[Devel] [PATCH RHEL7 COMMIT] ms/netfilter: ipset: fix a missing check of nla_parse

(cherry-picked from commit f4f5748bfec94cf418e49bf05f0c81a1b9ebc95) VvS: replaced original nla_parse_deprecated() by nla_parse() https://jira.sw.ru/browse/PSBM-122965 Signed-off-by: Vasily Averin --- net/netfilter/ipset/ip_set_core.c | 6 +- 1 file changed, 5 insertions(+

[Devel] [PATCH RHEL7 COMMIT] ms/netfilter: ipset: Fix the last missing check of nla_parse_deprecated()

d from commit 13c6ba1f855415cf3b9c58ea926ae8858050ec1c) VvS: replaced original nla_parse_deprecated() by nla_parse() https://jira.sw.ru/browse/PSBM-122965 Signed-off-by: Vasily Averin --- net/netfilter/ipset/ip_set_core.c | 6 -- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/net/netfilter/ipset/

[Devel] [PATCH RH7] ms/net: rtnetlink: validate IFLA_MTU attribute in rtnl_create_link()

ff-by: Eric Dumazet Reported-by: syzbot Signed-off-by: David S. Miller (cherry-picked from commit d836f5c69d87473ff65c06a6123e5b2cf5e56f5b) VvS: adjusted for RHEL7 kernels. https://jira.sw.ru/browse/PSBM-122988 Signed-off-by: Vasily Averin --- include/linux/netdevice.h | 1 + net/core/de

[Devel] [PATCH RHEL7 COMMIT] netfilter: Add warning on nft NAT init if "iptable_nat" already loaded

The commit is pushed to "branch-rh7-3.10.0-1160.6.1.vz7.171.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git after rh7-3.10.0-1160.6.1.vz7.171.1 --> commit 754ff31c18a2bbb69ea49cbb83c36ace850904c8 Author: Konstantin Khorenko Date: Thu Dec 3 11:51:57 2020 +0300

[Devel] [PATCH RHEL7 COMMIT] ms/ip6mr: fix stale iterator

gned-off-by: David S. Miller (cherry-picked from commit 4adfa79fc254efb7b0eb3cd58f62c2c3f805f1ba) https://jira.sw.ru/browse/PSBM-122990 Signed-off-by: Vasily Averin --- net/ipv6/ip6mr.c | 1 + 1 file changed, 1 insertion(+) diff --git a/net/ipv6/ip6mr.c b/net/ipv6/ip6mr.c index 00c6c7d..85

[Devel] [PATCH RHEL7 COMMIT] ms/net_sched: gen_estimator: fix lockdep splat

(cherry-picked from commit 40ca54e3a686f13117f3de0c443f8026dadf7c44) https://jira.sw.ru/browse/PSBM-123087 Signed-off-by: Vasily Averin --- net/core/gen_estimator.c | 4 1 file changed, 4 insertions(+) diff --git a/net/core/gen_estimator.c b/net/core/gen_estimator.c ind

[Devel] [PATCH RHEL7 COMMIT] ms/xfrm: check id proto in validate_tmpl()

mproto_getbyname(). Reported-by: syzbot Cc: Steffen Klassert Cc: Herbert Xu Signed-off-by: Cong Wang Signed-off-by: Steffen Klassert (cherry-picked from commit 6a53b7593233ab9e4f96873ebacc0f653a55c3e1) https://jira.sw.ru/browse/PSBM-123084 Signed-off-by: Vasily

[Devel] [PATCH RHEL7 COMMIT] ms/ext4: fix argument checking in EXT4_IOC_MOVE_EXT

ckup detector. Reported-by: syzbot+c61979f6f2cba5cb3...@syzkaller.appspotmail.com Signed-off-by: Theodore Ts'o Cc: sta...@kernel.org (cherry-picked from commit f18b2b83a727a3db208308057d2c7945f368e625) https://jira.sw.ru/browse/PSBM-122991 Signed-off-by: Vasily Averin

[Devel] [PATCH RH7 v4] ms/mm: list_lru: set shrinker map bit when child nr_items is not zero

adimir Davydov Cc: [4.19] Signed-off-by: Andrew Morton Signed-off-by: Vasily Averin --- mm/list_lru.c | 10 +- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/mm/list_lru.c b/mm/list_lru.c index 21e12a8364ff..c7a51e3b42b0 100644 --- a/mm/list_lru.c +++ b/mm/list_lru.

[Devel] [PATCH RHEL7 COMMIT] ms/mm: list_lru: set shrinker map bit when child nr_items is not zero

Reviewed-by: Roman Gushchin Acked-by: Kirill Tkhai Reviewed-by: Shakeel Butt Cc: Vladimir Davydov Cc: [4.19] Signed-off-by: Andrew Morton Signed-off-by: Vasily Averin --- mm/list_lru.c | 10 +- 1 file changed, 5 insertions(+), 5 deletions(-) diff --gi

[Devel] [PATCH RHEL7 COMMIT] ms/tracing: Fix race in trace_open and buffer resize call

The commit is pushed to "branch-rh7-3.10.0-1160.6.1.vz7.171.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git after rh7-3.10.0-1160.6.1.vz7.171.2 --> commit d0b2f7cda662987572c5f84e7a8831d8c1135bd1 Author: Vasily Averin Date: Thu Dec 3 15:31:57 2020

[Devel] [PATCH RHEL7 COMMIT] ms/extable: Consolidate *kernel_text_address() functions

The commit is pushed to "branch-rh7-3.10.0-1160.6.1.vz7.171.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git after rh7-3.10.0-1160.6.1.vz7.171.2 --> commit e0ec00505c7f9e92a713e334002190054e8b9b06 Author: Vasily Averin Date: Thu Dec 3 15:31:43 2020

[Devel] [PATCH RHEL7 COMMIT] ipv6: silence high-order allocation warinig in rawv6_sendmsg()

