Unable to handle kernel pointer dereference in virtual kernel address space on Eoan

[Po-Hsu Lin]

Issue spotted on Eoan zVM / LPAR
It looks like this happens when running the ubunut_fan_smoke_test (jenkins job hang with this one)

[ 1225.137764] docker0: port 1(veth2fda0c6) entered blocking state
[ 1225.137767] docker0: port 1(veth2fda0c6) entered disabled state
[ 1225.138023] device veth2fda0c6 entered promiscuous mode
[ 1225.148523] Unable to handle kernel pointer dereference in virtual kernel address space
[ 1225.148529] Failing address: 6f766c5f646f5000 TEID: 6f766c5f646f5803
[ 1225.148531] Fault in home space mode while using kernel ASCE.
[ 1225.148533] AS:000000070d94c007 R3:0000000000000024
[ 1225.148575] Oops: 0038 ilc:3 [#1] SMP
[ 1225.148578] Modules linked in: veth xt_nat vxlan ip6_udp_tunnel udp_tunnel nf_conntrack_netlink xfrm_user xfrm_algo xt_addrtype br_netfilter unix_diag sctp cuse vhost_net tap vhost_vsock vmw_vsock_virtio_transport_common vhost vsock dccp_ipv4 dccp algif_rng aegis128 aegis128l aegis256 morus1280 morus640 algif_aead anubis fcrypt khazad seed sm4_generic tea md4 michael_mic nhpoly1305 poly1305_generic rmd128 rmd160 rmd256 rmd320 sha3_generic sm3_generic streebog_generic tgr192 wp512 xxhash_generic algif_hash blowfish_generic blowfish_common cast5_generic salsa20_generic chacha_generic camellia_generic cast6_generic cast_common serpent_generic twofish_generic twofish_common algif_skcipher af_alg xt_conntrack ipt_REJECT nf_reject_ipv4 ip6table_mangle ip6table_nat nf_tables nfnetlink ip6table_filter ip6_tables iptable_mangle xt_CHECKSUM iptable_nat xt_MASQUERADE xt_tcpudp bridge iptable_filter bpfilter aufs overlay 8021q garp stp mrp llc openvswitch nsh nf_conncount nf_nat nf_conntrack
[ 1225.148622] nf_defrag_ipv6 nf_defrag_ipv4 binfmt_misc zfs(PO) zunicode(PO) zavl(PO) icp(PO) zlua(PO) zcommon(PO) znvpair(PO) spl(O) genwqe_card crc_itu_t chsc_sch eadm_sch ctcm fsm vfio_ccw vfio_mdev mdev vfio_iommu_type1 vfio sch_fq_codel nfsd auth_rpcgss nfs_acl lockd grace sunrpc ip_tables x_tables btrfs zstd_compress zlib_deflate raid10 raid456 async_raid6_recov async_memcpy async_pq async_xor async_tx xor raid6_pq libcrc32c raid1 raid0 linear dm_service_time mlx4_ib ib_uverbs mlx4_en ptp ib_core pps_core pkey zcrypt crc32_vx_s390 ghash_s390 prng aes_s390 des_s390 qeth_l2 des_generic sha512_s390 sha256_s390 sha1_s390 sha_common mlx4_core zfcp scsi_transport_fc qeth qdio ccwgroup dasd_eckd_mod dasd_mod scsi_dh_emc scsi_dh_rdac scsi_dh_alua dm_multipath
[ 1225.148711] CPU: 4 PID: 161930 Comm: dockerd Tainted: P O 5.3.0-52-generic #46-Ubuntu
[ 1225.148714] Hardware name: IBM 2964 N63 400 (LPAR)
[ 1225.148716] Krnl PSW : 0704d00180000000 000003ff808e972a (ovl_open_realfile+0x4a/0x148 [overlay])
[ 1225.148734] R:0 T:1 IO:1 EX:1 Key:0 M:1 W:0 P:0 AS:3 CC:1 PM:0 RI:0 EA:3
[ 1225.148736] Krnl GPRS: 0000000000000064 6f766c5f646f5f6d 00000007a14ac300 00000003a5df6600
[ 1225.148738] 0000000000008000 0000000000000001 0000000300000000 0000000372e45278
[ 1225.148740] 000003ff808ea508 0000000304048000 00000005c7f32b68 000000064a2ab900
[ 1225.148742] 00000003a5df6600 000003ff808f31d8 000003ff808e971a 000003e009c0faf8
[ 1225.148749] Krnl Code: 000003ff808e971a: a59a0404 oilh %r9,1028
                          000003ff808e971e: e310f0c00004 lg %r1,192(%r15)
                         #000003ff808e9724: e31010680004 lg %r1,104(%r1)
                         >000003ff808e972a: e31010600004 lg %r1,96(%r1)
                          000003ff808e9730: b9040082 lgr %r8,%r2
                          000003ff808e9734: c21c6a656a62 cgfi %r1,1785031266
                          000003ff808e973a: b9140039 lgfr %r3,%r9
                          000003ff808e973e: e31003400004 lg %r1,832
[ 1225.148766] Call Trace:
[ 1225.148769] ([<0000000000000000>] 0x0)
[ 1225.148774] [<000003ff808ea582>] ovl_open+0x7a/0xc0 [overlay]
[ 1225.148780] [<000000070cbf2c04>] do_dentry_open+0x1fc/0x3b0
[ 1225.148784] [<000000070cc0afd2>] do_last+0x1ba/0x970
[ 1225.148786] [<000000070cc0b80e>] path_openat+0x86/0x2b8
[ 1225.148788] [<000000070cc0cea4>] do_filp_open+0x7c/0xf8
[ 1225.148791] [<000000070cbf4b5a>] do_sys_open+0x19a/0x2c8
[ 1225.148798] [<000000070d1ebca8>] system_call+0xdc/0x2c8
[ 1225.148800] Last Breaking-Event-Address:
[ 1225.148802] [<000000070d1ed210>] __s390_indirect_jump_r14+0x0/0xc
[ 1225.148805] ---[ end trace dc1913214325ab11 ]---

