[Devel] [PATCH RH8] ploop: Fix off-by-one in ploop_ctr()

We dereference at least two arguments: cluster_log and origin_dev. Signed-off-by: Kirill Tkhai --- drivers/md/dm-ploop-target.c |2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/drivers/md/dm-ploop-target.c b/drivers/md/dm-ploop-target.c index 5ae0c624c8fb..7b5f81955abe

[Devel] [PATCH RHEL8 COMMIT] ve/cgroup: Remove rcu_read_lock from cgroup_get_ve_root

The commit is pushed to "branch-rh8-4.18.0-240.1.1.vz8.5.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git after rh8-4.18.0-240.1.1.vz8.5.23 --> commit 5b131435b4de2c9f8e479d75ace523c1b68da3f7 Author: Pavel Tikhomirov Date: Fri Apr 30 12:32:04 2021 +0300 ve/cgroup:

[Devel] [PATCH RHEL8 COMMIT] ms/fuse: fix live lock in fuse_iget()

The commit is pushed to "branch-rh8-4.18.0-240.1.1.vz8.5.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git after rh8-4.18.0-240.1.1.vz8.5.23 --> commit e3d3d3acc0b2949a4ef4c554fe14854da7fad8d2 Author: Amir Goldstein Date: Thu Mar 4 11:09:12 2021 +0200 ms/fuse: fix

[Devel] [PATCH RHEL8 COMMIT] aio: ioctl(VE_AIO_IOC_WAIT_ACTIVE) in-flight reqs counting fix

The commit is pushed to "branch-rh8-4.18.0-240.1.1.vz8.5.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git after rh8-4.18.0-240.1.1.vz8.5.23 --> commit 4e9bdf495ab82108c683c1205386234068443401 Author: Alexander Mikhalitsyn Date: Fri Apr 30 12:15:51 2021 +0300 aio:

[Devel] [PATCH RHEL8 COMMIT] ploop: Fix off-by-one in ploop_ctr()

The commit is pushed to "branch-rh8-4.18.0-240.1.1.vz8.5.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git after rh8-4.18.0-240.1.1.vz8.5.23 --> commit 9cf205c7f3af5b95997b45e0f605fb8a8e15817e Author: Kirill Tkhai Date: Fri Apr 30 12:11:05 2021 +0300 ploop: Fix

[Devel] [PATCH RHEL8 COMMIT] ploop: Fix off-by-one in early check of cluster is outside max size

The commit is pushed to "branch-rh8-4.18.0-240.1.1.vz8.5.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git after rh8-4.18.0-240.1.1.vz8.5.23 --> commit c84053e7e29454e0939740fdb9f974081d18c26f Author: Kirill Tkhai Date: Fri Apr 30 12:11:05 2021 +0300 ploop: Fix

[Devel] [PATCH RHEL8 COMMIT] memcg: Enable accounting for nft objects

The commit is pushed to "branch-rh8-4.18.0-240.1.1.vz8.5.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git after rh8-4.18.0-240.1.1.vz8.5.23 --> commit 60794308b4a80cf8a7bca4259fdba285ca7adc60 Author: Vasily Averin Date: Fri Apr 30 12:14:10 2021 +0300 memcg: Enable

[Devel] [PATCH RHEL8 COMMIT] perf/x86/intel: Make LBR initialization reusable

The commit is pushed to "branch-rh8-4.18.0-240.1.1.vz8.5.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git after rh8-4.18.0-240.1.1.vz8.5.23 --> commit 9bd07d7fd30c401833201bc1fba6fda4e01a6579 Author: Jan Dakinevich Date: Fri Apr 30 13:21:22 2021 +0300

[Devel] [PATCH RHEL8 COMMIT] target: add read/write/sync latency counter

The commit is pushed to "branch-rh8-4.18.0-240.1.1.vz8.5.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git after rh8-4.18.0-240.1.1.vz8.5.24 --> commit c06435eb5e1154345c78d3fd0f703bedd2c7bb40 Author: Andrey Grafin Date: Fri Apr 30 14:33:45 2021 +0300 target: add

