Bug #1597908 “linux-kernel: Freeing IRQ from IRQ context” : Xenial (16.04) : Bugs : linux package : Ubuntu

Revision history for this message

Ubuntu Foundations Team Bug Bot (crichton) wrote on 2016-06-30:

#1

Thank you for taking the time to report this bug and helping to make Ubuntu better. It seems that your bug report is not filed about a specific source package though, rather it is just filed against Ubuntu in general. It is important that bug reports be filed about source packages so that people interested in the package can find the bugs about it. You can find some hints about determining what package your bug might be about at https://wiki.ubuntu.com/Bugs/FindRightPackage. You might also ask for help in the #ubuntu-bugs irc channel on Freenode.

To change the source package that this bug is filed about visit https://bugs.launchpad.net/ubuntu/+bug/1597908/+editstatus and add the package name in the text box next to the word Package.

[This is an automated message. I apologize if it reached you inappropriately; please just reply to this message indicating so.]

tags:

added: bot-comment

Paul White (paulw2u) on 2016-06-30

affects:

ubuntu → linux (Ubuntu)

Revision history for this message

Brad Figg (brad-figg) wrote on 2016-06-30: Missing required logs.

#2

This bug is missing log files that will aid in diagnosing the problem. From a terminal window please run:

apport-collect 1597908

and then change the status of the bug to 'Confirmed'.

If, due to the nature of the issue you have encountered, you are unable to run this command, please add a comment stating that fact and change the bug status to 'Confirmed'.

This change has been made by an automated script, maintained by the Ubuntu Kernel Team.

Changed in linux (Ubuntu):
status:	New → Incomplete

Revision history for this message

Keith Busch (keith-busch) wrote on 2016-06-30:

#3

Download full text (4.2 KiB)

This system crashes making apport-collect not possible after the fact, though I confirm it is a bug. As the upstream nvme driver maintainer, I can recommend either which driver commits need to be reverted, or which kernel commit needs to be cherry-picked (preferring the latter :)).

Here is a snippet of stack trace:

<3>[51827.132142] BUG: scheduling while atomic: swapper/19/0/0x00000100
<4>[51827.242686] Modules linked in: nvme binfmt_misc PlxSvc(OE) ipmi_devintf intel_rapl x86_pkg_temp_thermal intel_powerclamp coretemp kvm irqbypass input_leds joydev sb_edac ipmi_ssif edac_core mei_me mei lpc_ich ioatdma shpchp ipmi_si ipmi_msghandler 8250_fintek acpi_pad acpi_power_meter mac_hid ib_iser rdma_cm iw_cm ib_cm ib_sa ib_mad ib_core ib_addr iscsi_tcp libiscsi_tcp libiscsi scsi_transport_iscsi autofs4 btrfs raid10 raid456 async_raid6_recov async_memcpy async_pq async_xor async_tx xor raid6_pq libcrc32c raid1 raid0 multipath linear igb dca ptp ahci crct10dif_pclmul crc32_pclmul hid_generic mxm_wmi aesni_intel aes_x86_64 lrw gf128mul usbhid glue_helper ablk_helper pps_core cryptd hid libahci i2c_algo_bit fjes wmi
<4>[51827.242743] CPU: 19 PID: 0 Comm: swapper/19 Tainted: G W OE 4.4.0-24-generic #43-Ubuntu
<4>[51827.242746] Hardware name: Intel Corporation S2600WT2/S2600WT2, BIOS SE5C610.86B.11.01.0132.060620160917 06/06/2016
<4>[51827.242748] 0000000000000286 374975818f2884ca ffff88105de43a98 ffffffff813eab23
<4>[51827.242752] ffff88105de56d00 0000000000000000 ffff88105de43aa8 ffffffff810a5ceb
<4>[51827.242762] ffff88105de43af8 ffffffff818217d6 ffff88105de43ac8 3749758100000013
<4>[51827.242765] Call Trace:
<4>[51827.242768] <IRQ> [<ffffffff813eab23>] dump_stack+0x63/0x90
<4>[51827.242781] [<ffffffff810a5ceb>] __schedule_bug+0x4b/0x60
<4>[51827.242788] [<ffffffff818217d6>] __schedule+0x726/0xa30
<4>[51827.242792] [<ffffffff81821b15>] schedule+0x35/0x80
<4>[51827.242797] [<ffffffff81824ba9>] schedule_timeout+0x129/0x270
<4>[51827.242802] [<ffffffff810ec480>] ? trace_event_raw_event_tick_stop+0x120/0x120
<4>[51827.242807] [<ffffffff810ec89d>] msleep+0x2d/0x40
<4>[51827.242813] [<ffffffffc02cd470>] nvme_wait_ready+0x90/0x100 [nvme]
<4>[51827.242818] [<ffffffffc02cee70>] nvme_disable_ctrl+0x40/0x50 [nvme]
<4>[51827.242823] [<ffffffffc02d1b3d>] nvme_disable_admin_queue+0x8d/0x90 [nvme]
<4>[51827.242828] [<ffffffffc02d1dde>] nvme_dev_disable+0x29e/0x2c0 [nvme]
<4>[51827.242833] [<ffffffffc02d03a0>] ? __nvme_process_cq+0x200/0x200 [nvme]
<4>[51827.242838] [<ffffffff8154955c>] ? dev_warn+0x6c/0x90
<4>[51827.242843] [<ffffffffc02d1ff0>] nvme_timeout+0x110/0x1d0 [nvme]
<4>[51827.242847] [<ffffffff813ea92f>] ? cpumask_next_and+0x2f/0x40
<4>[51827.242850] [<ffffffff810bd4bc>] ? load_balance+0x18c/0x980
<4>[51827.242854] [<ffffffff813c5cdf>] blk_mq_rq_timed_out+0x2f/0x70
<4>[51827.242857] [<ffffffff813c5d6e>] blk_mq_check_expired+0x4e/0x80
<4>[51827.242861] [<ffffffff813c86c8>] bt_for_each+0xd8/0xe0
<4>[51827.242864] [<ffffffff813c5d20>] ? blk_mq_rq_timed_out+0x70/0x70
<4>[51827.242868] [<ffffffff813c5d20>] ? blk_mq_rq_timed_out+0x70/0x70
<4>[51827.242871] [<ffffffff813c8ed7>] blk_mq_queue_tag_busy_iter+0x47/0xc0
<4>[51827.24...