ProblemType: Bug
DistroRelease: Ubuntu 19.10
Package: linux-image-5.3.0-52-generic 5.3.0-52.46
ProcVersionSignature: Ubuntu 5.3.0-52.46-generic 5.3.18
Uname: Linux 5.3.0-52-generic s390x
NonfreeKernelModules: zfs zunicode zavl icp zcommon znvpair
AlsaDevices: Error: command ['ls', '-l', '/dev/snd/'] failed with exit code 2: ls: cannot access '/dev/snd/': No such file or directory
AplayDevices: Error: [Errno 2] No such file or directory: 'aplay': 'aplay'
ApportVersion: 2.20.11-0ubuntu8.8
Architecture: s390x
ArecordDevices: Error: [Errno 2] No such file or directory: 'arecord': 'arecord'
CRDA: Error: command ['iw', 'reg', 'get'] failed with exit code 1: nl80211 not found.
Date: Sun May 3 21:51:21 2020
IwConfig: Error: [Errno 2] No such file or directory: 'iwconfig': 'iwconfig'
Lsusb: Error: command ['lsusb'] failed with exit code 1:
PciMultimedia:

ProcEnviron:
 TERM=xterm-256color
 PATH=(custom, no user)
 XDG_RUNTIME_DIR=<set>
 LANG=en_US.UTF-8
 SHELL=/bin/bash
ProcFB:

ProcKernelCmdLine: root=UUID=d15a5734-c073-4c9a-80ad-65a914214bb8 crashkernel=196M BOOT_IMAGE=0
RelatedPackageVersions:
 linux-restricted-modules-5.3.0-52-generic N/A
 linux-backports-modules-5.3.0-52-generic N/A
 linux-firmware 1.183.5
RfKill: Error: [Errno 2] No such file or directory: 'rfkill': 'rfkill'
SourcePackage: linux
UpgradeStatus: No upgrade log present (probably fresh install)

[Ubuntu Kernel Bot (ubuntu-kernel-bot)]

This change was made by a bot.

