This bug was fixed in the package linux - 4.15.0-33.36 --------------- linux (4.15.0-33.36) bionic; urgency=medium
* linux: 4.15.0-33.36 -proposed tracker (LP: #1787149) * RTNL assertion failure on ipvlan (LP: #1776927) - ipvlan: drop ipv6 dependency - ipvlan: use per device spinlock to protect addrs list updates - SAUCE: fix warning from "ipvlan: drop ipv6 dependency" * ubuntu_bpf_jit test failed on Bionic s390x systems (LP: #1753941) - test_bpf: flag tests that cannot be jited on s390 * HDMI/DP audio can't work on the laptop of Dell Latitude 5495 (LP: #1782689) - drm/nouveau: fix nouveau_dsm_get_client_id()'s return type - drm/radeon: fix radeon_atpx_get_client_id()'s return type - drm/amdgpu: fix amdgpu_atpx_get_client_id()'s return type - platform/x86: apple-gmux: fix gmux_get_client_id()'s return type - ALSA: hda: use PCI_BASE_CLASS_DISPLAY to replace PCI_CLASS_DISPLAY_VGA - vga_switcheroo: set audio client id according to bound GPU id * locking sockets broken due to missing AppArmor socket mediation patches (LP: #1780227) - UBUNTU SAUCE: apparmor: fix apparmor mediating locking non-fs, unix sockets * Update2 for ocxl driver (LP: #1781436) - ocxl: Fix page fault handler in case of fault on dying process * netns: unable to follow an interface that moves to another netns (LP: #1774225) - net: core: Expose number of link up/down transitions - dev: always advertise the new nsid when the netns iface changes - dev: advertise the new ifindex when the netns iface changes * [Bionic] Disk IO hangs when using BFQ as io scheduler (LP: #1780066) - block, bfq: fix occurrences of request finish method's old name - block, bfq: remove batches of confusing ifdefs - block, bfq: add requeue-request hook * HP ProBook 455 G5 needs mute-led-gpio fixup (LP: #1781763) - ALSA: hda: add mute led support for HP ProBook 455 G5 * [Bionic] bug fixes to improve stability of the ThunderX2 i2c driver (LP: #1781476) - i2c: xlp9xx: Fix issue seen when updating receive length - i2c: xlp9xx: Make sure the transfer size is not more than I2C_SMBUS_BLOCK_SIZE * x86/kvm: fix LAPIC timer drift when guest uses periodic mode (LP: #1778486) - x86/kvm: fix LAPIC timer drift when guest uses periodic mode * Please include ax88179_178a and r8152 modules in d-i udeb (LP: #1771823) - [Config:] d-i: Add ax88179_178a and r8152 to nic-modules * Nvidia fails after switching its mode (LP: #1778658) - PCI: Restore config space on runtime resume despite being unbound * Kernel error "task zfs:pid blocked for more than 120 seconds" (LP: #1781364) - SAUCE: (noup) zfs to 0.7.5-1ubuntu16.3 * CVE-2018-12232 - PATCH 1/1] socket: close race condition between sock_close() and sockfs_setattr() * CVE-2018-10323 - xfs: set format back to extents if xfs_bmap_extents_to_btree * change front mic location for more lenovo m7/8/9xx machines (LP: #1781316) - ALSA: hda/realtek - Fix the problem of two front mics on more machines - ALSA: hda/realtek - two more lenovo models need fixup of MIC_LOCATION * Cephfs + fscache: unable to handle kernel NULL pointer dereference at 0000000000000000 IP: jbd2__journal_start+0x22/0x1f0 (LP: #1783246) - ceph: track read contexts in ceph_file_info * Touchpad of ThinkPad P52 failed to work with message "lost sync at byte" (LP: #1779802) - Input: elantech - fix V4 report decoding for module with middle key - Input: elantech - enable middle button of touchpads on ThinkPad P52 * xhci_hcd 0000:00:14.0: Root hub is not suspended (LP: #1779823) - usb: xhci: dbc: Fix lockdep warning - usb: xhci: dbc: Don't decrement runtime PM counter if DBC is not started * CVE-2018-13406 - video: uvesafb: Fix integer overflow in allocation * CVE-2018-10840 - ext4: correctly handle a zero-length xattr with a non-zero e_value_offs * CVE-2018-11412 - ext4: do not allow external inodes for inline data * CVE-2018-10881 - ext4: clear i_data in ext4_inode_info when removing inline data * CVE-2018-12233 - jfs: Fix inconsistency between memory allocation and ea_buf->max_size * CVE-2018-12904 - kvm: nVMX: Enforce cpl=0 for VMX instructions * Error parsing PCC subspaces from PCCT (LP: #1528684) - mailbox: PCC: erroneous error message when parsing ACPI PCCT * CVE-2018-13094 - xfs: don't call xfs_da_shrink_inode with NULL bp * other users' coredumps can be read via setgid directory and killpriv bypass (LP: #1779923) // CVE-2018-13405 - Fix up non-directory creation in SGID directories * Invoking obsolete 'firmware_install' target breaks snap build (LP: #1782166) - snapcraft.yaml: stop invoking the obsolete (and non-existing) 'firmware_install' target * snapcraft.yaml: missing ubuntu-retpoline-extract-one script breaks the build (LP: #1782116) - snapcraft.yaml: copy retpoline-extract-one to scripts before build * Allow Raven Ridge's audio controller to be runtime suspended (LP: #1782540) - ALSA: hda: Add AZX_DCAPS_PM_RUNTIME for AMD Raven Ridge * CVE-2018-11506 - sr: pass down correctly sized SCSI sense buffer * Bionic update: upstream stable patchset 2018-07-24 (LP: #1783418) - net: Fix a bug in removing queues from XPS map - net/mlx4_core: Fix error handling in mlx4_init_port_info. - net/sched: fix refcnt leak in the error path of tcf_vlan_init() - net: sched: red: avoid hashing NULL child - net/smc: check for missing nlattrs in SMC_PNETID messages - net: test tailroom before appending to linear skb - packet: in packet_snd start writing at link layer allocation - sock_diag: fix use-after-free read in __sk_free - tcp: purge write queue in tcp_connect_init() - vmxnet3: set the DMA mask before the first DMA map operation - vmxnet3: use DMA memory barriers where required - hv_netvsc: empty current transmit aggregation if flow blocked - hv_netvsc: Use the num_online_cpus() for channel limit - hv_netvsc: avoid retry on send during shutdown - hv_netvsc: only wake transmit queue if link is up - hv_netvsc: fix error unwind handling if vmbus_open fails - hv_netvsc: cancel subchannel setup before halting device - hv_netvsc: fix race in napi poll when rescheduling - hv_netvsc: defer queue selection to VF - hv_netvsc: disable NAPI before channel close - hv_netvsc: use RCU to fix concurrent rx and queue changes - hv_netvsc: change GPAD teardown order on older versions - hv_netvsc: common detach logic - hv_netvsc: Use Windows version instead of NVSP version on GPAD teardown - hv_netvsc: Split netvsc_revoke_buf() and netvsc_teardown_gpadl() - hv_netvsc: Ensure correct teardown message sequence order - hv_netvsc: Fix a network regression after ifdown/ifup - sparc: vio: use put_device() instead of kfree() - ext2: fix a block leak - s390: add assembler macros for CPU alternatives - s390: move expoline assembler macros to a header - s390/crc32-vx: use expoline for indirect branches - s390/lib: use expoline for indirect branches - s390/ftrace: use expoline for indirect branches - s390/kernel: use expoline for indirect branches - s390: move spectre sysfs attribute code - s390: extend expoline to BC instructions - s390: use expoline thunks in the BPF JIT - scsi: sg: allocate with __GFP_ZERO in sg_build_indirect() - scsi: zfcp: fix infinite iteration on ERP ready list - loop: don't call into filesystem while holding lo_ctl_mutex - loop: fix LOOP_GET_STATUS lock imbalance - cfg80211: limit wiphy names to 128 bytes - hfsplus: stop workqueue when fill_super() failed - x86/kexec: Avoid double free_page() upon do_kexec_load() failure - usb: gadget: f_uac2: fix bFirstInterface in composite gadget - usb: dwc3: Undo PHY init if soft reset fails - usb: dwc3: omap: don't miss events during suspend/resume - usb: gadget: core: Fix use-after-free of usb_request - usb: gadget: fsl_udc_core: fix ep valid checks - usb: dwc2: Fix dwc2_hsotg_core_init_disconnected() - usb: cdc_acm: prevent race at write to acm while system resumes - net: usbnet: fix potential deadlock on 32bit hosts - ARM: dts: imx7d-sdb: Fix regulator-usb-otg2-vbus node name - usb: host: xhci-plat: revert "usb: host: xhci-plat: enable clk in resume timing" - USB: OHCI: Fix NULL dereference in HCDs using HCD_LOCAL_MEM - net/usb/qmi_wwan.c: Add USB id for lt4120 modem - net-usb: add qmi_wwan if on lte modem wistron neweb d18q1 - Bluetooth: btusb: Add USB ID 7392:a611 for Edimax EW-7611ULB - ALSA: usb-audio: Add native DSD support for Luxman DA-06 - usb: dwc3: Add SoftReset PHY synchonization delay - usb: dwc3: Update DWC_usb31 GTXFIFOSIZ reg fields - usb: dwc3: Makefile: fix link error on randconfig - xhci: zero usb device slot_id member when disabling and freeing a xhci slot - usb: dwc2: Fix interval type issue - usb: dwc2: hcd: Fix host channel halt flow - usb: dwc2: host: Fix transaction errors in host mode - usb: gadget: ffs: Let setup() return USB_GADGET_DELAYED_STATUS - usb: gadget: ffs: Execute copy_to_user() with USER_DS set - usbip: Correct maximum value of CONFIG_USBIP_VHCI_HC_PORTS - usb: gadget: udc: change comparison to bitshift when dealing with a mask - usb: gadget: composite: fix incorrect handling of OS desc requests - media: lgdt3306a: Fix module count mismatch on usb unplug - media: em28xx: USB bulk packet size fix - Bluetooth: btusb: Add device ID for RTL8822BE - xhci: Show what USB release number the xHC supports from protocol capablity - staging: bcm2835-audio: Release resources on module_exit() - staging: lustre: fix bug in osc_enter_cache_try - staging: fsl-dpaa2/eth: Fix incorrect casts - staging: rtl8192u: return -ENOMEM on failed allocation of priv->oldaddr - staging: ks7010: Use constants from ieee80211_eid instead of literal ints. - staging: lustre: lmv: correctly iput lmo_root - crypto: inside-secure - wait for the request to complete if in the backlog - crypto: atmel-aes - fix the keys zeroing on errors - crypto: ccp - don't disable interrupts while setting up debugfs - crypto: inside-secure - do not process request if no command was issued - crypto: inside-secure - fix the cache_len computation - crypto: inside-secure - fix the extra cache computation - crypto: sunxi-ss - Add MODULE_ALIAS to sun4i-ss - crypto: inside-secure - fix the invalidation step during cra_exit - scsi: mpt3sas: fix an out of bound write - scsi: ufs: Enable quirk to ignore sending WRITE_SAME command - scsi: bnx2fc: Fix check in SCSI completion handler for timed out request - scsi: sym53c8xx_2: iterator underflow in sym_getsync() - scsi: mptfusion: Add bounds check in mptctl_hp_targetinfo() - scsi: qla2xxx: Avoid triggering undefined behavior in qla2x00_mbx_completion() - scsi: storvsc: Increase cmd_per_lun for higher speed devices - scsi: qedi: Fix truncation of CHAP name and secret - scsi: aacraid: fix shutdown crash when init fails - scsi: qla4xxx: skip error recovery in case of register disconnect. - scsi: qedi: Fix kernel crash during port toggle - scsi: mpt3sas: Do not mark fw_event workqueue as WQ_MEM_RECLAIM - scsi: sd: Keep disk read-only when re-reading partition - scsi: iscsi_tcp: set BDI_CAP_STABLE_WRITES when data digest enabled - scsi: aacraid: Insure command thread is not recursively stopped - scsi: core: Make SCSI Status CONDITION MET equivalent to GOOD - scsi: mvsas: fix wrong endianness of sgpio api - ASoC: hdmi-codec: Fix module unloading caused kernel crash - ASoC: rockchip: rk3288-hdmi-analog: Select needed codecs - ASoC: samsung: odroid: Fix 32000 sample rate handling - ASoC: topology: create TLV data for dapm widgets - ASoC: samsung: i2s: Ensure the RCLK rate is properly determined - clk: rockchip: Fix wrong parent for SDMMC phase clock for rk3228 - clk: Don't show the incorrect clock phase - clk: hisilicon: mark wdt_mux_p[] as const - clk: tegra: Fix pll_u rate configuration - clk: rockchip: Prevent calculating mmc phase if clock rate is zero - clk: samsung: s3c2410: Fix PLL rates - clk: samsung: exynos7: Fix PLL rates - clk: samsung: exynos5260: Fix PLL rates - clk: samsung: exynos5433: Fix PLL rates - clk: samsung: exynos5250: Fix PLL rates - clk: samsung: exynos3250: Fix PLL rates - media: dmxdev: fix error code for invalid ioctls - media: Don't let tvp5150_get_vbi() go out of vbi_ram_default array - media: ov5645: add missing of_node_put() in error path - media: cx23885: Override 888 ImpactVCBe crystal frequency - media: cx23885: Set subdev host data to clk_freq pointer - media: s3c-camif: fix out-of-bounds array access - media: lgdt3306a: Fix a double kfree on i2c device remove - media: em28xx: Add Hauppauge SoloHD/DualHD bulk models - media: v4l: vsp1: Fix display stalls when requesting too many inputs - media: i2c: adv748x: fix HDMI field heights - media: vb2: Fix videobuf2 to map correct area - media: vivid: fix incorrect capabilities for radio - media: cx25821: prevent out-of-bounds read on array card - serial: xuartps: Fix out-of-bounds access through DT alias - serial: sh-sci: Fix out-of-bounds access through DT alias - serial: samsung: Fix out-of-bounds access through serial port index - serial: mxs-auart: Fix out-of-bounds access through serial port index - serial: imx: Fix out-of-bounds access through serial port index - serial: fsl_lpuart: Fix out-of-bounds access through DT alias - serial: arc_uart: Fix out-of-bounds access through DT alias - serial: 8250: Don't service RX FIFO if interrupts are disabled - serial: altera: ensure port->regshift is honored consistently - rtc: snvs: Fix usage of snvs_rtc_enable - rtc: hctosys: Ensure system time doesn't overflow time_t - rtc: rk808: fix possible race condition - rtc: m41t80: fix race conditions - rtc: tx4939: avoid unintended sign extension on a 24 bit shift - rtc: rp5c01: fix possible race condition - rtc: goldfish: Add missing MODULE_LICENSE - cxgb4: Correct ntuple mask validation for hash filters - net: dsa: bcm_sf2: Fix RX_CLS_LOC_ANY overwrite for last rule - net: dsa: Do not register devlink for unused ports - net: dsa: bcm_sf2: Fix IPv6 rules and chain ID - net: dsa: bcm_sf2: Fix IPv6 rule half deletion - 3c59x: convert to generic DMA API - net: ip6_gre: Request headroom in __gre6_xmit() - net: ip6_gre: Split up ip6gre_tnl_link_config() - net: ip6_gre: Split up ip6gre_tnl_change() - net: ip6_gre: Split up ip6gre_newlink() - net: ip6_gre: Split up ip6gre_changelink() - qed: LL2 flush isles when connection is closed - qed: Fix possibility of list corruption during rmmod flows - qed: Fix LL2 race during connection terminate - powerpc: Move default security feature flags - Bluetooth: btusb: Add support for Intel Bluetooth device 22560 [8087:0026] - staging: fsl-dpaa2/eth: Fix incorrect kfree - crypto: inside-secure - move the digest to the request context - scsi: lpfc: Fix NVME Initiator FirstBurst - serial: mvebu-uart: fix tx lost characters * Bionic update: upstream stable patchset 2018-07-20 (LP: #1782846) - usbip: usbip_host: refine probe and disconnect debug msgs to be useful - usbip: usbip_host: delete device from busid_table after rebind - usbip: usbip_host: run rebind from exit when module is removed - usbip: usbip_host: fix NULL-ptr deref and use-after-free errors - usbip: usbip_host: fix bad unlock balance during stub_probe() - ALSA: usb: mixer: volume quirk for CM102-A+/102S+ - ALSA: hda: Add Lenovo C50 All in one to the power_save blacklist - ALSA: control: fix a redundant-copy issue - spi: pxa2xx: Allow 64-bit DMA - spi: bcm-qspi: Avoid setting MSPI_CDRAM_PCS for spi-nor master - spi: bcm-qspi: Always read and set BSPI_MAST_N_BOOT_CTRL - KVM: arm/arm64: VGIC/ITS save/restore: protect kvm_read_guest() calls - KVM: arm/arm64: VGIC/ITS: protect kvm_read_guest() calls with SRCU lock - vfio: ccw: fix cleanup if cp_prefetch fails - tracing/x86/xen: Remove zero data size trace events trace_xen_mmu_flush_tlb{_all} - tee: shm: fix use-after-free via temporarily dropped reference - netfilter: nf_tables: free set name in error path - netfilter: nf_tables: can't fail after linking rule into active rule list - netfilter: nf_socket: Fix out of bounds access in nf_sk_lookup_slow_v{4,6} - i2c: designware: fix poll-after-enable regression - powerpc/powernv: Fix NVRAM sleep in invalid context when crashing - drm: Match sysfs name in link removal to link creation - lib/test_bitmap.c: fix bitmap optimisation tests to report errors correctly - radix tree: fix multi-order iteration race - mm: don't allow deferred pages with NEED_PER_CPU_KM - drm/i915/gen9: Add WaClearHIZ_WM_CHICKEN3 for bxt and glk - s390/qdio: fix access to uninitialized qdio_q fields - s390/qdio: don't release memory in qdio_setup_irq() - s390: remove indirect branch from do_softirq_own_stack - x86/pkeys: Override pkey when moving away from PROT_EXEC - x86/pkeys: Do not special case protection key 0 - efi: Avoid potential crashes, fix the 'struct efi_pci_io_protocol_32' definition for mixed mode - ARM: 8771/1: kprobes: Prohibit kprobes on do_undefinstr - x86/mm: Drop TS_COMPAT on 64-bit exec() syscall - tick/broadcast: Use for_each_cpu() specially on UP kernels - ARM: 8769/1: kprobes: Fix to use get_kprobe_ctlblk after irq-disabed - ARM: 8770/1: kprobes: Prohibit probing on optimized_callback - ARM: 8772/1: kprobes: Prohibit kprobes on get_user functions - Btrfs: fix xattr loss after power failure - Btrfs: send, fix invalid access to commit roots due to concurrent snapshotting - btrfs: property: Set incompat flag if lzo/zstd compression is set - btrfs: fix crash when trying to resume balance without the resume flag - btrfs: Split btrfs_del_delalloc_inode into 2 functions - btrfs: Fix delalloc inodes invalidation during transaction abort - btrfs: fix reading stale metadata blocks after degraded raid1 mounts - xhci: Fix USB3 NULL pointer dereference at logical disconnect. - KVM: arm/arm64: Properly protect VGIC locks from IRQs - KVM: arm/arm64: VGIC/ITS: Promote irq_lock() in update_affinity - hwmon: (k10temp) Fix reading critical temperature register - hwmon: (k10temp) Use API function to access System Management Network - vsprintf: Replace memory barrier with static_key for random_ptr_key update - x86/amd_nb: Add support for Raven Ridge CPUs - x86/apic/x2apic: Initialize cluster ID properly * Bionic update: upstream stable patchset 2018-07-09 (LP: #1780858) - 8139too: Use disable_irq_nosync() in rtl8139_poll_controller() - bridge: check iface upper dev when setting master via ioctl - dccp: fix tasklet usage - ipv4: fix fnhe usage by non-cached routes - ipv4: fix memory leaks in udp_sendmsg, ping_v4_sendmsg - llc: better deal with too small mtu - net: ethernet: sun: niu set correct packet size in skb - net: ethernet: ti: cpsw: fix packet leaking in dual_mac mode - net/mlx4_en: Fix an error handling path in 'mlx4_en_init_netdev()' - net/mlx4_en: Verify coalescing parameters are in range - net/mlx5e: Err if asked to offload TC match on frag being first - net/mlx5: E-Switch, Include VF RDMA stats in vport statistics - net sched actions: fix refcnt leak in skbmod - net_sched: fq: take care of throttled flows before reuse - net: support compat 64-bit time in {s,g}etsockopt - net/tls: Don't recursively call push_record during tls_write_space callbacks - net/tls: Fix connection stall on partial tls record - openvswitch: Don't swap table in nlattr_set() after OVS_ATTR_NESTED is found - qmi_wwan: do not steal interfaces from class drivers - r8169: fix powering up RTL8168h - rds: do not leak kernel memory to user land - sctp: delay the authentication for the duplicated cookie-echo chunk - sctp: fix the issue that the cookie-ack with auth can't get processed - sctp: handle two v4 addrs comparison in sctp_inet6_cmp_addr - sctp: remove sctp_chunk_put from fail_mark err path in sctp_ulpevent_make_rcvmsg - sctp: use the old asoc when making the cookie-ack chunk in dupcook_d - tcp_bbr: fix to zero idle_restart only upon S/ACKed data - tcp: ignore Fast Open on repair mode - tg3: Fix vunmap() BUG_ON() triggered from tg3_free_consistent(). - bonding: do not allow rlb updates to invalid mac - bonding: send learning packets for vlans on slave - net: sched: fix error path in tcf_proto_create() when modules are not configured - net/mlx5e: TX, Use correct counter in dma_map error flow - net/mlx5: Avoid cleaning flow steering table twice during error flow - hv_netvsc: set master device - ipv6: fix uninit-value in ip6_multipath_l3_keys() - net/mlx5e: Allow offloading ipv4 header re-write for icmp - nsh: fix infinite loop - udp: fix SO_BINDTODEVICE - l2tp: revert "l2tp: fix missing print session offset info" - proc: do not access cmdline nor environ from file-backed areas - net/smc: restrict non-blocking connect finish - mlxsw: spectrum_switchdev: Do not remove mrouter port from MDB's ports list - net/mlx5e: DCBNL fix min inline header size for dscp - net: systemport: Correclty disambiguate driver instances - sctp: clear the new asoc's stream outcnt in sctp_stream_update - tcp: restore autocorking - tipc: fix one byte leak in tipc_sk_set_orig_addr() - hv_netvsc: Fix net device attach on older Windows hosts * Bionic update: upstream stable patchset 2018-07-06 (LP: #1780499) - ext4: prevent right-shifting extents beyond EXT_MAX_BLOCKS - ipvs: fix rtnl_lock lockups caused by start_sync_thread - netfilter: ebtables: don't attempt to allocate 0-sized compat array - kcm: Call strp_stop before strp_done in kcm_attach - crypto: af_alg - fix possible uninit-value in alg_bind() - netlink: fix uninit-value in netlink_sendmsg - net: fix rtnh_ok() - net: initialize skb->peeked when cloning - net: fix uninit-value in __hw_addr_add_ex() - dccp: initialize ireq->ir_mark - ipv4: fix uninit-value in ip_route_output_key_hash_rcu() - soreuseport: initialise timewait reuseport field - inetpeer: fix uninit-value in inet_getpeer - memcg: fix per_node_info cleanup - perf: Remove superfluous allocation error check - tcp: fix TCP_REPAIR_QUEUE bound checking - bdi: wake up concurrent wb_shutdown() callers. - bdi: Fix oops in wb_workfn() - gpioib: do not free unrequested descriptors - gpio: fix aspeed_gpio