[Kernel-packages] [Bug 1307473] Re: guest hang due to missing clock interrupt
I need to amend comment #39, moving from 3.13.0-30 to 3.13.0-27 did not eliminate the problem. It would seem that it takes a couple of hours following a reboot for the symptoms to manifest with 3.13.0-27. -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1307473 Title: guest hang due to missing clock interrupt Status in QEMU: New Status in “linux” package in Ubuntu: Confirmed Status in “qemu” package in Ubuntu: Confirmed Bug description: I noticed on 2 different systems that after upgrade from precise to latest trusty VMs are crashing: - in case of Windows VMs I'm getting BSOD with error message: A clock interrupt was not received on a secondary processor within the allocated time interval. - On linux VMs I'm noticing hrtimer: interrupt took 2992229 ns messages - On some proprietary virtual appliances I'm noticing crashes an due to missing timer interrupts QEMU version is: QEMU emulator version 1.7.91 (Debian 2.0.0~rc1+dfsg-0ubuntu3) Full command line: qemu-system-x86_64 -enable-kvm -name win7eval -S -machine pc- i440fx-1.7,accel=kvm,usb=off -cpu host -m 4096 -realtime mlock=off -smp 4,sockets=1,cores=4,threads=1 -uuid 05e5089a- 4aa1-6bb2-ef06-ab4d020a -no-user-config -nodefaults -chardev socket,id=charmonitor,path=/var/lib/libvirt/qemu/win7eval.monitor,server,nowait -mon chardev=charmonitor,id=monitor,mode=control -rtc base=localtime -no-shutdown -boot strict=on -device piix3-usb- uhci,id=usb,bus=pci.0,addr=0x1.0x2 -drive file=/var/vm/win7eval.qcow2,if=none,id=drive-virtio-disk0,format=qcow2 -device virtio-blk-pci,scsi=off,bus=pci.0,addr=0x4,drive=drive-virtio- disk0,id=virtio-disk0,bootindex=1 -drive file=/home/damarion/iso/7600.16385.090713-1255_x86fre_enterprise_en- us_EVAL_Eval_Enterprise-GRMCENEVAL_EN_DVD.iso,if=none,id=drive- ide0-0-0,readonly=on,format=raw -device ide-cd,bus=ide.0,unit=0,drive =drive-ide0-0-0,id=ide0-0-0 -drive file=/home/damarion/iso/virtio- win-0.1-74.iso,if=none,id=drive-ide0-1-0,readonly=on,format=raw -device ide-cd,bus=ide.1,unit=0,drive=drive-ide0-1-0,id=ide0-1-0 -netdev tap,fd=24,id=hostnet0 -device e1000,netdev=hostnet0,id=net0,mac=52:54:00:38:31:0a,bus=pci.0,addr=0x3 -chardev pty,id=charserial0 -device isa- serial,chardev=charserial0,id=serial0 -device usb-tablet,id=input0 -vnc 127.0.0.1:1 -device VGA,id=video0,bus=pci.0,addr=0x2 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x5 To manage notifications about this bug go to: https://bugs.launchpad.net/qemu/+bug/1307473/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp
[Kernel-packages] [Bug 1307473] Re: guest hang due to missing clock interrupt
I believe I have the same problem, place a guest under any amount of load, let's say 'yum upgrade' and the network stack goes out to lunch for 1-5 seconds. Here is a sample of the ping statistics (host to guest) from doing such an operation on a 3.13.0-30.55 kernel: 213 packets transmitted, 213 received, 0% packet loss, time 211998ms rtt min/avg/max/mdev = 0.136/106.283/2651.359/428.403 ms, pipe 3 And a 3.11.0-19.33 kernel: 62 packets transmitted, 62 received, 0% packet loss, time 61074ms rtt min/avg/max/mdev = 0.189/0.434/1.987/0.228 ms -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1307473 Title: guest hang due to missing clock interrupt Status in QEMU: New Status in “linux” package in Ubuntu: Confirmed Status in “qemu” package in Ubuntu: Confirmed Bug description: I noticed on 2 different systems that after upgrade from precise to latest trusty VMs are crashing: - in case of Windows VMs I'm getting BSOD with error message: A clock interrupt was not received on a secondary processor within the allocated time interval. - On linux VMs I'm noticing hrtimer: interrupt took 2992229 ns messages - On some proprietary virtual appliances I'm noticing crashes an due to missing timer interrupts QEMU version is: QEMU emulator version 1.7.91 (Debian 2.0.0~rc1+dfsg-0ubuntu3) Full command line: qemu-system-x86_64 -enable-kvm -name win7eval -S -machine pc- i440fx-1.7,accel=kvm,usb=off -cpu host -m 4096 -realtime mlock=off -smp 4,sockets=1,cores=4,threads=1 -uuid 05e5089a- 4aa1-6bb2-ef06-ab4d020a -no-user-config -nodefaults -chardev socket,id=charmonitor,path=/var/lib/libvirt/qemu/win7eval.monitor,server,nowait -mon chardev=charmonitor,id=monitor,mode=control -rtc base=localtime -no-shutdown -boot strict=on -device piix3-usb- uhci,id=usb,bus=pci.0,addr=0x1.0x2 -drive file=/var/vm/win7eval.qcow2,if=none,id=drive-virtio-disk0,format=qcow2 -device virtio-blk-pci,scsi=off,bus=pci.0,addr=0x4,drive=drive-virtio- disk0,id=virtio-disk0,bootindex=1 -drive file=/home/damarion/iso/7600.16385.090713-1255_x86fre_enterprise_en- us_EVAL_Eval_Enterprise-GRMCENEVAL_EN_DVD.iso,if=none,id=drive- ide0-0-0,readonly=on,format=raw -device ide-cd,bus=ide.0,unit=0,drive =drive-ide0-0-0,id=ide0-0-0 -drive file=/home/damarion/iso/virtio- win-0.1-74.iso,if=none,id=drive-ide0-1-0,readonly=on,format=raw -device ide-cd,bus=ide.1,unit=0,drive=drive-ide0-1-0,id=ide0-1-0 -netdev tap,fd=24,id=hostnet0 -device e1000,netdev=hostnet0,id=net0,mac=52:54:00:38:31:0a,bus=pci.0,addr=0x3 -chardev pty,id=charserial0 -device isa- serial,chardev=charserial0,id=serial0 -device usb-tablet,id=input0 -vnc 127.0.0.1:1 -device VGA,id=video0,bus=pci.0,addr=0x2 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x5 To manage notifications about this bug go to: https://bugs.launchpad.net/qemu/+bug/1307473/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp
[Kernel-packages] [Bug 1307473] Re: guest hang due to missing clock interrupt
I can confirm that rolling back to 3.13.0-27 from 3.13.0-30 alleviated my symptoms. -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1307473 Title: guest hang due to missing clock interrupt Status in QEMU: New Status in “linux” package in Ubuntu: Confirmed Status in “qemu” package in Ubuntu: Confirmed Bug description: I noticed on 2 different systems that after upgrade from precise to latest trusty VMs are crashing: - in case of Windows VMs I'm getting BSOD with error message: A clock interrupt was not received on a secondary processor within the allocated time interval. - On linux VMs I'm noticing hrtimer: interrupt took 2992229 ns messages - On some proprietary virtual appliances I'm noticing crashes an due to missing timer interrupts QEMU version is: QEMU emulator version 1.7.91 (Debian 2.0.0~rc1+dfsg-0ubuntu3) Full command line: qemu-system-x86_64 -enable-kvm -name win7eval -S -machine pc- i440fx-1.7,accel=kvm,usb=off -cpu host -m 4096 -realtime mlock=off -smp 4,sockets=1,cores=4,threads=1 -uuid 05e5089a- 4aa1-6bb2-ef06-ab4d020a -no-user-config -nodefaults -chardev socket,id=charmonitor,path=/var/lib/libvirt/qemu/win7eval.monitor,server,nowait -mon chardev=charmonitor,id=monitor,mode=control -rtc base=localtime -no-shutdown -boot strict=on -device piix3-usb- uhci,id=usb,bus=pci.0,addr=0x1.0x2 -drive file=/var/vm/win7eval.qcow2,if=none,id=drive-virtio-disk0,format=qcow2 -device virtio-blk-pci,scsi=off,bus=pci.0,addr=0x4,drive=drive-virtio- disk0,id=virtio-disk0,bootindex=1 -drive file=/home/damarion/iso/7600.16385.090713-1255_x86fre_enterprise_en- us_EVAL_Eval_Enterprise-GRMCENEVAL_EN_DVD.iso,if=none,id=drive- ide0-0-0,readonly=on,format=raw -device ide-cd,bus=ide.0,unit=0,drive =drive-ide0-0-0,id=ide0-0-0 -drive file=/home/damarion/iso/virtio- win-0.1-74.iso,if=none,id=drive-ide0-1-0,readonly=on,format=raw -device ide-cd,bus=ide.1,unit=0,drive=drive-ide0-1-0,id=ide0-1-0 -netdev tap,fd=24,id=hostnet0 -device e1000,netdev=hostnet0,id=net0,mac=52:54:00:38:31:0a,bus=pci.0,addr=0x3 -chardev pty,id=charserial0 -device isa- serial,chardev=charserial0,id=serial0 -device usb-tablet,id=input0 -vnc 127.0.0.1:1 -device VGA,id=video0,bus=pci.0,addr=0x2 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x5 To manage notifications about this bug go to: https://bugs.launchpad.net/qemu/+bug/1307473/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp
[Kernel-packages] [Bug 1216444] IwConfig.txt
apport information ** Attachment added: IwConfig.txt https://bugs.launchpad.net/bugs/1216444/+attachment/3787258/+files/IwConfig.txt -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1216444 Title: Vhost-net made unstable by linux_3.8.0-28.41 Status in “linux” package in Ubuntu: Confirmed Bug description: On multiple machines with vm's using vhost-net this bug takes out the guest network interface under load. The vm is only able to see broadcast traffic after this happens. Started happening immediately after upgrading from linux-image-3.8.0-27-generic to linux- image-3.8.0-29-generic. This changelog entry from linux_3.8.0-28.41 seems particularly relevant: * vhost-net: fix use-after-free in vhost_net_flush - LP: #1202992 - CVE-2013-4127 Also seems to be giving the fedora folks fits as well: https://bugzilla.redhat.com/show_bug.cgi?id=975065 Aug 24 20:00:55 gwbvm4 kernel: [277318.536525] BUG: unable to handle kernel NULL pointer dereference at 01ea Aug 24 20:00:55 gwbvm4 kernel: [277318.537027] IP: [8113c1a5] put_page+0x5/0x40 Aug 24 20:00:55 gwbvm4 kernel: [277318.537359] PGD 0 Aug 24 20:00:55 gwbvm4 kernel: [277318.537505] Oops: [#1] SMP Aug 24 20:00:55 gwbvm4 kernel: [277318.537716] Modules linked in: xt_recent(F) nfnetlink_log(F) nfnetlink(F) vhost_net macvtap(F) macvlan(F) brcompat(OF) openvswitch(OF) mptctl(F) mptbase(F) ipmi_devintf ipmi_si ipmi_msghandler ebtable_nat(F) ebtables(F) ipt_MASQUERADE(F) iptable_nat(F) nf_nat_ipv4(F) xt_CHECKSUM(F) iptable_mangle(F) ib_iser rdma_cm ib_addr iw_cm ib_cm ib_sa ib_mad ib_core iscsi_tcp(F) libiscsi_tcp(F) libiscsi(F) scsi_transport_iscsi(F) stp(F) llc(F) ip6t_REJECT(F) xt_hl(F) ip6t_rt(F) nf_conntrack_ipv6(F) nf_defrag_ipv6(F) ipt_REJECT(F) xt_comment(F) xt_limit(F) xt_tcpudp(F) vesafb(F) xt_addrtype(F) nf_conntrack_ipv4(F) nf_defrag_ipv4(F) xt_state(F) ip6table_filter(F) ip6_tables(F) nf_conntrack_netbios_ns(F) nf_conntrack_broadcast(F) nf_nat_ftp(F) nf_nat(F) nf_conntrack_ftp(F) nf_conntrack(F) iptable_filter(F) ip_tables(F) coretemp x_tables(F) kvm_intel kvm ghash_clmulni_intel(F) aesni_intel(F) aes_x86_64(F) xts(F) lrw(F) gf128mul(F) ablk_helper(F) cryptd(F) gpio_ich lpc_ich microcode(F) serio_r Aug 24 20:00:55 gwbvm4 kernel: aw(F) i7core_edac mac_hid edac_core lp(F) parport(F) btrfs(F) zlib_deflate(F) libcrc32c(F) ahci(F) libahci(F) igb cxgb3 dca ptp hpsa mdio pps_core [last unloaded: bridge] Aug 24 20:00:55 gwbvm4 kernel: [277318.544745] CPU 0 Aug 24 20:00:55 gwbvm4 kernel: [277318.544866] Pid: 5489, comm: vhost-5488 Tainted: GF IO 3.8.0-29-generic #42-Ubuntu HP ProLiant DL160 G6 Aug 24 20:00:55 gwbvm4 kernel: [277318.545560] RIP: 0010:[8113c1a5] [8113c1a5] put_page+0x5/0x40 Aug 24 20:00:55 gwbvm4 kernel: [277318.546034] RSP: 0018:8817ccbc1c78 EFLAGS: 00010202 Aug 24 20:00:55 gwbvm4 kernel: [277318.546356] RAX: 8809728a1ac0 RBX: 0012 RCX: 8809728a1ac0 Aug 24 20:00:55 gwbvm4 kernel: [277318.569029] RDX: 0140 RSI: 8809728a1ac0 RDI: 01ea Aug 24 20:00:55 gwbvm4 kernel: [277318.592195] RBP: 8817ccbc1c90 R08: 880970704518 R09: 0010 Aug 24 20:00:55 gwbvm4 kernel: [277318.615537] R10: 0001 R11: 0007 R12: 881645ca5100 Aug 24 20:00:55 gwbvm4 kernel: [277318.639881] R13: 814dfa35 R14: 000c R15: 881645ca5100 Aug 24 20:00:55 gwbvm4 kernel: [277318.664386] FS: () GS:880c0fc0() knlGS: Aug 24 20:00:55 gwbvm4 kernel: [277318.689030] CS: 0010 DS: ES: CR0: 8005003b Aug 24 20:00:55 gwbvm4 kernel: [277318.701226] CR2: 01ea CR3: 00069ca0b000 CR4: 27e0 Aug 24 20:00:55 gwbvm4 kernel: [277318.725240] DR0: DR1: DR2: Aug 24 20:00:55 gwbvm4 kernel: [277318.749120] DR3: DR6: 0ff0 DR7: 0400 Aug 24 20:00:55 gwbvm4 kernel: [277318.773018] Process vhost-5488 (pid: 5489, threadinfo 8817ccbc, task 8817f6a8) Aug 24 20:00:55 gwbvm4 kernel: [277318.796899] Stack: Aug 24 20:00:55 gwbvm4 kernel: [277318.808406] 815bcebf 881645ca5100 881645ca5100 8817ccbc1ca8 Aug 24 20:00:55 gwbvm4 kernel: [277318.831675] 815bcf5a 8809707043d8 8817ccbc1cd0 815bd012 Aug 24 20:00:55 gwbvm4 kernel: [277318.81] 8809707043d8 f4ee 880a2c048800 8817ccbc1d58 Aug 24 20:00:55 gwbvm4 kernel: [277318.879408] Call Trace: Aug 24 20:00:55 gwbvm4 kernel: [277318.891138] [815bcebf] ? skb_release_data+0x8f/0x110 Aug 24 20:00:55 gwbvm4 kernel: [277318.903096] [815bcf5a] __kfree_skb+0x1a/0xa0 Aug 24 20:00:55 gwbvm4
[Kernel-packages] [Bug 1216444] CurrentDmesg.txt
apport information ** Attachment added: CurrentDmesg.txt https://bugs.launchpad.net/bugs/1216444/+attachment/3787256/+files/CurrentDmesg.txt -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1216444 Title: Vhost-net made unstable by linux_3.8.0-28.41 Status in “linux” package in Ubuntu: Confirmed Bug description: On multiple machines with vm's using vhost-net this bug takes out the guest network interface under load. The vm is only able to see broadcast traffic after this happens. Started happening immediately after upgrading from linux-image-3.8.0-27-generic to linux- image-3.8.0-29-generic. This changelog entry from linux_3.8.0-28.41 seems particularly relevant: * vhost-net: fix use-after-free in vhost_net_flush - LP: #1202992 - CVE-2013-4127 Also seems to be giving the fedora folks fits as well: https://bugzilla.redhat.com/show_bug.cgi?id=975065 Aug 24 20:00:55 gwbvm4 kernel: [277318.536525] BUG: unable to handle kernel NULL pointer dereference at 01ea Aug 24 20:00:55 gwbvm4 kernel: [277318.537027] IP: [8113c1a5] put_page+0x5/0x40 Aug 24 20:00:55 gwbvm4 kernel: [277318.537359] PGD 0 Aug 24 20:00:55 gwbvm4 kernel: [277318.537505] Oops: [#1] SMP Aug 24 20:00:55 gwbvm4 kernel: [277318.537716] Modules linked in: xt_recent(F) nfnetlink_log(F) nfnetlink(F) vhost_net macvtap(F) macvlan(F) brcompat(OF) openvswitch(OF) mptctl(F) mptbase(F) ipmi_devintf ipmi_si ipmi_msghandler ebtable_nat(F) ebtables(F) ipt_MASQUERADE(F) iptable_nat(F) nf_nat_ipv4(F) xt_CHECKSUM(F) iptable_mangle(F) ib_iser rdma_cm ib_addr iw_cm ib_cm ib_sa ib_mad ib_core iscsi_tcp(F) libiscsi_tcp(F) libiscsi(F) scsi_transport_iscsi(F) stp(F) llc(F) ip6t_REJECT(F) xt_hl(F) ip6t_rt(F) nf_conntrack_ipv6(F) nf_defrag_ipv6(F) ipt_REJECT(F) xt_comment(F) xt_limit(F) xt_tcpudp(F) vesafb(F) xt_addrtype(F) nf_conntrack_ipv4(F) nf_defrag_ipv4(F) xt_state(F) ip6table_filter(F) ip6_tables(F) nf_conntrack_netbios_ns(F) nf_conntrack_broadcast(F) nf_nat_ftp(F) nf_nat(F) nf_conntrack_ftp(F) nf_conntrack(F) iptable_filter(F) ip_tables(F) coretemp x_tables(F) kvm_intel kvm ghash_clmulni_intel(F) aesni_intel(F) aes_x86_64(F) xts(F) lrw(F) gf128mul(F) ablk_helper(F) cryptd(F) gpio_ich lpc_ich microcode(F) serio_r Aug 24 20:00:55 gwbvm4 kernel: aw(F) i7core_edac mac_hid edac_core lp(F) parport(F) btrfs(F) zlib_deflate(F) libcrc32c(F) ahci(F) libahci(F) igb cxgb3 dca ptp hpsa mdio pps_core [last unloaded: bridge] Aug 24 20:00:55 gwbvm4 kernel: [277318.544745] CPU 0 Aug 24 20:00:55 gwbvm4 kernel: [277318.544866] Pid: 5489, comm: vhost-5488 Tainted: GF IO 