[Po-Hsu Lin (cypressyew)]

This issue can be found on E PowerPC as well, test will stop at the fan smoke test as well.

[ 1316.676714] BUG: Unable to handle kernel data access at 0xd9d4a05293989f60
[ 1316.676743] Faulting instruction address: 0xc00800000cd9b164
[ 1316.676755] Oops: Kernel access of bad area, sig: 11 [#1]
[ 1316.676777] LE PAGE_SIZE=64K MMU=Radix SMP NR_CPUS=2048 NUMA PowerNV
[ 1316.676788] Modules linked in: xt_conntrack xt_MASQUERADE nf_conntrack_netlink nfnetlink xfrm_user xfrm_algo xt_addrtype iptable_filter iptable_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 bpfilter br_netfilter bridge stp llc aufs overlay unix_diag binfmt_misc kvm_hv kvm zfs(PO) zunicode(PO) zavl(PO) icp(PO) zlua(PO) zcommon(PO) znvpair(PO) spl(O) userio snd_seq snd_seq_device snd_timer snd soundcore hci_vhci bluetooth ecdh_generic ecc vhost_vsock vmw_vsock_virtio_transport_common vsock uhid vhost_net vhost tap cuse dccp_ipv4 dccp atm algif_rng aegis128 aegis128l aegis256 morus1280 morus640 algif_aead anubis fcrypt khazad seed sm4_generic tea crc32_generic md4 michael_mic nhpoly1305 poly1305_generic rmd128 rmd160 rmd256 rmd320 sha3_generic sm3_generic streebog_generic tgr192 wp512 xxhash_generic algif_hash blowfish_generic blowfish_common cast5_generic des_generic salsa20_generic chacha_generic camellia_generic cast6_generic cast_common serpent_generic twofish_generic
[ 1316.676839] twofish_common algif_skcipher af_alg dm_multipath scsi_dh_rdac scsi_dh_emc scsi_dh_alua joydev input_leds mac_hid ofpart cmdlinepart ipmi_powernv powernv_flash ipmi_devintf mtd ipmi_msghandler at24 uio_pdrv_genirq opal_prd ibmpowernv uio vmx_crypto sch_fq_codel ip_tables x_tables autofs4 btrfs zstd_compress raid10 raid456 async_raid6_recov async_memcpy async_pq async_xor async_tx xor raid6_pq libcrc32c raid1 raid0 multipath linear hid_generic usbhid hid ses enclosure scsi_transport_sas ast drm_vram_helper i2c_algo_bit ttm drm_kms_helper syscopyarea sysfillrect crct10dif_vpmsum sysimgblt fb_sys_fops crc32c_vpmsum drm i40e aacraid drm_panel_orientation_quirks
[ 1316.677182] CPU: 16 PID: 104008 Comm: dockerd Tainted: P O 5.3.0-52-generic #46-Ubuntu
[ 1316.677214] NIP: c00800000cd9b164 LR: c00800000cd9b148 CTR: c000000000161290
[ 1316.677235] REGS: c000000bbe603690 TRAP: 0380 Tainted: P O (5.3.0-52-generic)
[ 1316.677256] MSR: 9000000002009033 <SF,HV,VEC,EE,ME,IR,DR,RI,LE> CR: 28402884 XER: 00000000
[ 1316.677291] CFAR: c00800000cd96ad0 IRQMASK: 0
               GPR00: c00800000cd9b148 c000000bbe603920 c00800000cdbca00 c000000fecf26000
               GPR04: 0000000004050001 c00000094cb4a910 0000000000000001 ffffffffffffffff
               GPR08: c00000095056e490 d9d4a05293989f00 000000006a656a62 c00800000cda73a8
               GPR12: c000000000161290 c000000ffffed000 000000c00040b340 0000000000000001
               GPR16: 000000c00040a000 ffffffffffffffff 000000000000004e 0000000000000001
               GPR20: 0000000000000200 000004e2c41b29c0 0000000000100000 00000000000041ed
               GPR24: 0000000000000000 0000000000000200 0000000000000000 c00000095056e490
               GPR28: c000000fecf26000 c00000095056e490 c0000009504f1628 c00000094cb4a...