[Devel] [PATCH RHEL8 COMMIT] target: add histogram for LUN statistics

The commit is pushed to "branch-rh8-4.18.0-240.1.1.vz8.5.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git after rh8-4.18.0-240.1.1.vz8.5.24 --> commit 67fe4f5410633d1d2c3e8c5b3537a5fe82ce4b2a Author: Andrey Grafin Date: Fri Apr 30 14:33:44 2021 +0300 target: add

[Devel] [PATCH RHEL8 COMMIT] target: add extra counters for LUN statistics

The commit is pushed to "branch-rh8-4.18.0-240.1.1.vz8.5.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git after rh8-4.18.0-240.1.1.vz8.5.24 --> commit 72b685ef31750a8d03faaf8e3bbc209d50d34ff5 Author: Konstantin Khorenko Date: Fri Apr 30 14:33:44 2021 +0300 target:

[Devel] [PATCH RHEL8 COMMIT] ve/cgroup: Hide ve cgroup in Containers

The commit is pushed to "branch-rh8-4.18.0-240.1.1.vz8.5.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git after rh8-4.18.0-240.1.1.vz8.5.24 --> commit b4afc85b81fe8fc6aced05760cbbdae511921c9b Author: Pavel Tikhomirov Date: Fri Apr 30 14:46:06 2021 +0300 ve/cgroup:

[Devel] [PATCH RHEL8 COMMIT] ve/proc/net/nr_cpus: Cut lines in /proc/net/softnet_stat to number of vcpus in CT

The commit is pushed to "branch-rh8-4.18.0-240.1.1.vz8.5.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git after rh8-4.18.0-240.1.1.vz8.5.23 --> commit 99815677ae77304719cc2724f03b2d20ccfd2c7d Author: Pavel Tikhomirov Date: Fri Apr 30 13:15:16 2021 +0300

[Devel] [PATCH RHEL8 COMMIT] ve/fs/files: Add new argument to expand_files()

The commit is pushed to "branch-rh8-4.18.0-240.1.1.vz8.5.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git after rh8-4.18.0-240.1.1.vz8.5.24 --> commit 97917a7229cd315e8433ac9b33168a4cfdae193b Author: Kirill Tkhai Date: Fri Apr 30 13:52:41 2021 +0300 ve/fs/files:

[Devel] [PATCH RHEL8 COMMIT] ve/fs/files: Shrink big fdtable on close in is_pseudosuper mode

The commit is pushed to "branch-rh8-4.18.0-240.1.1.vz8.5.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git after rh8-4.18.0-240.1.1.vz8.5.24 --> commit c4a4fada18ad4dab1b051e49e39065c569ad64c8 Author: Kirill Tkhai Date: Fri Apr 30 13:52:42 2021 +0300 ve/fs/files:

[Devel] [PATCH RHEL8 COMMIT] ve/fs/files: Add fdtable_align() helper

The commit is pushed to "branch-rh8-4.18.0-240.1.1.vz8.5.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git after rh8-4.18.0-240.1.1.vz8.5.24 --> commit 24188cc35a134f10d1bf73d0766640499c345f26 Author: Kirill Tkhai Date: Fri Apr 30 13:52:42 2021 +0300 ve/fs/files:

[Devel] [PATCH RHEL8 COMMIT] kstat: Make kstat_glob::swap_in percpu

The commit is pushed to "branch-rh8-4.18.0-240.1.1.vz8.5.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git after rh8-4.18.0-240.1.1.vz8.5.24 --> commit c30a7bebb0e73add1e4ef77d74165f44aee0f57b Author: Kirill Tkhai Date: Fri Apr 30 14:01:05 2021 +0300 kstat: Make

[Devel] [PATCH RHEL8 COMMIT] target: add an user-mode helper to handle changes of a group state