unmask irq - gpio: fix error path in lineevent_create - rfkill: gpio: fix memory leak in probe error path - libata: Apply NOLPM quirk for SanDisk SD7UB3Q*G1001 SSDs - dm integrity: use kvfree for kvmalloc'd memory - tracing: Fix regex_match_front() to not over compare the test string - z3fold: fix reclaim lock-ups - mm: sections are not offlined during memory hotremove - mm, oom: fix concurrent munlock and oom reaper unmap, v3 - ceph: fix rsize/wsize capping in ceph_direct_read_write() - can: kvaser_usb: Increase correct stats counter in kvaser_usb_rx_can_msg() - can: hi311x: Acquire SPI lock on ->do_get_berr_counter - can: hi311x: Work around TX complete interrupt erratum - drm/vc4: Fix scaling of uni-planar formats - drm/i915: Fix drm:intel_enable_lvds ERROR message in kernel log - drm/atomic: Clean old_state/new_state in drm_atomic_state_default_clear() - drm/atomic: Clean private obj old_state/new_state in drm_atomic_state_default_clear() - net: atm: Fix potential Spectre v1 - atm: zatm: Fix potential Spectre v1 - cpufreq: schedutil: Avoid using invalid next_freq - Revert "Bluetooth: btusb: Fix quirk for Atheros 1525/QCA6174" - Bluetooth: btusb: Only check needs_reset_resume DMI table for QCA rome chipsets - thermal: exynos: Reading temperature makes sense only when TMU is turned on - thermal: exynos: Propagate error value from tmu_read() - nvme: add quirk to force medium priority for SQ creation - smb3: directory sync should not return an error - sched/autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[] - tracing/uprobe_event: Fix strncpy corner case - perf/x86: Fix possible Spectre-v1 indexing for hw_perf_event cache_* - perf/x86/cstate: Fix possible Spectre-v1 indexing for pkg_msr - perf/x86/msr: Fix possible Spectre-v1 indexing in the MSR driver - perf/core: Fix possible Spectre-v1 indexing for ->aux_pages[] - perf/x86: Fix possible Spectre-v1 indexing for x86_pmu::event_map() - i2c: dev: prevent ZERO_SIZE_PTR deref in i2cdev_ioctl_rdwr() - bdi: Fix use after free bug in debugfs_remove() - drm/ttm: Use GFP_TRANSHUGE_LIGHT for allocating huge pages - drm/i915: Adjust eDP's logical vco in a reliable place. - drm/nouveau/ttm: don't dereference nvbo::cli, it can outlive client - sched/core: Fix possible Spectre-v1 indexing for sched_prio_to_weight[] * Bionic update: upstream stable patchset 2018-06-26 (LP: #1778759) - percpu: include linux/sched.h for cond_resched() - ACPI / button: make module loadable when booted in non-ACPI mode - USB: serial: option: Add support for Quectel EP06 - ALSA: hda - Fix incorrect usage of IS_REACHABLE() - ALSA: pcm: Check PCM state at xfern compat ioctl - ALSA: seq: Fix races at MIDI encoding in snd_virmidi_output_trigger() - ALSA: dice: fix kernel NULL pointer dereference due to invalid calculation for array index - ALSA: aloop: Mark paused device as inactive - ALSA: aloop: Add missing cable lock to ctl API callbacks - tracepoint: Do not warn on ENOMEM - scsi: target: Fix fortify_panic kernel exception - Input: leds - fix out of bound access - Input: atmel_mxt_ts - add touchpad button mapping for Samsung Chromebook Pro - rtlwifi: btcoex: Add power_on_setting routine - rtlwifi: cleanup 8723be ant_sel definition - xfs: prevent creating negative-sized file via INSERT_RANGE - RDMA/cxgb4: release hw resources on device removal - RDMA/ucma: Allow resolving address w/o specifying source address - RDMA/mlx5: Fix multiple NULL-ptr deref errors in rereg_mr flow - RDMA/mlx5: Protect from shift operand overflow - NET: usb: qmi_wwan: add support for ublox R410M PID 0x90b2 - IB/mlx5: Use unlimited rate when static rate is not supported - IB/hfi1: Fix handling of FECN marked multicast packet - IB/hfi1: Fix loss of BECN with AHG - IB/hfi1: Fix NULL pointer dereference when invalid num_vls is used - iw_cxgb4: Atomically flush per QP HW CQEs - drm/vmwgfx: Fix a buffer object leak - drm/bridge: vga-dac: Fix edid memory leak - test_firmware: fix setting old custom fw path back on exit, second try - errseq: Always report a writeback error once - USB: serial: visor: handle potential invalid device configuration - usb: dwc3: gadget: Fix list_del corruption in dwc3_ep_dequeue - USB: Accept bulk endpoints with 1024-byte maxpacket - USB: serial: option: reimplement interface masking - USB: serial: option: adding support for ublox R410M - usb: musb: host: fix potential NULL pointer dereference - usb: musb: trace: fix NULL pointer dereference in musb_g_tx() - platform/x86: asus-wireless: Fix NULL pointer dereference - irqchip/qcom: Fix check for spurious interrupts - tracing: Fix bad use of igrab in trace_uprobe.c - [Config] CONFIG_ARM64_ERRATUM_1024718=y - arm64: Add work around for Arm Cortex-A55 Erratum 1024718 - Input: atmel_mxt_ts - add touchpad button mapping for Samsung Chromebook Pro - infiniband: mlx5: fix build errors when INFINIBAND_USER_ACCESS=m - btrfs: Take trans lock before access running trans in check_delayed_ref - drm/vc4: Make sure vc4_bo_{inc,dec}_usecnt() calls are balanced - xhci: Fix use-after-free in xhci_free_virt_device - platform/x86: Kconfig: Fix dell-laptop dependency chain. - KVM: x86: remove APIC Timer periodic/oneshot spikes - clocksource: Allow clocksource_mark_unstable() on unregistered clocksources - clocksource: Initialize cs->wd_list - clocksource: Consistent de-rate when marking unstable * Bionic update: upstream stable patchset 2018-06-22 (LP: #1778265) - ext4: set h_journal if there is a failure starting a reserved handle - ext4: add MODULE_SOFTDEP to ensure crc32c is included in the initramfs - ext4: add validity checks for bitmap block numbers - ext4: fix bitmap position validation - random: fix possible sleeping allocation from irq context - random: rate limit unseeded randomness warnings - usbip: usbip_event: fix to not print kernel pointer address - usbip: usbip_host: fix to hold parent lock for device_attach() calls - usbip: vhci_hcd: Fix usb device and sockfd leaks - usbip: vhci_hcd: check rhport before using in vhci_hub_control() - Revert "xhci: plat: Register shutdown for xhci_plat" - USB: serial: simple: add libtransistor console - USB: serial: ftdi_sio: use jtag quirk for Arrow USB Blaster - USB: serial: cp210x: add ID for NI USB serial console - usb: core: Add quirk for HP v222w 16GB Mini - USB: Increment wakeup count on remote wakeup. - ALSA: usb-audio: Skip broken EU on Dell dock USB-audio - virtio: add ability to iterate over vqs - virtio_console: don't tie bufs to a vq - virtio_console: free buffers after reset - virtio_console: drop custom control queue cleanup - virtio_console: move removal code - virtio_console: reset on out of memory - drm/virtio: fix vq wait_event condition - tty: Don't call panic() at tty_ldisc_init() - tty: n_gsm: Fix long delays with control frame timeouts in ADM mode - tty: n_gsm: Fix DLCI handling for ADM mode if debug & 2 is not set - tty: Avoid possible error pointer dereference at tty_ldisc_restore(). - tty: Use __GFP_NOFAIL for tty_ldisc_get() - ALSA: dice: fix OUI for TC group - ALSA: dice: fix error path to destroy initialized stream data - ALSA: hda - Skip jack and others for non-existing PCM streams - ALSA: opl3: Hardening for potential Spectre v1 - ALSA: asihpi: Hardening for potential Spectre v1 - ALSA: hdspm: Hardening