[Po-Hsu Lin (cypressyew)]

You can triggered a general protection fault by running the ubuntu_docker_smoke_test, the test passed with older Eoan kernel in -updates, but failed with this one in proposed.

[ 101.715152] general protection fault: 0000 [#1] SMP PTI
[ 101.717403] CPU: 1 PID: 1236 Comm: dockerd Not tainted 5.3.0-52-generic #46-Ubuntu
[ 101.720424] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1ubuntu1 04/01/2014
[ 101.723856] RIP: 0010:ovl_open_realfile+0x4a/0x150 [overlay]
[ 101.725826] Code: 44 8b 6f 40 65 48 8b 04 25 28 00 00 00 48 89 45 d0 31 c0 49 8b 7e 28 41 81 cd 00 00 04 04 e8 cd d4 ff ff 49 89 c7 48 8b 45 c8 <48> 8b 40 68 48 81 78 60 62 6a 65 6a 0f 84 a6 00 00 00 65 48 8b 04
[ 101.731311] RSP: 0018:ffffaa28406afc08 EFLAGS: 00010202
[ 101.732773] RAX: 044555892ac42800 RBX: ffff9af67a149ea8 RCX: 0000000000000001
[ 101.734759] RDX: 0000000000008000 RSI: ffff9af67a149ea8 RDI: ffff9af67b3d9000
[ 101.736866] RBP: ffffaa28406afc50 R08: ffff9af67b031240 R09: 0000000000000000
[ 101.738854] R10: ffff9af67a7d6900 R11: 0000000000000000 R12: ffff9af6799a1d00
[ 101.740883] R13: 0000000004048001 R14: ffff9af67a1a4818 R15: ffff9af67b031240
[ 101.742902] FS: 00007f58a57fa700(0000) GS:ffff9af67db00000(0000) knlGS:0000000000000000
[ 101.745194] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 101.746798] CR2: 0000000001178b78 CR3: 000000007b060000 CR4: 00000000000006e0
[ 101.748817] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 101.750798] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 101.752804] Call Trace:
[ 101.753502] ? ovl_llseek+0x120/0x120 [overlay]
[ 101.754770] ovl_open+0x57/0x90 [overlay]
[ 101.755951] do_dentry_open+0x143/0x3a0
[ 101.757013] vfs_open+0x2d/0x30
[ 101.757949] do_last+0x194/0x8f0
[ 101.758843] path_openat+0x8d/0x270
[ 101.759908] ? __switch_to_asm+0x40/0x70
[ 101.760984] ? __switch_to_asm+0x34/0x70
[ 101.762099] do_filp_open+0x91/0x100
[ 101.763088] ? __alloc_fd+0x46/0x150
[ 101.764171] do_sys_open+0x17e/0x290
[ 101.765168] __x64_sys_openat+0x20/0x30
[ 101.766297] do_syscall_64+0x5a/0x130
[ 101.767512] entry_SYSCALL_64_after_hwframe+0x44/0xa9
[ 101.768932] RIP: 0033:0x56465af612ba
[ 101.769922] Code: e8 8b 3d f8 ff 48 8b 7c 24 10 48 8b 74 24 18 48 8b 54 24 20 4c 8b 54 24 28 4c 8b 44 24 30 4c 8b 4c 24 38 48 8b 44 24 08 0f 05 <48> 3d 01 f0 ff ff 76 20 48 c7 44 24 40 ff ff ff ff 48 c7 44 24 48
[ 101.775167] RSP: 002b:000000c0009567a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[ 101.777440] RAX: ffffffffffffffda RBX: 000000c00005e500 RCX: 000056465af612ba
[ 101.779553] RDX: 0000000000080241 RSI: 000000c000814e00 RDI: ffffffffffffff9c
[ 101.781538] RBP: 000000c000956818 R08: 0000000000000000 R09: 0000000000000000
[ 101.783650] R10: 00000000000001a4 R11: 0000000000000202 R12: ffffffffffffffff
[ 101.785789] R13: 0000000000000039 R14: 0000000000000038 R15: 0000000000000080
[ 101.787887] Modules linked in: xt_conntrack xt_MASQUERADE nf_conntrack_netlink nfnetlink xfrm_user xfrm_algo xt_addrtype iptable_filter iptable_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 bpfilter br_netfilter bridge stp llc aufs overlay dm_multipa...