3.8.0-29-generic #42-Ubuntu HP ProLiant DL160 G6 Aug 24 20:00:55 gwbvm4 kernel: [277318.545560] RIP: 0010:[8113c1a5] [8113c1a5] put_page+0x5/0x40 Aug 24 20:00:55 gwbvm4 kernel: [277318.546034] RSP: 0018:8817ccbc1c78 EFLAGS: 00010202 Aug 24 20:00:55 gwbvm4 kernel: [277318.546356] RAX: 8809728a1ac0 RBX: 0012 RCX: 8809728a1ac0 Aug 24 20:00:55 gwbvm4 kernel: [277318.569029] RDX: 0140 RSI: 8809728a1ac0 RDI: 01ea Aug 24 20:00:55 gwbvm4 kernel: [277318.592195] RBP: 8817ccbc1c90 R08: 880970704518 R09: 0010 Aug 24 20:00:55 gwbvm4 kernel: [277318.615537] R10: 0001 R11: 0007 R12: 881645ca5100 Aug 24 20:00:55 gwbvm4 kernel: [277318.639881] R13: 814dfa35 R14: 000c R15: 881645ca5100 Aug 24 20:00:55 gwbvm4 kernel: [277318.664386] FS: () GS:880c0fc0() knlGS: Aug 24 20:00:55 gwbvm4 kernel: [277318.689030] CS: 0010 DS: ES: CR0: 8005003b Aug 24 20:00:55 gwbvm4 kernel: [277318.701226] CR2: 01ea CR3: 00069ca0b000 CR4: 27e0 Aug 24 20:00:55 gwbvm4 kernel: [277318.725240] DR0: DR1: DR2: Aug 24 20:00:55 gwbvm4 kernel: [277318.749120] DR3: DR6: 0ff0 DR7: 0400 Aug 24 20:00:55 gwbvm4 kernel: [277318.773018] Process vhost-5488 (pid: 5489, threadinfo 8817ccbc, task 8817f6a8) Aug 24 20:00:55 gwbvm4 kernel: [277318.796899] Stack: Aug 24 20:00:55 gwbvm4 kernel: [277318.808406] 815bcebf 881645ca5100 881645ca5100 8817ccbc1ca8 Aug 24 20:00:55 gwbvm4 kernel: [277318.831675] 815bcf5a 8809707043d8 8817ccbc1cd0 815bd012 Aug 24 20:00:55 gwbvm4 kernel: [277318.81] 8809707043d8 f4ee 880a2c048800 8817ccbc1d58 Aug 24 20:00:55 gwbvm4 kernel: [277318.879408] Call Trace: Aug 24 20:00:55 gwbvm4 kernel: [277318.891138] [815bcebf] ? skb_release_data+0x8f/0x110 Aug 24 20:00:55 gwbvm4 kernel: [277318.903096] [815bcf5a] __kfree_skb+0x1a/0xa0 Aug 24 20:00:55
[Kernel-packages] [Bug 1216444] Lspci.txt
apport information ** Attachment added: Lspci.txt https://bugs.launchpad.net/bugs/1216444/+attachment/3787259/+files/Lspci.txt -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1216444 Title: Vhost-net made unstable by linux_3.8.0-28.41 Status in “linux” package in Ubuntu: Confirmed Bug description: On multiple machines with vm's using vhost-net this bug takes out the guest network interface under load. The vm is only able to see broadcast traffic after this happens. Started happening immediately after upgrading from linux-image-3.8.0-27-generic to linux- image-3.8.0-29-generic. This changelog entry from linux_3.8.0-28.41 seems particularly relevant: * vhost-net: fix use-after-free in vhost_net_flush - LP: #1202992 - CVE-2013-4127 Also seems to be giving the fedora folks fits as well: https://bugzilla.redhat.com/show_bug.cgi?id=975065 Aug 24 20:00:55 gwbvm4 kernel: [277318.536525] BUG: unable to handle kernel NULL pointer dereference at 01ea Aug 24 20:00:55 gwbvm4 kernel: [277318.537027] IP: [8113c1a5] put_page+0x5/0x40 Aug 24 20:00:55 gwbvm4 kernel: [277318.537359] PGD 0 Aug 24 20:00:55 gwbvm4 kernel: [277318.537505] Oops: [#1] SMP Aug 24 20:00:55 gwbvm4 kernel: [277318.537716] Modules linked in: xt_recent(F) nfnetlink_log(F) nfnetlink(F) vhost_net macvtap(F) macvlan(F) brcompat(OF) openvswitch(OF) mptctl(F) mptbase(F) ipmi_devintf ipmi_si ipmi_msghandler ebtable_nat(F) ebtables(F) ipt_MASQUERADE(F) iptable_nat(F) nf_nat_ipv4(F) xt_CHECKSUM(F) iptable_mangle(F) ib_iser rdma_cm ib_addr iw_cm ib_cm ib_sa ib_mad ib_core iscsi_tcp(F) libiscsi_tcp(F) libiscsi(F) scsi_transport_iscsi(F) stp(F) llc(F) ip6t_REJECT(F) xt_hl(F) ip6t_rt(F) nf_conntrack_ipv6(F) nf_defrag_ipv6(F) ipt_REJECT(F) xt_comment(F) xt_limit(F) xt_tcpudp(F) vesafb(F) xt_addrtype(F) nf_conntrack_ipv4(F) nf_defrag_ipv4(F) xt_state(F) ip6table_filter(F) ip6_tables(F) nf_conntrack_netbios_ns(F) nf_conntrack_broadcast(F) nf_nat_ftp(F) nf_nat(F) nf_conntrack_ftp(F) nf_conntrack(F) iptable_filter(F) ip_tables(F) coretemp x_tables(F) kvm_intel kvm ghash_clmulni_intel(F) aesni_intel(F) aes_x86_64(F) xts(F) lrw(F) gf128mul(F) ablk_helper(F) cryptd(F) gpio_ich lpc_ich microcode(F) serio_r Aug 24 20:00:55 gwbvm4 kernel: aw(F) i7core_edac mac_hid edac_core lp(F) parport(F) btrfs(F) zlib_deflate(F) libcrc32c(F) ahci(F) libahci(F) igb cxgb3 dca ptp hpsa mdio pps_core [last unloaded: bridge] Aug 24 20:00:55 gwbvm4 kernel: [277318.544745] CPU 0 Aug 24 20:00:55 gwbvm4 kernel: [277318.544866] Pid: 5489, comm: vhost-5488 Tainted: GF IO 3.8.0-29-generic #42-Ubuntu HP ProLiant DL160 G6 Aug 24 20:00:55 gwbvm4 kernel: [277318.545560] RIP: 0010:[8113c1a5] [8113c1a5] put_page+0x5/0x40 Aug 24 20:00:55 gwbvm4 kernel: [277318.546034] RSP: 0018:8817ccbc1c78 EFLAGS: 00010202 Aug 24 20:00:55 gwbvm4 kernel: [277318.546356] RAX: 8809728a1ac0 RBX: 0012 RCX: 8809728a1ac0 Aug 24 20:00:55 gwbvm4 kernel: [277318.569029] RDX: 0140 RSI: 8809728a1ac0 RDI: 01ea Aug 24 20:00:55 gwbvm4 kernel: [277318.592195] RBP: 8817ccbc1c90 R08: 880970704518 R09: 0010 Aug 24 20:00:55 gwbvm4 kernel: [277318.615537] R10: 0001 R11: 0007 R12: 881645ca5100 Aug 24 20:00:55 gwbvm4 kernel: [277318.639881] R13: 814dfa35 R14: 000c R15: 881645ca5100 Aug 24 20:00:55 gwbvm4 kernel: [277318.664386] FS: () GS:880c0fc0() knlGS: Aug 24 20:00:55 gwbvm4 kernel: [277318.689030] CS: 0010 DS: ES: CR0: 8005003b Aug 24 20:00:55 gwbvm4 kernel: [277318.701226] CR2: 01ea CR3: 00069ca0b000 CR4: 27e0 Aug 24 20:00:55 gwbvm4 kernel: [277318.725240] DR0: DR1: DR2: Aug 24 20:00:55 gwbvm4 kernel: [277318.749120] DR3: DR6: 0ff0 DR7: 0400 Aug 24 20:00:55 gwbvm4 kernel: [277318.773018] Process vhost-5488 (pid: 5489, threadinfo 8817ccbc, task 8817f6a8) Aug 24 20:00:55 gwbvm4 kernel: [277318.796899] Stack: Aug 24 20:00:55 gwbvm4 kernel: [277318.808406] 815bcebf 881645ca5100 881645ca5100 8817ccbc1ca8 Aug 24 20:00:55 gwbvm4 kernel: [277318.831675] 815bcf5a 8809707043d8 8817ccbc1cd0 815bd012 Aug 24 20:00:55 gwbvm4 kernel: [277318.81] 8809707043d8 f4ee 880a2c048800 8817ccbc1d58 Aug 24 20:00:55 gwbvm4 kernel: [277318.879408] Call Trace: Aug 24 20:00:55 gwbvm4 kernel: [277318.891138] [815bcebf] ? skb_release_data+0x8f/0x110 Aug 24 20:00:55 gwbvm4 kernel: [277318.903096] [815bcf5a] __kfree_skb+0x1a/0xa0 Aug 24 20:00:55 gwbvm4 kernel:
[Kernel-packages] [Bug 1216444] Re: Vhost-net made unstable by linux_3.8.0-28.41
apport information ** Tags added: apport-collected ** Description changed: On multiple machines with vm's using vhost-net this bug takes out the guest network interface under load. The vm is only able to see broadcast traffic after this happens. Started happening immediately after upgrading from linux-image-3.8.0-27-generic to linux- image-3.8.0-29-generic. This changelog entry from linux_3.8.0-28.41 seems particularly relevant: * vhost-net: fix use-after-free in vhost_net_flush - LP: #1202992 - CVE-2013-4127 Also seems to be giving the fedora folks fits as well: https://bugzilla.redhat.com/show_bug.cgi?id=975065 Aug 24 20:00:55 gwbvm4 kernel: [277318.536525] BUG: unable to handle kernel NULL pointer dereference at 01ea Aug 24 20:00:55 gwbvm4 kernel: [277318.537027] IP: [8113c1a5] put_page+0x5/0x40 Aug 24 20:00:55 gwbvm4 kernel: [277318.537359] PGD 0 Aug 24 20:00:55 gwbvm4 kernel: [277318.537505] Oops: [#1] SMP Aug 24 20:00:55 gwbvm4 kernel: [277318.537716] Modules linked in: xt_recent(F) nfnetlink_log(F) nfnetlink(F) vhost_net macvtap(F) macvlan(F) brcompat(OF) openvswitch(OF) mptctl(F) mptbase(F) ipmi_devintf ipmi_si ipmi_msghandler ebtable_nat(F) ebtables(F) ipt_MASQUERADE(F) iptable_nat(F) nf_nat_ipv4(F) xt_CHECKSUM(F) iptable_mangle(F) ib_iser rdma_cm ib_addr iw_cm ib_cm ib_sa ib_mad