after-free with devm_spi_alloc_*
- soc: qcom: mdt_loader: Validate that p_filesz < p_memsz
- soc: qcom: mdt_loader: Detect truncated read of segments
- ACPI: CPPC: Replace cppc_attr with kobj_attribute
- crypto: qat - Fix a double free in adf_create_ring
- cpufreq: armada-37xx: Fix setting TBG parent for load levels
- clk: mvebu: armada-37xx-periph: remove .set_parent method for CPU PM clock
- cpufreq: armada-37xx: Fix the AVS value for load L1
- clk: mvebu: armada-37xx-periph: Fix switching CPU freq from 250 Mhz to 1
GHz
- clk: mvebu: armada-37xx-periph: Fix workaround for switching from L1 to L0
- cpufreq: armada-37xx: Fix driver cleanup when registration failed
- cpufreq: armada-37xx: Fix determining base CPU frequency
- spi: fsl-lpspi: Fix PM reference leak in lpspi_prepare_xfer_hardware()
- usb: gadget: r8a66597: Add missing null check on return from
platform_get_resource
- USB: cdc-acm: fix unprivileged TIOCCSERIAL
- USB: cdc-acm: fix TIOCGSERIAL implementation
- tty: fix return value for unsupported ioctls
- serial: core: return early on unsupported ioctls
- firmware: qcom-scm: Fix QCOM_SCM configuration
- node: fix device cleanups in error handling code
- usbip: vudc: fix missing unlock on error in usbip_sockfd_store()
- platform/x86: pmc_atom: Match all Beckhoff Automation baytrail boards with
critclk_systems DMI table
- x86/platform/uv: Fix !KEXEC build failure
- usb: dwc2: Fix host mode hibernation exit with remote wakeup flow.
- usb: dwc2: Fix hibernation between host and device modes.
- ttyprintk: Add TTY hangup callback.
- xen-blkback: fix compatibility bug with single page rings
- soc: aspeed: fix a ternary sign expansion bug
- media: vivid: fix assignment of dev->fbuf_out_flags
- media: omap4iss: return error code when omap4iss_get() failed
- media: aspeed: fix clock handling logic
- media: platform: sunxi: sun6i-csi: fix error return code of
sun6i_video_start_streaming()
- media: m88rs6000t: avoid potential out-of-bounds reads on arrays
- drm/amdkfd: fix build error with AMD_IOMMU_V2=m
- x86/kprobes: Fix to check non boostable prefixes correctly
- pata_arasan_cf: fix IRQ check
- pata_ipx4xx_cf: fix IRQ check
- sata_mv: add IRQ checks
- ata: libahci_platform: fix IRQ check
- nvme-tcp: block BH in sk state_change sk callback
- nvmet-tcp: fix incorrect locking in state_change sk callback
- nvme: retrigger ANA log update if group descriptor isn't found
- media: v4l2-ctrls.c: fix race condition in hdl->requests list
- vfio/mdev: Do not allow a mdev_type to have a NULL parent pointer
- clk: zynqmp: move zynqmp_pll_set_mode out of round_rate callback
- clk: qcom: a53-pll: Add missing MODULE_DEVICE_TABLE
- clk: uniphier: Fix potential infinite loop
- scsi: hisi_sas: Fix IRQ checks
- scsi: jazz_esp: Add IRQ check
- scsi: sun3x_esp: Add IRQ check
- scsi: sni_53c710: Add IRQ check
- scsi: ibmvfc: Fix invalid state machine BUG_ON()
- mfd: stm32-timers: Avoid clearing auto reload register
- nvme-pci: don't simple map sgl when sgls are disabled
- HSI: core: fix resource leaks in hsi_add_client_from_dt()
- x86/events/amd/iommu: Fix sysfs type mismatch
- sched/debug: Fix cgroup_path[] serialization
- drivers/block/null_blk/main: Fix a double free in null_init.