[Khaled El Mously (kmously)]

This commit looks highly suspicious:

"UBUNTU: SAUCE: overlayfs: use shiftfs hacks only with shiftfs as underlay"

[Kleber Sacilotto de Souza (kleber-souza)]

That patch was submitted as a fix for bug 1857257, which was applied for Focal as well. Therefore this bug might affect Focal too, we are waiting for some test results to confirm it.

[Po-Hsu Lin (cypressyew)]

I can reproduce this issue on Focal (5.4.0-30-generic) AMD64 KVM as well with the ubuntu_docker_smoke_test:

 4331.987024] general protection fault: 0000 [#1] SMP PTI
[ 4331.989188] CPU: 0 PID: 34912 Comm: dockerd Not tainted 5.4.0-30-generic #34-Ubuntu
[ 4331.992158] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.10.2-1ubuntu1 04/01/2014
[ 4331.995189] RIP: 0010:ovl_open_realfile+0x4a/0x150 [overlay]
[ 4331.997100] Code: 44 8b 6f 40 65 48 8b 04 25 28 00 00 00 48 89 45 d0 31 c0 49 8b 7e 28 41 81 cd 00 00 04 04 e8 9d d4 ff ff 49 89 c7 48 8b 45 c8 <48> 8b 40 68 48 81 78 60 62 6a 65 6a 0f 84 a6 00 00 00 65 48 8b 04
[ 4332.003304] RSP: 0018:ffffb10b00b33c08 EFLAGS: 00010202
[ 4332.004841] RAX: 5ebabec054698800 RBX: ffff8ed6b776a770 RCX: 0000000000000001
[ 4332.006838] RDX: ffff8ed6b774bf00 RSI: ffff8ed6b776a770 RDI: ffff8ed6affea3c0
[ 4332.008842] RBP: ffffb10b00b33c50 R08: ffff8ed6afc79600 R09: 0000000000000000
[ 4332.010862] R10: ffff8ed6b774bf00 R11: 0000000000000000 R12: ffff8ed6b0a06c00
[ 4332.013003] R13: 0000000004048001 R14: ffff8ed6b75b6b20 R15: ffff8ed6afc79600
[ 4332.015049] FS: 00007f3a38941700(0000) GS:ffff8ed6bba00000(0000) knlGS:0000000000000000
[ 4332.017326] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 4332.019058] CR2: 000056296e62b358 CR3: 0000000130f94000 CR4: 00000000000006f0
[ 4332.021028] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 4332.023134] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 4332.025142] Call Trace:
[ 4332.025885] ? ovl_llseek+0x120/0x120 [overlay]
[ 4332.027239] ovl_open+0x57/0x90 [overlay]
[ 4332.028391] do_dentry_open+0x143/0x3a0
[ 4332.029490] vfs_open+0x2d/0x30
[ 4332.030422] do_last+0x194/0x900
[ 4332.031407] path_openat+0x8d/0x290
[ 4332.033084] ? __switch_to_asm+0x40/0x70
[ 4332.035151] ? __switch_to_asm+0x34/0x70
[ 4332.037142] do_filp_open+0x91/0x100
[ 4332.039032] ? __alloc_fd+0x46/0x150
[ 4332.040860] do_sys_open+0x17e/0x290
[ 4332.042954] __x64_sys_openat+0x20/0x30
[ 4332.044980] do_syscall_64+0x57/0x190
[ 4332.047058] entry_SYSCALL_64_after_hwframe+0x44/0xa9

[Christian Brauner (cbrauner)]

Fix here:
https://lists.ubuntu.com/archives/kernel-team/2020-May/109617.html

[Kleber Sacilotto de Souza (kleber-souza)]

With the fixup patch applied, I could not reproduce the issue anymore on both Eoan and Focal running ubuntu_fan_smoke_test and ubuntu_docker_smoke_test.