ib_core iscsi_tcp(F) libiscsi_tcp(F) libiscsi(F) scsi_transport_iscsi(F) stp(F) llc(F) ip6t_REJECT(F) xt_hl(F) ip6t_rt(F) nf_conntrack_ipv6(F) nf_defrag_ipv6(F) ipt_REJECT(F) xt_comment(F) xt_limit(F) xt_tcpudp(F) vesafb(F) xt_addrtype(F) nf_conntrack_ipv4(F) nf_defrag_ipv4(F) xt_state(F) ip6table_filter(F) ip6_tables(F) nf_conntrack_netbios_ns(F) nf_conntrack_broadcast(F) nf_nat_ftp(F) nf_nat(F) nf_conntrack_ftp(F) nf_conntrack(F) iptable_filter(F) ip_tables(F) coretemp x_tables(F) kvm_intel kvm ghash_clmulni_intel(F) aesni_intel(F) aes_x86_64(F) xts(F) lrw(F) gf128mul(F) ablk_helper(F) cryptd(F) gpio_ich lpc_ich microcode(F) serio_r Aug 24 20:00:55 gwbvm4 kernel: aw(F) i7core_edac mac_hid edac_core lp(F) parport(F) btrfs(F) zlib_deflate(F) libcrc32c(F) ahci(F) libahci(F) igb cxgb3 dca ptp hpsa mdio pps_core [last unloaded: bridge] Aug 24 20:00:55 gwbvm4 kernel: [277318.544745] CPU 0 Aug 24 20:00:55 gwbvm4 kernel: [277318.544866] Pid: 5489, comm: vhost-5488 Tainted: GF IO 3.8.0-29-generic #42-Ubuntu HP ProLiant DL160 G6 Aug 24 20:00:55 gwbvm4 kernel: [277318.545560] RIP: 0010:[8113c1a5] [8113c1a5] put_page+0x5/0x40 Aug 24 20:00:55 gwbvm4 kernel: [277318.546034] RSP: 0018:8817ccbc1c78 EFLAGS: 00010202 Aug 24 20:00:55 gwbvm4 kernel: [277318.546356] RAX: 8809728a1ac0 RBX: 0012 RCX: 8809728a1ac0 Aug 24 20:00:55 gwbvm4 kernel: [277318.569029] RDX: 0140 RSI: 8809728a1ac0 RDI: 01ea Aug 24 20:00:55 gwbvm4 kernel: [277318.592195] RBP: 8817ccbc1c90 R08: 880970704518 R09: 0010 Aug 24 20:00:55 gwbvm4 kernel: [277318.615537] R10: 0001 R11: 0007 R12: 881645ca5100 Aug 24 20:00:55 gwbvm4 kernel: [277318.639881] R13: 814dfa35 R14: 000c R15: 881645ca5100 Aug 24 20:00:55 gwbvm4 kernel: [277318.664386] FS: () GS:880c0fc0() knlGS: Aug 24 20:00:55 gwbvm4 kernel: [277318.689030] CS: 0010 DS: ES: CR0: 8005003b Aug 24 20:00:55 gwbvm4 kernel: [277318.701226] CR2: 01ea CR3: 00069ca0b000 CR4: 27e0 Aug 24 20:00:55 gwbvm4 kernel: [277318.725240] DR0: DR1: DR2: Aug 24 20:00:55 gwbvm4 kernel: [277318.749120] DR3: DR6: 0ff0 DR7: 0400 Aug 24 20:00:55 gwbvm4 kernel: [277318.773018] Process vhost-5488 (pid: 5489, threadinfo 8817ccbc, task 8817f6a8) Aug 24 20:00:55 gwbvm4 kernel: [277318.796899] Stack: Aug 24 20:00:55 gwbvm4 kernel: [277318.808406] 815bcebf 881645ca5100 881645ca5100 8817ccbc1ca8 Aug 24 20:00:55 gwbvm4 kernel: [277318.831675] 815bcf5a 8809707043d8 8817ccbc1cd0 815bd012 Aug 24 20:00:55 gwbvm4 kernel: [277318.81] 8809707043d8 f4ee 880a2c048800 8817ccbc1d58 Aug 24 20:00:55 gwbvm4 kernel: [277318.879408] Call Trace: Aug 24 20:00:55 gwbvm4 kernel: [277318.891138] [815bcebf] ? skb_release_data+0x8f/0x110 Aug 24 20:00:55 gwbvm4 kernel: [277318.903096] [815bcf5a] __kfree_skb+0x1a/0xa0 Aug 24 20:00:55 gwbvm4 kernel: [277318.914622] [815bd012] kfree_skb+0x32/0x90 Aug 24 20:00:55 gwbvm4 kernel: [277318.925947] [814dfa35] tun_get_user+0x5f5/0x720 Aug 24 20:00:55 gwbvm4 kernel: [277318.937089] [814dfbb7] tun_sendmsg+0x57/0x80 Aug 24 20:00:55 gwbvm4 kernel: [277318.947987] [a0435656] handle_tx+0x266/0x580
[Kernel-packages] [Bug 1216444] HookError_cloud_archive.txt
apport information ** Attachment added: HookError_cloud_archive.txt https://bugs.launchpad.net/bugs/1216444/+attachment/3787257/+files/HookError_cloud_archive.txt -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1216444 Title: Vhost-net made unstable by linux_3.8.0-28.41 Status in “linux” package in Ubuntu: Confirmed Bug description: On multiple machines with vm's using vhost-net this bug takes out the guest network interface under load. The vm is only able to see broadcast traffic after this happens. Started happening immediately after upgrading from linux-image-3.8.0-27-generic to linux- image-3.8.0-29-generic. This changelog entry from linux_3.8.0-28.41 seems particularly relevant: * vhost-net: fix use-after-free in vhost_net_flush - LP: #1202992 - CVE-2013-4127 Also seems to be giving the fedora folks fits as well: https://bugzilla.redhat.com/show_bug.cgi?id=975065 Aug 24 20:00:55 gwbvm4 kernel: [277318.536525] BUG: unable to handle kernel NULL pointer dereference at 01ea Aug 24 20:00:55 gwbvm4 kernel: [277318.537027] IP: [8113c1a5] put_page+0x5/0x40 Aug 24 20:00:55 gwbvm4 kernel: [277318.537359] PGD 0 Aug 24 20:00:55 gwbvm4 kernel: [277318.537505] Oops: [#1] SMP Aug 24 20:00:55 gwbvm4 kernel: [277318.537716] Modules linked in: xt_recent(F) nfnetlink_log(F) nfnetlink(F) vhost_net macvtap(F) macvlan(F) brcompat(OF) openvswitch(OF) mptctl(F) mptbase(F) ipmi_devintf ipmi_si ipmi_msghandler ebtable_nat(F) ebtables(F) ipt_MASQUERADE(F) iptable_nat(F) nf_nat_ipv4(F) xt_CHECKSUM(F) iptable_mangle(F) ib_iser rdma_cm ib_addr iw_cm ib_cm ib_sa ib_mad ib_core iscsi_tcp(F) libiscsi_tcp(F) libiscsi(F) scsi_transport_iscsi(F) stp(F) llc(F) ip6t_REJECT(F) xt_hl(F) ip6t_rt(F) nf_conntrack_ipv6(F) nf_defrag_ipv6(F) ipt_REJECT(F) xt_comment(F) xt_limit(F) xt_tcpudp(F) vesafb(F) xt_addrtype(F) nf_conntrack_ipv4(F) nf_defrag_ipv4(F) xt_state(F) ip6table_filter(F) ip6_tables(F) nf_conntrack_netbios_ns(F) nf_conntrack_broadcast(F) nf_nat_ftp(F) nf_nat(F) nf_conntrack_ftp(F) nf_conntrack(F) iptable_filter(F) ip_tables(F) coretemp x_tables(F) kvm_intel kvm ghash_clmulni_intel(F) aesni_intel(F) aes_x86_64(F) xts(F) lrw(F) gf128mul(F) ablk_helper(F) cryptd(F) gpio_ich lpc_ich microcode(F) serio_r Aug 24 20:00:55 gwbvm4 kernel: aw(F) i7core_edac mac_hid edac_core lp(F) parport(F) btrfs(F) zlib_deflate(F) libcrc32c(F) ahci(F) libahci(F) igb cxgb3 dca ptp hpsa mdio pps_core [last unloaded: bridge] Aug 24 20:00:55 gwbvm4 kernel: [277318.544745] CPU 0 Aug 24 20:00:55 gwbvm4 kernel: [277318.544866] Pid: 5489, comm: vhost-5488 Tainted: GF IO 3.8.0-29-generic #42-Ubuntu HP ProLiant DL160 G6 Aug 24 20:00:55 gwbvm4 kernel: [277318.545560] RIP: 0010:[8113c1a5] [8113c1a5] put_page+0x5/0x40 Aug 24 20:00:55 gwbvm4 kernel: [277318.546034] RSP: 0018:8817ccbc1c78 EFLAGS: 00010202 Aug 24 20:00:55 gwbvm4 kernel: [277318.546356] RAX: 8809728a1ac0 RBX: 0012 RCX: 8809728a1ac0 Aug 24 20:00:55 gwbvm4 kernel: [277318.569029] RDX: 0140 RSI: 8809728a1ac0 RDI: 01ea Aug 24 20:00:55 gwbvm4 kernel: [277318.592195] RBP: 8817ccbc1c90 R08: 880970704518 R09: 0010 Aug 24 20:00:55 gwbvm4 kernel: [277318.615537] R10: 0001 R11: 0007 R12: 881645ca5100 Aug 24 20:00:55 gwbvm4 kernel: [277318.639881] R13: 814dfa35 R14: 000c R15: 881645ca5100 Aug 24 20:00:55 gwbvm4 kernel: [277318.664386] FS: () GS:880c0fc0() knlGS: Aug 24 20:00:55 gwbvm4 kernel: [277318.689030] CS: 0010 DS: ES: CR0: 8005003b Aug 24 20:00:55 gwbvm4 kernel: [277318.701226] CR2: 01ea CR3: 00069ca0b000 CR4: 27e0 Aug 24 20:00:55 gwbvm4 kernel: [277318.725240] DR0: DR1: DR2: Aug 24 20:00:55 gwbvm4 kernel: [277318.749120] DR3: DR6: 0ff0 DR7: 0400 Aug 24 20:00:55 gwbvm4 kernel: [277318.773018] Process vhost-5488 (pid: 5489, threadinfo 8817ccbc, task 8817f6a8) Aug 24 20:00:55 gwbvm4 kernel: [277318.796899] Stack: Aug 24 20:00:55 gwbvm4 kernel: [277318.808406] 815bcebf 881645ca5100 881645ca5100 8817ccbc1ca8 Aug 24 20:00:55 gwbvm4 kernel: [277318.831675] 815bcf5a 8809707043d8 8817ccbc1cd0 815bd012 Aug 24 20:00:55 gwbvm4 kernel: [277318.81] 8809707043d8 f4ee 880a2c048800 8817ccbc1d58 Aug 24 20:00:55 gwbvm4 kernel: [277318.879408] Call Trace: Aug 24 20:00:55 gwbvm4 kernel: [277318.891138] [815bcebf] ? skb_release_data+0x8f/0x110 Aug 24 20:00:55 gwbvm4 kernel: [277318.903096] [815bcf5a] __kfree_skb+0x1a/0xa0
[Kernel-packages] [Bug 1216444] ProcCpuinfo.txt