for potential Spectre v1 - ALSA: rme9652: Hardening for potential Spectre v1 - ALSA: control: Hardening for potential Spectre v1 - ALSA: pcm: Return negative delays from SNDRV_PCM_IOCTL_DELAY. - ALSA: core: Report audio_tstamp in snd_pcm_sync_ptr - ALSA: seq: oss: Fix unbalanced use lock for synth MIDI device - ALSA: seq: oss: Hardening for potential Spectre v1 - ALSA: hda: Hardening for potential Spectre v1 - ALSA: hda/realtek - Add some fixes for ALC233 - ALSA: hda/realtek - Update ALC255 depop optimize - ALSA: hda/realtek - change the location for one of two front mics - mtd: spi-nor: cadence-quadspi: Fix page fault kernel panic - mtd: cfi: cmdset_0001: Do not allow read/write to suspend erase block. - mtd: cfi: cmdset_0001: Workaround Micron Erase suspend bug. - mtd: cfi: cmdset_0002: Do not allow read/write to suspend erase block. - mtd: rawnand: tango: Fix struct clk memory leak - kobject: don't use WARN for registration failures - scsi: sd: Defer spinning up drive while SANITIZE is in progress - bfq-iosched: ensure to clear bic/bfqq pointers when preparing request - vfio: ccw: process ssch with interrupts disabled - ANDROID: binder: prevent transactions into own process. - PCI: aardvark: Fix logic in advk_pcie_{rd,wr}_conf() - PCI: aardvark: Set PIO_ADDR_LS correctly in advk_pcie_rd_conf() - PCI: aardvark: Use ISR1 instead of ISR0 interrupt in legacy irq mode - PCI: aardvark: Fix PCIe Max Read Request Size setting - ARM: amba: Make driver_override output consistent with other buses - ARM: amba: Fix race condition with driver_override - ARM: amba: Don't read past the end of sysfs "driver_override" buffer - ARM: socfpga_defconfig: Remove QSPI Sector 4K size force - KVM: arm/arm64: Close VMID generation race - crypto: drbg - set freed buffers to NULL - ASoC: fsl_esai: Fix divisor calculation failure at lower ratio - libceph: un-backoff on tick when we have a authenticated session - libceph: reschedule a tick in finish_hunting() - libceph: validate con->state at the top of try_write() - fpga-manager: altera-ps-spi: preserve nCONFIG state - earlycon: Use a pointer table to fix __earlycon_table stride - drm/amdgpu: set COMPUTE_PGM_RSRC1 for SGPR/VGPR clearing shaders - drm/i915: Enable display WA#1183 from its correct spot - objtool, perf: Fix GCC 8 -Wrestrict error - tools/lib/subcmd/pager.c: do not alias select() params - x86/ipc: Fix x32 version of shmid64_ds and msqid64_ds - x86/smpboot: Don't use mwait_play_dead() on AMD systems - x86/microcode/intel: Save microcode patch unconditionally - x86/microcode: Do not exit early from __reload_late() - tick/sched: Do not mess with an enqueued hrtimer - arm/arm64: KVM: Add PSCI version selection API - powerpc/eeh: Fix race with driver un/bind - serial: mvebu-uart: Fix local flags handling on termios update - block: do not use interruptible wait anywhere - ASoC: dmic: Fix clock parenting - PCI / PM: Do not clear state_saved in pci_pm_freeze() when smart suspend is set - module: Fix display of wrong module .text address - drm/edid: Reset more of the display info - drm/i915/fbdev: Enable late fbdev initial configuration - drm/i915/audio: set minimum CD clock to twice the BCLK - drm/amd/display: Fix deadlock when flushing irq - drm/amd/display: Disallow enabling CRTC without primary plane with FB * Bionic update: upstream stable patchset 2018-06-22 (LP: #1778265) // CVE-2018-1108. - random: set up the NUMA crng instances after the CRNG is fully initialized * Ryzen/Raven Ridge USB ports do not work (LP: #1756700) - xhci: Fix USB ports for Dell Inspiron 5775 * [Ubuntu 1804][boston][ixgbe] EEH causes kernel BUG at /build/linux- jWa1Fv/linux-4.15.0/drivers/pci/msi.c:352 (i2S) (LP: #1776389) - ixgbe/ixgbevf: Free IRQ when PCI error recovery removes the device * Need fix to aacraid driver to prevent panic (LP: #1770095) - scsi: aacraid: Correct hba_send to include iu_type * kernel: Fix arch random implementation (LP: #1775391) - s390/archrandom: Rework arch random implementation. * kernel: Fix memory leak on CCA and EP11 CPRB processing. (LP: #1775390) - s390/zcrypt: Fix CCA and EP11 CPRB processing failure memory leak. * Various fixes for CXL kernel module (LP: #1774471) - cxl: Remove function write_timebase_ctrl_psl9() for PSL9 - cxl: Set the PBCQ Tunnel BAR register when enabling capi mode - cxl: Report the tunneled operations status - cxl: Configure PSL to not use APC virtual machines - cxl: Disable prefault_mode in Radix mode * Bluetooth not working (LP: #1764645) - Bluetooth: btusb: Apply QCA Rome patches for some ATH3012 models * linux-snapdragon: wcn36xx: mac address generation on boot (LP: #1776491) - [Config] arm64: snapdragon: WCN36XX_SNAPDRAGON_HACKS=y - SAUCE: wcn36xx: read MAC from file or randomly generate one * fscache: Fix hanging wait on page discarded by writeback (LP: #1777029) - fscache: Fix hanging wait on page discarded by writeback -- Kleber Sacilotto de Souza <kleber.so...@canonical.com> Wed, 15 Aug 2018 14:50:38 +0200 ** Changed in: linux (Ubuntu Bionic) Status: Fix Committed => Fix Released ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-10323 ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-10840 ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-10881 ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-1108 ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-11412 ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-11506 ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-12232 ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-12233 ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-12904 ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-13094 ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-13405 ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2018-13406 -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to zfs-linux in Ubuntu. https://bugs.launchpad.net/bugs/1781364 Title: Kernel error "task zfs:pid blocked for more than 120 seconds" Status in Linux: Fix Released Status in linux package in Ubuntu: Fix Released Status in zfs-linux package in Ubuntu: Fix Released Status in linux source package in Xenial: Fix Committed Status in zfs-linux source package in Xenial: Confirmed Status in linux source package in Bionic: Fix Released Status in zfs-linux source package in Bionic: Fix Released Status in linux source package in Cosmic: Fix Released Status in zfs-linux source package in Cosmic: Fix Released Bug description: == SRU Justification, XENIAL, BIONIC == Exercising ZFS with lxd with many mount/umounts can cause lockups and 120 second timeout messages. == How to reproduce bug == In a VM, 2 CPUs, 16GB of memory running Bionic: sudo apt update sudo apt install lxd lxd-client lxd-tools zfsutils-linux sudo lxd init (and with the default init options) then run: lxd-benchmark launch --count 96 --parallel 96 This will reliably show the lockup every time without the fix. With the fix (detailed below) one cannot reproduce the lockup. == Fix == Upstream ZFS commit commit ac09630d8b0bf6c92084a30fdaefd03fd0adbdc1 Author: Brian Behlendorf <behlendo...