[Christian Brauner (cbrauner)]

On Wed, May 06, 2020 at 10:32:19AM -0000, Kleber Sacilotto de Souza wrote:
> With the fixup patch applied, I could not reproduce the issue anymore on
> both Eoan and Focal running ubuntu_fan_smoke_test and
> ubuntu_docker_smoke_test.

Sweet, thank you and sorry for the rebase mess-up with Andrei's patch.

[Ubuntu Kernel Bot (ubuntu-kernel-bot)]

This bug is awaiting verification that the kernel in -proposed solves the problem. Please test the kernel and update this bug with the results. If the problem is solved, change the tag 'verification-needed-focal' to 'verification-done-focal'. If the problem still exists, change the tag 'verification-needed-focal' to 'verification-failed-focal'.

If verification is not done by 5 working days from today, this fix will be dropped from the source code, and this bug will be closed.

See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you!

[Ubuntu Kernel Bot (ubuntu-kernel-bot)]

This bug is awaiting verification that the kernel in -proposed solves the problem. Please test the kernel and update this bug with the results. If the problem is solved, change the tag 'verification-needed-eoan' to 'verification-done-eoan'. If the problem still exists, change the tag 'verification-needed-eoan' to 'verification-failed-eoan'.

If verification is not done by 5 working days from today, this fix will be dropped from the source code, and this bug will be closed.

See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you!

[Kleber Sacilotto de Souza (kleber-souza)]

Overlayfs related tests completed successfully with focal kernel in -proposed (5.4.0-31.35):
https://objectstorage.prodstack4-5.canonical.com/v1/AUTH_77e2ada1e7a84929a74ba3b87153c0ac/autopkgtest-focal/focal/amd64/l/linux/20200508_160250_2f8e2@/log.gz

- ubuntu_unionmount_ovlfs.overlayfs
- ubuntu_overlayfs_smoke_test.overlayfs-smoke-test

[Kleber Sacilotto de Souza (kleber-souza)]

Overlayfs related tests completed successfully with eoan kernel in -proposed (5.3.0-53.47):
https://objectstorage.prodstack4-5.canonical.com/v1/AUTH_77e2ada1e7a84929a74ba3b87153c0ac/autopkgtest-eoan/eoan/amd64/l/linux/20200508_151853_8b200@/log.gz

- ubuntu_unionmount_ovlfs.overlayfs
- ubuntu_overlayfs_smoke_test.overlayfs-smoke-test

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux - 5.4.0-31.35

---------------
linux (5.4.0-31.35) focal; urgency=medium

  * focal/linux: 5.4.0-31.35 -proposed tracker (LP: #1877253)

  * Intermittent display blackouts on event (LP: #1875254)
    - drm/i915: Limit audio CDCLK>=2*BCLK constraint back to GLK only

  * Unable to handle kernel pointer dereference in virtual kernel address space
    on Eoan (LP: #1876645)
    - SAUCE: overlayfs: fix shitfs special-casing

linux (5.4.0-30.34) focal; urgency=medium

  * focal/linux: 5.4.0-30.34 -proposed tracker (LP: #1875385)

  * ubuntu/focal64 fails to mount Vagrant shared folders (LP: #1873506)
    - [Packaging] Move virtualbox modules to linux-modules
    - [Packaging] Remove vbox and zfs modules from generic.inclusion-list

  * linux-image-5.0.0-35-generic breaks checkpointing of container
    (LP: #1857257)
    - SAUCE: overlayfs: use shiftfs hacks only with shiftfs as underlay

  * shiftfs: broken shiftfs nesting (LP: #1872094)
    - SAUCE: shiftfs: record correct creator credentials