- HID: plantronics: Workaround for double volume key presses
- perf symbols: Fix dso__fprintf_symbols_by_name() to return the number of
printed chars
- net: lapbether: Prevent racing when checking whether the netif is running
- powerpc/fadump: Mark fadump_calculate_reserve_size as __init
- powerpc/prom: Mark identical_pvr_fixup as __init
- inet: use bigger hash table for IP ID generation
- powerpc: Fix HAVE_HARDLOCKUP_DETECTOR_ARCH build configuration
- ALSA: core: remove redundant spin_lock pair in snd_card_disconnect
- bug: Remove redundant condition check in report_bug
- nfc: pn533: prevent potential memory corruption
- net: hns3: Limiting the scope of vector_ring_chain variable
- mips: bmips: fix syscon-reboot nodes
- ALSA: usb-audio: Add error checks for usb_driver_claim_interface() calls
- ASoC: simple-card: fix possible uninitialized single_cpu local variable
- liquidio: Fix unintented sign extension of a left shift of a u16
- powerpc/64s: Fix pte update for kernel memory on radix
- powerpc/perf: Fix PMU constraint check for EBB events
- powerpc: iommu: fix build when neither PCI or IBMVIO is set
- mac80211: bail out if cipher schemes are invalid
- mt7601u: fix always true expression
- KVM: PPC: Book3S HV P9: Restore host CTRL SPR after guest exit
- RDMA/qedr: Fix error return code in qedr_iw_connect()
- IB/hfi1: Fix error return code in parse_platform_config()
- cxgb4: Fix unintentional sign extension issues
- net: thunderx: Fix unintentional sign extension issue
- RDMA/srpt: Fix error return code in srpt_cm_req_recv()
- i2c: img-scb: fix reference leak when pm_runtime_get_sync fails
- i2c: imx-lpi2c: fix reference leak when pm_runtime_get_sync fails
- i2c: omap: fix reference leak when pm_runtime_get_sync fails
- i2c: sprd: fix reference leak when pm_runtime_get_sync fails
- i2c: cadence: add IRQ check
- i2c: emev2: add IRQ check
- i2c: jz4780: add IRQ check
- i2c: sh7760: add IRQ check
- powerpc/xive: Fix xmon command "dxi"
- ASoC: ak5558: correct reset polarity
- drm/i915/gvt: Fix error code in intel_gvt_init_device()
- perf beauty: Fix fsconfig generator
- MIPS: pci-legacy: stop using of_pci_range_to_resource
- powerpc/pseries: extract host bridge from pci_bus prior to bus removal
- rtlwifi: 8821ae: upgrade PHY and RF parameters
- i2c: sh7760: fix IRQ error path
- mwl8k: Fix a double Free in mwl8k_probe_hw
- vsock/vmci: log once the failed queue pair allocation
- gro: fix napi_gro_frags() Fast GRO breakage due to IP alignment check
- RDMA/cxgb4: add missing qpid increment
- RDMA/i40iw: Fix error unwinding when i40iw_hmc_sd_one fails
- ALSA: usb: midi: don't return -ENOMEM when usb_urb_ep_type_check fails
- net: davinci_emac: Fix incorrect masking of tx and rx error channel
- net: renesas: ravb: Fix a stuck issue when a lot of frames are received
- net: phy: intel-xway: enable integrated led functions
- ath9k: Fix error check in ath9k_hw_read_revisions() for PCI devices
- ath10k: Fix ath10k_wmi_tlv_op_pull_peer_stats_info() unlock without lock
- powerpc/52xx: Fix an invalid ASM expression ('addi' used instead of 'add')
- bnxt_en: fix ternary sign extension bug in bnxt_show_temp()
- ARM: dts: uniphier: Change phy-mode to RGMII-ID to enable delay pins for
RTL8211E
- arm64: dts: uniphier: Change phy-mode to RGMII-ID to enable delay pins for
RTL8211E
- net: geneve: modify IP header check in geneve6_xmit_skb and
geneve_xmit_skb
- selftests: net: mirror_gre_vlan_bridge_1q: Make an FDB entry static
- bnxt_en: Fix RX consumer index logic in the error path.
- net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send
- RDMA/siw: Fix a use after free in siw_alloc_mr
- RDMA/bnxt_re: Fix a double free in bnxt_qplib_alloc_res
- net: bridge: mcast: fix broken length + header check for MRDv6 Adv.