The commit is pushed to "branch-rh7-3.10.0-1160.6.1.vz7.171.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git after rh7-3.10.0-1160.6.1.vz7.171.2 --> commit a789adeb4aa63465ea8706671bf7875a0b0f5cf7 Author: Vasily Averin Date: Thu Dec 3 15:31:05 2020 +0

[Devel] [PATCH RHEL7 COMMIT] ms/extable: Enable RCU if it is not watching in kernel_text_address()

The commit is pushed to "branch-rh7-3.10.0-1160.6.1.vz7.171.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git after rh7-3.10.0-1160.6.1.vz7.171.2 --> commit e451ccff8b8e1bd549a1e91fe1a79832d2243fa5 Author: Vasily Averin Date: Thu Dec 3 15:31:25 2020

[Devel] [PATCH RHEL7 COMMIT] net: silence high-order-allocation warning in sctp_pack_cookie()

The commit is pushed to "branch-rh7-3.10.0-1160.6.1.vz7.171.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git after rh7-3.10.0-1160.6.1.vz7.171.2 --> commit dab40f38f6217964b739d0050ba3cc09ff546aa6 Author: Vasily Averin Date: Thu Dec 3 15:31:13 2020 +

[Devel] [PATCH RHEL7 COMMIT] ms/tracing: remove WARN_ON in start_thread()

The commit is pushed to "branch-rh7-3.10.0-1160.6.1.vz7.171.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git after rh7-3.10.0-1160.6.1.vz7.171.2 --> commit 7cc528788043cafd5989952719ad8a37046158fb Author: Vasily Averin Date: Thu Dec 3 15:32:05 2020

[Devel] [PATCH RHEL7 COMMIT] fs/fuse kio: always use memory registrations for iWarp RDMA reads

The commit is pushed to "branch-rh7-3.10.0-1160.6.1.vz7.171.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git after rh7-3.10.0-1160.6.1.vz7.171.2 --> commit 91e15c2568717fe5f9b75c2baea7be883958ab2e Author: Ildar Ismagilov Date: Thu Dec 3 15:32:12 2020 +0300 fs/fuse

[Devel] [PATCH RH7 1/2] ms/netfilter: ipset: Fix forceadd evaluation path

b66) https://jira.sw.ru/browse/PSBM-123063 Signed-off-by: Vasily Averin --- net/netfilter/ipset/ip_set_hash_gen.h | 2 ++ 1 file changed, 2 insertions(+) diff --git a/net/netfilter/ipset/ip_set_hash_gen.h b/net/netfilter/ipset/ip_set_hash_gen.h index aa10e4a..45046e5 100644 --- a/net/netfi

[Devel] [PATCH RH7 2/2] ms/netfilter: ipset: Correct rcu_dereference() call in ip_set_put_comment()

Signed-off-by: Vasily Averin --- include/linux/netfilter/ipset/ip_set_comment.h | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/include/linux/netfilter/ipset/ip_set_comment.h b/include/linux/netfilter/ipset/ip_set_comment.h index 8e2bab1..70877f8d 100644 --- a/include/linux

[Devel] [PATCH RH7] ms/net_sched: gen_estimator: fix lockdep splat

87 Signed-off-by: Vasily Averin --- net/core/gen_estimator.c | 4 1 file changed, 4 insertions(+) diff --git a/net/core/gen_estimator.c b/net/core/gen_estimator.c index bca1d06..0e3024c 100644 --- a/net/core/gen_estimator.c +++ b/net/core/gen_estimator.c @@ -159,7 +159,11 @@ int gen_new_est

[Devel] [PATCH RH7 3/6] ms/netfilter: ipset: Fix the last missing check of nla_parse_deprecated()

() by nla_parse() https://jira.sw.ru/browse/PSBM-122965 Signed-off-by: Vasily Averin --- net/netfilter/ipset/ip_set_core.c | 6 -- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/net/netfilter/ipset/ip_set_core.c b/net/netfilter/ipset/ip_set_core.c index d5344e5..0a53827 100644 --- a/net

[Devel] [PATCH RH7 1/6] ms/netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO is present

hal Acked-by: Jozsef Kadlecsik Signed-off-by: Pablo Neira Ayuso (cherry-picked from commit 22dad713b8a5ff488e07b821195270672f486eb2) https://jira.sw.ru/browse/PSBM-122965 Signed-off-by: Vasily Averin --- net/netfilter/ipset/ip_set_core.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-)

[Devel] [PATCH RH7] ms/xfrm: check id proto in validate_tmpl()

off-by: Cong Wang Signed-off-by: Steffen Klassert (cherry-picked from commit 6a53b7593233ab9e4f96873ebacc0f653a55c3e1) https://jira.sw.ru/browse/PSBM-123084 Signed-off-by: Vasily Averin --- net/xfrm/xfrm_user.c | 15 +++ 1 file changed, 15 insertions(+) diff --git a/net/x

[Devel] [PATCH RH7 5/6] ms/netfilter: ipset: fix suspicious RCU usage in find_set_and_id

5038517119d50ed0240059b1d7fc2faa92371c08) https://jira.sw.ru/browse/PSBM-122965 Signed-off-by: Vasily Averin --- net/netfilter/ipset/ip_set_core.c | 41 --- 1 file changed, 21 insertions(+), 20 deletions(-) diff --git a/net/netfilter/ipset/ip_set_core.c b/net/netfilter/ipset

[Devel] [PATCH RH7 6/6] ms/netfilter: ipset: Fix calling ip_set() macro at dumping

Signed-off-by: Pablo Neira Ayuso (cherry-picked from commit 8a02bdd50b2ecb6d62121d2958d3ea186cc88ce7) https://jira.sw.ru/browse/PSBM-122965 Signed-off-by: Vasily Averin --- net/netfilter/ipset/ip_set_core.c | 12 1 file changed, 8 insertions(+), 4 deletions(-) diff --git a/net