@llnl.gov> Date: Wed Jul 11 15:49:10 2018 -0700 Fix zpl_mount() deadlock == Regression Potential == This just changes the locking in the mount path of ZFS and will only affect ZFS mount/unmounts. The regression potential is small as this touches a very small code path that has been exhaustively exercises this code under multiple thread/CPU contention and shown not to break. ------------------ ZFS bug report: https://github.com/zfsonlinux/zfs/issues/7691 "I am using LXD containers that are configured to use a ZFS storage backend. I create many containers using a benchmark tool, which probably stresses the use of ZFS. In two out of four attempts, I got [ 725.970508] INFO: task lxd:4455 blocked for more than 120 seconds. [ 725.976730] Tainted: P O 4.15.0-20-generic #21-Ubuntu [ 725.983551] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 725.991624] INFO: task txg_sync:4202 blocked for more than 120 seconds. [ 725.998264] Tainted: P O 4.15.0-20-generic #21-Ubuntu [ 726.005071] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 726.013313] INFO: task lxd:99919 blocked for more than 120 seconds. [ 726.019609] Tainted: P O 4.15.0-20-generic #21-Ubuntu [ 726.026418] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 726.034560] INFO: task zfs:100513 blocked for more than 120 seconds. [ 726.040936] Tainted: P O 4.15.0-20-generic #21-Ubuntu [ 726.047746] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 726.055791] INFO: task zfs:100584 blocked for more than 120 seconds. [ 726.062170] Tainted: P O 4.15.0-20-generic #21-Ubuntu [ 726.068979] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. Describe how to reproduce the problem Start an Ubuntu 18.04 LTS server. Install LXD if not already installed. sudo apt update sudo apt install lxd lxd-client lxd-tools zfsutils-linux Configure LXD with sudo lxd init. When prompted for the storage backend, select ZFS and specify an empty disk. $ sudo lxd init Would you like to use LXD clustering? (yes/no) [default=no]: Do you want to configure a new storage pool? (yes/no) [default=yes]: Name of the new storage pool [default=default]: Name of the storage backend to use (dir, zfs) [default=zfs]: Create a new ZFS pool? (yes/no) [default=yes]: Would you like to use an existing block device? (yes/no) [default=no]: yes Path to the existing block device: /dev/sdb Would you like to connect to a MAAS server? (yes/no) [default=no]: Would you like to create a new local network bridge? (yes/no) [default=yes]: no Would you like to configure LXD to use an existing bridge or host interface? (yes/no) [default=no]: no Would you like LXD to be available over the network? (yes/no) [default=no]: Would you like stale cached images to be updated automatically? (yes/no) [default=yes] Would you like a YAML "lxd init" preseed to be printed? (yes/no) [default=no]: Now run the following to launch 48 containers in batches of 12. lxd-benchmark launch --count 48 --parallel 12 In two out of four attempts, I got the kernel errors. I also tried echo 1 >/sys/module/spl/parameters/spl_taskq_kick but did not manage to continue. Include any warning/errors/backtraces from the system logs dmesg output [ 725.970508] INFO: task lxd:4455 blocked for more than 120 seconds. [ 725.976730] Tainted: P O 4.15.0-20-generic #21-Ubuntu [ 725.983551] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 725.991408] lxd D 0 4455 1 0x00000000 [ 725.991412] Call Trace: [ 725.991424] __schedule+0x297/0x8b0 [ 725.991428] schedule+0x2c/0x80 [ 725.991429] rwsem_down_write_failed+0x162/0x360 [ 725.991460] ? dbuf_rele_and_unlock+0x1a8/0x4b0 [zfs] [ 725.991465] call_rwsem_down_write_failed+0x17/0x30 [ 725.991468] ? call_rwsem_down_write_failed+0x17/0x30 [ 725.991469] down_write+0x2d/0x40 [ 725.991472] grab_super+0x30/0x90 [ 725.991501] ? zpl_create+0x160/0x160 [zfs] [ 725.991504] sget_userns+0x91/0x490 [ 725.991507] ? get_anon_bdev+0x100/0x100 [ 725.991534] ? zpl_create+0x160/0x160 [zfs] [ 725.991537] sget+0x7d/0xa0 [ 725.991540] ? get_anon_bdev+0x100/0x100 [ 725.991567] zpl_mount+0xa8/0x160 [zfs] [ 725.991570] mount_fs+0x37/0x150 [ 725.991574] vfs_kern_mount.part.23+0x5d/0x110 [ 725.991576] do_mount+0x5ed/0xce0 [ 725.991577] ? copy_mount_options+0x2c/0x220 [ 725.991578] SyS_mount+0x98/0xe0 [ 725.991582] do_syscall_64+0x73/0x130 [ 725.991583] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 725.991585] RIP: 0033:0x4dbd5a [ 725.991586] RSP: 002b:000000c428be6890 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 725.991588] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004dbd5a [ 725.991589] RDX: 000000c421a04b7c RSI: 000000c426f94f40 RDI: 000000c4274ceaa0 [ 725.991590] RBP: 000000c428be6930 R08: 000000c425521a90 R09: 0000000000000000 [ 725.991590] R10: 0000000000000000 R11: 0000000000000206 R12: ffffffffffffffff [ 725.991591] R13: 000000000000003e R14: 000000000000003d R15: 0000000000000080 [ 725.991624] INFO: task txg_sync:4202 blocked for more than 120 seconds. [ 725.998264] Tainted: P O 4.15.0-20-generic #21-Ubuntu [ 726.005071] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 726.012928] txg_sync D 0 4202 2 0x80000000 [ 726.012930] Call Trace: [ 726.012933] __schedule+0x297/0x8b0 [ 726.012939] schedule+0x2c/0x80 [ 726.012945] cv_wait_common+0x11e/0x140 [spl] [ 726.012948] ? wait_woken+0x80/0x80 [ 726.012954] __cv_wait+0x15/0x20 [spl] [ 726.012981] rrw_enter_write+0x3c/0xa0 [zfs] [ 726.013006] rrw_enter+0x13/0x20 [zfs] [ 726.013033] spa_sync+0x7c9/0xd80 [zfs] [ 726.013062] txg_sync_thread+0x2cd/0x4a0 [zfs] [ 726.013089] ? txg_quiesce_thread+0x3d0/0x3d0 [zfs] [ 726.013093] thread_generic_wrapper+0x74/0x90 [spl] [ 726.013098] kthread+0x121/0x140 [ 726.013101] ? __thread_exit+0x20/0x20 [spl] [ 726.013103] ? kthread_create_worker_on_cpu+0x70/0x70 [ 726.013104] ret_from_fork+0x22/0x40 [ 726.013313] INFO: task lxd:99919 blocked for more than 120 seconds. [ 726.019609] Tainted: P O 4.15.0-20-generic #21-Ubuntu [ 726.026418] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 726.034272] lxd D 0 99919 99626 0x00000000 [ 726.034274] Call Trace: [ 726.034277] __schedule+0x297/0x8b0 [ 726.034283] ? __wake_up_common+0x73/0x130 [ 726.034286] schedule+0x2c/0x80 [ 726.034290] cv_wait_common+0x11e/0x140 [spl] [ 726.034293] ? wait_woken+0x80/0x80 [ 726.034297] __cv_wait+0x15/0x20 [spl] [ 726.034322] txg_wait_synced+0xdd/0x130 [zfs] [ 726.034349] zil_create+0x249/0x300 [zfs] [ 726.034376] zil_commit_writer+0x6d1/0x7c0 [zfs] [ 726.034401] zil_commit.part.14+0x93/0x100 [zfs] [ 726.034429] zil_commit+0x17/0x20 [zfs] [ 726.034457] zfs_sync+0x6e/0xb0 [zfs] [ 726.034484] zpl_sync_fs+0x50/0x80 [zfs] [ 726.034490] __sync_filesystem+0x33/0x60 [ 726.034493] sync_filesystem+0x39/0x40 [ 726.034495] generic_shutdown_super+0x27/0x120 [ 726.034496] kill_anon_super+0x12/0x20 [ 726.034518] zpl_kill_sb+0x1a/0x20 [zfs] [ 726.034524] deactivate_locked_super+0x48/0x80 [ 726.034529] deactivate_super+0x40/0x60 [ 726.034532] cleanup_mnt+0x3f/0x80 [ 726.034534] __cleanup_mnt+0x12/0x20 [ 726.034535] task_work_run+0x9d/0xc0 [ 726.034537] exit_to_usermode_loop+0xc0/0xd0 [ 726.034539] do_syscall_64+0x115/0x130 [ 726.034542] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 726.034550] RIP: 0033:0x7fb553b3e8c7 [ 726.034551] RSP: 002b:00007fff426c5388 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 726.034553] RAX: 0000000000000000 RBX: 000000000000000f RCX: 00007fb553b3e8c7 [ 726.034553] RDX: 00007fb55476eb9f RSI: 0000000000000002 RDI: 