- net:nfc:digital: Fix a double free in digital_tg_recv_dep_req
- kfifo: fix ternary sign extension bugs
- mm/sparse: add the missing sparse_buffer_fini() in error branch
- mm/memory-failure: unnecessary amount of unmapping
- net: Only allow init netns to set default tcp cong to a restricted algo
- smp: Fix smp_call_function_single_async prototype
- Revert "net/sctp: fix race condition in sctp_destroy_sock"
- sctp: delay auto_asconf init until binding the first addr
- Revert "of/fdt: Make sure no-map does not remove already reserved regions"
- Revert "fdt: Properly handle "no-map" field in the memory region"
- Linux 5.4.119
* seccomp_bpf:syscall_faked from kselftests fail on s390x (LP: #1928522)
- selftests/seccomp: s390 shares the syscall and return value register
* Can't detect intel wifi 6235 (LP: #1920180)
- SAUCE: iwlwifi: add new pci id for 6235
* Mark kprobe_args_user.tc in kselftest/ftrace as unsupported (LP: #1929527)
- selftests/ftrace: Return unsupported for the unconfigured features
* pmtu.sh from net in ubuntu_kernel_selftests failed with no error message
(LP: #1887661)
- selftests: pmtu.sh: use $ksft_skip for skipped return code
* alsa/sof: make sof driver work in the case of without i915 (focal kernel)
(LP: #1927672)
- SAUCE: ASoC: SOF: Intel: hda: move the probe_bus ahead of creation of mach
device
* Fix kdump failures (LP: #1927518)
- video: hyperv_fb: Add ratelimit on error message
- Drivers: hv: vmbus: Increase wait time for VMbus unload
- Drivers: hv: vmbus: Initialize unload_event statically
* Ubuntu 20.04 - 'Support flow counters offset for bulk counters'
(LP: #1922494)
- IB/mlx5: Support flow counters offset for bulk counters
* Focal update: v5.4.118 upstream stable release (LP: #1928825)
- s390/disassembler: increase ebpf disasm buffer size
- ACPI: custom_method: fix potential use-after-free issue
- ACPI: custom_method: fix a possible memory leak
- ftrace: Handle commands when closing set_ftrace_filter file
- ARM: 9056/1: decompressor: fix BSS size calculation for LLVM ld.lld
- arm64: dts: marvell: armada-37xx: add syscon compatible to NB clk node
- arm64: dts: mt8173: fix property typo of 'phys' in dsi node
- ecryptfs: fix kernel panic with null dev_name
- mtd: spinand: core: add missing MODULE_DEVICE_TABLE()
- mtd: rawnand: atmel: Update ecc_stats.corrected counter
- erofs: add unsupported inode i_format check
- spi: spi-ti-qspi: Free DMA resources
- scsi: qla2xxx: Fix crash in qla2xxx_mqueuecommand()
- scsi: mpt3sas: Block PCI config access from userspace during reset
- mmc: uniphier-sd: Fix an error handling path in uniphier_sd_probe()
- mmc: uniphier-sd: Fix a resource leak in the remove function
- mmc: sdhci: Check for reset prior to DMA address unmap
- mmc: sdhci-pci: Fix initialization of some SD cards for Intel BYT-based
controllers
- mmc: block: Update ext_csd.cache_ctrl if it was written
- mmc: block: Issue a cache flush only when it's enabled
- mmc: core: Do a power cycle when the CMD11 fails
- mmc: core: Set read only for SD cards with permanent write protect bit
- mmc: core: Fix hanging on I/O during system suspend for removable cards
- modules: mark ref_module static
- modules: mark find_symbol static
- modules: mark each_symbol_section static
- modules: unexport __module_text_address
- modules: unexport __module_address
- modules: rename the licence field in struct symsearch to license
- modules: return licensing information from find_symbol
- modules: inherit TAINT_PROPRIETARY_MODULE
- irqchip/gic-v3: Do not enable irqs when handling spurious interrups
- cifs: Return correct error code from smb2_get_enc_key
- btrfs: fix metadata extent leak after failure to create subvolume
- intel_th: pci: Add Rocket Lake CPU support
- posix-timers: Preserve return value in clock_adjtime32()
- fbdev: zero-fill colormap in fbcmap.c
- bus: ti-sysc: Probe for l4_wkup and l4_cfg interconnect devices first
- staging: wimax/i2400m: fix byte-order issue
- spi: ath79: always call chipselect function
- spi: ath79: remove spi-master setup and cleanup assignment
- crypto: api - check for ERR pointers in crypto_destroy_tfm()
- crypto: qat - fix unmap invalid dma address
- usb: gadget: uvc: add bInterval checking for HS mode
- usb: webcam: Invalid size of Processing Unit Descriptor
- genirq/matrix: Prevent allocation counter corruption
- usb: gadget: f_uac2: validate input parameters
- usb: gadget: f_uac1: validate input parameters
- usb: dwc3: gadget: Ignore EP queue requests during bus reset
- usb: xhci: Fix port minor revision
- PCI: PM: Do not read power state in pci_enable_device_flags()
- x86/build: Propagate $(CLANG_FLAGS) to $(REALMODE_FLAGS)
- tee: optee: do not check memref size on return from Secure World
- perf/arm_pmu_platform: Fix error handling
- usb: xhci-mtk: support quirk to disable usb2 lpm
- xhci: check control context is valid before dereferencing it.