[Devel] [PATCH RH7] ms/ip6mr: fix stale iterator

f62c2c3f805f1ba) https://jira.sw.ru/browse/PSBM-122990 Signed-off-by: Vasily Averin --- net/ipv6/ip6mr.c | 1 + 1 file changed, 1 insertion(+) diff --git a/net/ipv6/ip6mr.c b/net/ipv6/ip6mr.c index 00c6c7d..856173b6 100644 --- a/net/ipv6/ip6mr.c +++ b/net/ipv6/ip6mr.c @@ -497,6 +497,7

[Devel] [PATCH RH7] ms/ext4: fix argument checking in EXT4_IOC_MOVE_EXT

Signed-off-by: Theodore Ts'o Cc: sta...@kernel.org (cherry-picked from commit f18b2b83a727a3db208308057d2c7945f368e625) https://jira.sw.ru/browse/PSBM-122991 Signed-off-by: Vasily Averin --- fs/ext4/move_extent.c | 8 ++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/fs/ext4

[Devel] [PATCH RH7 4/4] ms/packet: fix bitfield update race

08663c93fd https://jira.sw.ru/browse/PSBM-123046 Signed-off-by: Vasily Averin --- net/packet/af_packet.c | 60 -- net/packet/internal.h | 10 - 2 files changed, 49 insertions(+), 21 deletions(-) diff --git a/net/packet/af_packet.c b/net/packet/a

[Devel] [PATCH RH7 3/4] ms/make sock_alloc_file() do sock_release() on failures

-123046 Signed-off-by: Vasily Averin --- net/9p/trans_fd.c | 1 - net/sctp/socket.c | 1 - net/socket.c | 27 +-- 3 files changed, 9 insertions(+), 20 deletions(-) diff --git a/net/9p/trans_fd.c b/net/9p/trans_fd.c index 02efb25..01cb566 100644 --- a/net/9p/trans_fd.c

[Devel] [PATCH RH7 1/4] ms/net: handle error more gracefully in socketpair()

) https://syzkaller.appspot.com/bug?id=23d0799f98b7c8c4bc3f5ecff7c28a87c64e40e8 https://jira.sw.ru/browse/PSBM-123046 Signed-off-by: Vasily Averin --- net/socket.c | 49 +++-- 1 file changed, 31 insertions(+), 18 deletions(-) diff --git a/net/socket.c b

[Devel] [PATCH RH7 2/4] ms/socketpair(): allocate descriptors first

://jira.sw.ru/browse/PSBM-123046 Signed-off-by: Vasily Averin --- net/socket.c | 91 ++-- 1 file changed, 39 insertions(+), 52 deletions(-) diff --git a/net/socket.c b/net/socket.c index dd8fa2d..6ea6b18 100644 --- a/net/socket.c +++ b/net

[Devel] [PATCH RHEL7 COMMIT] ms/netfilter: ipset: Convert timers to use timer_setup()

i Cc: netfilter-de...@vger.kernel.org Cc: coret...@netfilter.org Cc: net...@vger.kernel.org Signed-off-by: Kees Cook Signed-off-by: David S. Miller (cherry-picked frm commit a92c5751b97cca55d8140ec0bf26a53c7e00bfa5) https://jira.sw.ru/browse/PSBM-123086 Signed off-by:

[Devel] [PATCH RHEL7 COMMIT] ms/netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports

r context changes because of skipped backport of bd96b4c7 "netfilter: inline four headers files into another one." https://jira.sw.ru/browse/PSBM-123086 Signed-off-by: Vasily Averin --- include/linux/netfilter/ipset/ip_set.h | 11 +- net/netfilter/ipset/ip_set_core.c |

[Devel] [PATCH RHEL7 COMMIT] ms/netfilter: Replace spin_is_locked() with lockdep

https://jira.sw.ru/browse/PSBM-123086 Signed-off-by: Vasily Averin --- net/netfilter/ipset/ip_set_hash_gen.h | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/net/netfilter/ipset/ip_set_hash_gen.h b/net/netfilter/ipset/ip_set_hash_gen.h index 225348a..a437adf 100644 --

[Devel] [PATCH RHEL7 COMMIT] ms/net: Fix usage of pskb_trim_rcsum

oss Lagerwall Signed-off-by: David S. Miller (cherry-picked from commit 6c57f0458022298e4da1729c67bd33ce41c14e7a) https://jira.sw.ru/browse/PSBM-123062 Signed-off-by: Vasily Averin --- drivers/net/ppp/pppoe.c | 1 + include/linux/skbuff.h | 1

[Devel] [PATCH RHEL7 COMMIT] ms/net: make skb_partial_csum_set() more robust against overflows

ller (cherry-picked from commit 52b5d6f5dcf0e5201392f7d417148ccb537dbf6f) https://jira.sw.ru/browse/PSBM-123062 Signed-off-by: Vasily Averin --- net/core/skbuff.c | 12 +++- 1 file changed, 7 insertions(+), 5 deletions(-) diff --git a/net/core/skbuff.c b/net/core/skbuff.c index fa5ba0d..eef4100 1006

[Devel] [PATCH RHEL7 COMMIT] ms/netfilter: xt_checksum: ignore gso skbs

ges https://jira.sw.ru/browse/PSBM-123062 Signed-off-by: Vasily Averin --- net/netfilter/Kconfig | 12 ++-- net/netfilter/xt_CHECKSUM.c | 23 ++- 2 files changed, 28 insertions(+), 7 deletions(-) diff --git a/net/netfilter/Kconfig b/net/netfilter/Kconfig

[Devel] [PATCH RHEL7 COMMIT] ms/net: drop bogus skb with CHECKSUM_PARTIAL and offset beyond end of trimmed packet

The commit is pushed to "branch-rh7-3.10.0-1160.6.1.vz7.171.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git after rh7-3.10.0-1160.6.1.vz7.171.4 --> commit dd590cd4c2f3c21197754f40d9f67165a7470dc5 Author: Vasily Averin Date: Tue Dec 15 12:24:50 2020 +030