apport information ** Attachment added: ProcCpuinfo.txt https://bugs.launchpad.net/bugs/1216444/+attachment/3787261/+files/ProcCpuinfo.txt -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1216444 Title: Vhost-net made unstable by linux_3.8.0-28.41 Status in “linux” package in Ubuntu: Confirmed Bug description: On multiple machines with vm's using vhost-net this bug takes out the guest network interface under load. The vm is only able to see broadcast traffic after this happens. Started happening immediately after upgrading from linux-image-3.8.0-27-generic to linux- image-3.8.0-29-generic. This changelog entry from linux_3.8.0-28.41 seems particularly relevant: * vhost-net: fix use-after-free in vhost_net_flush - LP: #1202992 - CVE-2013-4127 Also seems to be giving the fedora folks fits as well: https://bugzilla.redhat.com/show_bug.cgi?id=975065 Aug 24 20:00:55 gwbvm4 kernel: [277318.536525] BUG: unable to handle kernel NULL pointer dereference at 01ea Aug 24 20:00:55 gwbvm4 kernel: [277318.537027] IP: [8113c1a5] put_page+0x5/0x40 Aug 24 20:00:55 gwbvm4 kernel: [277318.537359] PGD 0 Aug 24 20:00:55 gwbvm4 kernel: [277318.537505] Oops: [#1] SMP Aug 24 20:00:55 gwbvm4 kernel: [277318.537716] Modules linked in: xt_recent(F) nfnetlink_log(F) nfnetlink(F) vhost_net macvtap(F) macvlan(F) brcompat(OF) openvswitch(OF) mptctl(F) mptbase(F) ipmi_devintf ipmi_si ipmi_msghandler ebtable_nat(F) ebtables(F) ipt_MASQUERADE(F) iptable_nat(F) nf_nat_ipv4(F) xt_CHECKSUM(F) iptable_mangle(F) ib_iser rdma_cm ib_addr iw_cm ib_cm ib_sa ib_mad ib_core iscsi_tcp(F) libiscsi_tcp(F) libiscsi(F) scsi_transport_iscsi(F) stp(F) llc(F) ip6t_REJECT(F) xt_hl(F) ip6t_rt(F) nf_conntrack_ipv6(F) nf_defrag_ipv6(F) ipt_REJECT(F) xt_comment(F) xt_limit(F) xt_tcpudp(F) vesafb(F) xt_addrtype(F) nf_conntrack_ipv4(F) nf_defrag_ipv4(F) xt_state(F) ip6table_filter(F) ip6_tables(F) nf_conntrack_netbios_ns(F) nf_conntrack_broadcast(F) nf_nat_ftp(F) nf_nat(F) nf_conntrack_ftp(F) nf_conntrack(F) iptable_filter(F) ip_tables(F) coretemp x_tables(F) kvm_intel kvm ghash_clmulni_intel(F) aesni_intel(F) aes_x86_64(F) xts(F) lrw(F) gf128mul(F) ablk_helper(F) cryptd(F) gpio_ich lpc_ich microcode(F) serio_r Aug 24 20:00:55 gwbvm4 kernel: aw(F) i7core_edac mac_hid edac_core lp(F) parport(F) btrfs(F) zlib_deflate(F) libcrc32c(F) ahci(F) libahci(F) igb cxgb3 dca ptp hpsa mdio pps_core [last unloaded: bridge] Aug 24 20:00:55 gwbvm4 kernel: [277318.544745] CPU 0 Aug 24 20:00:55 gwbvm4 kernel: [277318.544866] Pid: 5489, comm: vhost-5488 Tainted: GF IO 3.8.0-29-generic #42-Ubuntu HP ProLiant DL160 G6 Aug 24 20:00:55 gwbvm4 kernel: [277318.545560] RIP: 0010:[8113c1a5] [8113c1a5] put_page+0x5/0x40 Aug 24 20:00:55 gwbvm4 kernel: [277318.546034] RSP: 0018:8817ccbc1c78 EFLAGS: 00010202 Aug 24 20:00:55 gwbvm4 kernel: [277318.546356] RAX: 8809728a1ac0 RBX: 0012 RCX: 8809728a1ac0 Aug 24 20:00:55 gwbvm4 kernel: [277318.569029] RDX: 0140 RSI: 8809728a1ac0 RDI: 01ea Aug 24 20:00:55 gwbvm4 kernel: [277318.592195] RBP: 8817ccbc1c90 R08: 880970704518 R09: 0010 Aug 24 20:00:55 gwbvm4 kernel: [277318.615537] R10: 0001 R11: 0007 R12: 881645ca5100 Aug 24 20:00:55 gwbvm4 kernel: [277318.639881] R13: 814dfa35 R14: 000c R15: 881645ca5100 Aug 24 20:00:55 gwbvm4 kernel: [277318.664386] FS: () GS:880c0fc0() knlGS: Aug 24 20:00:55 gwbvm4 kernel: [277318.689030] CS: 0010 DS: ES: CR0: 8005003b Aug 24 20:00:55 gwbvm4 kernel: [277318.701226] CR2: 01ea CR3: 00069ca0b000 CR4: 27e0 Aug 24 20:00:55 gwbvm4 kernel: [277318.725240] DR0: DR1: DR2: Aug 24 20:00:55 gwbvm4 kernel: [277318.749120] DR3: DR6: 0ff0 DR7: 0400 Aug 24 20:00:55 gwbvm4 kernel: [277318.773018] Process vhost-5488 (pid: 5489, threadinfo 8817ccbc, task 8817f6a8) Aug 24 20:00:55 gwbvm4 kernel: [277318.796899] Stack: Aug 24 20:00:55 gwbvm4 kernel: [277318.808406] 815bcebf 881645ca5100 881645ca5100 8817ccbc1ca8 Aug 24 20:00:55 gwbvm4 kernel: [277318.831675] 815bcf5a 8809707043d8 8817ccbc1cd0 815bd012 Aug 24 20:00:55 gwbvm4 kernel: [277318.81] 8809707043d8 f4ee 880a2c048800 8817ccbc1d58 Aug 24 20:00:55 gwbvm4 kernel: [277318.879408] Call Trace: Aug 24 20:00:55 gwbvm4 kernel: [277318.891138] [815bcebf] ? skb_release_data+0x8f/0x110 Aug 24 20:00:55 gwbvm4 kernel: [277318.903096] [815bcf5a] __kfree_skb+0x1a/0xa0 Aug 24 20:00:55
[Kernel-packages] [Bug 1216444] UdevDb.txt
apport information ** Attachment added: UdevDb.txt https://bugs.launchpad.net/bugs/1216444/+attachment/3787264/+files/UdevDb.txt -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1216444 Title: Vhost-net made unstable by linux_3.8.0-28.41 Status in “linux” package in Ubuntu: Confirmed Bug description: On multiple machines with vm's using vhost-net this bug takes out the guest network interface under load. The vm is only able to see broadcast traffic after this happens. Started happening immediately after upgrading from linux-image-3.8.0-27-generic to linux- image-3.8.0-29-generic. This changelog entry from linux_3.8.0-28.41 seems particularly relevant: * vhost-net: fix use-after-free in vhost_net_flush - LP: #1202992 - CVE-2013-4127 Also seems to be giving the fedora folks fits as well: https://bugzilla.redhat.com/show_bug.cgi?id=975065 Aug 24 20:00:55 gwbvm4 kernel: [277318.536525] BUG: unable to handle kernel NULL pointer dereference at 01ea Aug 24 20:00:55 gwbvm4 kernel: [277318.537027] IP: [8113c1a5] put_page+0x5/0x40 Aug 24 20:00:55 gwbvm4 kernel: [277318.537359] PGD 0 Aug 24 20:00:55 gwbvm4 kernel: [277318.537505] Oops: [#1] SMP Aug 24 20:00:55 gwbvm4 kernel: [277318.537716] Modules linked in: xt_recent(F) nfnetlink_log(F) nfnetlink(F) vhost_net macvtap(F) macvlan(F) brcompat(OF) openvswitch(OF) mptctl(F) mptbase(F) ipmi_devintf ipmi_si ipmi_msghandler ebtable_nat(F) ebtables(F) ipt_MASQUERADE(F) iptable_nat(F) nf_nat_ipv4(F) xt_CHECKSUM(F) iptable_mangle(F) ib_iser rdma_cm ib_addr iw_cm ib_cm ib_sa ib_mad ib_core iscsi_tcp(F) libiscsi_tcp(F) libiscsi(F) scsi_transport_iscsi(F) stp(F) llc(F) ip6t_REJECT(F) xt_hl(F) ip6t_rt(F) nf_conntrack_ipv6(F) nf_defrag_ipv6(F) ipt_REJECT(F) xt_comment(F) xt_limit(F) xt_tcpudp(F) vesafb(F) xt_addrtype(F) nf_conntrack_ipv4(F) nf_defrag_ipv4(F) xt_state(F) ip6table_filter(F) ip6_tables(F) nf_conntrack_netbios_ns(F) nf_conntrack_broadcast(F) nf_nat_ftp(F) nf_nat(F) nf_conntrack_ftp(F) nf_conntrack(F) iptable_filter(F) ip_tables(F) coretemp x_tables(F) kvm_intel kvm ghash_clmulni_intel(F) aesni_intel(F) aes_x86_64(F) xts(F) lrw(F) gf128mul(F) ablk_helper(F) cryptd(F) gpio_ich lpc_ich microcode(F) serio_r Aug 24 20:00:55 gwbvm4 kernel: aw(F) i7core_edac mac_hid edac_core lp(F) parport(F) btrfs(F) zlib_deflate(F) libcrc32c(F) ahci(F) libahci(F) igb cxgb3 dca ptp hpsa mdio pps_core [last unloaded: bridge] Aug 24 20:00:55 gwbvm4 kernel: [277318.544745] CPU 0 Aug 24 20:00:55 gwbvm4 kernel: [277318.544866] Pid: 5489, comm: vhost-5488 Tainted: GF IO 3.8.0-29-generic #42-Ubuntu HP ProLiant DL160 G6 Aug 24 20:00:55 gwbvm4 kernel: [277318.545560] RIP: 0010:[8113c1a5] [8113c1a5] put_page+0x5/0x40 Aug 24 20:00:55 gwbvm4 kernel: [277318.546034] RSP: 0018:8817ccbc1c78 EFLAGS: 00010202 Aug 24 20:00:55 gwbvm4 kernel: [277318.546356] RAX: 8809728a1ac0 RBX: 0012 RCX: 8809728a1ac0 Aug 24 20:00:55 gwbvm4 kernel: [277318.569029] RDX: 0140 RSI: 8809728a1ac0 RDI: 01ea Aug 24 20:00:55 gwbvm4 kernel: [277318.592195] RBP: 8817ccbc1c90 R08: 880970704518 R09: 0010 Aug 24 20:00:55 gwbvm4 kernel: [277318.615537] R10: 0001 R11: 0007 R12: 881645ca5100 Aug 24 20:00:55 gwbvm4 kernel: [277318.639881] R13: 814dfa35 R14: 000c R15: 881645ca5100 Aug 24 20:00:55 gwbvm4 kernel: [277318.664386] FS: () GS:880c0fc0() knlGS: Aug 24 20:00:55 gwbvm4 kernel: [277318.689030] CS: 0010 DS: ES: CR0: 8005003b Aug 24 20:00:55 gwbvm4 kernel: [277318.701226] CR2: 01ea CR3: 00069ca0b000 CR4: 27e0 Aug 24 20:00:55 gwbvm4 kernel: [277318.725240] DR0: DR1: DR2: Aug 24 20:00:55 gwbvm4 kernel: [277318.749120] DR3: DR6: 0ff0 DR7: 0400 Aug 24 20:00:55 gwbvm4 kernel: [277318.773018] Process vhost-5488 (pid: 5489, threadinfo 8817ccbc, task 8817f6a8) Aug 24 20:00:55 gwbvm4 kernel: [277318.796899] Stack: Aug 24 20:00:55 gwbvm4 kernel: [277318.808406] 815bcebf 881645ca5100 881645ca5100 8817ccbc1ca8 Aug 24 20:00:55 gwbvm4 kernel: [277318.831675] 815bcf5a 8809707043d8 8817ccbc1cd0 815bd012 Aug 24 20:00:55 gwbvm4 kernel: [277318.81] 8809707043d8 f4ee 880a2c048800 8817ccbc1d58 Aug 24 20:00:55 gwbvm4 kernel: [277318.879408] Call Trace: Aug 24 20:00:55 gwbvm4 kernel: [277318.891138] [815bcebf] ? skb_release_data+0x8f/0x110 Aug 24 20:00:55 gwbvm4 kernel: [277318.903096] [815bcf5a] __kfree_skb+0x1a/0xa0 Aug 24 20:00:55 gwbvm4 kernel:
[Kernel-packages] [Bug 1216444] Lsusb.txt
apport information ** Attachment added: Lsusb.txt https://bugs.launchpad.net/bugs/1216444/+attachment/3787260/+files/Lsusb.txt -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1216444 Title: Vhost-net made unstable by linux_3.8.0-28.41 Status in “linux” package in Ubuntu: Confirmed Bug description: On multiple machines with vm's using vhost-net this bug takes out the guest network interface under load. The vm is only able to see broadcast traffic after this happens. Started happening immediately after upgrading from linux-image-3.8.0-27-generic to linux- image-3.8.0-29-generic. This changelog entry from linux_3.8.0-28.41 seems particularly relevant: * vhost-net: fix use-after-free in vhost_net_flush - LP: #1202992 - CVE-2013-4127 Also seems to be giving the fedora folks fits as well: https://bugzilla.redhat.com/show_bug.cgi?id=975065 Aug 24 20:00:55 gwbvm4 kernel: [277318.536525] BUG: unable to handle kernel NULL pointer dereference at 01ea Aug 24 20:00:55 gwbvm4 kernel: [277318.537027] IP: [8113c1a5] put_page+0x5/0x40 Aug 24 20:00:55 gwbvm4 kernel: [277318.537359] PGD 0 Aug 24 20:00:55 gwbvm4 kernel: [277318.537505] Oops: [#1] SMP Aug 24 20:00:55 gwbvm4 kernel: [277318.537716] Modules linked in: xt_recent(F) nfnetlink_log(F) nfnetlink(F) vhost_net macvtap(F) macvlan(F) brcompat(OF) openvswitch(OF) mptctl(F) mptbase(F) ipmi_devintf ipmi_si ipmi_msghandler ebtable_nat(F) ebtables(F) ipt_MASQUERADE(F) iptable_nat(F) nf_nat_ipv4(F) xt_CHECKSUM(F) iptable_mangle(F) ib_iser rdma_cm ib_addr iw_cm ib_cm ib_sa ib_mad ib_core iscsi_tcp(F) libiscsi_tcp(F) libiscsi(F) scsi_transport_iscsi(F) stp(F) llc(F) ip6t_REJECT(F) xt_hl(F) ip6t_rt(F) nf_conntrack_ipv6(F) nf_defrag_ipv6(F) ipt_REJECT(F) xt_comment(F) xt_limit(F) xt_tcpudp(F) vesafb(F) xt_addrtype(F) nf_conntrack_ipv4(F) nf_defrag_ipv4(F) xt_state(F) ip6table_filter(F) ip6_tables(F) nf_conntrack_netbios_ns(F) nf_conntrack_broadcast(F) nf_nat_ftp(F) nf_nat(F) nf_conntrack_ftp(F) nf_conntrack(F) iptable_filter(F) ip_tables(F) coretemp x_tables(F) kvm_intel kvm ghash_clmulni_intel(F) aesni_intel(F) aes_x86_64(F) xts(F) lrw(F) gf128mul(F) ablk_helper(F) cryptd(F) gpio_ich lpc_ich microcode(F) serio_r Aug 24 20:00:55 gwbvm4 kernel: aw(F) i7core_edac mac_hid edac_core lp(F) parport(F) btrfs(F) zlib_deflate(F) libcrc32c(F) ahci(F) libahci(F) igb cxgb3 dca ptp hpsa mdio pps_core [last unloaded: bridge] Aug 24 20:00:55 gwbvm4 kernel: [277318.544745] CPU 0 Aug 24 20:00:55 gwbvm4 kernel: [277318.544866] Pid: 5489, comm: vhost-5488 Tainted: GF IO 3.8.0-29-generic #42-Ubuntu HP ProLiant DL160 G6 Aug 24 20:00:55 gwbvm4 kernel: [277318.545560] RIP: 0010:[8113c1a5] [8113c1a5] put_page+0x5/0x40 Aug 24 20:00:55 gwbvm4 kernel: [277318.546034] RSP: 0018:8817ccbc1c78 EFLAGS: 00010202 Aug 24 20:00:55 gwbvm4 kernel: [277318.546356] RAX: 8809728a1ac0 RBX: 0012 RCX: 8809728a1ac0 Aug 24 20:00:55 gwbvm4 kernel: [277318.569029] RDX: 0140 RSI: 8809728a1ac0 RDI: 01ea Aug 24 20:00:55 gwbvm4 kernel: [277318.592195] RBP: 8817ccbc1c90 R08: 880970704518 R09: 0010 Aug 24 20:00:55 gwbvm4 kernel: [277318.615537] R10: 0001 R11: 0007 R12: 881645ca5100 Aug 24 20:00:55 gwbvm4 kernel: [277318.639881] R13: 814dfa35 R14: 000c R15: 881645ca5100 Aug 24 20:00:55 gwbvm4 kernel: [277318.664386] FS: () GS:880c0fc0() knlGS: Aug 24 20:00:55 gwbvm4 kernel: [277318.689030] CS: 0010 DS: ES: CR0: 8005003b Aug 24 20:00:55 gwbvm4 kernel: [277318.701226] CR2: 01ea CR3: 00069ca0b000 CR4: 27e0 Aug 24 20:00:55 gwbvm4 kernel: [277318.725240] DR0: DR1: DR2: Aug 24 20:00:55 gwbvm4 kernel: [277318.749120] DR3: DR6: 0ff0 DR7: 0400 Aug 24 20:00:55 gwbvm4 kernel: [277318.773018] Process vhost-5488 (pid: 5489, threadinfo 8817ccbc, task 8817f6a8) Aug 24 20:00:55 gwbvm4 kernel: [277318.796899] Stack: Aug 24 20:00:55 gwbvm4 kernel: [277318.808406] 815bcebf 881645ca5100 881645ca5100 8817ccbc1ca8 Aug 24 20:00:55 gwbvm4 kernel: [277318.831675] 815bcf5a 8809707043d8 8817ccbc1cd0 815bd012 Aug 24 20:00:55 gwbvm4 kernel: [277318.81] 8809707043d8 f4ee 880a2c048800 8817ccbc1d58 Aug 24 20:00:55 gwbvm4 kernel: [277318.879408] Call Trace: Aug 24 20:00:55 gwbvm4 kernel: [277318.891138] [815bcebf] ? skb_release_data+0x8f/0x110 Aug 24 20:00:55 gwbvm4 kernel: [277318.903096] [815bcf5a] __kfree_skb+0x1a/0xa0 Aug 24 20:00:55 gwbvm4 kernel:
[Kernel-packages] [Bug 1216444] ProcInterrupts.txt
apport information ** Attachment added: ProcInterrupts.txt https://bugs.launchpad.net/bugs/1216444/+attachment/3787262/+files/ProcInterrupts.txt -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1216444 Title: Vhost-net made unstable by linux_3.8.0-28.41 Status in “linux” package in Ubuntu: Confirmed Bug description: On multiple machines with vm's using vhost-net this bug takes out the guest network interface under load. The vm is only able to see broadcast traffic after this happens. Started happening immediately after upgrading from linux-image-3.8.0-27-generic to linux- image-3.8.0-29-generic. This changelog entry from linux_3.8.0-28.41 seems particularly relevant: * vhost-net: fix use-after-free in vhost_net_flush - LP: #1202992 - CVE-2013-4127 Also seems to be giving the fedora folks fits as well: https://bugzilla.redhat.com/show_bug.cgi?id=975065 Aug 24 20:00:55 gwbvm4 kernel: [277318.536525] BUG: unable to handle kernel NULL pointer dereference at 01ea Aug 24 20:00:55 gwbvm4 kernel: [277318.537027] IP: [8113c1a5] put_page+0x5/0x40 Aug 24 20:00:55 gwbvm4 kernel: [277318.537359] PGD 0 Aug 24 20:00:55 gwbvm4 kernel: [277318.537505] Oops: [#1] SMP Aug 24 20:00:55 gwbvm4 kernel: [277318.537716] Modules linked in: xt_recent(F) nfnetlink_log(F) nfnetlink(F) vhost_net macvtap(F) macvlan(F) brcompat(OF) openvswitch(OF) mptctl(F) mptbase(F) ipmi_devintf ipmi_si ipmi_msghandler ebtable_nat(F) ebtables(F) ipt_MASQUERADE(F) iptable_nat(F) nf_nat_ipv4(F) xt_CHECKSUM(F) iptable_mangle(F) ib_iser rdma_cm ib_addr iw_cm ib_cm ib_sa ib_mad ib_core iscsi_tcp(F) libiscsi_tcp(F) libiscsi(F) scsi_transport_iscsi(F) stp(F) llc(F) ip6t_REJECT(F) xt_hl(F) ip6t_rt(F) nf_conntrack_ipv6(F) nf_defrag_ipv6(F) ipt_REJECT(F) xt_comment(F) xt_limit(F) xt_tcpudp(F) vesafb(F) xt_addrtype(F) nf_conntrack_ipv4(F) nf_defrag_ipv4(F) xt_state(F) ip6table_filter(F) ip6_tables(F) nf_conntrack_netbios_ns(F) nf_conntrack_broadcast(F) nf_nat_ftp(F) nf_nat(F) nf_conntrack_ftp(F) nf_conntrack(F) iptable_filter(F) ip_tables(F) coretemp x_tables(F) kvm_intel kvm ghash_clmulni_intel(F) aesni_intel(F) aes_x86_64(F) xts(F) lrw(F) gf128mul(F) ablk_helper(F) cryptd(F) gpio_ich lpc_ich microcode(F) serio_r Aug 24 20:00:55 gwbvm4 kernel: aw(F) i7core_edac mac_hid edac_core lp(F) parport(F) btrfs(F) zlib_deflate(F) libcrc32c(F) ahci(F) libahci(F) igb cxgb3 dca ptp hpsa mdio pps_core [last unloaded: bridge] Aug 24 20:00:55 gwbvm4 kernel: [277318.544745] CPU 0 Aug 24 20:00:55 gwbvm4 kernel: [277318.544866] Pid: 5489, comm: vhost-5488 Tainted: GF IO 3.8.0-29-generic #42-Ubuntu HP ProLiant DL160 G6 Aug 24 20:00:55 gwbvm4 kernel: [277318.545560] RIP: 0010:[8113c1a5] [8113c1a5] put_page+0x5/0x40 Aug 24 20:00:55 gwbvm4 kernel: [277318.546034] RSP: 0018:8817ccbc1c78 EFLAGS: 00010202 Aug 24 20:00:55 gwbvm4 kernel: [277318.546356] RAX: 8809728a1ac0 RBX: 0012 RCX: 8809728a1ac0 Aug 24 20:00:55 gwbvm4 kernel: [277318.569029] RDX: 0140 RSI: 8809728a1ac0 RDI: 01ea Aug 24 20:00:55 gwbvm4 kernel: [277318.592195] RBP: 8817ccbc1c90 R08: 880970704518 R09: 0010 Aug 24 20:00:55 gwbvm4 kernel: [277318.615537] R10: 0001 R11: 0007 R12: 881645ca5100 Aug 24 20:00:55 gwbvm4 kernel: [277318.639881] R13: 814dfa35 R14: 000c R15: 881645ca5100 Aug 24 20:00:55 gwbvm4 kernel: [277318.664386] FS: () GS:880c0fc0() knlGS: Aug 24 20:00:55 gwbvm4 kernel: [277318.689030] CS: 0010 DS: ES: CR0: 8005003b Aug 24 20:00:55 gwbvm4 kernel: [277318.701226] CR2: 01ea CR3: 00069ca0b000 CR4: 27e0 Aug 24 20:00:55 gwbvm4 kernel: [277318.725240] DR0: DR1: DR2: Aug 24 20:00:55 gwbvm4 kernel: [277318.749120] DR3: DR6: 0ff0 DR7: 0400 Aug 24 20:00:55 gwbvm4 kernel: [277318.773018] Process vhost-5488 (pid: 5489, threadinfo 8817ccbc, task 8817f6a8) Aug 24 20:00:55 gwbvm4 kernel: [277318.796899] Stack: Aug 24 20:00:55 gwbvm4 kernel: [277318.808406] 815bcebf 881645ca5100 881645ca5100 8817ccbc1ca8 Aug 24 20:00:55 gwbvm4 kernel: [277318.831675] 815bcf5a 8809707043d8 8817ccbc1cd0 815bd012 Aug 24 20:00:55 gwbvm4 kernel: [277318.81] 8809707043d8 f4ee 880a2c048800 8817ccbc1d58 Aug 24 20:00:55 gwbvm4 kernel: [277318.879408] Call Trace: Aug 24 20:00:55 gwbvm4 kernel: [277318.891138] [815bcebf] ? skb_release_data+0x8f/0x110 Aug 24 20:00:55 gwbvm4 kernel: [277318.903096] [815bcf5a] __kfree_skb+0x1a/0xa0 Aug 24 20:00:55
[Kernel-packages] [Bug 1216444] UdevLog.txt
apport information ** Attachment added: UdevLog.txt https://bugs.launchpad.net/bugs/1216444/+attachment/3787265/+files/UdevLog.txt ** Changed in: linux (Ubuntu) Status: Incomplete = Confirmed -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1216444 Title: Vhost-net made unstable by linux_3.8.0-28.41 Status in “linux” package in Ubuntu: Confirmed Bug description: On multiple machines with vm's using vhost-net this bug takes out the guest network interface under load. The vm is only able to see broadcast traffic after this happens. Started happening immediately after upgrading from linux-image-3.8.0-27-generic to linux- image-3.8.0-29-generic. This changelog entry from linux_3.8.0-28.41 seems particularly relevant: * vhost-net: fix use-after-free in vhost_net_flush - LP: #1202992 - CVE-2013-4127 Also seems to be giving the fedora folks fits as well: https://bugzilla.redhat.com/show_bug.cgi?id=975065 Aug 24 20:00:55 gwbvm4 kernel: [277318.536525] BUG: unable to handle kernel NULL pointer dereference at 01ea Aug 24 20:00:55 gwbvm4 kernel: [277318.537027] IP: [8113c1a5] put_page+0x5/0x40 Aug 24 20:00:55 gwbvm4 kernel: [277318.537359] PGD 0 Aug 24 20:00:55 gwbvm4 kernel: [277318.537505] Oops: [#1] SMP Aug 24 20:00:55 gwbvm4 kernel: [277318.537716] Modules linked in: xt_recent(F) nfnetlink_log(F) nfnetlink(F) vhost_net macvtap(F) macvlan(F) brcompat(OF) openvswitch(OF) mptctl(F) mptbase(F) ipmi_devintf ipmi_si ipmi_msghandler ebtable_nat(F) ebtables(F) ipt_MASQUERADE(F) iptable_nat(F) nf_nat_ipv4(F) xt_CHECKSUM(F) iptable_mangle(F) ib_iser rdma_cm ib_addr iw_cm ib_cm ib_sa ib_mad ib_core iscsi_tcp(F) libiscsi_tcp(F) libiscsi(F) scsi_transport_iscsi(F) stp(F) llc(F) ip6t_REJECT(F) xt_hl(F) ip6t_rt(F) nf_conntrack_ipv6(F) nf_defrag_ipv6(F) ipt_REJECT(F) xt_comment(F) xt_limit(F) xt_tcpudp(F) vesafb(F) xt_addrtype(F) nf_conntrack_ipv4(F) nf_defrag_ipv4(F) xt_state(F) ip6table_filter(F) ip6_tables(F) nf_conntrack_netbios_ns(F) nf_conntrack_broadcast(F) nf_nat_ftp(F) nf_nat(F) nf_conntrack_ftp(F) nf_conntrack(F) iptable_filter(F) ip_tables(F) coretemp x_tables(F) kvm_intel kvm ghash_clmulni_intel(F) aesni_intel(F) aes_x86_64(F) xts(F) lrw(F) gf128mul(F) ablk_helper(F) cryptd(F) gpio_ich lpc_ich microcode(F) serio_r Aug 24 20:00:55 gwbvm4 kernel: aw(F) i7core_edac mac_hid edac_core lp(F) parport(F) btrfs(F) zlib_deflate(F) libcrc32c(F) ahci(F) libahci(F) igb cxgb3 dca ptp hpsa mdio pps_core [last unloaded: bridge] Aug 24 20:00:55 gwbvm4 kernel: [277318.544745] CPU 0 Aug 24 20:00:55 gwbvm4 kernel: [277318.544866] Pid: 5489, comm: vhost-5488 Tainted: GF IO 3.8.0-29-generic #42-Ubuntu HP ProLiant DL160 G6 Aug 24 20:00:55 gwbvm4 kernel: [277318.545560] RIP: 0010:[8113c1a5] [8113c1a5] put_page+0x5/0x40 Aug 24 20:00:55 gwbvm4 kernel: [277318.546034] RSP: 0018:8817ccbc1c78 EFLAGS: 00010202 Aug 24 20:00:55 gwbvm4 kernel: [277318.546356] RAX: 8809728a1ac0 RBX: 0012 RCX: 8809728a1ac0 Aug 24 20:00:55 gwbvm4 kernel: [277318.569029] RDX: 0140 RSI: 8809728a1ac0 RDI: 01ea Aug 24 20:00:55 gwbvm4 kernel: [277318.592195] RBP: 8817ccbc1c90 R08: 880970704518 R09: 0010 Aug 24 20:00:55 gwbvm4 kernel: [277318.615537] R10: 0001 R11: 0007 R12: 881645ca5100 Aug 24 20:00:55 gwbvm4 kernel: [277318.639881] R13: 814dfa35 R14: 000c R15: 881645ca5100 Aug 24 20:00:55 gwbvm4 kernel: [277318.664386] FS: () GS:880c0fc0() knlGS: Aug 24 20:00:55 gwbvm4 kernel: [277318.689030] CS: 0010 DS: ES: CR0: 8005003b Aug 24 20:00:55 gwbvm4 kernel: [277318.701226] CR2: 01ea CR3: 00069ca0b000 CR4: 27e0 Aug 24 20:00:55 gwbvm4 kernel: [277318.725240] DR0: DR1: DR2: Aug 24 20:00:55 gwbvm4 kernel: [277318.749120] DR3: DR6: 0ff0 DR7: 0400 Aug 24 20:00:55 gwbvm4 kernel: [277318.773018] Process vhost-5488 (pid: 5489, threadinfo 8817ccbc, task 8817f6a8) Aug 24 20:00:55 gwbvm4 kernel: [277318.796899] Stack: Aug 24 20:00:55 gwbvm4 kernel: [277318.808406] 815bcebf 881645ca5100 881645ca5100 8817ccbc1ca8 Aug 24 20:00:55 gwbvm4 kernel: [277318.831675] 815bcf5a 8809707043d8 8817ccbc1cd0 815bd012 Aug 24 20:00:55 gwbvm4 kernel: [277318.81] 8809707043d8 f4ee 880a2c048800 8817ccbc1d58 Aug 24 20:00:55 gwbvm4 kernel: [277318.879408] Call Trace: Aug 24 20:00:55 gwbvm4 kernel: [277318.891138] [815bcebf] ? skb_release_data+0x8f/0x110 Aug 24 20:00:55 gwbvm4 kernel: [277318.903096]
[Kernel-packages] [Bug 1216444] ProcModules.txt