- xhci: fix potential array out of bounds with several interrupters
- spi: dln2: Fix reference leak to master
- spi: omap-100k: Fix reference leak to master
- spi: qup: fix PM reference leak in spi_qup_remove()
- usb: musb: fix PM reference leak in musb_irq_work()
- usb: core: hub: Fix PM reference leak in usb_port_resume()
- tty: n_gsm: check error while registering tty devices
- intel_th: Consistency and off-by-one fix
- phy: phy-twl4030-usb: Fix possible use-after-free in twl4030_usb_remove()
- crypto: stm32/hash - Fix PM reference leak on stm32-hash.c
- crypto: stm32/cryp - Fix PM reference leak on stm32-cryp.c
- crypto: omap-aes - Fix PM reference leak on omap-aes.c
- platform/x86: intel_pmc_core: Don't use global pmcdev in quirks
- btrfs: convert logic BUG_ON()'s in replace_path to ASSERT()'s
- drm: Added orientation quirk for OneGX1 Pro
- drm/qxl: release shadow on shutdown
- drm/amd/display: Check for DSC support instead of ASIC revision
- drm/amd/display: Don't optimize bandwidth before disabling planes
- scsi: lpfc: Fix incorrect dbde assignment when building target abts wqe
- scsi: lpfc: Fix pt2pt connection does not recover after LOGO
- scsi: target: pscsi: Fix warning in pscsi_complete_cmd()
- media: ite-cir: check for receive overflow
- media: drivers: media: pci: sta2x11: fix Kconfig dependency on GPIOLIB
- media: imx: capture: Return -EPIPE from __capture_legacy_try_fmt()
- power: supply: bq27xxx: fix power_avg for newer ICs
- extcon: arizona: Fix some issues when HPDET IRQ fires after the jack has
been unplugged
- extcon: arizona: Fix various races on driver unbind
- media: media/saa7164: fix saa7164_encoder_register() memory leak bugs
- media: gspca/sq905.c: fix uninitialized variable
- power: supply: Use IRQF_ONESHOT
- drm/amdgpu: mask the xgmi number of hops reported from psp to kfd
- drm/amdkfd: Fix UBSAN shift-out-of-bounds warning
- drm/amdgpu : Fix asic reset regression issue introduce by 8f211fe8ac7c4f
- drm/amd/display: Fix UBSAN warning for not a valid value for type '_Bool'
- drm/amd/display: fix dml prefetch validation
- scsi: qla2xxx: Always check the return value of qla24xx_get_isp_stats()
- drm/vkms: fix misuse of WARN_ON
- scsi: qla2xxx: Fix use after free in bsg
- mmc: sdhci-pci: Add PCI IDs for Intel LKF
- ata: ahci: Disable SXS for Hisilicon Kunpeng920
- scsi: smartpqi: Correct request leakage during reset operations
- scsi: smartpqi: Add new PCI IDs
- scsi: scsi_dh_alua: Remove check for ASC 24h in alua_rtpg()
- media: em28xx: fix memory leak
- media: vivid: update EDID
- clk: socfpga: arria10: Fix memory leak of socfpga_clk on error return
- power: supply: generic-adc-battery: fix possible use-after-free in
gab_remove()
- power: supply: s3c_adc_battery: fix possible use-after-free in
s3c_adc_bat_remove()
- media: tc358743: fix possible use-after-free in tc358743_remove()
- media: adv7604: fix possible use-after-free in adv76xx_remove()
- media: i2c: adv7511-v4l2: fix possible use-after-free in adv7511_remove()
- media: i2c: tda1997: Fix possible use-after-free in tda1997x_remove()
- media: i2c: adv7842: fix possible use-after-free in adv7842_remove()
- media: platform: sti: Fix runtime PM imbalance in regs_show
- media: dvb-usb: fix memory leak in dvb_usb_adapter_init
- media: gscpa/stv06xx: fix memory leak
- sched/fair: Ignore percpu threads for imbalance pulls
- drm/msm/mdp5: Configure PP_SYNC_HEIGHT to double the vtotal
- drm/msm/mdp5: Do not multiply vclk line count by 100
- drm/amdkfd: Fix cat debugfs hang_hws file causes system crash bug
- amdgpu: avoid incorrect %hu format string
- drm/amdgpu: fix NULL pointer dereference
- scsi: lpfc: Fix crash when a REG_RPI mailbox fails triggering a LOGO
response
- scsi: lpfc: Fix error handling for mailboxes completed in MBX_POLL mode
- scsi: lpfc: Remove unsupported mbox PORT_CAPABILITIES logic
- mfd: arizona: Fix rumtime PM imbalance on error
- scsi: libfc: Fix a format specifier
- s390/archrandom: add parameter check for s390_arch_random_generate
- ALSA: emu8000: Fix a use after free in snd_emu8000_create_mixer
- ALSA: hda/conexant: Re-order CX5066 quirk table entries
- ALSA: sb: Fix two use after free in snd_sb_qsound_build
- ALSA: usb-audio: Explicitly set up the clock selector
- ALSA: usb-audio: More constifications
- ALSA: usb-audio: Add dB range mapping for Sennheiser Communications
Headset
PC 8
- ALSA: hda/realtek: GA503 use same quirks as GA401
- ALSA: hda/realtek: fix mic boost on Intel NUC 8
- ALSA: hda/realtek: fix static noise on ALC285 Lenovo laptops
- ALSA: hda/realtek: Add quirk for Intel Clevo PCx0Dx
- btrfs: fix race when picking most recent mod log operation for an old root
- arm64/vdso: Discard .note.gnu.property sections in vDSO
- Makefile: Move -Wno-unused-but-set-variable out of GCC only block
- virtiofs: fix memory leak in virtio_fs_probe()
- ubifs: Only check replay with inode type to judge if inode linked
- f2fs: fix to avoid out-of-bounds memory access
- mlxsw: spectrum_mr: Update egress RIF list before route's action
- openvswitch: fix stack OOB read while fragmenting IPv4 packets
- ACPI: GTDT: Don't corrupt interrupt mappings on watchdow probe failure
- NFS: Don't discard pNFS layout segments that are marked for return
- NFSv4: Don't discard segments marked for return in _pnfs_return_layout()
- Input: ili210x - add missing negation for touch indication on ili210x
- jffs2: Fix kasan slab-out-of-bounds problem
- powerpc/eeh: Fix EEH handling for hugepages in ioremap space.