The commit is pushed to "branch-rh8-4.18.0-240.1.1.vz8.5.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git after rh8-4.18.0-240.1.1.vz8.5.24 --> commit 693732061d6d4532a1d1baf934bd81e45bdf0ffb Author: Andrei Vagin Date: Fri Apr 30 14:40:04 2021 +0300 target: add an

[Devel] [PATCH RHEL8 COMMIT] perf/x86/intel: Move LBR-related data into a separate structure

The commit is pushed to "branch-rh8-4.18.0-240.1.1.vz8.5.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git after rh8-4.18.0-240.1.1.vz8.5.23 --> commit f3456a43b158bb4062d6a78646c59d7defbde34d Author: Jan Dakinevich Date: Fri Apr 30 13:21:22 2021 +0300

[Devel] [PATCH RHEL8 COMMIT] KVM: x86/vPMU: Ignore access to LBR-related MSRs

The commit is pushed to "branch-rh8-4.18.0-240.1.1.vz8.5.x-ovz" and will appear at https://src.openvz.org/scm/ovz/vzkernel.git after rh8-4.18.0-240.1.1.vz8.5.23 --> commit 1fb36a7c3b577381714bd6bcee5f629839dfad45 Author: Jan Dakinevich Date: Fri Apr 30 13:21:23 2021 +0300 KVM:

[Devel] [PATCH 06/14] ve/netfilter: Check for permittions while looking for target and match

From: Kirill Tkhai Patchset description: Port autoloading of netfilter modules functuonality https://jira.sw.ru/browse/PSBM-28910 Signed-off-by: Kirill Tkhai Kirill Tkhai (4): kmod: Move check of VE permitions from __call_usermodehelper_exec() to upper functions kmod: Port

[Devel] [PATCH 02/14] ve/netfilter: Implement pernet expect_max / virtualize "net.netfilter.nf_conntrack_expect_max" sysctl

From: Konstantin Khorenko Rebasing and splitting netfilters sybsystem (port 66-diff-ve-net-netfilter-combined). Part 1. https://jira.sw.ru/browse/PSBM-18322 Signed-off-by: Kirill Tkhai (cherry picked from commit 2cabd3c5f1a772f3dd7648acc345bca529aed254) VZ 8 rebase part

[Devel] [PATCH 00/14] port part 3: netfilter

See https://jira.sw.ru/browse/PSBM-127783 Andrey Ryabinin (1): netfilter/x_tables: account entry offsets allocations Kirill Tkhai (5): ve/netfilter: Implement pernet net->ct.max / virtualize "nf_conntrack_max" sysctl ve/netfilter: Add autoloading of sockopt modules ve/netfilter:

[Devel] [PATCH 13/14] net: Mark conntrack users in nftables

From: Kirill Tkhai Allow conntracks to be allocated in case of these rules are inserted. https://jira.sw.ru/browse/PSBM-51050 Signed-off-by: Kirill Tkhai Reviewed-by: Andrei Vagin (cherry picked from commit 60931ce1ffcf08e4f7d0d528a3cf8ddf6e74b309) VZ 8 rebase part

[Devel] [PATCH 04/14] ve/netfilter: Add autoloading of sockopt modules

From: Kirill Tkhai Patchset description: Port autoloading of netfilter modules functuonality https://jira.sw.ru/browse/PSBM-28910 Signed-off-by: Kirill Tkhai Kirill Tkhai (4): kmod: Move check of VE permitions from __call_usermodehelper_exec() to upper functions kmod: Port

[Devel] [PATCH 01/14] ve/netfilter: Basic ve transformations

From: Stanislav Kinsburskiy Rebasing and splitting netfilters sybsystem (port 66-diff-ve-net-netfilter-combined). Part 1. https://jira.sw.ru/browse/PSBM-18322 Signed-off-by: Kirill Tkhai khorenko@: rebase to kernel-3.10.0-229.7.2.el7: * hunk for include/net/netfilter/xt_log.h has been