This system crashes making apport-collect not possible after the fact, though I confirm it is a bug. As the upstream nvme driver maintainer, I can recommend either which driver commits need to be reverted, or which kernel commit needs to be cherry-picked (preferring the latter :)).

Here is a snippet of stack trace:

<3>[51827.132142] BUG: scheduling while atomic: swapper/19/0/0x00000100
<4>[51827.242686] Modules linked in: nvme binfmt_misc PlxSvc(OE) ipmi_devintf intel_rapl x86_pkg_temp_thermal intel_powerclamp coretemp kvm irqbypass input_leds joydev sb_edac ipmi_ssif edac_core mei_me mei lpc_ich ioatdma shpchp ipmi_si ipmi_msghandler 8250_fintek acpi_pad acpi_power_meter mac_hid ib_iser rdma_cm iw_cm ib_cm ib_sa ib_mad ib_core ib_addr iscsi_tcp libiscsi_tcp libiscsi scsi_transport_iscsi autofs4 btrfs raid10 raid456 async_raid6_recov async_memcpy async_pq async_xor async_tx xor raid6_pq libcrc32c raid1 raid0 multipath linear igb dca ptp ahci crct10dif_pclmul crc32_pclmul hid_generic mxm_wmi aesni_intel aes_x86_64 lrw gf128mul usbhid glue_helper ablk_helper pps_core cryptd hid libahci i2c_algo_bit fjes wmi
<4>[51827.242743] CPU: 19 PID: 0 Comm: swapper/19 Tainted: G        W  OE   4.4.0-24-generic #43-Ubuntu
<4>[51827.242746] Hardware name: Intel Corporation S2600WT2/S2600WT2, BIOS SE5C610.86B.11.01.0132.060620160917 06/06/2016
<4>[51827.242748]  0000000000000286 374975818f2884ca ffff88105de43a98 ffffffff813eab23
<4>[51827.242752]  ffff88105de56d00 0000000000000000 ffff88105de43aa8 ffffffff810a5ceb
<4>[51827.242762]  ffff88105de43af8 ffffffff818217d6 ffff88105de43ac8 3749758100000013
<4>[51827.242765] Call Trace:
<4>[51827.242768]  <IRQ>  [<ffffffff813eab23>] dump_stack+0x63/0x90
<4>[51827.242781]  [<ffffffff810a5ceb>] __schedule_bug+0x4b/0x60
<4>[51827.242788]  [<ffffffff818217d6>] __schedule+0x726/0xa30
<4>[51827.242792]  [<ffffffff81821b15>] schedule+0x35/0x80
<4>[51827.242797]  [<ffffffff81824ba9>] schedule_timeout+0x129/0x270
<4>[51827.242802]  [<ffffffff810ec480>] ? trace_event_raw_event_tick_stop+0x120/0x120
<4>[51827.242807]  [<ffffffff810ec89d>] msleep+0x2d/0x40
<4>[51827.242813]  [<ffffffffc02cd470>] nvme_wait_ready+0x90/0x100 [nvme]
<4>[51827.242818]  [<ffffffffc02cee70>] nvme_disable_ctrl+0x40/0x50 [nvme]
<4>[51827.242823]  [<ffffffffc02d1b3d>] nvme_disable_admin_queue+0x8d/0x90 [nvme]
<4>[51827.242828]  [<ffffffffc02d1dde>] nvme_dev_disable+0x29e/0x2c0 [nvme]
<4>[51827.242833]  [<ffffffffc02d03a0>] ? __nvme_process_cq+0x200/0x200 [nvme]
<4>[51827.242838]  [<ffffffff8154955c>] ? dev_warn+0x6c/0x90
<4>[51827.242843]  [<ffffffffc02d1ff0>] nvme_timeout+0x110/0x1d0 [nvme]
<4>[51827.242847]  [<ffffffff813ea92f>] ? cpumask_next_and+0x2f/0x40
<4>[51827.242850]  [<ffffffff810bd4bc>] ? load_balance+0x18c/0x980
<4>[51827.242854]  [<ffffffff813c5cdf>] blk_mq_rq_timed_out+0x2f/0x70
<4>[51827.242857]  [<ffffffff813c5d6e>] blk_mq_check_expired+0x4e/0x80
<4>[51827.242861]  [<ffffffff813c86c8>] bt_for_each+0xd8/0xe0
<4>[51827.242864]  [<ffffffff813c5d20>] ? blk_mq_rq_timed_out+0x70/0x70
<4>[51827.242868]  [<ffffffff813c5d20>] ? blk_mq_rq_timed_out+0x70/0x70
<4>[51827.242871]  [<ffffffff813c8ed7>] blk_mq_queue_tag_busy_iter+0x47/0xc0
<4>[51827.242875]  [<ffffffff813c4a80>] ? blk_mq_attempt_merge+0xb0/0xb0
<4>[51827.242878]  [<ffffffff813c4ac1>] blk_mq_rq_timer+0x41/0xf0
<4>[51827.242882]  [<ffffffff810ec4c5>] call_timer_fn+0x35/0x120
<4>[51827.242885]  [<ffffffff813c4a80>] ? blk_mq_attempt_merge+0xb0/0xb0
<4>[51827.242890]  [<ffffffff810ece7a>] run_timer_softirq+0x23a/0x2f0
<4>[51827.242894]  [<ffffffff81085b11>] __do_softirq+0x101/0x290
<4>[51827.242899]  [<ffffffff81085e13>] irq_exit+0xa3/0xb0
<4>[51827.242902]  [<ffffffff818286a2>] smp_apic_timer_interrupt+0x42/0x50
<4>[51827.242905]  [<ffffffff81826962>] apic_timer_interrupt+0x82/0x90
<4>[51827.242907]  <EOI>  [<ffffffff816bcd21>] ? cpuidle_enter_state+0x111/0x2b0
<4>[51827.242914]  [<ffffffff816bcef7>] cpuidle_enter+0x17/0x20
<4>[51827.242918]  [<ffffffff810c3ec2>] call_cpuidle+0x32/0x60
<4>[51827.242921]  [<ffffffff816bced3>] ? cpuidle_select+0x13/0x20
<4>[51827.242925]  [<ffffffff810c4180>] cpu_startup_entry+0x290/0x350
<4>[51827.242929]  [<ffffffff81051714>] start_secondary+0x154/0x190
<3>[51827.242934] bad: scheduling from the idle thread!