- powerpc: fix EDEADLOCK redefinition error in uapi/asm/errno.h
- intel_th: pci: Add Alder Lake-M support
- tpm: efi: Use local variable for calculating final log size
- tpm: vtpm_proxy: Avoid reading host log when using a virtual device
- crypto: rng - fix crypto_rng_reset() refcounting when !CRYPTO_STATS
- md/raid1: properly indicate failure when ending a failed write request
- dm raid: fix inconclusive reshape layout on fast raid4/5/6 table reload
sequences
- fuse: fix write deadlock
- security: commoncap: fix -Wstringop-overread warning
- Fix misc new gcc warnings
- jffs2: check the validity of dstlen in jffs2_zlib_compress()
- Revert 337f13046ff0 ("futex: Allow FUTEX_CLOCK_REALTIME with FUTEX_WAIT
op")
- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is supported
- kbuild: update config_data.gz only when the content of .config is changed
- ext4: fix check to prevent false positive report of incorrect used inodes
- ext4: do not set SB_ACTIVE in ext4_orphan_cleanup()
- ext4: fix error code in ext4_commit_super
- media: dvbdev: Fix memory leak in dvb_media_device_free()
- media: dvb-usb: Fix use-after-free access
- media: dvb-usb: Fix memory leak at error in dvb_usb_device_init()
- media: staging/intel-ipu3: Fix memory leak in imu_fmt
- media: staging/intel-ipu3: Fix set_fmt error handling
- media: staging/intel-ipu3: Fix race condition during set_fmt
- usb: gadget: dummy_hcd: fix gpf in gadget_setup
- usb: gadget: Fix double free of device descriptor pointers
- usb: gadget/function/f_fs string table fix for multiple languages
- usb: dwc3: gadget: Fix START_TRANSFER link state check
- usb: dwc2: Fix session request interrupt handler
- tty: fix memory leak in vc_deallocate
- rsi: Use resume_noirq for SDIO
- tracing: Map all PIDs to command lines
- tracing: Restructure trace_clock_global() to never block
- dm persistent data: packed struct should have an aligned() attribute too
- dm space map common: fix division bug in sm_ll_find_free_block()
- dm integrity: fix missing goto in bitmap_flush_interval error handling
- dm rq: fix double free of blk_mq_tag_set in dev remove after table load
fails
- Linux 5.4.118
* Focal update: v5.4.117 upstream stable release (LP: #1928823)
- mips: Do not include hi and lo in clobber list for R6
- ACPI: tables: x86: Reserve memory occupied by ACPI tables
- ACPI: x86: Call acpi_boot_table_init() after acpi_table_upgrade()
- net: usb: ax88179_178a: initialize local variables before use
- igb: Enable RSS for Intel I211 Ethernet Controller
- iwlwifi: Fix softirq/hardirq disabling in iwl_pcie_enqueue_hcmd()
- bpf: Fix masking negation logic upon negative dst register
- bpf: Fix leakage of uninitialized bpf stack under speculation
- avoid __memcat_p link failure
- iwlwifi: Fix softirq/hardirq disabling in iwl_pcie_gen2_enqueue_hcmd()
- perf data: Fix error return code in perf_data__create_dir()
- perf ftrace: Fix access to pid in array when setting a pid filter
- ALSA: usb-audio: Add MIDI quirk for Vox ToneLab EX
- USB: Add reset-resume quirk for WD19's Realtek Hub
- platform/x86: thinkpad_acpi: Correct thermal sensor allocation
- scsi: ufs: Unlock on a couple error paths
- ovl: allow upperdir inside lowerdir
- perf/core: Fix unconditional security_locked_down() call
- vfio: Depend on MMU
- Linux 5.4.117
* r8152 tx status -71 (LP: #1922651) // Focal update: v5.4.117 upstream stable
release (LP: #1928823)
- USB: Add LPM quirk for Lenovo ThinkPad USB-C Dock Gen2 Ethernet
* Focal update: v5.4.116 upstream stable release (LP: #1928821)
- bpf: Move off_reg into sanitize_ptr_alu
- bpf: Ensure off_reg has no mixed signed bounds for all types
- bpf: Rework ptr_limit into alu_limit and add common error path
- bpf: Improve verifier error messages for users
- bpf: Refactor and streamline bounds check into helper
- bpf: Move sanitize_val_alu out of op switch
- bpf: Tighten speculative pointer arithmetic mask