  * Add debian/rules targets to compile/run kernel selftests (LP: #1874286)
    - [Packaging] add support to compile/run selftests

  * shiftfs: O_TMPFILE reports ESTALE (LP: #1872757)
    - SAUCE: shiftfs: fix dentry revalidation

  * LIO hanging in iscsit_free_session and iscsit_stop_session (LP: #1871688)
    - scsi: target: iscsi: calling iscsit_stop_session() inside
      iscsit_close_session() has no effect

  * [ICL] TC port in legacy/static mode can't be detected due TCCOLD
    (LP: #1868936)
    - SAUCE: drm/i915: Align power domain names with port names
    - SAUCE: drm/i915/display: Move out code to return the digital_port of the aux
      ch
    - SAUCE: drm/i915/display: Add intel_legacy_aux_to_power_domain()
    - SAUCE: drm/i915/display: Split hsw_power_well_enable() into two
    - SAUCE: drm/i915/tc/icl: Implement TC cold sequences
    - SAUCE: drm/i915/tc: Skip ref held check for TC legacy aux power wells
    - SAUCE: drm/i915/tc/tgl: Implement TC cold sequences
    - SAUCE: drm/i915/tc: Catch TC users accessing FIA registers without enable
      aux
    - SAUCE: drm/i915/tc: Do not warn when aux power well of static TC ports
      timeout

  * alsa/sof: external mic can't be deteced on Lenovo and HP laptops
    (LP: #1872569)
    - SAUCE: ASoC: intel/skl/hda - set autosuspend timeout for hda codecs

  * amdgpu kernel errors in Linux 5.4 (LP: #1871248)
    - drm/amd/display: Stop if retimer is not available

  * Focal update: v5.4.34 upstream stable release (LP: #1874111)
    - amd-xgbe: Use __napi_schedule() in BH context
    - hsr: check protocol version in hsr_newlink()
    - l2tp: Allow management of tunnels and session in user namespace
    - net: dsa: mt7530: fix tagged frames pass-through in VLAN-unaware mode
    - net: ipv4: devinet: Fix crash when add/del multicast IP with autojoin
    - net: ipv6: do not consider routes via gateways for anycast address check
    - net: phy: micrel: use genphy_read_status for KSZ9131
    - net: qrtr: send msgs from local of same id as broadcast
    - net: revert default NAPI poll timeout to 2 jiffies
    - net: tun: record RX queue in skb before do_xdp_gener...

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux - 5.3.0-53.47

---------------
linux (5.3.0-53.47) eoan; urgency=medium

  * eoan/linux: 5.3.0-53.47 -proposed tracker (LP: #1877257)

  * Intermittent display blackouts on event (LP: #1875254)
    - drm/i915: Limit audio CDCLK>=2*BCLK constraint back to GLK only

  * Unable to handle kernel pointer dereference in virtual kernel address space
    on Eoan (LP: #1876645)
    - SAUCE: overlayfs: fix shitfs special-casing

linux (5.3.0-52.46) eoan; urgency=medium

  * eoan/linux: 5.3.0-52.46 -proposed tracker (LP: #1874752)

  * alsa: make the dmic detection align to the mainline kernel-5.6
    (LP: #1871284)
    - ALSA: hda: add Intel DSP configuration / probe code
    - ALSA: hda: fix intel DSP config
    - ALSA: hda: Allow non-Intel device probe gracefully
    - ALSA: hda: More constifications
    - ALSA: hda: Rename back to dmic_detect option
    - [Config] SND_INTEL_DSP_CONFIG=m
    - [packaging] Remove snd-intel-nhlt from modules

  * built-using constraints preventing uploads (LP: #1875601)
    - temporarily drop Built-Using data

  * ubuntu/focal64 fails to mount Vagrant shared folders (LP: #1873506)
    - [Packaging] Move virtualbox modules to linux-modules
    - [Packaging] Remove vbox and zfs modules from generic.inclusion-list

  * linux-image-5.0.0-35-generic breaks checkpointing of container
    (LP: #1857257)
    - SAUCE: overlayfs: use shiftfs hacks only with shiftfs as underlay