[Devel] [PATCH RHEL7 COMMIT] ms/KVM: x86: reinstate vendor-agnostic check on SPEC_CTRL cpuid bits #PSBM-120787 #PSBM-123538 #PSBM-121767

eature bits are enabled. https://jira.sw.ru/browse/PSBM-120787 Signed-off-by: Denis V. Lunev CC: Vasily Averin CC: Konstantin Khorenko Port to vz7 note: in vz7 both functions svm_set_msr(

[Devel] [PATCH RHEL7 COMMIT] ve/net/core: allow to call setsockopt(SO_RCVBUFFORCE) from Containers

The commit is pushed to "branch-rh7-3.10.0-1160.6.1.vz7.171.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git after rh7-3.10.0-1160.6.1.vz7.171.4 --> commit bd3e846de350fcff5cfdcd6133adb7c610b3a4af Author: Konstantin Khorenko Date: Tue Dec 15 12:30:04 2020 +0300

[Devel] [PATCH RH7] net: drop CHECKSUM_PARTIAL if skb is trimmed below size of checksummed area

syzbot reproduces BUG_ON in skb_checksum_help(): tun creates skb with big partial checksum area and small ip packet inside, then ip_rcv() decreases skb size of below length of checksummed area, then checksum_tg() called via netfilter hook detects incorrect skb: offset =

[Devel] [PATCH RH7 2/2] ms/ipv6: remove null_entry before adding default route

nt 4512c43eac7e007d982e7ea45152ea6f3f4d1921) VvS: backported, removed rcu access to fn->leaf, added net argument to fib6_add_1() https://jira.sw.ru/browse/PSBM-123045 Signed-off-by: Vasily Averin --- net/ipv6/ip6_fib.c | 47 ++- 1 file changed,

[Devel] [PATCH RH7 1/2] ms/ipv6: repair fib6 tree in failure case

PSBM-123045 Signed-off-by: Vasily Averin --- net/ipv6/ip6_fib.c | 22 +++--- 1 file changed, 11 insertions(+), 11 deletions(-) diff --git a/net/ipv6/ip6_fib.c b/net/ipv6/ip6_fib.c index 9a0d4e1..fb25b0c 100644 --- a/net/ipv6/ip6_fib.c +++ b/net/ipv6/ip6_fib.c @@ -1103,7 +1103,7

[Devel] [PATCH RH7] netlink: silence high-order memory allocation warning in netlink_ack

msg+0x34e/0x460 [] sock_sendmsg+0xb0/0xf0 [] ___sys_sendmsg+0x3e9/0x400 [] __sys_sendmsg+0x51/0x90 [] SyS_sendmsg+0x12/0x20 [] system_call_fastpath+0x25/0x2a This patch disables warning generation in this case. https://jira.sw.ru/browse/PSBM-120889 Signed-off-by: Vasily Averin --- net/netl

[Devel] [PATCH RH7] Revert "MS/NET/IPV6: remove duplicate neigh_ifdown"

lookup(nd_tbl) neigh_lookup() locks nd_tbl->lock for reading yielding a deadlock." Though it is not actual for vz7: icmp6_dst_alloc() does not calls ndisc_get_neigh() https://jira.sw.ru/browse/PSBM-124032 Signed-off-by: Vasily Averin --- net/ipv6/addrconf.c | 1 + 1 file changed, 1 in

[Devel] [PATCH RHEL7 COMMIT] ms/ipv6: remove null_entry before adding default route

53e6 ("ipv6: replace rwlock with rcu and spinlock in fib6_ta Signed-off-by: Wei Wang Acked-by: Martin KaFai Lau Signed-off-by: David S. Miller (cherry-picked from comment 4512c43eac7e007d982e7ea45152ea6f3f4d1921) VvS: backported, removed rcu access to fn->leaf,

[Devel] [PATCH RHEL7 COMMIT] ms/ipv6: repair fib6 tree in failure case

quot; tag as this seems to be a bug introduced very early. Signed-off-by: Wei Wang Acked-by: Eric Dumazet Signed-off-by: David S. Miller (cherry picked from commit 348a4002729ccab8b888b38cbc099efa2f2a2036) VvS: minor context fixes https://jira.sw.ru/browse/PSBM-1230

[Devel] [PATCH RHEL7 COMMIT] netlink: silence high-order memory allocation warning in netlink_ack

The commit is pushed to "branch-rh7-3.10.0-1160.11.1.vz7.172.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git after rh7-3.10.0-1160.11.1.vz7.172.3 --> commit 14ca279dad6b450853fed125537c8e8d738efa1c Author: Vasily Averin Date: Thu Dec 24 07:14:

[Devel] [PATCH RHEL7 COMMIT] ve/cgroup: At container start check ve's css_set for host-level cgroups.

The commit is pushed to "branch-rh7-3.10.0-1160.11.1.vz7.172.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git after rh7-3.10.0-1160.11.1.vz7.172.3 --> commit 105332edc47ce43b9321983249417512f70906ce Author: Valeriy Vdovin Date: Thu Dec 24 07:17:06 2020 +0300

[Devel] [PATCH RHEL7 COMMIT] fs/fuse kio: fix problem with simultaneous map resolving

The commit is pushed to "branch-rh7-3.10.0-1160.11.1.vz7.172.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git after rh7-3.10.0-1160.11.1.vz7.172.4 --> commit b32712e7deb17776e6df360e511a05d1d9a347e0 Author: Ildar Ismagilov Date: Thu Dec 24 21:42:02 2020 +0300

[Devel] [PATCH RHEL7 COMMIT] Revert "MS/NET/IPV6: remove duplicate neigh_ifdown"