- bpf: Update selftests to reflect new error states
- Linux 5.4.116
* Focal update: v5.4.115 upstream stable release (LP: #1927997)
- gpio: omap: Save and restore sysconfig
- pinctrl: lewisburg: Update number of pins in community
- arm64: dts: allwinner: Revert SD card CD GPIO for Pine64-LTS
- perf/x86/intel/uncore: Remove uncore extra PCI dev HSWEP_PCI_PCU_3
- perf/x86/kvm: Fix Broadwell Xeon stepping in isolation_ucodes[]
- perf auxtrace: Fix potential NULL pointer dereference
- HID: google: add don USB id
- HID: alps: fix error return code in alps_input_configured()
- HID: wacom: Assign boolean values to a bool variable
- ARM: dts: Fix swapped mmc order for omap3
- net: geneve: check skb is large enough for IPv4/IPv6 header
- s390/entry: save the caller of psw_idle
- xen-netback: Check for hotplug-status existence before watching
- cavium/liquidio: Fix duplicate argument
- csky: change a Kconfig symbol name to fix e1000 build error
- ia64: fix discontig.c section mismatches
- ia64: tools: remove duplicate definition of ia64_mf() on ia64
- x86/crash: Fix crash_setup_memmap_entries() out-of-bounds access
- net: hso: fix NULL-deref on disconnect regression
- USB: CDC-ACM: fix poison/unpoison imbalance
- Linux 5.4.115
-- Thadeu Lima de Souza Cascardo <casca...@canonical.com> Wed, 16 Jun
2021 22:05:50 -0300
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1896578
Title:
raid10: Block discard is very slow, causing severe delays for mkfs and
fstrim operations
Status in linux package in Ubuntu:
Fix Released
Status in linux source package in Bionic:
Fix Released
Status in linux source package in Focal:
Fix Released
Status in linux source package in Groovy:
Fix Released
Status in linux source package in Hirsute:
Fix Released
Bug description:
BugLink: https://bugs.launchpad.net/bugs/1896578
[Impact]
Block discard is very slow on Raid10, which causes common use cases
which invoke block discard, such as mkfs and fstrim operations, to
take a very long time.
For example, on a i3.8xlarge instance on AWS, which has 4x 1.9TB NVMe
devices which support block discard, a mkfs.xfs operation on Raid 10
takes between 8 to 11 minutes, where the same mkfs.xfs operation on
Raid 0, takes 4 seconds.
The bigger the devices, the longer it takes.
The cause is that Raid10 currently uses a 512k chunk size, and uses
this for the discard_max_bytes value. If we need to discard 1.9TB, the
kernel splits the request into millions of 512k bio requests, even if
the underlying device supports larger requests.
For example, the NVMe devices on i3.8xlarge support 2.2TB of discard
at once:
$ cat /sys/block/nvme0n1/queue/discard_max_bytes
2199023255040
$ cat /sys/block/nvme0n1/queue/discard_max_hw_bytes
2199023255040
Where the Raid10 md device only supports 512k:
$ cat /sys/block/md0/queue/discard_max_bytes
524288
$ cat /sys/block/md0/queue/discard_max_hw_bytes
524288
If we perform a mkfs.xfs operation on the /dev/md array, it takes over
11 minutes and if we examine the stack, it is stuck in
blkdev_issue_discard()
$ sudo cat /proc/1626/stack
[<0>] wait_barrier+0x14c/0x230 [raid10]
[<0>] regular_request_wait+0x39/0x150 [raid10]
[<0>] raid10_write_request+0x11e/0x850 [raid10]
[<0>] raid10_make_request+0xd7/0x150 [raid10]
[<0>] md_handle_request+0x123/0x1a0
[<0>] md_submit_bio+0xda/0x120
[<0>] __submit_bio_noacct+0xde/0x320
[<0>] submit_bio_noacct+0x4d/0x90
[<0>] submit_bio+0x4f/0x1b0
[<0>] __blkdev_issue_discard+0x154/0x290
[<0>] blkdev_issue_discard+0x5d/0xc0
[<0>] blk_ioctl_discard+0xc4/0x110
[<0>] blkdev_common_ioctl+0x56c/0x840
[<0>] blkdev_ioctl+0xeb/0x270
[<0>] block_ioctl+0x3d/0x50
[<0>] __x64_sys_ioctl+0x91/0xc0
[<0>] do_syscall_64+0x38/0x90
[<0>] entry_SYSCALL_64_after_hwframe+0x44/0xa9
[Fix]
Xiao Ni has developed a patchset which resolves the block discard
performance problems. These commits have now landed in 5.13-rc1.
