This bug was fixed in the package linux - 4.9.0-12.13

---------------
linux (4.9.0-12.13) zesty; urgency=low

  [ Tim Gardner ]

  * Release Tracking Bug
    - LP: #1655122

  * Zesty update to v4.9.2 stable release (LP: #1655114)
    - ssb: Fix error routine when fallback SPROM fails
    - ath10k: fix soft lockup during firmware crash/hw-restart
    - rtlwifi: Fix enter/exit power_save
    - perf/x86: Fix exclusion of BTS and LBR for Goldmont
    - perf annotate: Don't throw error for zero length symbols
    - perf/x86/intel/cstate: Prevent hotplug callback leak
    - rtl8xxxu: Work around issue with 8192eu and 8723bu devices not 
reconnecting
    - cfg80211/mac80211: fix BSS leaks when abandoning assoc attempts
    - ath9k: fix ath9k_hw_gpio_get() to return 0 or 1 on success
    - ath9k: Really fix LED polarity for some Mini PCI AR9220 MB92 cards.
    - ath9k: do not return early to fix rcu unlocking
    - Revert "mmc: sdhci: Reset cmd and data circuits after tuning failure"
    - mmc: sdhci: Fix recovery from tuning timeout
    - regulator: stw481x-vmmc: fix ages old enable error
    - mmc: sd: Meet alignment requirements for raw_ssr DMA
    - timekeeping_Force_unsigned_clocksource_to_nanoseconds_conversion
    - gpio: stmpe: fix interrupt handling bug
    - gpio: chardev: Return error for seek operations
    - arm64: tegra: Add VDD_GPU regulator to Jetson TX1
    - clk: bcm2835: Avoid overwriting the div info when disabling a pll_div clk
    - thermal: hwmon: Properly report critical temperature in sysfs
    - docs: sphinx-extensions: make rstFlatTable work with docutils 0.13
    - hv: acquire vmbus_connection.channel_mutex in vmbus_free_channels()
    - staging/lustre/osc: Revert erroneous list_for_each_entry_safe use
    - staging: lustre: ldlm: pl_recalc time handling is wrong
    - staging: comedi: ni_mio_common: fix M Series ni_ai_insn_read() data mask
    - staging: comedi: ni_mio_common: fix E series ni_ai_insn_read() data
    - ACPI / video: Add force_native quirk for Dell XPS 17 L702X
    - ACPI / video: Add force_native quirk for HP Pavilion dv6
    - drm/amdgpu/si: load the proper firmware on 0x87 oland boards
    - drm/amdgpu: add additional pci revision to dpm workaround
    - drm/amdgpu: Store CRTC relative amdgpu_crtc->cursor_x/y values
    - drm/amdgpu: Also call cursor_move_locked when the cursor size changes
    - drm/amd/amdgpu: enable GUI idle INT after enabling CGCG
    - drm/nouveau/gr: fallback to legacy paths during firmware lookup
    - drm/nouveau/kms: lvds panel strap moved again on maxwell
    - drm/nouveau/bios: require checksum to match for fast acpi shadow method
    - drm/nouveau/ltc: protect clearing of comptags with mutex
    - drm/nouveau/ttm: wait for bo fence to signal before unmapping vmas
    - drm/nouveau/i2c/gk110b,gm10x: use the correct implementation
    - drm/nouveau/fifo/gf100-: protect channel preempt with subdev mutex
    - drm/radeon: Also call cursor_move_locked when the cursor size changes
    - drm/radeon: Hide the HW cursor while it's out of bounds
    - drm/radeon: add additional pci revision to dpm workaround
    - drm/radeon/si: load the proper firmware on 0x87 oland boards
    - drm/gma500: Add compat ioctl
    - drm/amd/powerplay: bypass fan table setup if no fan connected
    - drm/amdgpu: fix enable_cp_power_gating in gfx_v8.0.
    - drm/amdgpu: fix init save/restore list in gfx_v8.0
    - drivers/gpu/drm/ast: Fix infinite loop if read fails
    - mei: request async autosuspend at the end of enumeration
    - mei: me: add lewisburg device ids
    - block: protect iterate_bdevs() against concurrent close
    - vt: fix Scroll Lock LED trigger name
    - stm class: Fix device leak in open error path
    - scsi: megaraid_sas: For SRIOV enabled firmware, ensure VF driver waits for
      30secs before reset
    - scsi: megaraid_sas: Do not set MPI2_TYPE_CUDA for JBOD FP path for FW 
which
      does not support JBOD sequence map
    - iscsi-target: Return error if unable to add network portal
    - scsi: zfcp: fix use-after-"free" in FC ingress path after TMF
    - scsi: zfcp: do not trace pure benign residual HBA responses at default 
level
    - scsi: zfcp: fix rport unblock race with LUN recovery
    - scsi: avoid a permanent stop of the scsi device's request queue
    - ARC: mm: arc700: Don't assume 2 colours for aliasing VIPT dcache
    - firmware: fix usermode helper fallback loading
    - s390/vmlogrdr: fix IUCV buffer allocation
    - s390/kexec: use node 0 when re-adding crash kernel memory
    - arm64: KVM: pmu: Reset PMSELR_EL0.SEL to a sane value before entering the
      guest
    - latent_entropy: fix ARM build error on earlier gcc
    - sc16is7xx: Drop bogus use of IRQF_ONESHOT
    - md/raid5: limit request size according to implementation limits
    - scsi: aacraid: remove wildcard for series 9 controllers
    - KVM: PPC: Book3S HV: Save/restore XER in checkpointed register state
    - KVM: PPC: Book3S HV: Don't lose hardware R/C bit updates in H_PROTECT
    - kvm: nVMX: Allow L1 to intercept software exceptions (#BP and #OF)
    - fsnotify: Fix possible use-after-free in inode iteration on umount
    - vsock/virtio: fix src/dst cid format
    - platform/x86: asus-nb-wmi.c: Add X45U quirk
    - x86/smpboot: Make logical package management more robust
    - fgraph: Handle a case where a tracer ignores set_graph_notrace
    - IB/mad: Fix an array index check
    - IPoIB: Avoid reading an uninitialized member variable
    - IB/multicast: Check ib_find_pkey() return value
    - IB/rxe: Fix a memory leak in rxe_qp_cleanup()
    - IB/cma: Fix a race condition in iboe_addr_get_sgid()
    - mn88472: fix chip id check on probe
    - mn88473: fix chip id check on probe
    - s5p-mfc: fix failure path of s5p_mfc_alloc_memdev()
    - media: solo6x10: fix lockup by avoiding delayed register write
    - v4l: tvp5150: Add missing break in set control handler
    - Input: drv260x - fix input device's parent assignment
    - bad_inode: add missing i_op initializers
    - i40iw: Use correct src address in memcpy to rdma stats counters
    - PCI: Check for PME in targeted sleep state
    - libceph: verify authorize reply on connect
    - nfs_write_end(): fix handling of short copies
    - pNFS: On error, do not send LAYOUTGET until the LAYOUTRETURN has completed
    - pNFS: Don't clear the layout stateid if a layout return is outstanding
    - pNFS: Clear NFS_LAYOUT_RETURN_REQUESTED when invalidating the layout 
stateid
    - pNFS: Fix a deadlock between read resends and layoutreturn
    - SUNRPC: fix refcounting problems with auth_gss messages.
    - powerpc/64e: Convert cmpi to cmpwi in head_64.S
    - powerpc/ps3: Fix system hang with GCC 5 builds
    - powerpc/boot: Request no dynamic linker for boot wrapper
    - of, numa: Return NUMA_NO_NODE from disable of_node_to_nid() if nid not
      possible.
    - libnvdimm, pfn: fix align attribute
    - kconfig/nconf: Fix hang when editing symbol with a long prompt
    - sg_write()/bsg_write() is not fit to be called under KERNEL_DS
    - net: mvpp2: fix dma unmapping of TX buffers for fragments
    - drm/i915/dsi: Fix chv_exec_gpio disabling the GPIOs it is setting
    - drm/i915/dsi: Do not clear DPOUNIT_CLOCK_GATE_DISABLE from
      vlv_init_display_clock_gating
    - drm/i915: Fix cdclk vs. dev_cdclk mess when not recomputing things
    - drm/i915: Initialize dev_priv->atomic_cdclk_freq at init time
    - drm/i915: skip the first 4k of stolen memory on everything >= gen8
    - drm/i915: Fix setting of boost freq tunable
    - Linux 4.9.2

  * Zesty update to v4.9.1 stable release (LP: #1655082)
    - Revert "UBUNTU: SAUCE: (noup) ptrace: being capable wrt a process requires
      mapped uids/gids"
    - hotplug: Make register and unregister notifier API symmetric
    - btrfs: limit async_work allocation and worker func duration
    - Btrfs: fix BUG_ON in btrfs_mark_buffer_dirty
    - Btrfs: fix deadlock caused by fsync when logging directory entries
    - Btrfs: fix tree search logic when replaying directory entry deletes
    - Btrfs: fix relocation incorrectly dropping data references
    - btrfs: store and load values of stripes_min/stripes_max in balance status
      item
    - Btrfs: fix emptiness check for dirtied extent buffers at check_leaf()
    - Btrfs: fix qgroup rescan worker initialization
    - USB: serial: option: add support for Telit LE922A PIDs 0x1040, 0x1041
    - USB: serial: option: add dlink dwm-158
    - USB: serial: kl5kusb105: fix open error path
    - USB: cdc-acm: add device id for GW Instek AFG-125
    - usb: dwc3: gadget: set PCM1 field of isochronous-first TRBs
    - usb: hub: Fix auto-remount of safely removed or ejected USB-3 devices
    - usb: core: usbport: Use proper LED API to fix potential crash
    - usb: gadget: f_uac2: fix error handling at afunc_bind
    - usb: gadget: composite: correctly initialize ep->maxpacket
    - USB: UHCI: report non-PME wakeup signalling for Intel hardware
    - usbip: vudc: fix: Clear already_seen flag also for ep0
    - ALSA: usb-audio: Add QuickCam Communicate Deluxe/S7500 to
      volume_control_quirks
    - ALSA: hiface: Fix M2Tech hiFace driver sampling rate change
    - ALSA: hda/ca0132 - Add quirk for Alienware 15 R2 2016
    - ALSA: hda - ignore the assoc and seq when comparing pin configurations
    - ALSA: hda - fix headset-mic problem on a Dell laptop
    - ALSA: hda - Gate the mic jack on HP Z1 Gen3 AiO
    - ALSA: hda: when comparing pin configurations, ignore assoc in addition to
      seq
    - clk: ti: omap36xx: Work around sprz319 advisory 2.1
    - exec: Ensure mm->user_ns contains the execed files
    - fs: exec: apply CLOEXEC before changing dumpable task flags
    - splice: reinstate SIGPIPE/EPIPE handling
    - block_dev: don't test bdev->bd_contains when it is not stable
    - mm: Add a user_ns owner to mm_struct and fix ptrace permission checks
    - vfs,mm: fix return value of read() at s_maxbytes
    - ptrace: Capture the ptracer's creds not PT_PTRACE_CAP
    - ptrace: Don't allow accessing an undumpable mm
    - crypto: caam - fix AEAD givenc descriptors
    - ext4: don't lock buffer in ext4_commit_super if holding spinlock
    - ext4: fix mballoc breakage with 64k block size
    - ext4: fix stack memory corruption with 64k block size
    - ext4: use more strict checks for inodes_per_block on mount
    - ext4: fix in-superblock mount options processing
    - ext4: add sanity checking to count_overhead()
    - ext4: reject inodes with negative size
    - ext4: return -ENOMEM instead of success
    - ext4: do not perform data journaling when data is encrypted
    - Revert "f2fs: use percpu_counter for # of dirty pages in inode"
    - f2fs: set ->owner for debugfs status file's file_operations
    - f2fs: fix overflow due to condition check order
    - f2fs: fix to determine start_cp_addr by sbi->cur_cp_pack
    - loop: return proper error from loop_queue_rq()
    - nvmet: Fix possible infinite loop triggered on hot namespace removal
    - mm/vmscan.c: set correct defer count for shrinker
    - mm, page_alloc: keep pcp count and list contents in sync if struct page is
      corrupted
    - usb: gadget: composite: always set ep->mult to a sensible value
    - PM / OPP: Pass opp_table to dev_pm_opp_put_regulator()
    - PM / OPP: Don't use OPP structure outside of rcu protected section
    - blk-mq: Do not invoke .queue_rq() for a stopped queue
    - dm table: fix 'all_blk_mq' inconsistency when an empty table is loaded
    - dm table: an 'all_blk_mq' table must be loaded for a blk-mq DM device
    - dm flakey: return -EINVAL on interval bounds error in flakey_ctr()
    - dm crypt: mark key as invalid until properly loaded
    - dm rq: fix a race condition in rq_completed()
    - dm raid: fix discard support regression
    - dm space map metadata: fix 'struct sm_metadata' leak on failed create
    - ASoC: intel: Fix crash at suspend/resume without card registration
    - cifs: Fix smbencrypt() to stop pointing a scatterlist at the stack
    - CIFS: Fix a possible memory corruption during reconnect
    - CIFS: Fix missing nls unload in smb2_reconnect()
    - CIFS: Fix a possible double locking of mutex during reconnect
    - CIFS: Decrease verbosity of ioctl call
    - CIFS: Fix a possible memory corruption in push locks
    - kernel/watchdog: use nmi registers snapshot in hardlockup handler
    - watchdog: mei_wdt: request stop on reboot to prevent false positive event
    - watchdog: qcom: fix kernel panic due to external abort on non-linefetch
    - kernel/debug/debug_core.c: more properly delay for secondary CPUs
    - tpm xen: Remove bogus tpm_chip_unregister
    - xen/gntdev: Use VM_MIXEDMAP instead of VM_IO to avoid NUMA balancing
    - arm/xen: Use alloc_percpu rather than __alloc_percpu
    - xfs: fix up xfs_swap_extent_forks inline extent handling
    - xfs: set AGI buffer type in xlog_recover_clear_agi_bucket
    - builddeb: fix cross-building to arm64 producing host-arch debs
    - x86/kbuild: enable modversions for symbols exported from asm
    - Linux 4.9.1

  * i386 ftrace tests hang on ADT testing (LP: #1655040)
    - ftrace/x86_32: Set ftrace_stub to weak to prevent gcc from using short 
jumps
      to it

  * Ubuntu 16.10 KVM: Running out of memory if trying to bringup guest with more
    than 64VFs. (LP: #1654067)
    - powerpc/iommu: Pass mm_struct to init/cleanup helpers
    - powerpc/iommu: Stop using @current in mm_iommu_xxx
    - vfio/spapr: Postpone allocation of userspace version of TCE table
    - vfio/spapr: Add a helper to create default DMA window
    - vfio/spapr: Postpone default window creation
    - vfio/spapr: Reference mm in tce_container
    - powerpc/mm/iommu, vfio/spapr: Put pages on VFIO container shutdown

  *  IP-over-DDP packets dropped (LP: #1559772)
    - [Config] CONFIG_IPDDP=n

  * crypto : tolerate new crypto hardware for z Systems (LP: #1644557)
    - s390/zcrypt: Introduce CEX6 toleration

  * Miscellaneous Ubuntu changes
    - [Config] Update annotations with recent config changes
    - [Debian] consider renames in gen-auto-reconstruct

  * Note that CONFIG_MODVERSIONS=n since v4.9-rc4. It was causing i386
    modprobe issues because the CRC for some assembler variables were not
    being correctly computed. Linus disabled it altogether for 2 rc's,
    then restored it at the end in combination with some patches that
    set CRC to 0 for assembler variables. I chose to leave it disabled
    in light of the Ubuntu policy to revise the package ABI on every upload.

 -- Tim Gardner <tim.gard...@canonical.com>  Mon, 12 Dec 2016 13:08:33
-0700

** Changed in: linux (Ubuntu Zesty)
       Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1654067

Title:
  Ubuntu 16.10 KVM: Running out of memory if trying to bringup guest
  with more than 64VFs.

Status in linux package in Ubuntu:
  Fix Released
Status in linux source package in Yakkety:
  Fix Committed
Status in linux source package in Zesty:
  Fix Released

Bug description:
  == Comment: #0 - Carol L. Soto - 2017-01-04 12:03:57 ==
  ---Problem Description---
  If user try to create a guest with more than 64 VFs then the guest will have 
issues to come up but if user keeps trying to bringup this guest over and over 
the system will eventually start seeing out of memory messages. 
  Like this:
  Jan  3 14:33:13 ltc-fire1 kernel: [ 1053.950753] systemd invoked oom-killer: 
gfp_mask=0x26000d0(GFP_TEMPORARY|__GFP_NOTRACK), order=0, oom_score_adj=0
  Jan  3 14:33:16 ltc-fire1 kernel: [ 1053.950757] systemd cpuset=/ 
mems_allowed=0
  Jan  3 14:33:16 ltc-fire1 kernel: [ 1053.950761] CPU: 104 PID: 1 Comm: 
systemd Tainted: G           OE   4.8.0-34-generic #36-Ubuntu
  Jan  3 14:33:16 ltc-fire1 kernel: [ 1053.950763] Call Trace:

   
  ---uname output---
  Linux ltc-fire1 4.8.0-34-generic #36 SMP Tue Jan 3 15:27:22 CST 2017 ppc64le 
ppc64le ppc64le GNU/Linux
   
  ---Additional Hardware Info---
  we are using Mellanox CX4 card with SRIOV enabled to be able to create a 
guest with more than 64 VFs.  

   
  Machine Type = P8 
   

  ---Steps to Reproduce---
   create a guest with more than 64 VFs and then just try to bring up the guest 
by 
  virsh start --console ltc-fire1-vm3-ubuntu-16.10-69VFs.
  Will attach example guest xml.

  == Comment: #2 - Carol L. Soto - 2017-01-04 12:09:32 ==
  If I build a kernel with these upstream patches, then I do not see the memory 
leaks messages in dmesg:

  From 88f54a3581eb9deaa3bd1aade40aef266d782385 Mon Sep 17 00:00:00 2001
  From: Alexey Kardashevskiy <a...@ozlabs.ru>
  Date: Wed, 30 Nov 2016 17:51:59 +1100
  Subject: powerpc/iommu: Pass mm_struct to init/cleanup helpers

  From d7baee6901b34c4895eb78efdbf13a49079d7404 Mon Sep 17 00:00:00 2001
  From: Alexey Kardashevskiy <a...@ozlabs.ru>
  Date: Wed, 30 Nov 2016 17:52:00 +1100
  Subject: powerpc/iommu: Stop using @current in mm_iommu_xxx

  From 39701e56f5f16ea0cf8fc9e8472e645f8de91d23 Mon Sep 17 00:00:00 2001
  From: Alexey Kardashevskiy <a...@ozlabs.ru>
  Date: Wed, 30 Nov 2016 17:52:01 +1100
  Subject: vfio/spapr: Postpone allocation of userspace version of TCE table

  From 6f01cc692a16405235d5c34056455b182682123c Mon Sep 17 00:00:00 2001
  From: Alexey Kardashevskiy <a...@ozlabs.ru>
  Date: Wed, 30 Nov 2016 17:52:02 +1100
  Subject: vfio/spapr: Add a helper to create default DMA window

  From d9c728949ddc9de5734bf3b12ea906ca8a77f2a0 Mon Sep 17 00:00:00 2001
  From: Alexey Kardashevskiy <a...@ozlabs.ru>
  Date: Wed, 30 Nov 2016 17:52:03 +1100
  Subject: vfio/spapr: Postpone default window creation

  From bc82d122ae4a0e9f971f13403995898fcfa0c09e Mon Sep 17 00:00:00 2001
  From: Alexey Kardashevskiy <a...@ozlabs.ru>
  Date: Wed, 30 Nov 2016 17:52:04 +1100
  Subject: vfio/spapr: Reference mm in tce_container

  From 4b6fad7097f883335b6d9627c883cb7f276d94c9 Mon Sep 17 00:00:00 2001
  From: Alexey Kardashevskiy <a...@ozlabs.ru>
  Date: Wed, 30 Nov 2016 17:52:05 +1100
  Subject: powerpc/mm/iommu, vfio/spapr: Put pages on VFIO container shutdown

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1654067/+subscriptions

-- 
Mailing list: https://launchpad.net/~kernel-packages
Post to     : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to