Changed in linux (Ubuntu):
status:	Incomplete → Confirmed

Joseph Salisbury (jsalisbury) on 2016-06-30

Changed in linux (Ubuntu):
importance:	Undecided → Medium
tags:	added: kernel-da-key
Changed in linux (Ubuntu):
importance:	Medium → High
Changed in linux (Ubuntu Xenial):
status:	New → Confirmed
importance:	Undecided → High

Joseph Salisbury (jsalisbury) on 2016-06-30

Changed in linux (Ubuntu):
assignee:	nobody → Joseph Salisbury (jsalisbury)
Changed in linux (Ubuntu Xenial):
assignee:	nobody → Joseph Salisbury (jsalisbury)
Changed in linux (Ubuntu):
status:	Confirmed → In Progress
Changed in linux (Ubuntu Xenial):
status:	Confirmed → In Progress

Revision history for this message

Joseph Salisbury (jsalisbury) wrote on 2016-06-30:

#4

I built a Xenial test kernel with a pick of commit: 287922eb0b The test kernel can be downloaded from:

http://kernel.ubuntu.com/~jsalisbury/lp1597908/

Can you test this kernel and see if it resolves this bug?

Revision history for this message

Keith Busch (keith-busch) wrote on 2016-07-01:

#5

Thanks for the quick build! I forwarded this onto the original reporter and will send the results when I hear them. We'll get it tested though might be next week for the results due to holiday weekend.

Revision history for this message

Joe Gruher (joseph-r-gruher) wrote on 2016-07-28:

#6

Hello, there are a number of packages at http://kernel.ubuntu.com/~jsalisbury/lp1597908/. Should we install the whole set to test this fix, or just specific one(s)?

Revision history for this message

Joe Gruher (joseph-r-gruher) wrote on 2016-07-28:

#7

After installing all the packages on a system that was reliably showing the problem I have been unable to reproduce the problem again. Fix seems good in initial testing. No new problems identified.

Revision history for this message

Kamil Gardziejczyk (belussi-pl) wrote on 2016-07-28:

#8

Hi,

I have installed these packages, but I still observer this issue:

kamil@host:~$ sudo lspci | grep Volatile
[sudo] password for kamil:
03:00.0 Non-Volatile memory controller: Intel Corporation PCIe Data Center SSD (rev 01)
04:00.0 Non-Volatile memory controller: Intel Corporation PCIe Data Center SSD (rev 01)
05:00.0 Non-Volatile memory controller: Intel Corporation PCIe Data Center SSD (rev 01)
06:00.0 Non-Volatile memory controller: Intel Corporation PCIe Data Center SSD (rev 01)
07:00.0 Non-Volatile memory controller: Intel Corporation PCIe Data Center SSD (rev 01)
08:00.0 Non-Volatile memory controller: Intel Corporation PCIe Data Center SSD (rev 01)
kamil@host:~$ ls /dev/ | grep nvme
nvme0
nvme0n1
nvme1
nvme1n1
nvme2
nvme2n1
nvme3
nvme3n1
nvme4
nvme5
nvme5n1
kamil@host:~$ [ 69.542046] nvme 0000:07:00.0: Identify Controller failed (-4)

kamil@host:~$ sudo lspci | grep Volatile
03:00.0 Non-Volatile memory controller: Intel Corporation PCIe Data Center SSD (rev 01)
04:00.0 Non-Volatile memory controller: Intel Corporation PCIe Data Center SSD (rev 01)
05:00.0 Non-Volatile memory controller: Intel Corporation PCIe Data Center SSD (rev 01)
06:00.0 Non-Volatile memory controller: Intel Corporation PCIe Data Center SSD (rev 01)
08:00.0 Non-Volatile memory controller: Intel Corporation PCIe Data Center SSD (rev 01)
kamil@host:~$ ls /dev/ | grep nvme
nvme0
nvme0n1
nvme1
nvme1n1
nvme2
nvme2n1
nvme3
nvme3n1
nvme5
nvme5n1
kamil@host:~$ uname -a
Linux host 4.4.0-28-generic #47~lp1597908 SMP Thu Jun 30 22:46:45 UTC 2016 x86_64 x86_64 x86_64 GNU/Linux

Dmesg output:
[ 2.648607] pci 0000:07:00.0: [8086:0953] type 00 class 0x010802
[ 2.649074] pci 0000:07:00.0: reg 0x10: [mem 0xc6a10000-0xc6a13fff 64bit]
[ 2.649668] pci 0000:07:00.0: reg 0x30: [mem 0xc6a00000-0xc6a0ffff pref]
[ 5.211815] pci_bus 0000:07: resource 1 [mem 0xc6a00000-0xc6afffff]
[ 6.365162] pci 0000:07:00.0: Signaling PME through PCIe PME interrupt
...
[ 69.437927] nvme 0000:07:00.0: I/O 0 QID 0 timeout, disable controller
[ 69.542017] nvme 0000:07:00.0: Cancelling I/O 0 QID 0
[ 69.542046] nvme 0000:07:00.0: Identify Controller failed (-4)
[ 69.553756] nvme 0000:07:00.0: Removing after probe failure

Kamil,

Hi,

I have installed these packages, but I still observer this issue:

kamil@host:~$ sudo lspci | grep Volatile
[sudo] password for kamil:
03:00.0 Non-Volatile memory controller: Intel Corporation PCIe Data Center SSD (rev 01)
04:00.0 Non-Volatile memory controller: Intel Corporation PCIe Data Center SSD (rev 01)
05:00.0 Non-Volatile memory controller: Intel Corporation PCIe Data Center SSD (rev 01)
06:00.0 Non-Volatile memory controller: Intel Corporation PCIe Data Center SSD (rev 01)
07:00.0 Non-Volatile memory controller: Intel Corporation PCIe Data Center SSD (rev 01)
08:00.0 Non-Volatile memory controller: Intel Corporation PCIe Data Center SSD (rev 01)
kamil@host:~$ ls /dev/ | grep nvme
nvme0
nvme0n1
nvme1
nvme1n1
nvme2
nvme2n1
nvme3
nvme3n1
nvme4
nvme5
nvme5n1
kamil@host:~$ [   69.542046] nvme 0000:07:00.0: Identify Controller failed (-4)

kamil@host:~$ sudo lspci | grep Volatile
03:00.0 Non-Volatile memory controller: Intel Corporation PCIe Data Center SSD (rev 01)
04:00.0 Non-Volatile memory controller: Intel Corporation PCIe Data Center SSD (rev 01)
05:00.0 Non-Volatile memory controller: Intel Corporation PCIe Data Center SSD (rev 01)
06:00.0 Non-Volatile memory controller: Intel Corporation PCIe Data Center SSD (rev 01)
08:00.0 Non-Volatile memory controller: Intel Corporation PCIe Data Center SSD (rev 01)
kamil@host:~$ ls /dev/ | grep nvme
nvme0
nvme0n1
nvme1
nvme1n1
nvme2
nvme2n1
nvme3
nvme3n1
nvme5
nvme5n1
kamil@host:~$ uname -a
Linux host 4.4.0-28-generic #47~lp1597908 SMP Thu Jun 30 22:46:45 UTC 2016 x86_64 x86_64 x86_64 GNU/Linux

Dmesg output:
[    2.648607] pci 0000:07:00.0: [8086:0953] type 00 class 0x010802
[    2.649074] pci 0000:07:00.0: reg 0x10: [mem 0xc6a10000-0xc6a13fff 64bit]
[    2.649668] pci 0000:07:00.0: reg 0x30: [mem 0xc6a00000-0xc6a0ffff pref]
[    5.211815] pci_bus 0000:07: resource 1 [mem 0xc6a00000-0xc6afffff]
[    6.365162] pci 0000:07:00.0: Signaling PME through PCIe PME interrupt
...
[   69.437927] nvme 0000:07:00.0: I/O 0 QID 0 timeout, disable controller
[   69.542017] nvme 0000:07:00.0: Cancelling I/O 0 QID 0
[   69.542046] nvme 0000:07:00.0: Identify Controller failed (-4)
[   69.553756] nvme 0000:07:00.0: Removing after probe failure

Kamil,

Revision history for this message

Keith Busch (keith-busch) wrote on 2016-07-28:

#9

Hi Kamil,

It looks like the kernel issue is resolved. Your drive just appears to be in a bad state and the driver reacts accordingly.

I think this launchpad's issue is resolved and should request the fix go forward.

Revision history for this message

Keith Busch (keith-busch) wrote on 2016-07-28:

#10

Kamil,

For your issue, this is potentially a bug specific to the 4.5 driver. We used to poll once a second, which would hide legacy irq issues during initialization, but 4.5 removed it. A patch[*] to 4.6 removed all use of legacy interrupts, and should have been applied to 4.5 stable (they were cc'ed on the mailing list).

* https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit?id=a5229050b69cfffb690b546c357ca5a60434c0c8

Revision history for this message

Joseph Salisbury (jsalisbury) wrote on 2016-07-28:

#11

Per testing results in comment #7, I'll submit a SRU request for commit 287922eb0. Thanks for testing!

Revision history for this message

Kamil Gardziejczyk (belussi-pl) wrote on 2016-07-29:

#12

I have udpdated kernel to 4.7 and everything seems to be working fine.

Kamal Mostafa (kamalmostafa) on 2016-08-01

Changed in linux (Ubuntu Xenial):
status:	In Progress → Fix Committed

Revision history for this message

Stefan Bader (smb) wrote on 2016-08-16:

#13

This bug is awaiting verification that the kernel in -proposed solves the problem. Please test the kernel and update this bug with the results. If the problem is solved, change the tag 'verification-needed-xenial' to 'verification-done-xenial'.

If verification is not done by 5 working days from today, this fix will be dropped from the source code, and this bug will be closed.

See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you!

tags:

added: verification-needed-xenial

Revision history for this message

Stefan Bader (smb) wrote on 2016-08-25:

#14

Taking the test kernel results from comment #8 and #9 as verification.

tags:

added: verification-done-xenial
removed: verification-needed-xenial

Revision history for this message

Launchpad Janitor (janitor) wrote on 2016-08-29:

#15

Download full text (13.4 KiB)

This bug was fixed in the package linux - 4.4.0-36.55

---------------
linux (4.4.0-36.55) xenial; urgency=low

[ Stefan Bader ]

* Release Tracking Bug
- LP: #1612305

* I2C touchpad does not work on AMD platform (LP: #1612006)
- SAUCE: pinctrl/amd: Remove the default de-bounce time

* CVE-2016-5696
- tcp: make challenge acks less predictable

linux (4.4.0-35.54) xenial; urgency=low

[ Stefan Bader ]

* Release Tracking Bug
- LP: #1611215

* [i915_bpo] Sync with v4.7 (LP: #1609742)
- SAUCE: i915_bpo: Sync with v4.7

* s390/cio: fix reset of channel measurement block (LP: #1609415)
- s390/cio: allow to reset channel measurement block

  * in Ubuntu16.10: Hit on Call traces and system goes down when transactional
    memory tests are running in 32TB Brazos system (LP: #1606786)
    - powerpc/tm: Avoid SLB faults in treclaim/trecheckpoint when RI=0
    - powerpc/tm: Fix stack pointer corruption in __tm_recheckpoint()

  * Power Menu does not display after press the Power Button (LP: #1609204)
    - intel-vbtn: new driver for Intel Virtual Button
    - [config] enable CONFIG_INTEL_VBTN=m

* OptiPlex 7450 AIO hangs when rebooting (LP: #1608762)
- x86/reboot: Add Dell Optiplex 7450 AIO reboot quirk

* virtualbox+usb 3.0 breaks boot, -28 kernel works (LP: #1604058)
- SAUCE: xhci: Fix soft lockup in xhci_pci_probe path when XHCI_STATE_HALTED

* linux-kernel: Freeing IRQ from IRQ context (LP: #1597908)
- block: defer timeouts to a workqueue

  * Tunnel offload indications not stripped from encapsulated packets, causing
    performance overhead (LP: #1602755)
    - tunnels: Remove encapsulation offloads on decap.

  * lm-sensors is throwing "ERROR: Can't get value of subfeature temp1_input:
    I/O error" for be2net driver (LP: #1607387)
    - be2net: perform temperature query in adapter regardless of its interface
      state

* Dell dock MAC Address pass through doesn't work in Ubuntu (LP: #1579984)
- r8152: Add support for setting pass through MAC address on RTL8153-AD

* vmxnet3 LRO IPv6 performance issues (stalling TCP) (LP: #1605494)
- Driver: Vmxnet3: set CHECKSUM_UNNECESSARY for IPv6 packets

  * ISST-LTE:pVM:monklp5:Ubuntu16.04.1:system crashed at
    lpfc_sli4_scmd_to_wqidx_distr (LP: #1597974)
    - SAUCE: lpfc: fix oops in lpfc_sli4_scmd_to_wqidx_distr() from
      lpfc_send_taskmgmt()

  * Backport cxlflash shutdown patch to Xenial SRU (LP: #1605405)
    - SAUCE: cxlflash: Verify problem state area is mapped before notifying
      shutdown

  * Xenial update to v4.4.16 stable release (LP: #1607404)
    - mac80211: fix fast_tx header alignment
    - mac80211: mesh: flush mesh paths unconditionally
    - mac80211_hwsim: Add missing check for HWSIM_ATTR_SIGNAL
    - mac80211: Fix mesh estab_plinks counting in STA removal case
    - EDAC, sb_edac: Fix rank lookup on Broadwell
    - IB/cm: Fix a recently introduced locking bug
    - IB/mlx4: Properly initialize GRH TClass and FlowLabel in AHs
    - powerpc/pseries: Fix IBM_ARCH_VEC_NRCORES_OFFSET since POWER8NVL was added
    - powerpc/tm: Always reclaim in start_thread() for exec() class syscalls
    - usb: dwc2: fix reg...

This bug was fixed in the package linux - 4.4.0-36.55

---------------
linux (4.4.0-36.55) xenial; urgency=low

[ Stefan Bader ]

* Release Tracking Bug
    - LP: #1612305

* I2C touchpad does not work on AMD platform (LP: #1612006)
    - SAUCE: pinctrl/amd: Remove the default de-bounce time

* CVE-2016-5696
    - tcp: make challenge acks less predictable

linux (4.4.0-35.54) xenial; urgency=low

[ Stefan Bader ]

* Release Tracking Bug
    - LP: #1611215

* [i915_bpo] Sync with v4.7 (LP: #1609742)
    - SAUCE: i915_bpo: Sync with v4.7

* s390/cio: fix reset of channel measurement block (LP: #1609415)
    - s390/cio: allow to reset channel measurement block

* in Ubuntu16.10: Hit on Call traces  and system goes down when transactional
    memory  tests are running in 32TB Brazos system (LP: #1606786)
    - powerpc/tm: Avoid SLB faults in treclaim/trecheckpoint when RI=0
    - powerpc/tm: Fix stack pointer corruption in __tm_recheckpoint()

*  Power Menu does not display after press the Power Button (LP: #1609204)
    - intel-vbtn: new driver for Intel Virtual Button
    - [config] enable CONFIG_INTEL_VBTN=m

* OptiPlex 7450 AIO hangs when rebooting (LP: #1608762)
    - x86/reboot: Add Dell Optiplex 7450 AIO reboot quirk

* virtualbox+usb 3.0 breaks boot, -28 kernel works (LP: #1604058)
    - SAUCE: xhci: Fix soft lockup in xhci_pci_probe path when XHCI_STATE_HALTED

* linux-kernel: Freeing IRQ from IRQ context (LP: #1597908)
    - block: defer timeouts to a workqueue

* Tunnel offload indications not stripped from encapsulated packets, causing
    performance overhead (LP: #1602755)
    - tunnels: Remove encapsulation offloads on decap.

* lm-sensors is throwing "ERROR: Can't get value of subfeature temp1_input:
    I/O error" for be2net driver (LP: #1607387)
    - be2net: perform temperature query in adapter regardless of its interface
      state

* Dell dock MAC Address pass through doesn't work in Ubuntu (LP: #1579984)
    - r8152: Add support for setting pass through MAC address on RTL8153-AD

* vmxnet3 LRO IPv6 performance issues (stalling TCP) (LP: #1605494)
    - Driver: Vmxnet3: set CHECKSUM_UNNECESSARY for IPv6 packets

* ISST-LTE:pVM:monklp5:Ubuntu16.04.1:system crashed at
    lpfc_sli4_scmd_to_wqidx_distr (LP: #1597974)
    - SAUCE: lpfc: fix oops in lpfc_sli4_scmd_to_wqidx_distr() from
      lpfc_send_taskmgmt()

* Backport cxlflash shutdown patch to Xenial SRU (LP: #1605405)
    - SAUCE: cxlflash: Verify problem state area is mapped before notifying
      shutdown

* Xenial update to v4.4.16 stable release (LP: #1607404)
    - mac80211: fix fast_tx header alignment
    - mac80211: mesh: flush mesh paths unconditionally
    - mac80211_hwsim: Add missing check for HWSIM_ATTR_SIGNAL
    - mac80211: Fix mesh estab_plinks counting in STA removal case
    - EDAC, sb_edac: Fix rank lookup on Broadwell
    - IB/cm: Fix a recently introduced locking bug
    - IB/mlx4: Properly initialize GRH TClass and FlowLabel in AHs
    - powerpc/pseries: Fix IBM_ARCH_VEC_NRCORES_OFFSET since POWER8NVL was added
    - powerpc/tm: Always reclaim in start_thread() for exec() class syscalls
    - usb: dwc2: fix regression on big-endian PowerPC/ARM systems
    - USB: EHCI: declare hostpc register as zero-length array
    - usb: common: otg-fsm: add license to usb-otg-fsm
    - mnt: fs_fully_visible test the proper mount for MNT_LOCKED
    - mnt: Account for MS_RDONLY in fs_fully_visible
    - mnt: If fs_fully_visible fails call put_filesystem.
    - of: fix autoloading due to broken modalias with no 'compatible'
    - of: irq: fix of_irq_get[_byname]() kernel-doc
    - locking/ww_mutex: Report recursive ww_mutex locking early
    - locking/qspinlock: Fix spin_unlock_wait() some more
    - locking/static_key: Fix concurrent static_key_slow_inc()
    - x86, build: copy ldlinux.c32 to image.iso
    - kprobes/x86: Clear TF bit in fault on single-stepping
    - x86/amd_nb: Fix boot crash on non-AMD systems
    - Revert "gpiolib: Split GPIO flags parsing and GPIO configuration"
    - uvc: Forward compat ioctls to their handlers directly
    - thermal: cpu_cooling: fix improper order during initialization
    - writeback: use higher precision calculation in domain_dirty_limits()
    - nfsd4/rpc: move backchannel create logic into rpc code
    - nfsd: Always lock state exclusively.
    - nfsd: Extend the mutex holding region around in nfsd4_process_open2()
    - posix_acl: Add set_posix_acl
    - nfsd: check permissions when setting ACLs
    - make nfs_atomic_open() call d_drop() on all ->open_context() errors.
    - NFS: Fix another OPEN_DOWNGRADE bug
    - ARM: imx6ul: Fix Micrel PHY mask
    - ARM: 8578/1: mm: ensure pmd_present only checks the valid bit
    - ARM: 8579/1: mm: Fix definition of pmd_mknotpresent
    - MIPS: KVM: Fix modular KVM under QEMU
    - mm: Export migrate_page_move_mapping and migrate_page_copy
    - UBIFS: Implement ->migratepage()
    - sched/fair: Fix cfs_rq avg tracking underflow
    - packet: Use symmetric hash for PACKET_FANOUT_HASH.
    - net_sched: fix mirrored packets checksum
    - cdc_ncm: workaround for EM7455 "silent" data interface
    - ipv6: Fix mem leak in rt6i_pcpu
    - ARCv2: Check for LL-SC livelock only if LLSC is enabled
    - ARCv2: LLSC: software backoff is NOT needed starting HS2.1c
    - kvm: Fix irq route entries exceeding KVM_MAX_IRQ_ROUTES
    - KVM: nVMX: VMX instructions: fix segment checks when L1 is in long mode.
    - HID: elo: kill not flush the work
    - HID: hiddev: validate num_values for HIDIOCGUSAGES, HIDIOCSUSAGES commands
    - tracing: Handle NULL formats in hold_module_trace_bprintk_format()
    - base: make module_create_drivers_dir race-free
    - iommu/arm-smmu: Wire up map_sg for arm-smmu-v3
    - iommu/vt-d: Enable QI on all IOMMUs before setting root entry
    - iommu/amd: Fix unity mapping initialization race
    - drm/mgag200: Black screen fix for G200e rev 4
    - ipmi: Remove smi_msg from waiting_rcv_msgs list before handle_one_recv_msg()
    - arm64: Rework valid_user_regs
    - vfs: add d_real_inode() helper
    - af_unix: fix hard linked sockets on overlay
    - btrfs: account for non-CoW'd blocks in btrfs_abort_transaction
    - drm/radeon: fix asic initialization for virtualized environments
    - drm/amdgpu/gfx7: fix broken condition check
    - ubi: Make recover_peb power cut aware
    - drm/amdkfd: unbind only existing processes
    - drm/amdkfd: destroy dbgmgr in notifier release
    - drm/dp/mst: Always clear proposed vcpi table for port.
    - drm/nouveau/disp/sor/gf119: both links use the same training register
    - drm/nouveau/gr/gf100-: update sm error decoding from gk20a nvgpu headers
    - drm/nouveau/fbcon: fix out-of-bounds memory accesses
    - drm/nouveau: fix for disabled fbdev emulation
    - drm/nouveau/disp/sor/gf119: select correct sor when poking training pattern
    - drm/i915/ilk: Don't disable SSC source if it's in use
    - drm/i915: Refresh cached DP port register value on resume
    - drm/i915: Update ifdeffery for mutex->owner
    - drm/i915: Update CDCLK_FREQ register on BDW after changing cdclk frequency
    - drm: add missing drm_mode_set_crtcinfo call
    - drm: make drm_atomic_set_mode_prop_for_crtc() more reliable
    - drm: atmel-hlcdc: actually disable scaling when no scaling is required
    - drm/ttm: Make ttm_bo_mem_compat available
    - drm/vmwgfx: Add an option to change assumed FB bpp
    - drm/vmwgfx: Work around mode set failure in 2D VMs
    - drm/vmwgfx: Check pin count before attempting to move a buffer
    - drm/vmwgfx: Delay pinning fbdev framebuffer until after mode set
    - drm/vmwgfx: Fix error paths when mapping framebuffer
    - memory: omap-gpmc: Fix omap gpmc EXTRADELAY timing
    - perf/x86: Fix undefined shift on 32-bit kernels
    - xen/balloon: Fix declared-but-not-defined warning
    - iio: Fix error handling in iio_trigger_attach_poll_func
    - iio:st_pressure: fix sampling gains (bring inline with ABI)
    - iio: light apds9960: Add the missing dev.parent
    - iio: proximity: as3935: correct IIO_CHAN_INFO_RAW output
    - iio: proximity: as3935: remove triggered buffer processing
    - iio: proximity: as3935: fix buffer stack trashing
    - iio: humidity: hdc100x: correct humidity integration time mask
    - iio: humidity: hdc100x: fix IIO_TEMP channel reporting
    - iio: hudmidity: hdc100x: fix incorrect shifting and scaling
    - staging: iio: accel: fix error check
    - iio: accel: kxsd9: fix the usage of spi_w8r8()
    - iio:ad7266: Fix broken regulator error handling
    - iio:ad7266: Fix support for optional regulators
    - iio:ad7266: Fix probe deferral for vref
    - tty/vt/keyboard: fix OOB access in do_compute_shiftstate()
    - hwmon: (dell-smm) Restrict fan control and serial number to CAP_SYS_ADMIN by
      default
    - hwmon: (dell-smm) Disallow fan_type() calls on broken machines
    - hwmon: (dell-smm) Cache fan_type() calls and change fan detection
    - ALSA: dummy: Fix a use-after-free at closing
    - ALSA: hda - Fix the headset mic jack detection on Dell machine
    - ALSA: hda / realtek - add two more Thinkpad IDs (5050,5053) for tpt460 fixup
    - ALSA: au88x0: Fix calculation in vortex_wtdma_bufshift()
    - ALSA: echoaudio: Fix memory allocation
    - ALSA: timer: Fix negative queue usage by racy accesses
    - ALSA: hda/realtek: Add Lenovo L460 to docking unit fixup
    - ALSA: hda - Add PCI ID for Kabylake-H
    - ALSA: hda - fix read before array start
    - ALSA: hda/realtek - add new pin definition in alc225 pin quirk table
    - ALSA: pcm: Free chmap at PCM free callback, too
    - ALSA: ctl: Stop notification after disconnection
    - ALSA: hda - fix use-after-free after module unload
    - ALSA: hda: add AMD Stoney PCI ID with proper driver caps
    - ARM: sunxi/dt: make the CHIP inherit from allwinner,sun5i-a13
    - ARM: dts: armada-38x: fix MBUS_ID for crypto SRAM on Armada 385 Linksys
    - ARM: mvebu: fix HW I/O coherency related deadlocks
    - ovl: Copy up underlying inode's ->i_mode to overlay inode
    - ovl: verify upper dentry in ovl_remove_and_whiteout()
    - scsi: fix race between simultaneous decrements of ->host_failed
    - 53c700: fix BUG on untagged commands
    - Fix reconnect to not defer smb3 session reconnect long after socket
      reconnect
    - cifs: dynamic allocation of ntlmssp blob
    - File names with trailing period or space need special case conversion
    - xen/acpi: allow xen-acpi-processor driver to load on Xen 4.7
    - crypto: qat - make qat_asym_algs.o depend on asn1 headers
    - tmpfs: don't undo fallocate past its last page
    - tmpfs: fix regression hang in fallocate undo
    - drm/i915: Revert DisplayPort fast link training feature
    - ovl: verify upper dentry before unlink and rename
    - Linux 4.4.16