commit cf78408f937a67f59f5e90ee8e6cadeed7c128a8
Author: Xiao Ni <x...@redhat.com>
Date: Thu Feb 4 15:50:43 2021 +0800
Subject: md: add md_submit_discard_bio() for submitting discard bio
Link:
https://github.com/torvalds/linux/commit/cf78408f937a67f59f5e90ee8e6cadeed7c128a8
commit c2968285925adb97b9aa4ede94c1f1ab61ce0925
Author: Xiao Ni <x...@redhat.com>
Date: Thu Feb 4 15:50:44 2021 +0800
Subject: md/raid10: extend r10bio devs to raid disks
Link:
https://github.com/torvalds/linux/commit/c2968285925adb97b9aa4ede94c1f1ab61ce0925
commit f2e7e269a7525317752d472bb48a549780e87d22
Author: Xiao Ni <x...@redhat.com>
Date: Thu Feb 4 15:50:45 2021 +0800
Subject: md/raid10: pull the code that wait for blocked dev into one function
Link:
https://github.com/torvalds/linux/commit/f2e7e269a7525317752d472bb48a549780e87d22
commit d30588b2731fb01e1616cf16c3fe79a1443e29aa
Author: Xiao Ni <x...@redhat.com>
Date: Thu Feb 4 15:50:46 2021 +0800
Subject: md/raid10: improve raid10 discard request
Link:
https://github.com/torvalds/linux/commit/d30588b2731fb01e1616cf16c3fe79a1443e29aa
commit 254c271da0712ea8914f187588e0f81f7678ee2f
Author: Xiao Ni <x...@redhat.com>
Date: Thu Feb 4 15:50:47 2021 +0800
Subject: md/raid10: improve discard request for far layout
Link:
https://github.com/torvalds/linux/commit/254c271da0712ea8914f187588e0f81f7678ee2f
There is also an additional commit which is required, and was merged
after "md/raid10: improve raid10 discard request" was merged. The
following commit enables Radid10 to use large discards, instead of
splitting into many bios, since the technical hurdles have now been
removed.
commit ca4a4e9a55beeb138bb06e3867f5e486da896d44
Author: Mike Snitzer <snit...@redhat.com>
Date: Fri Apr 30 14:38:37 2021 -0400
Subject: dm raid: remove unnecessary discard limits for raid0 and raid10
Link:
https://github.com/torvalds/linux/commit/ca4a4e9a55beeb138bb06e3867f5e486da896d44
The commits more or less cherry pick to the 5.11, 5.8, 5.4 and 4.15
kernels, with the following minor backports:
1) submit_bio_noacct() needed to be renamed to generic_make_request()
since it was recently changed in:
commit ed00aabd5eb9fb44d6aff1173234a2e911b9fead
Author: Christoph Hellwig <h...@lst.de>
Date: Wed Jul 1 10:59:44 2020 +0200
Subject: block: rename generic_make_request to submit_bio_noacct
Link:
https://github.com/torvalds/linux/commit/ed00aabd5eb9fb44d6aff1173234a2e911b9fead
2) In the 4.15, 5.4 and 5.8 kernels, trace_block_bio_remap() needs to
have its request_queue argument put back in place. It was recently
removed in:
commit 1c02fca620f7273b597591065d366e2cca948d8f
Author: Christoph Hellwig <h...@lst.de>
Date: Thu Dec 3 17:21:38 2020 +0100
Subject: block: remove the request_queue argument to the block_bio_remap
tracepoint
Link:
https://github.com/torvalds/linux/commit/1c02fca620f7273b597591065d366e2cca948d8f
3) bio_split(), mempool_alloc(), bio_clone_fast() all needed their
"address of" '&' removed for one of their arguments for the 4.15
kernel, due to changes made in:
commit afeee514ce7f4cab605beedd03be71ebaf0c5fc8
Author: Kent Overstreet <kent.overstr...@gmail.com>
Date: Sun May 20 18:25:52 2018 -0400
Subject: md: convert to bioset_init()/mempool_init()
Link:
https://github.com/torvalds/linux/commit/afeee514ce7f4cab605beedd03be71ebaf0c5fc8
4) The 4.15 kernel does not need "dm raid: remove unnecessary discard
limits for raid0 and raid10" due to not having the following commit,
which was merged in 5.1-rc1:
commit 61697a6abd24acba941359c6268a94f4afe4a53d
Author: Mike Snitzer <snit...@redhat.com>
Date: Fri Jan 18 14:19:26 2019 -0500
Subject: dm: eliminate 'split_discard_bios' flag from DM target interface
Link:
https://github.com/torvalds/linux/commit/61697a6abd24acba941359c6268a94f4afe4a53d
5) The 4.15 kernel needed bio_clone_blkg_association() to be renamed
to bio_clone_blkcg_association() due to it changing in:
commit db6638d7d177a8bc74c9e539e2e0d7d061c767b1
Author: Dennis Zhou <den...@kernel.org>
Date: Wed Dec 5 12:10:35 2018 -0500
Subject: blkcg: remove bio->bi_css and instead use bio->bi_blkg
https://github.com/torvalds/linux/commit/db6638d7d177a8bc74c9e539e2e0d7d061c767b1
[Testcase]
You will need a machine with at least 4x NVMe drives which support
block discard. I use a i3.8xlarge instance on AWS, since it has all of
these things.