  * shiftfs: broken shiftfs nesting (LP: #1872094)
    - SAUCE: shiftfs: record correct creator credentials

  * Add debian/rules targets to compile/run kernel selftests (LP: #1874286)
    - [Packaging] add support to compile/run selftests

  * shiftfs: O_TMPFILE reports ESTALE (LP: #1872757)
    - SAUCE: shiftfs: fix dentry revalidation

  * getitimer returns it_value=0 erroneously (LP: #1349028)
    - [Config] CONTEXT_TRACKING_FORCE policy should be unset

  * 5.3.0-46-generic - i915 - frequent GPU hangs / resets rcs0 (LP: #1872001)
    - drm/i915/execlists: Preempt-to-busy
    - drm/i915/gt: Detect if we miss WaIdleLiteRestore
    - drm/i915/execlists: Always force a context reload when rewinding RING_TAIL

  * alsa/sof: external mic can't be deteced on Lenovo and HP laptops
    (LP: #1872569)
    - SAUCE: ASoC: intel/skl/hda - set autosuspend timeout for hda codecs

  * Eoan update: upstream stable patchset 2020-04-22 (LP: #1874325)
    - ARM: dts: sun8i-a83t-tbs-a711: HM5065 doesn't like such a high voltage
    - bus: sunxi-rsb: Return correct data when mixing 16-bit and 8-bit reads
    - net: vxge: fix wrong __VA_ARGS__ usage
    - hinic: fix a bug of waitting for IO stopped
    - hinic: fix wrong para of wait_for_completion_timeout
    - cxgb4/ptp: pass the sign of offset delta in FW CMD
    - qlcnic: Fix bad kzalloc null test
    - i2c: st: fix missing struct parameter description
    - cpufreq: imx6q: Fixes unwanted cpu overclocking on i.MX6ULL
    - media: venus: hfi_parser: Ignore HEVC encoding for V1
    - firmware: arm_sdei: fix double-lock on hibernate with shared events
    - null_blk: Fix the null_add_dev() error path
    - null_blk: Handle null_add_dev() failures properly
    - null_blk: fix spuri...

[Florian W. (florian-will)]

It's too late now, but there's a typo in the changelog: "shitfs".

[Colin Ian King (colin-king)]

That's an unfortunate typo

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux - 5.4.0-42.46

---------------
linux (5.4.0-42.46) focal; urgency=medium

  * focal/linux: 5.4.0-42.46 -proposed tracker (LP: #1887069)

  * linux 4.15.0-109-generic network DoS regression vs -108 (LP: #1886668)
    - SAUCE: Revert "netprio_cgroup: Fix unlimited memory leak of v2 cgroups"

linux (5.4.0-41.45) focal; urgency=medium

  * focal/linux: 5.4.0-41.45 -proposed tracker (LP: #1885855)

  * Packaging resync (LP: #1786013)
    - update dkms package versions

  * CVE-2019-19642
    - kernel/relay.c: handle alloc_percpu returning NULL in relay_open

  * CVE-2019-16089
    - SAUCE: nbd_genl_status: null check for nla_nest_start

  * CVE-2020-11935
    - aufs: do not call i_readcount_inc()

  * ip_defrag.sh in net from ubuntu_kernel_selftests failed with 5.0 / 5.3 / 5.4
    kernel (LP: #1826848)
    - selftests: net: ip_defrag: ignore EPERM

  * Update lockdown patches (LP: #1884159)
    - SAUCE: acpi: disallow loading configfs acpi tables when locked down

  * seccomp_bpf fails on powerpc (LP: #1885757)
    - SAUCE: selftests/seccomp: fix ptrace tests on powerpc

  * Introduce the new NVIDIA 418-server and 440-server series, and update the
    current NVIDIA drivers (LP: #1881137)
    - [packaging] add signed modules for the 418-server and the 440-server
      flavours

 -- Khalid Elmously <email address hidden> Thu, 09 Jul 2020 19:50:26 -0400