00007fb554770b6b [ 726.034554] RBP: 000000000000000c R08: 0000000000000000 R09: 00007fb553b8ae67 [ 726.034555] R10: 0000000000084000 R11: 0000000000000246 R12: 00007fff426c64a0 [ 726.034555] R13: 0000000003176690 R14: 0000000003177810 R15: 00000000031741f0 [ 726.034560] INFO: task zfs:100513 blocked for more than 120 seconds. [ 726.040936] Tainted: P O 4.15.0-20-generic #21-Ubuntu [ 726.047746] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 726.055600] zfs D 0 100513 2626 0x00000000 [ 726.055602] Call Trace: [ 726.055606] __schedule+0x297/0x8b0 [ 726.055609] schedule+0x2c/0x80 [ 726.055613] cv_wait_common+0x11e/0x140 [spl] [ 726.055615] ? wait_woken+0x80/0x80 [ 726.055619] __cv_wait+0x15/0x20 [spl] [ 726.055642] rrw_enter_read_impl+0x4e/0x160 [zfs] [ 726.055666] rrw_enter+0x1c/0x20 [zfs] [ 726.055691] dsl_pool_hold+0x5a/0x80 [zfs] [ 726.055713] dmu_objset_hold+0x33/0xa0 [zfs] [ 726.055740] zfs_ioc_objset_stats+0x32/0xa0 [zfs] [ 726.055766] zfsdev_ioctl+0x1e0/0x610 [zfs] [ 726.055771] do_vfs_ioctl+0xa8/0x630 [ 726.055774] ? handle_mm_fault+0xb1/0x1f0 [ 726.055776] ? __do_page_fault+0x270/0x4d0 [ 726.055777] SyS_ioctl+0x79/0x90 [ 726.055779] do_syscall_64+0x73/0x130 [ 726.055781] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 726.055782] RIP: 0033:0x7fd4adc795d7 [ 726.055782] RSP: 002b:00007ffe356b8718 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 726.055783] RAX: ffffffffffffffda RBX: 00007ffe356b8740 RCX: 00007fd4adc795d7 [ 726.055784] RDX: 00007ffe356b8740 RSI: 0000000000005a12 RDI: 0000000000000003 [ 726.055785] RBP: 000055632e278660 R08: 000000000000ffff R09: 00007fd4adcd1ed0 [ 726.055785] R10: 2f746c7561666564 R11: 0000000000000246 R12: 000055632e278660 [ 726.055788] R13: 00007ffe356beec0 R14: 00007fd4af1756e0 R15: 00007ffe356bbe30 [ 726.055791] INFO: task zfs:100584 blocked for more than 120 seconds. [ 726.062170] Tainted: P O 4.15.0-20-generic #21-Ubuntu [ 726.068979] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 726.076835] zfs D 0 100584 15513 0x00000000 [ 726.076837] Call Trace: [ 726.076840] __schedule+0x297/0x8b0 [ 726.076845] schedule+0x2c/0x80 [ 726.076851] cv_wait_common+0x11e/0x140 [spl] [ 726.076854] ? wait_woken+0x80/0x80 [ 726.076859] __cv_wait+0x15/0x20 [spl] [ 726.076881] rrw_enter_read_impl+0x4e/0x160 [zfs] [ 726.076905] rrw_enter+0x1c/0x20 [zfs] [ 726.076929] dsl_pool_hold+0x5a/0x80 [zfs] [ 726.076951] dmu_objset_hold+0x33/0xa0 [zfs] [ 726.076977] zfs_ioc_objset_stats+0x32/0xa0 [zfs] [ 726.077001] zfsdev_ioctl+0x1e0/0x610 [zfs] [ 726.077005] do_vfs_ioctl+0xa8/0x630 [ 726.077006] ? handle_mm_fault+0xb1/0x1f0 [ 726.077008] ? __do_page_fault+0x270/0x4d0 [ 726.077010] SyS_ioctl+0x79/0x90 [ 726.077011] do_syscall_64+0x73/0x130 [ 726.077013] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 726.077014] RIP: 0033:0x7fc2734075d7 [ 726.077014] RSP: 002b:00007fff653a4b08 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 726.077015] RAX: ffffffffffffffda RBX: 00007fff653a4b30 RCX: 00007fc2734075d7 [ 726.077016] RDX: 00007fff653a4b30 RSI: 0000000000005a12 RDI: 0000000000000003 [ 726.077017] RBP: 000055f3576e9660 R08: 000000000000ffff R09: 00007fc27345fed0 [ 726.077017] R10: 2f746c7561666564 R11: 0000000000000246 R12: 000055f3576e9660 [ 726.077018] R13: 00007fff653aaec0 R14: 00007fc2749036e0 R15: 00007fff653a8220 [ 846.801124] INFO: task lxd:4455 blocked for more than 120 seconds. [ 846.807352] Tainted: P O 4.15.0-20-generic #21-Ubuntu [ 846.814170] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 846.822028] lxd D 0 4455 1 0x00000000 [ 846.822031] Call Trace: [ 846.822042] __schedule+0x297/0x8b0 [ 846.822045] schedule+0x2c/0x80 [ 846.822047] rwsem_down_write_failed+0x162/0x360 [ 846.822078] ? dbuf_rele_and_unlock+0x1a8/0x4b0 [zfs] [ 846.822083] call_rwsem_down_write_failed+0x17/0x30 [ 846.822086] ? call_rwsem_down_write_failed+0x17/0x30 [ 846.822087] down_write+0x2d/0x40 [ 846.822091] grab_super+0x30/0x90 [ 846.822118] ? zpl_create+0x160/0x160 [zfs] [ 846.822121] sget_userns+0x91/0x490 [ 846.822123] ? get_anon_bdev+0x100/0x100 [ 846.822150] ? zpl_create+0x160/0x160 [zfs] [ 846.822153] sget+0x7d/0xa0 [ 846.822156] ? get_anon_bdev+0x100/0x100 [ 846.822181] zpl_mount+0xa8/0x160 [zfs] [ 846.822183] mount_fs+0x37/0x150 [ 846.822188] vfs_kern_mount.part.23+0x5d/0x110 [ 846.822189] do_mount+0x5ed/0xce0 [ 846.822190] ? copy_mount_options+0x2c/0x220 [ 846.822192] SyS_mount+0x98/0xe0 [ 846.822195] do_syscall_64+0x73/0x130 [ 846.822196] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 846.822198] RIP: 0033:0x4dbd5a [ 846.822199] RSP: 002b:000000c428be6890 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 846.822201] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000004dbd5a [ 846.822203] RDX: 000000c421a04b7c RSI: 000000c426f94f40 RDI: 000000c4274ceaa0 [ 846.822205] RBP: 000000c428be6930 R08: 000000c425521a90 R09: 0000000000000000 [ 846.822206] R10: 0000000000000000 R11: 0000000000000206 R12: ffffffffffffffff [ 846.822206] R13: 000000000000003e R14: 000000000000003d R15: 0000000000000080 [ 846.822239] INFO: task txg_sync:4202 blocked for more than 120 seconds. [ 846.828882] Tainted: P O 4.15.0-20-generic #21-Ubuntu [ 846.835692] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 846.843549] txg_sync D 0 4202 2 0x80000000 [ 846.843551] Call Trace: [ 846.843554] __schedule+0x297/0x8b0 [ 846.843560] schedule+0x2c/0x80 [ 846.843566] cv_wait_common+0x11e/0x140 [spl] [ 846.843570] ? wait_woken+0x80/0x80 [ 846.843574] __cv_wait+0x15/0x20 [spl] [ 846.843603] rrw_enter_write+0x3c/0xa0 [zfs] [ 846.843629] rrw_enter+0x13/0x20 [zfs] [ 846.843654] spa_sync+0x7c9/0xd80 [zfs] [ 846.843682] txg_sync_thread+0x2cd/0x4a0 [zfs] [ 846.843708] ? txg_quiesce_thread+0x3d0/0x3d0 [zfs] [ 846.843713] thread_generic_wrapper+0x74/0x90 [spl] [ 846.843717] kthread+0x121/0x140 [ 846.843720] ? __thread_exit+0x20/0x20 [spl] [ 846.843721] ? kthread_create_worker_on_cpu+0x70/0x70 [ 846.843723] ret_from_fork+0x22/0x40 [ 846.843931] INFO: task lxd:99919 blocked for more than 120 seconds. [ 846.850227] Tainted: P O 4.15.0-20-generic #21-Ubuntu [ 846.857040] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 846.864892] lxd D 0 99919 99626 0x00000000 [ 846.864894] Call Trace: [ 846.864897] __schedule+0x297/0x8b0 [ 846.864903] ? __wake_up_common+0x73/0x130 [ 846.864906] schedule+0x2c/0x80 [ 846.864910] cv_wait_common+0x11e/0x140 [spl] [ 846.864912] ? wait_woken+0x80/0x80 [ 846.864917] __cv_wait+0x15/0x20 [spl] [ 846.864942] txg_wait_synced+0xdd/0x130 [zfs] [ 846.864971] zil_create+0x249/0x300 [zfs] [ 846.864998] zil_commit_writer+0x6d1/0x7c0 [zfs] [ 846.865023] zil_commit.part.14+0x93/0x100 [zfs] [ 846.865051] zil_commit+0x17/0x20 [zfs] [ 846.865080] zfs_sync+0x6e/0xb0 [zfs] [ 846.865107] zpl_sync_fs+0x50/0x80 [zfs] [ 846.865111] __sync_filesystem+0x33/0x60 [ 846.865113] sync_filesystem+0x39/0x40 [ 846.865114] generic_shutdown_super+0x27/0x120 [ 846.865116] kill_anon_super+0x12/0x20 [ 846.865138] zpl_kill_sb+0x1a/0x20 [zfs] [ 846.865140] deactivate_locked_super+0x48/0x80 [ 846.865143] deactivate_super+0x40/0x60 [ 846.865145] cleanup_mnt+0x3f/0x80 [ 846.865147] __cleanup_mnt+0x12/0x20 [ 846.865148] task_work_run+0x9d/0xc0 [ 846.865150] exit_to_usermode_loop+0xc0/0xd0 [ 846.865152] do_syscall_64+0x115/0x130 [ 