The commit is pushed to "branch-rh7-3.10.0-1160.11.1.vz7.172.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git after rh7-3.10.0-1160.11.1.vz7.172.4 --> commit 53e2c19c4e13cdc23ea2fdd8b05783bd81f77b26 Author: Vasily Averin Date: Thu Dec 24 21:41:55 2020 +030

[Devel] [PATCH RH7 2/2] ms/xfrm: policy: match with both mark and mask on user interfaces

mmit 4f47e8ab6ab796b5380f74866fa5287aca4dcc58) VvS: context changes https://jira.sw.ru/browse/PSBM-123065 Signed-off-by: Vasily Averin --- include/net/xfrm.h | 9 ++--- net/key/af_key.c | 4 ++-- net/xfrm/xfrm_policy.c | 29 + net/xfrm/xfrm_user.c |

[Devel] [PATCH RH7 1/2] ms/xfrm: fix a warning in xfrm_policy_insert_list

picked from commit 0001-xfrm-fix-a-warning-in-xfrm_policy_insert_list.patch) https://jira.sw.ru/browse/PSBM-123065 Signed-off-by: Vasily Averin --- net/xfrm/xfrm_policy.c | 7 +-- 1 file changed, 1 insertion(+), 6 deletions(-) diff --git a/net/xfrm/xfrm_policy.c b/net/xfrm/xfrm_policy.c

[Devel] [PATCH RHEL7 COMMIT] ms/xfrm: policy: match with both mark and mask on user interfaces

policy_insert_list") Reported-by: Tobias Brunner Tested-by: Tobias Brunner Signed-off-by: Xin Long Signed-off-by: Steffen Klassert (cherry picked from commit 4f47e8ab6ab796b5380f74866fa5287aca4dcc58) VvS: context changes https://jira.sw.ru/browse/PSBM-123065 S

[Devel] [PATCH RHEL7 COMMIT] ms/xfrm: fix a warning in xfrm_policy_insert_list

https://jira.sw.ru/browse/PSBM-123065 Signed-off-by: Vasily Averin --- net/xfrm/xfrm_policy.c | 7 +-- 1 file changed, 1 insertion(+), 6 deletions(-) diff --git a/net/xfrm/xfrm_policy.c b/net/xfrm/xfrm_policy.c index ae671f1..afd153f 100644 --- a/net/xfrm/xfrm_policy.c +++ b/net/xfrm

[Devel] [PATCH RHEL7 COMMIT] ms/netfilter: nft_set_rbtree: bogus lookup/get on consecutive elements in named sets

nonymous() rplaced by direct flag check https://jira.sw.ru/browse/PSBM-121318 Signed-off-by: Vasily Averin --- net/netfilter/nft_rbtree.c | 9 +++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/net/netfilter/nft_rbtree.c b/net/netfilter/nft_rbtree.c index ab95e57..7

[Devel] [PATCH RHEL7 COMMIT] ms/netfilter: nft_rbtree: allow adjacent intervals with dynamic updates

d from commit e701001e7cbe88cdc937037f6f398669eef7e7ff) VvS: minor context changes https://jira.sw.ru/browse/PSBM-121318 Signed-off-by: Vasily Averin --- net/netfilter/nft_rbtree.c | 40 +++- 1 file changed, 35 insertions(+), 5 deletions(-) diff --git a/

[Devel] [PATCH RHEL7 COMMIT] ms/netfilter: nft_set_rbtree: check for inactive element after flag mismatch

indulka Signed-off-by: Pablo Neira Ayuso (cherry-picked from commit 05b7639da55fb9866a1f4b7e8995232a6323) VvS: minor context changes https://jira.sw.ru/browse/PSBM-121318 Signed-off-by: Vasily Averin --- net/netfilter/nft_rbtree.c | 7 +++ 1 file changed, 3 insertions(+

[Devel] [PATCH RHEL7 COMMIT] ms/netfilter: nft_set_rbtree: handle element re-addition after deletion

09181e7) VvS: minor context changes https://jira.sw.ru/browse/PSBM-121318 Signed-off-by: Vasily Averin --- net/netfilter/nft_rbtree.c | 19 ++- 1 file changed, 10 insertions(+), 9 deletions(-) diff --git a/net/netfilter/nft_rbtree.c b/net/netfilter/nft_rbtree.c index

[Devel] [PATCH RH7] netfilter: nf_tables: allow to filter out rules by table and chain

-off-by: Vasily Averin --- net/netfilter/nf_tables_api.c | 38 ++ 1 file changed, 38 insertions(+) diff --git a/net/netfilter/nf_tables_api.c b/net/netfilter/nf_tables_api.c index 14e030b..53e65f2 100644 --- a/net/netfilter/nf_tables_api.c +++ b/net/netfilter

[Devel] [PATCH RHEL7 COMMIT] netfilter: nf_tables: allow to filter out rules by table and chain

The commit is pushed to "branch-rh7-3.10.0-1160.11.1.vz7.172.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git after rh7-3.10.0-1160.11.1.vz7.172.2 --> commit e8e371cf0755d1b4334146b7b9bdfcd11fb19bc2 Author: Vasily Averin Date: Mon Dec 21 14:22:

[Devel] [PATCH RHEL7 COMMIT] ms/net: rtnetlink: validate IFLA_MTU attribute in rtnl_create_link()

rowse/PSBM-122988 Signed-off-by: Vasily Averin --- include/linux/netdevice.h | 1 + net/core/dev.c| 32 net/core/rtnetlink.c | 13 +++-- 3 files changed, 32 insertions(+), 14 deletions(-) diff --git a/include/linux/netdevice.h b

[Devel] [PATCH RHEL7 COMMIT] ve/device_cgroup: show all devices allowed in ct to fool docker

The commit is pushed to "branch-rh7-3.10.0-1160.6.1.vz7.171.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git after rh7-3.10.0-1160.6.1.vz7.171.4 --> commit 510bede663a9018c86c2b45ede7c5e26f6f8 Author: Pavel Tikhomirov Date: Tue Dec 15 12:30:55 2020 +0300

[Devel] [PATCH RH7 1/4] ms/netfilter: xt_checksum: ignore gso skbs

-by: Michal Kubecek Signed-off-by: Pablo Neira Ayuso (cherry-picked from commit 10568f6c5761db24249c610c94d6e44d5505a0ba) VvS: backported with minor context changes https://jira.sw.ru/browse/PSBM-123062 Signed-off-by: Vasily Averin --- net/netfilter/Kconfig | 12 ++-- net/netfilter

[Devel] [PATCH RH7 2/4] ms/net: Fix usage of pskb_trim_rcsum

(cherry-picked from commit 6c57f0458022298e4da1729c67bd33ce41c14e7a) https://jira.sw.ru/browse/PSBM-123062 Signed-off-by: Vasily Averin --- drivers/net/ppp/pppoe.c | 1 + include/linux/skbuff.h | 1 + net/bridge/br_netfilter_ipv6.c | 1 + net/bridge

[Devel] [PATCH RH7 4/4] ms/net: drop bogus skb with CHECKSUM_PARTIAL and offset beyond end of trimmed packet

tps://syzkaller.appspot.com/bug?id=b419a5ca95062664fe1a60b764621eb4526e2cd0 Reported-by: syzbot+7010af67ced6105e5...@syzkaller.appspotmail.com Signed-off-by: Vasily Averin Acked-by: Willem de Bruijn Link: https://lore.kernel.org/r/1b2494af-2c56-8ee2-7bc0-923fcad1c...@virtuozzo.com Signed-off-by: Jakub Kicin

[Devel] [PATCH RH7 3/4] ms/net: make skb_partial_csum_set() more robust against overflows

zbot Signed-off-by: David S. Miller (cherry-picked from commit 52b5d6f5dcf0e5201392f7d417148ccb537dbf6f) https://jira.sw.ru/browse/PSBM-123062 Signed-off-by: Vasily Averin --- net/core/skbuff.c | 12 +++- 1 file changed, 7 insertions(+), 5 deletions(-) diff --git a/net/core/skbuff.c b/net

[Devel] [PATCH RH7 1/4] ms/netfilter: nft_rbtree: allow adjacent intervals with dynamic updates

-by: Vasily Averin --- net/netfilter/nft_rbtree.c | 40 +++- 1 file changed, 35 insertions(+), 5 deletions(-) diff --git a/net/netfilter/nft_rbtree.c b/net/netfilter/nft_rbtree.c index 9ed51e9..ea06aa9 100644 --- a/net/netfilter/nft_rbtree.c +++ b/net/netfilter

[Devel] [PATCH RH7 2/4] ms/netfilter: nft_set_rbtree: handle element re-addition after deletion

acent intervals with dynamic updates") Reported-by: Wolfgang Bumiller Tested-by: Wolfgang Bumiller Signed-off-by: Pablo Neira Ayuso (cherry-picked from commit d2df92e98a34a5619dadd29c6291113c009181e7) VvS: minor context changes https://jira.sw.ru/browse/PSBM-121318 Signed-off-by: Vasily Averin

[Devel] [PATCH RH7 4/4] ms/netfilter: nft_set_rbtree: bogus lookup/get on consecutive elements in named sets

y picked from commit db3b665dd77b34e34df00e17d7b299c98fcfb2c5) VvS: dropped hooks fixed missing __nft_rbtree_get() VvS: nft_set_is_anonymous() rplaced by direct flag check https://jira.sw.ru/browse/PSBM-121318 Signed-off-by: Vasily Averin --- net/netfilter/nft_rbtree.c | 9 +++-- 1 file changed, 7 insert

[Devel] [PATCH RH7 3/4] ms/netfilter: nft_set_rbtree: check for inactive element after flag mismatch

rom commit 05b7639da55fb9866a1f4b7e8995232a6323) VvS: minor context changes https://jira.sw.ru/browse/PSBM-121318 Signed-off-by: Vasily Averin --- net/netfilter/nft_rbtree.c | 7 +++ 1 file changed, 3 insertions(+), 4 deletions(-) diff --git a/net/netfilter/nft_rbtree.c b/net/netfilter/nft_rbtree.c index f9cfcf7..ab95

[Devel] [PATCH RHEL7 COMMIT] ploop: Invalidate pagecache on service operations

The commit is pushed to "branch-rh7-3.10.0-1160.2.2.vz7.170.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git after rh7-3.10.0-1160.2.2.el7 --> commit 24aef273109a6076d82eceb8f9417cdb2e9149fd Author: Kirill Tkhai Date: Tue Nov 10 13:43:52 2020 +0300 ploop:

[Devel] [PATCH RHEL7 COMMIT] fs/fuse kio: post rdma work requests only after connection is established

The commit is pushed to "branch-rh7-3.10.0-1160.2.2.vz7.170.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git after rh7-3.10.0-1160.2.2.el7 --> commit c9c8d2e99a62df4b3ecfa7a6fbc27c491b5bba5f Author: Ildar Ismagilov Date: Tue Nov 10 13:43:59 2020 +0300 fs/fuse kio:

[Devel] [PATCH RHEL7 COMMIT] kvm: fix AMD IBRS/IBPB/STIBP/SSBD reporting #PSBM-120787

kvm: fix AMD IBRS/IBPB/STIBP/SSBD reporting #PSBM-120787 We should report these bits in 8008 EBX on AMD only, i.e. when AMD specific feature bits are enabled. Signed-off-by: Denis V. Lunev CC: Vasily Averin CC: Konstantin Khorenko Signed-off-by: &q

[Devel] [PATCH RHEL7 COMMIT] ploop: Add statistics of fastmap requests, which fails because of cache

The commit is pushed to "branch-rh7-3.10.0-1160.2.2.vz7.170.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git after rh7-3.10.0-1160.2.2.el7 --> commit 56a50079f0317675af4d9c1018f38b47ca2d476c Author: Kirill Tkhai Date: Tue Nov 10 13:43:43 2020 +0300 ploop: Add

[Devel] [PATCH RHEL7 COMMIT] ve/pidns: Use proper ns in sys_getppid()

The commit is pushed to "branch-rh7-3.10.0-1160.2.2.vz7.170.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git after rh7-3.10.0-1160.2.2.el7 --> commit a152b818bc87a0db588acfda333d01e62866f243 Author: Konstantin Khorenko Date: Tue Nov 10 13:42:50 2020 +0300

[Devel] [PATCH RHEL7 COMMIT] fs/fuse kio: fix processing order of RDMA works during throttle/unthrottle

The commit is pushed to "branch-rh7-3.10.0-1160.2.2.vz7.170.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git after rh7-3.10.0-1160.2.2.el7 --> commit 0aa759d3db6c7abce84121c6bdd8447e9967b335 Author: Ildar Ismagilov Date: Tue Nov 10 13:44:14 2020 +0300 fs/fuse kio:

[Devel] [PATCH RHEL7 COMMIT] ve: Reorder ve->ve_ns assignment in ve_grab_context()

The commit is pushed to "branch-rh7-3.10.0-1160.2.2.vz7.170.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git after rh7-3.10.0-1160.2.2.el7 --> commit e3f54fa771eb942f51e1a1260fbfd8d6ec2d5c75 Author: Kirill Tkhai Date: Tue Nov 10 13:43:31 2020 +0300 ve: Reorder

[Devel] [PATCH RHEL7 COMMIT] pid: Use proper ns in proc_dointvec_pidmax()

The commit is pushed to "branch-rh7-3.10.0-1160.2.2.vz7.170.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git after rh7-3.10.0-1160.2.2.el7 --> commit 5d351a1f64cb1e192a94b51aff5d7efebe596487 Author: Kirill Tkhai Date: Tue Nov 10 13:43:02 2020 +0300 pid: Use proper

[Devel] [PATCH RHEL7 COMMIT] ploop: Fix crash in purge_lru_warn()

The commit is pushed to "branch-rh7-3.10.0-1127.18.2.vz7.163.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git after rh7-3.10.0-1127.18.2.vz7.163.43 --> commit a2ed38f07f597d7a92dcff9e1489eebc2938d325 Author: Kirill Tkhai Date: Wed Nov 11 09:46:22 2020 +0300 ploop:

Re: [Devel] [PATCH RH7] commoncap: relax setxattr and removexattr checks

On 11/16/20 1:09 PM, Andrey Zhadchenko wrote: > Allow user to set security xattr (XATTR_SECURITY_PREFIX) from the inside > of ve on external mounts (for example, root). > > https://jira.sw.ru/browse/PSBM-122071 > Signed-off-by: Andrey Zhadchenko > --- > security/commoncap.c | 10 -- >

[Devel] [PATCH RH7] ms/tracing: Fix race in trace_open and buffer resize call

nly ring_buffer_reset_online_cpus() is not present in this kernel https://jira.sw.ru/browse/PSBM-122343 Signed-off-by: Vasily Averin --- kernel/trace/ring_buffer.c | 5 + 1 file changed, 5 insertions(+) diff --git a/kernel/trace/ring_buffer.c b/kernel/trace/ring_buffer.c index 8b3df28..7b1afd1 100

[Devel] [PATCH RH7 2/2] ms/extable: Consolidate *kernel_text_address() functions

rnels does not have is_ftrace_trampoline() and is_kprobe() checks https://jira.sw.ru/browse/PSBM-122315 Signed-off-by: Vasily Averin --- kernel/extable.c | 6 +- 1 file changed, 1 insertion(+), 5 deletions(-) diff --git a/kernel/extable.c b/kernel/extable.c index 4f1a5d2..1cb213f 100644 --

[Devel] [PATCH RH7] ms/tracing: remove WARN_ON in start_thread()

at_tracer_start+0xc9/0xd0 Fixes: 978defee11a5 ("tracing: Do a WARN_ON() if start_thread() in hwlat is called when thread exists") Patch was sent to upstream but is not approved yet. https://jira.sw.ru/browse/PSBM-122204 Signed-off-by: Vasily Averin --- kernel/trace/trace_hwlat.c | 2 +-

[Devel] [PATCH RH7 1/2] ms/extable: Enable RCU if it is not watching in kernel_text_address()

jira.sw.ru/browse/PSBM-122315 Signed-off-by: Vasily Averin --- kernel/extable.c | 31 --- 1 file changed, 28 insertions(+), 3 deletions(-) diff --git a/kernel/extable.c b/kernel/extable.c index 1cb213f..21136fc 100644 --- a/kernel/extable.c +++ b/kernel/extable.c @@ -116,

[Devel] [PATCH RH8] ms/tracing: remove WARN_ON in start_thread()

at_tracer_start+0xc9/0xd0 Fixes: 978defee11a5 ("tracing: Do a WARN_ON() if start_thread() in hwlat is called when thread exists") Patch was sent to upstream but is not approved yet. https://jira.sw.ru/browse/PSBM-120940 Signed-off-by: Vasily Averin --- kernel/trace/trace_hwlat.c | 2 +-

[Devel] [PATCH RH7 2/2] net: silence high-order-allocation warning in sctp_pack_cookie()

xb0 [] sock_sendmsg+0xb0/0xf0 [] SYSC_sendto+0x121/0x1c0 [] SyS_sendto+0xe/0x10 [] system_call_fastpath+0x25/0x2a --[ end trace 49ad7969a95b86af ]-- https://jira.sw.ru/browse/PSBM-122200 Signed-off-by: Vasily Averin --- net/sctp/sm_make_chunk.c | 2 +- 1 file changed, 1 insertion(+), 1 delet

[Devel] [PATCH RH7 1/2] ipv6: silence high-order allocation warinig in rawv6_sendmsg()

xf0 [] SYSC_sendto+0x121/0x1c0 [] SyS_sendto+0xe/0x10 [] system_call_fastpath+0x25/0x2a https://jira.sw.ru/browse/PSBM-122200 Signed-off-by: Vasily Averin --- net/ipv6/raw.c | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/net/ipv6/raw.c b/net/ipv6/raw.c index f91636e..f5f7

[Devel] [PATCH RHEL7 COMMIT] mm/memcg: cleanup vmpressure from mem_cgroup_css_free()

The commit is pushed to "branch-rh7-3.10.0-1127.18.2.vz7.163.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git after rh7-3.10.0-1127.18.2.vz7.163.45 --> commit 842d2de61c9f6966ed94f5a6fec25bff6d6f2220 Author: Andrey Ryabinin Date: Fri Nov 20 21:32:57 2020 +0300

[Devel] [PATCH RHEL7 COMMIT] commoncap: relax setxattr and removxattr checks

The commit is pushed to "branch-rh7-3.10.0-1127.18.2.vz7.163.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git after rh7-3.10.0-1127.18.2.vz7.163.44 --> commit 8aa6d07d2dc4d0388f145b497514587ffd905e65 Author: Andrey Zhadchenko Date: Wed Nov 18 11:48:48 2020 +0300

[Devel] [PATCH RHEL7 COMMIT] vznetstat: Move the code to drop redundant skb marks to *_xmit() functions #PSBM-122082

The commit is pushed to "branch-rh7-3.10.0-1127.18.2.vz7.163.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git after rh7-3.10.0-1127.18.2.vz7.163.44 --> commit 02c7d2e565808125435f918a5e41f8d434c8fbf8 Author: Konstantin Khorenko Date: Wed Nov 18 11:48:05 2020 +0300

Re: [Devel] [PATCH RFC rh7] vznetstat: Move the code to drop redundant skb marks to *_xmit() functions #PSBM-122082

Can be traffic re-routed after this chain? I mean the following scenario: dst can be "internal" first but the skb is rerouted to outside or vice versa: when "external" traffic is re-routed to local netdevices? Thank you, Vasily Averin ___ Devel mailing list Devel@openvz.org https://lists.openvz.org/mailman/listinfo/devel

[Devel] [PATCH RHEL7 COMMIT] ms/NFSD: Fix a null reference case in find_or_create_lock_stateid()

The commit is pushed to "branch-rh7-3.10.0-1127.18.2.vz7.163.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git after rh7-3.10.0-1127.18.2.vz7.163.41 --> commit ce7d60645c14a858784197a6f8b02ff9029d87bc Author: Vasily Averin Date: Thu Oct 29 16:57:30 2020

[Devel] [PATCH RHEL7 COMMIT] cgroup: do not use cgroup_mutex in cgroup_show_options

The commit is pushed to "branch-rh7-3.10.0-1127.18.2.vz7.163.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git after rh7-3.10.0-1127.18.2.vz7.163.41 --> commit 98919b6048f04d857120692ff3cbfc78099ecb58 Author: Valeriy Vdovin Date: Thu Oct 29 17:01:10 2020 +0300

[Devel] [PATCH RHEL7 COMMIT] ve: cleanup in function ve_get_release_agent_path

The commit is pushed to "branch-rh7-3.10.0-1127.18.2.vz7.163.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git after rh7-3.10.0-1127.18.2.vz7.163.41 --> commit d20ee9a4e7a750859ed60e340e85f1bab76e2e7d Author: Valeriy Vdovin Date: Thu Oct 29 17:01:16 2020 +0300 ve:

[Devel] [PATCH RHEL7 COMMIT] ve/cgroup: change resource release order in ve_drop_context

The commit is pushed to "branch-rh7-3.10.0-1127.18.2.vz7.163.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git after rh7-3.10.0-1127.18.2.vz7.163.41 --> commit 6fd72185d1f282076b35b1de3d5435113897b835 Author: Valeriy Vdovin Date: Thu Oct 29 17:01:04 2020 +0300

[Devel] [PATCH RHEL7 COMMIT] ve: Reorder ve->ve_ns assignment in ve_grab_context()

The commit is pushed to "branch-rh7-3.10.0-1127.18.2.vz7.163.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git after rh7-3.10.0-1127.18.2.vz7.163.41 --> commit 089cdc112a232fa6cbdf59f2fee40b58563c67f1 Author: Kirill Tkhai Date: Thu Oct 29 17:03:07 2020 +0300 ve:

[Devel] [PATCH RHEL7 COMMIT] ve/kmod: make nfnetlink_log autoloadable upon request from a CT

The commit is pushed to "branch-rh7-3.10.0-1127.18.2.vz7.163.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git after rh7-3.10.0-1127.18.2.vz7.163.41 --> commit b1dee036d79beaec1e542ee15d5ea5be8b582625 Author: Pavel Tikhomirov Date: Thu Oct 29 16:56:20 2020 +0300

[Devel] [PATCH RHEL7 COMMIT] ploop: Reduce batch size in populate_holes_bitmap()

The commit is pushed to "branch-rh7-3.10.0-1127.18.2.vz7.163.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git after rh7-3.10.0-1127.18.2.vz7.163.41 --> commit c8d87f9b868d0b1017e97b769a37861afc305062 Author: Kirill Tkhai Date: Thu Oct 29 16:56:57 2020 +0300 ploop:

[Devel] [PATCH RHEL7 COMMIT] netlink: protect NETLINK_REPAIR2

The commit is pushed to "branch-rh7-3.10.0-1127.18.2.vz7.163.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git after rh7-3.10.0-1127.18.2.vz7.163.41 --> commit 6fdae411d87f42d6fab634955697849e7e7bea1f Author: Andrey Zhadchenko Date: Thu Oct 29 17:00:53 2020 +0300

<    1   2   3   4   5   6   7   8   >