[Devel] [PATCH 03/14] ve/netfilter: Implement pernet net->ct.max / virtualize "nf_conntrack_max" sysctl

From: Kirill Tkhai Rebasing and splitting netfilters sybsystem (port 66-diff-ve-net-netfilter-combined). Part 1. https://jira.sw.ru/browse/PSBM-18322 Signed-off-by: Kirill Tkhai (cherry picked from commit c34a99c00f9df6e538a46af5f92be2faacf5a3a5) VZ 8 rebase part

[Devel] [PATCH 07/14] netfilter/x_tables: account entry offsets allocations

From: Andrey Ryabinin Entry offsets may consume a lot of kernel memory. So let's account them. https://jira.sw.ru/browse/PSBM-54407 Signed-off-by: Andrey Ryabinin (cherry picked from commit 56c0d7d5cc4b97e913061f6cf6109adbba547c94) VZ 8 rebase part https://jira.sw.ru/browse/PSBM-127783

[Devel] [PATCH 10/14] ve/nf_conntrack: expose "nf_conntrack_events*" in contaners

From: Stanislav Kinsburskiy Series: This series brings to vz7 all the nf_conntrack sysctl's, which are available in vz6. https://jira.sw.ru/browse/PSBM-40044 Signed-off-by: Stanislav Kinsburskiy Reviewed-by: Kirill Tkhai (cherry picked from commit 8c5060468d648ac40598759589a03bd39ea448d6)

[Devel] [PATCH 11/14] net: Primitives to enable conntrack allocation

From: Stanislav Kinsburskiy Patchset description: Create conntrack structures only if they are really needed Allocate conntracks only after there is a rule which uses them. v2: Allow after there is a rule and never prohibit. khorenko@: the idea behind all of this: we want to provide the

[Devel] [PATCH 14/14] ve/netlink: allow messages with family PF_BRIDGE type RTM_xxxNEIGH in CT

From: Pavel Tikhomirov While reproducing the problem mentioned in patch 1 I found that we need it to be able to configure vxlan fdb (Forwarding Database entry). https://jira.sw.ru/browse/PSBM-53629 Signed-off-by: Pavel Tikhomirov Acked-by: Andrei Vagin (cherry picked from commit

[Devel] [PATCH 12/14] net: Mark conntrack users in xtables

From: Kirill Tkhai Allow conntracks to be allocated in case of these rules are inserted. https://jira.sw.ru/browse/PSBM-51050 Signed-off-by: Kirill Tkhai Reviewed-by: Andrei Vagin +++ ve/net: Delete allow_conntrack_allocation() from nf_synproxy Since nf_conntrack_alloc() is not called

[Devel] [PATCH 08/14] ve/nf_conntrack: expose "nf_conntrack_max" in containers

From: Stanislav Kinsburskiy Series: This series brings to vz7 all the nf_conntrack sysctl's, which are available in vz6. https://jira.sw.ru/browse/PSBM-40044 This sysctl table contains only one entry: "/proc/sys/net/nf_conntrack_max". This is now visible inside ct. However, have to say, that

[Devel] [PATCH 05/14] ve/netfilter/cred: add ve_capable to check capabilities relative to the current VE (v2)

From: Konstantin Khorenko We want to allow a few operations in VE. Currently we use nsown_capable, but it's wrong, because in this case we allow these operations in any user namespace. v2: take ve0->cred if the currect ve isn't running https://jira.sw.ru/browse/PSBM-39077 Signed-off-by:

[Devel] [PATCH 09/14] ve/nf_conntrack: expose "nf_conntrack_acct" in contaners

From: Stanislav Kinsburskiy Series: This series brings to vz7 all the nf_conntrack sysctl's, which are available in vz6. https://jira.sw.ru/browse/PSBM-40044 Signed-off-by: Stanislav Kinsburskiy Reviewed-by: Kirill Tkhai (cherry picked from commit 6db3cbd5731999e1225640cc7a45fcdace022f92)