846.865153] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 846.865154] RIP: 0033:0x7fb553b3e8c7 [ 846.865155] RSP: 002b:00007fff426c5388 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 846.865156] RAX: 0000000000000000 RBX: 000000000000000f RCX: 00007fb553b3e8c7 [ 846.865158] RDX: 00007fb55476eb9f RSI: 0000000000000002 RDI: 00007fb554770b6b [ 846.865159] RBP: 000000000000000c R08: 0000000000000000 R09: 00007fb553b8ae67 [ 846.865162] R10: 0000000000084000 R11: 0000000000000246 R12: 00007fff426c64a0 [ 846.865162] R13: 0000000003176690 R14: 0000000003177810 R15: 00000000031741f0 [ 846.865167] INFO: task zfs:100513 blocked for more than 120 seconds. [ 846.871546] Tainted: P O 4.15.0-20-generic #21-Ubuntu [ 846.878357] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 846.886214] zfs D 0 100513 2626 0x00000000 [ 846.886215] Call Trace: [ 846.886218] __schedule+0x297/0x8b0 [ 846.886223] schedule+0x2c/0x80 [ 846.886230] cv_wait_common+0x11e/0x140 [spl] [ 846.886232] ? wait_woken+0x80/0x80 [ 846.886237] __cv_wait+0x15/0x20 [spl] [ 846.886261] rrw_enter_read_impl+0x4e/0x160 [zfs] [ 846.886284] rrw_enter+0x1c/0x20 [zfs] [ 846.886309] dsl_pool_hold+0x5a/0x80 [zfs] [ 846.886331] dmu_objset_hold+0x33/0xa0 [zfs] [ 846.886357] zfs_ioc_objset_stats+0x32/0xa0 [zfs] [ 846.886383] zfsdev_ioctl+0x1e0/0x610 [zfs] [ 846.886388] do_vfs_ioctl+0xa8/0x630 [ 846.886391] ? handle_mm_fault+0xb1/0x1f0 [ 846.886394] ? __do_page_fault+0x270/0x4d0 [ 846.886396] SyS_ioctl+0x79/0x90 [ 846.886397] do_syscall_64+0x73/0x130 [ 846.886399] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 846.886400] RIP: 0033:0x7fd4adc795d7 [ 846.886402] RSP: 002b:00007ffe356b8718 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 846.886405] RAX: ffffffffffffffda RBX: 00007ffe356b8740 RCX: 00007fd4adc795d7 [ 846.886406] RDX: 00007ffe356b8740 RSI: 0000000000005a12 RDI: 0000000000000003 [ 846.886406] RBP: 000055632e278660 R08: 000000000000ffff R09: 00007fd4adcd1ed0 [ 846.886407] R10: 2f746c7561666564 R11: 0000000000000246 R12: 000055632e278660 [ 846.886408] R13: 00007ffe356beec0 R14: 00007fd4af1756e0 R15: 00007ffe356bbe30 [ 846.886410] INFO: task zfs:100584 blocked for more than 120 seconds. [ 846.892790] Tainted: P O 4.15.0-20-generic #21-Ubuntu [ 846.899598] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 846.907454] zfs D 0 100584 15513 0x00000000 [ 846.907456] Call Trace: [ 846.907459] __schedule+0x297/0x8b0 [ 846.907465] schedule+0x2c/0x80 [ 846.907470] cv_wait_common+0x11e/0x140 [spl] [ 846.907471] ? wait_woken+0x80/0x80 [ 846.907477] __cv_wait+0x15/0x20 [spl] [ 846.907499] rrw_enter_read_impl+0x4e/0x160 [zfs] [ 846.907523] rrw_enter+0x1c/0x20 [zfs] [ 846.907547] dsl_pool_hold+0x5a/0x80 [zfs] [ 846.907568] dmu_objset_hold+0x33/0xa0 [zfs] [ 846.907594] zfs_ioc_objset_stats+0x32/0xa0 [zfs] [ 846.907618] zfsdev_ioctl+0x1e0/0x610 [zfs] [ 846.907622] do_vfs_ioctl+0xa8/0x630 [ 846.907624] ? handle_mm_fault+0xb1/0x1f0 [ 846.907625] ? __do_page_fault+0x270/0x4d0 [ 846.907627] SyS_ioctl+0x79/0x90 [ 846.907628] do_syscall_64+0x73/0x130 [ 846.907630] entry_SYSCALL_64_after_hwframe+0x3d/0xa2 [ 846.907631] RIP: 0033:0x7fc2734075d7 [ 846.907631] RSP: 002b:00007fff653a4b08 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 846.907633] RAX: ffffffffffffffda RBX: 00007fff653a4b30 RCX: 00007fc2734075d7 [ 846.907633] RDX: 00007fff653a4b30 RSI: 0000000000005a12 RDI: 0000000000000003 [ 846.907634] RBP: 000055f3576e9660 R08: 000000000000ffff R09: 00007fc27345fed0 [ 846.907635] R10: 2f746c7561666564 R11: 0000000000000246 R12: 000055f3576e9660 [ 846.907637] R13: 00007fff653aaec0 R14: 00007fc2749036e0 R15: 00007fff653a8220 Contents of "/proc/spl/kstat/zfs/arcstats" 13 1 0x01 96 4608 11300672527 1808059980062 name type data hits 4 44186496 misses 4 1247761 demand_data_hits 4 3327097 demand_data_misses 4 17953 demand_metadata_hits 4 39832270 demand_metadata_misses 4 1076950 prefetch_data_hits 4 1357 prefetch_data_misses 4 23 prefetch_metadata_hits 4 1025772 prefetch_metadata_misses 4 152835 mru_hits 4 18193851 mru_ghost_hits 4 0 mfu_hits 4 24976976 mfu_ghost_hits 4 0 deleted 4 10 mutex_miss 4 0 access_skip 4 68 evict_skip 4 1 evict_not_enough 4 0 evict_l2_cached 4 0 evict_l2_eligible 4 101376 evict_l2_ineligible 4 2048 evict_l2_skip 4 0 hash_elements 4 38683 hash_elements_max 4 57741 hash_collisions 4 1520 hash_chains 4 5 hash_chain_max 4 1 p 4 16815604736 c 4 33631209472 c_min 4 2101950592 c_max 4 33631209472 size 4 833199872 compressed_size 4 286609408 uncompressed_size 4 831992320 overhead_size 4 330568192 hdr_size 4 14660144 data_size 4 193579520 metadata_size 4 423598080 dbuf_size 4 46065424 dnode_size 4 112384064 bonus_size 4 42912640 anon_size 4 36502016 anon_evictable_data 4 0 anon_evictable_metadata 4 0 mru_size 4 310932480 mru_evictable_data 4 27623424 mru_evictable_metadata 4 136801792 mru_ghost_size 4 0 mru_ghost_evictable_data 4 0 mru_ghost_evictable_metadata 4 0 mfu_size 4 269743104 mfu_evictable_data 4 53612032 mfu_evictable_metadata 4 3195392 mfu_ghost_size 4 0 mfu_ghost_evictable_data 4 0 mfu_ghost_evictable_metadata 4 0 l2_hits 4 0 l2_misses 4 0 l2_feeds 4 0 l2_rw_clash 4 0 l2_read_bytes 4 0 l2_write_bytes 4 0 l2_writes_sent 4 0 l2_writes_done 4 0 l2_writes_error 4 0 l2_writes_lock_retry 4 0 l2_evict_lock_retry 4 0 l2_evict_reading 4 0 l2_evict_l1cached 4 0 l2_free_on_write 4 0 l2_abort_lowmem 4 0 l2_cksum_bad 4 0 l2_io_error 4 0 l2_size 4 0 l2_asize 4 0 l2_hdr_size 4 0 memory_throttle_count 4 0 memory_direct_count 4 0 memory_indirect_count 4 0 memory_all_bytes 4 67262418944 memory_free_bytes 4 57157578752 memory_available_bytes 3 56106606592 arc_no_grow 4 0 arc_tempreserve 4 0 arc_loaned_bytes 4 0 arc_prune 4 0 arc_meta_used 4 639620352 arc_meta_limit 4 25223407104 arc_dnode_limit 4 2522340710 arc_meta_max 4 965175896 arc_meta_min 4 16777216 sync_wait_for_async 4 168 demand_hit_predictive_prefetch 4 999 arc_need_free 4 0 arc_sys_free 4 1050975296 Command "slabtop -o" Active / Total Objects (% used) : 28354235 / 29140626 (97.3%) Active / Total Slabs (% used) : 382017 / 382017 (100.0%) Active / Total Caches (% used) : 95 / 128 (74.2%) Active / Total Size (% used) : 4580408.56K / 4743868.00K (96.6%) Minimum / Average / Maximum Object : 0.01K / 0.16K / 21.81K OBJS ACTIVE USE OBJ SIZE SLABS OBJ/SLAB CACHE SIZE NAME 17206144 17204917 0% 0.03K 134423 128 537692K kmalloc-32 1141392 966790 0% 0.19K 27176 42 217408K dentry 1114496 1004537 0% 0.06K 17414 64 69656K kmalloc-64 1088192 1078186 0% 0.50K 17003 64 544096K kmalloc-512 1038300 714247 0% 0.13K 17305 60 138440K kernfs_node_cache 937536 931296 0% 0.25K 14649 64 234384K filp 684160 682244 0% 0.06K 10690 64 42760K pid 582099 569877 0% 0.59K 10983 53 351456K inode_cache 520104 518529 0% 0.20K 13336 39 106688K vm_area_struct 404334 388371 0% 0.09K 9627 42 38508K kmalloc-96 342286 341596 0% 0.09K 7441 46 29764K anon_vma 342016 338948 0% 0.25K 5344 64 85504K kmalloc-256 277032 276822 0% 0.19K 6596 42 52768K cred_jar 248352 241634 0% 0.66K 5174 48 165568K proc_inode_cache 248320 233052 0% 0.01K 485 512 1940K kmalloc-8 214984 143177 0% 0.57K 3839 56 122848K radix_tree_node To manage notifications about this bug go to: https://bugs.launchpad.net/linux/+bug/1781364/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp