FreeBSD source tree https://cgit-dev.freebsd.org/src/atom?h=release%2F13.2.0 2023-03-30T12:35:53Z 2023-03-30T12:35:53Z Konstantin Belousov kib@FreeBSD.org 2023-03-28T23:51:44Z urn:sha1:878cd9623c8eaa747ec27269fec968b33b153e1d PR: 270489 Approved by: re (cperciva) (cherry picked from commit cd137909c3097fe223ce2b49075eed42a4933bb5) (cherry picked from commit 738b20a47f7379b27ccf7a6d2af2c1bbfa11d05f) 2023-03-20T18:13:10Z Konstantin Belousov kib@FreeBSD.org 2023-03-18T15:45:49Z urn:sha1:87b5b46ce89259e3b4307f076860796b91a41690 Approved by: re (gjb) (cherry picked from commit 2b4b3789f877918e9e89a217d3b25d854d1a2267) (cherry picked from commit 38cefd30516e0c27194b822cb7db5a7d92e780cd) 2023-03-20T18:13:02Z Konstantin Belousov kib@FreeBSD.org 2023-03-17T13:02:03Z urn:sha1:7622d3671cbef860d5dede0e4beace8fd152cd87 Approved by: re (gjb) (cherry picked from commit 02904a06c76be857307b78184863654b9e7b88ab) (cherry picked from commit 7c5d3ec4c02b89754ec3ce55d1b7943c404209df) 2023-03-20T18:12:53Z Konstantin Belousov kib@FreeBSD.org 2023-03-17T12:42:26Z urn:sha1:2438e9b170757f65c4425171839a5b543dfa8ed5 Approved by: re (gjb) (cherry picked from commit ff6d60946a0e9e0ade3045b734ed4bea08e20938) (cherry picked from commit 107004380c895d7ccd438eaf98941f92b4aa54b9) 2023-03-07T16:36:02Z Mark Johnston markj@FreeBSD.org 2021-09-25T14:15:31Z urn:sha1:96064e0924d8e456f50252205bf3b221cb2e835c When creating a new thread, we unconditionally copy td_frame from the creating thread. For threads which never return to user mode, this is unnecessary since td_frame just points to the base of the stack or a random interrupt frame. If KASAN is configured this copying may also trigger false positives since the td_frame region may contain poisoned stack regions. It was not noticed before since thread0 used a dummy proc0_tf trapframe, and kernel procs are generally created by thread0. Since commit df8dd6025af88a99d34f549fa9591a9b8f9b75b1, though, we call cpu_thread_alloc(&thread0) when initializing FPU state, which reinitializes thread0.td_frame. Work around the problem by not copying the frame unless the copying thread came from user mode. While here, de-duplicate the copying and remove redundant re(initialization) of td_frame. Reported by: syzbot+2ec89312bffbf38d9aec@syzkaller.appspotmail.com Reviewed by: kib Approved by: re (delphij) Fixes: df8dd6025af8 Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D32057 (cherry picked from commit ca1e447b1048b26b855d7f7fbcdad78309e4d741) (cherry picked from commit cf25fa7f31e7bda9b8aa20757659524db9c4ef97) 2023-02-27T16:33:29Z Alexander V. Chernikov melifaro@FreeBSD.org 2023-02-27T15:43:41Z urn:sha1:a052a188766f022d4b0cb2484bda636a3345f644 This is a Direct commit to releng/13.2. Requested by: re (cperciva) Approved by: re (cperciva) This reverts commit 6058f6cc48f5ec02476bf46693673bd71291a5c0. This reverts commit 692e19cf519578176d51d4c1001b01b1f355c1de. 2023-02-23T17:07:47Z Mark Johnston markj@FreeBSD.org 2023-02-09T20:52:35Z urn:sha1:5e8827063b9f565697135b33399a64ca9f000a02 These changes unbreak AP startup when using a 13.1-RELEASE bhyve executable with a newer kernel: - Correct the destination mask for the VM_EXITCODE_IPI message generated by an INIT or STARTUP IPI in vlapic_icrlo_write_handler(). - Only initialize vlapics on active vCPUs. 13.1-RELEASE bhyve activates AP vCPUs only after the BSP starts them with an IPI, and vmm now allocates vcpu structures lazily, so the STARTUP handling in vm_handle_ipi() could trigger a page fault. - Fix an off-by-one setting the vcpuid in a VM_EXITCODE_SPINUP_AP message. Approved by: re (cperciva) Fixes: 7c326ab5bb9a ("vmm: don't lock a mtx in the icr_low write handler") Reviewed by: jhb, corvink MFC after: 2 weeks Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D38446 (cherry picked from commit b265a2e0d76422f4007e96dd7295ed0aeb846e2d) (cherry picked from commit 577a666c3c33def1d4b996575dc43f8567fdac5c) 2023-02-09T07:55:24Z Dmitry Chagin dchagin@FreeBSD.org 2023-02-02T17:21:37Z urn:sha1:b7a55b568b6992b9eae9e6c0ba3c321b48541a24 MFC after: 1 week (cherry picked from commit ce20c00e858f209f42d404eca597553e461e0892) 2023-02-09T07:55:24Z Dmitry Chagin dchagin@FreeBSD.org 2023-02-02T17:21:37Z urn:sha1:b69b287a0969b9dd27a3184b2141e9a580a64535 Drop proc lock earlier, before copying user stuff. Pointed out by: kib Reviewed by: kib Differential Revision: https://reviews.freebsd.org/D38326 MFC after: 1 week (cherry picked from commit 6ad07a4b2bdf0856545ff8495a7b3396695814fa) 2023-02-09T07:55:24Z Dmitry Chagin dchagin@FreeBSD.org 2023-02-02T17:21:37Z urn:sha1:20d601714206e0da7b82706ec9ac9ca74aafd749 PR: 240768 Reviewed by: kib Differential Revision: https://reviews.freebsd.org/D38302 MFC after: 1 week (cherry picked from commit a95cb95e12e537dbe70f9de18cc0fe98e4a5ebf5)