* Regression caused by `fuse: Add support for pid namespaces` in 4.4.0-6.21
    (LP: #1605344)
    - SAUCE: (namespace) fuse: Permit requests from other pid namespaces

* CVE-2016-5400
    - media: fix airspy usb probe error path

* Cannot mount proc in unprivileged containers if /proc/xen is mounted
    (LP: #1607374)
    - SAUCE: xenbus: Use proc_create_mount_point() to create /proc/xen

* Mic mute key does not work for Ideapad laptops (LP: #1607153)
    - ideapad_laptop: Add an event for mic mute hotkey

* NVMe stress test fails after 12 hours on Ubuntu 16.04 (LP: #1604995)
    - block: atari: Return early for unsupported sector size

* Console extremely slow with 4.4 kernels for servers with Matrox G200er2 or
    similar (LP: #1605662)
    - SAUCE: vesafb: Set mtrr:3 (write-combining) as default

* Ubuntu 16.04 - Full EEH Recovery Support for NVMe devices (LP: #1602724)
    - nvme: use a work item to submit async event requests
    - nvme: don't poll the CQ from the kthread
    - nvme: replace the kthread with a per-device watchdog timer
    - NVMe: Fix reset/remove race
    - nvme: Avoid reset work on watchdog timer function during error recovery
    - NVMe: Always use MSI/MSI-x interrupts

* [LTC-Test] - NMI watchdog Bug and call traces when trinity is executed.
    (LP: #1602524)
    - ext4: factor out determining of hole size
    - ext4: return hole from ext4_map_blocks()
    - ext4: more efficient SEEK_DATA implementation

* changelog: add CVEs as first class citizens (LP: #1604344)
    - avoid duplicate CVE numbers in changelog

* [LTCTest][Opal][OP820] Machine crashed with Oops: Kernel access of bad area,
    sig: 11 [#1] while executing Froze PE Error injection (LP: #1603449)
    - powerpc/eeh: Fix invalid cached PE primary bus

* Hotplug remove and re-add adds PCI adapter to next PCI domain (PCI)
    (LP: #1603574)
    - powerpc/pci: Assign fixed PHB number based on device-tree properties

* nvme - reset_controller is not working after adapter's firmware upgrade
    (adapter quirk is needed) (LP: #1602726)
    - NVMe: Create discard zero quirk white list
    - nvme/quirk: Add a delay before checking for adapter readiness

* ovs nat: conntrack netlink event are missing (LP: #1603468)
    - openvswitch: fix conntrack netlink event delivery

* FlashGT - In Tuleta 8284-22A with card in card slot P1-C9, system Fails to
    boot operating system (LP: #1602785)
    - cxl: Ignore CAPI adapters misplaced in switched slots

* CVE-2016-5728
    - misc: mic: Fix for double fetch security bug in VOP driver

* CVE-2016-5244 (LP: #1589041)
    - rds: fix an infoleak in rds_inc_info_copy

* Miscellaneous Ubuntu changes
    - Added Snapcraft files
    - SAUCE: snapcraft: cleanup and remove unnecessary elements

-- Stefan Bader <stefan.bader@canonical.com>  Thu, 11 Aug 2016 17:34:14 +0200

Changed in linux (Ubuntu Xenial):
status:	Fix Committed → Fix Released

Joseph Salisbury (jsalisbury) on 2018-09-20

Changed in linux (Ubuntu):
status:	In Progress → Fix Released

Brad Figg (brad-figg) on 2019-07-24

tags:

added: cscc

Ubuntu
linux package

linux-kernel: Freeing IRQ from IRQ context

Bug Description

CVE References

Other bug subscribers

Remote bug watches

Affects		Status	Importance	Assigned to	Milestone
	linux (Ubuntu)	Fix Released	High	Joseph Salisbury
	Xenial	Fix Released	High	Joseph Salisbury

Ubuntulinux package

linux-kernel: Freeing IRQ from IRQ context

Bug Description

CVE References

Other bug subscribers

Remote bug watches

Ubuntu
linux package