$ lsblk
xvda 202:0 0 8G 0 disk
└─xvda1 202:1 0 8G 0 part /
nvme0n1 259:2 0 1.7T 0 disk
nvme1n1 259:0 0 1.7T 0 disk
nvme2n1 259:1 0 1.7T 0 disk
nvme3n1 259:3 0 1.7T 0 disk
Create a Raid10 array:
$ sudo mdadm --create --verbose /dev/md0 --level=10 --raid-devices=4
/dev/nvme0n1 /dev/nvme1n1 /dev/nvme2n1 /dev/nvme3n1
Format the array with XFS:
$ time sudo mkfs.xfs /dev/md0
real 11m14.734s
$ sudo mkdir /mnt/disk
$ sudo mount /dev/md0 /mnt/disk
Optional, do a fstrim:
$ time sudo fstrim /mnt/disk
real 11m37.643s
There are test kernels for 5.8, 5.4 and 4.15 available in the
following PPA:
https://launchpad.net/~mruffell/+archive/ubuntu/lp1896578-test
If you install a test kernel, we can see that performance dramatically
improves:
$ sudo mdadm --create --verbose /dev/md0 --level=10 --raid-devices=4
/dev/nvme0n1 /dev/nvme1n1 /dev/nvme2n1 /dev/nvme3n1
$ time sudo mkfs.xfs /dev/md0
real 0m4.226s
user 0m0.020s
sys 0m0.148s
$ sudo mkdir /mnt/disk
$ sudo mount /dev/md0 /mnt/disk
$ time sudo fstrim /mnt/disk
real 0m1.991s
user 0m0.020s
sys 0m0.000s
The patches bring mkfs.xfs from 11 minutes down to 4 seconds, and fstrim
from 11 minutes to 2 seconds.
Performance Matrix (AWS i3.8xlarge):
Kernel | mkfs.xfs | fstrim
---------------------------------
4.15 | 7m23.449s | 7m20.678s
5.4 | 8m23.219s | 8m23.927s
5.8 | 2m54.990s | 8m22.010s
4.15-test | 0m4.286s | 0m1.657s
5.4-test | 0m6.075s | 0m3.150s
5.8-test | 0m2.753s | 0m2.999s
The test kernel also changes the discard_max_bytes to the underlying
hardware limit:
$ cat /sys/block/md0/queue/discard_max_bytes
2199023255040
[Where problems can occur]
A problem has occurred once before, with the previous revision of this
patchset. This has been documented in bug 1907262, and caused a worst
case scenario of data loss for some users, in this particular case, on
the second and onward disks. This was due to two two faults: the
first, incorrectly calculating the start offset for block discard for
the second and extra disks. The second bug was an incorrect stripe
size for far layouts.
The kernel team was forced to revert the patches in an emergency and
the faulty kernel was removed from the archive, and community users
urged to avoid the faulty kernel.
These bugs and a few other minor issues have now been corrected, and
we have been testing the new patches since mid February. The patches
have been tested against the testcase in bug 1907262 and do not cause
the disks to become corrupted.
The regression potential is still the same for this patchset though.
If a regression were to occur, it could lead to data loss on Raid10
arrays backed by NVMe or SSD disks that support block discard.
If a regression happens, users need to disable the fstrim systemd
service as soon as possible, plan an emergency maintenance window, and
downgrade the kernel to a previous release, or upgrade to a corrected
kernel.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1896578/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