apport information ** Attachment added: ProcModules.txt https://bugs.launchpad.net/bugs/1216444/+attachment/3787263/+files/ProcModules.txt -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1216444 Title: Vhost-net made unstable by linux_3.8.0-28.41 Status in “linux” package in Ubuntu: Confirmed Bug description: On multiple machines with vm's using vhost-net this bug takes out the guest network interface under load. The vm is only able to see broadcast traffic after this happens. Started happening immediately after upgrading from linux-image-3.8.0-27-generic to linux- image-3.8.0-29-generic. This changelog entry from linux_3.8.0-28.41 seems particularly relevant: * vhost-net: fix use-after-free in vhost_net_flush - LP: #1202992 - CVE-2013-4127 Also seems to be giving the fedora folks fits as well: https://bugzilla.redhat.com/show_bug.cgi?id=975065 Aug 24 20:00:55 gwbvm4 kernel: [277318.536525] BUG: unable to handle kernel NULL pointer dereference at 01ea Aug 24 20:00:55 gwbvm4 kernel: [277318.537027] IP: [8113c1a5] put_page+0x5/0x40 Aug 24 20:00:55 gwbvm4 kernel: [277318.537359] PGD 0 Aug 24 20:00:55 gwbvm4 kernel: [277318.537505] Oops: [#1] SMP Aug 24 20:00:55 gwbvm4 kernel: [277318.537716] Modules linked in: xt_recent(F) nfnetlink_log(F) nfnetlink(F) vhost_net macvtap(F) macvlan(F) brcompat(OF) openvswitch(OF) mptctl(F) mptbase(F) ipmi_devintf ipmi_si ipmi_msghandler ebtable_nat(F) ebtables(F) ipt_MASQUERADE(F) iptable_nat(F) nf_nat_ipv4(F) xt_CHECKSUM(F) iptable_mangle(F) ib_iser rdma_cm ib_addr iw_cm ib_cm ib_sa ib_mad ib_core iscsi_tcp(F) libiscsi_tcp(F) libiscsi(F) scsi_transport_iscsi(F) stp(F) llc(F) ip6t_REJECT(F) xt_hl(F) ip6t_rt(F) nf_conntrack_ipv6(F) nf_defrag_ipv6(F) ipt_REJECT(F) xt_comment(F) xt_limit(F) xt_tcpudp(F) vesafb(F) xt_addrtype(F) nf_conntrack_ipv4(F) nf_defrag_ipv4(F) xt_state(F) ip6table_filter(F) ip6_tables(F) nf_conntrack_netbios_ns(F) nf_conntrack_broadcast(F) nf_nat_ftp(F) nf_nat(F) nf_conntrack_ftp(F) nf_conntrack(F) iptable_filter(F) ip_tables(F) coretemp x_tables(F) kvm_intel kvm ghash_clmulni_intel(F) aesni_intel(F) aes_x86_64(F) xts(F) lrw(F) gf128mul(F) ablk_helper(F) cryptd(F) gpio_ich lpc_ich microcode(F) serio_r Aug 24 20:00:55 gwbvm4 kernel: aw(F) i7core_edac mac_hid edac_core lp(F) parport(F) btrfs(F) zlib_deflate(F) libcrc32c(F) ahci(F) libahci(F) igb cxgb3 dca ptp hpsa mdio pps_core [last unloaded: bridge] Aug 24 20:00:55 gwbvm4 kernel: [277318.544745] CPU 0 Aug 24 20:00:55 gwbvm4 kernel: [277318.544866] Pid: 5489, comm: vhost-5488 Tainted: GF IO 3.8.0-29-generic #42-Ubuntu HP ProLiant DL160 G6 Aug 24 20:00:55 gwbvm4 kernel: [277318.545560] RIP: 0010:[8113c1a5] [8113c1a5] put_page+0x5/0x40 Aug 24 20:00:55 gwbvm4 kernel: [277318.546034] RSP: 0018:8817ccbc1c78 EFLAGS: 00010202 Aug 24 20:00:55 gwbvm4 kernel: [277318.546356] RAX: 8809728a1ac0 RBX: 0012 RCX: 8809728a1ac0 Aug 24 20:00:55 gwbvm4 kernel: [277318.569029] RDX: 0140 RSI: 8809728a1ac0 RDI: 01ea Aug 24 20:00:55 gwbvm4 kernel: [277318.592195] RBP: 8817ccbc1c90 R08: 880970704518 R09: 0010 Aug 24 20:00:55 gwbvm4 kernel: [277318.615537] R10: 0001 R11: 0007 R12: 881645ca5100 Aug 24 20:00:55 gwbvm4 kernel: [277318.639881] R13: 814dfa35 R14: 000c R15: 881645ca5100 Aug 24 20:00:55 gwbvm4 kernel: [277318.664386] FS: () GS:880c0fc0() knlGS: Aug 24 20:00:55 gwbvm4 kernel: [277318.689030] CS: 0010 DS: ES: CR0: 8005003b Aug 24 20:00:55 gwbvm4 kernel: [277318.701226] CR2: 01ea CR3: 00069ca0b000 CR4: 27e0 Aug 24 20:00:55 gwbvm4 kernel: [277318.725240] DR0: DR1: DR2: Aug 24 20:00:55 gwbvm4 kernel: [277318.749120] DR3: DR6: 0ff0 DR7: 0400 Aug 24 20:00:55 gwbvm4 kernel: [277318.773018] Process vhost-5488 (pid: 5489, threadinfo 8817ccbc, task 8817f6a8) Aug 24 20:00:55 gwbvm4 kernel: [277318.796899] Stack: Aug 24 20:00:55 gwbvm4 kernel: [277318.808406] 815bcebf 881645ca5100 881645ca5100 8817ccbc1ca8 Aug 24 20:00:55 gwbvm4 kernel: [277318.831675] 815bcf5a 8809707043d8 8817ccbc1cd0 815bd012 Aug 24 20:00:55 gwbvm4 kernel: [277318.81] 8809707043d8 f4ee 880a2c048800 8817ccbc1d58 Aug 24 20:00:55 gwbvm4 kernel: [277318.879408] Call Trace: Aug 24 20:00:55 gwbvm4 kernel: [277318.891138] [815bcebf] ? skb_release_data+0x8f/0x110 Aug 24 20:00:55 gwbvm4 kernel: [277318.903096] [815bcf5a] __kfree_skb+0x1a/0xa0 Aug 24 20:00:55
[Kernel-packages] [Bug 1216444] Re: Vhost-net made unstable by linux_3.8.0-28.41
** Attachment added: lspci-vnvn.log https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1216444/+attachment/3786561/+files/lspci-vnvn.log -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1216444 Title: Vhost-net made unstable by linux_3.8.0-28.41 Status in “linux” package in Ubuntu: New Bug description: On multiple machines with vm's using vhost-net this bug takes out the guest network interface under load. The vm is only able to see broadcast traffic after this happens. Started happening immediately after upgrading from linux-image-3.8.0-27-generic to linux- image-3.8.0-29-generic. This changelog entry from linux_3.8.0-28.41 seems particularly relevant: * vhost-net: fix use-after-free in vhost_net_flush - LP: #1202992 - CVE-2013-4127 Also seems to be giving the fedora folks fits as well: https://bugzilla.redhat.com/show_bug.cgi?id=975065 Aug 24 20:00:55 gwbvm4 kernel: [277318.536525] BUG: unable to handle kernel NULL pointer dereference at 01ea Aug 24 20:00:55 gwbvm4 kernel: [277318.537027] IP: [8113c1a5] put_page+0x5/0x40 Aug 24 20:00:55 gwbvm4 kernel: [277318.537359] PGD 0 Aug 24 20:00:55 gwbvm4 kernel: [277318.537505] Oops: [#1] SMP Aug 24 20:00:55 gwbvm4 kernel: [277318.537716] Modules linked in: xt_recent(F) nfnetlink_log(F) nfnetlink(F) vhost_net macvtap(F) macvlan(F) brcompat(OF) openvswitch(OF) mptctl(F) mptbase(F) ipmi_devintf ipmi_si ipmi_msghandler ebtable_nat(F) ebtables(F) ipt_MASQUERADE(F) iptable_nat(F) nf_nat_ipv4(F) xt_CHECKSUM(F) iptable_mangle(F) ib_iser rdma_cm ib_addr iw_cm ib_cm ib_sa ib_mad ib_core iscsi_tcp(F) libiscsi_tcp(F) libiscsi(F) scsi_transport_iscsi(F) stp(F) llc(F) ip6t_REJECT(F) xt_hl(F) ip6t_rt(F) nf_conntrack_ipv6(F) nf_defrag_ipv6(F) ipt_REJECT(F) xt_comment(F) xt_limit(F) xt_tcpudp(F) vesafb(F) xt_addrtype(F) nf_conntrack_ipv4(F) nf_defrag_ipv4(F) xt_state(F) ip6table_filter(F) ip6_tables(F) nf_conntrack_netbios_ns(F) nf_conntrack_broadcast(F) nf_nat_ftp(F) nf_nat(F) nf_conntrack_ftp(F) nf_conntrack(F) iptable_filter(F) ip_tables(F) coretemp x_tables(F) kvm_intel kvm ghash_clmulni_intel(F) aesni_intel(F) aes_x86_64(F) xts(F) lrw(F) gf128mul(F) ablk_helper(F) cryptd(F) gpio_ich lpc_ich microcode(F) serio_r Aug 24 20:00:55 gwbvm4 kernel: aw(F) i7core_edac mac_hid edac_core lp(F) parport(F) btrfs(F) zlib_deflate(F) libcrc32c(F) ahci(F) libahci(F) igb cxgb3 dca ptp hpsa mdio pps_core [last unloaded: bridge] Aug 24 20:00:55 gwbvm4 kernel: [277318.544745] CPU 0 Aug 24 20:00:55 gwbvm4 kernel: [277318.544866] Pid: 5489, comm: vhost-5488 Tainted: GF IO 3.8.0-29-generic #42-Ubuntu HP ProLiant DL160 G6 Aug 24 20:00:55 gwbvm4 kernel: [277318.545560] RIP: 0010:[8113c1a5] [8113c1a5] put_page+0x5/0x40 Aug 24 20:00:55 gwbvm4 kernel: [277318.546034] RSP: 0018:8817ccbc1c78 EFLAGS: 00010202 Aug 24 20:00:55 gwbvm4 kernel: [277318.546356] RAX: 8809728a1ac0 RBX: 0012 RCX: 8809728a1ac0 Aug 24 20:00:55 gwbvm4 kernel: [277318.569029] RDX: 0140 RSI: 8809728a1ac0 RDI: 01ea Aug 24 20:00:55 gwbvm4 kernel: [277318.592195] RBP: 8817ccbc1c90 R08: 880970704518 R09: 0010 Aug 24 20:00:55 gwbvm4 kernel: [277318.615537] R10: 0001 R11: 0007 R12: 881645ca5100 Aug 24 20:00:55 gwbvm4 kernel: [277318.639881] R13: 814dfa35 R14: 000c R15: 881645ca5100 Aug 24 20:00:55 gwbvm4 kernel: [277318.664386] FS: () GS:880c0fc0() knlGS: Aug 24 20:00:55 gwbvm4 kernel: [277318.689030] CS: 0010 DS: ES: CR0: 8005003b Aug 24 20:00:55 gwbvm4 kernel: [277318.701226] CR2: 01ea CR3: 00069ca0b000 CR4: 27e0 Aug 24 20:00:55 gwbvm4 kernel: [277318.725240] DR0: DR1: DR2: Aug 24 20:00:55 gwbvm4 kernel: [277318.749120] DR3: DR6: 0ff0 DR7: 0400 Aug 24 20:00:55 gwbvm4 kernel: [277318.773018] Process vhost-5488 (pid: 5489, threadinfo 8817ccbc, task 8817f6a8) Aug 24 20:00:55 gwbvm4 kernel: [277318.796899] Stack: Aug 24 20:00:55 gwbvm4 kernel: [277318.808406] 815bcebf 881645ca5100 881645ca5100 8817ccbc1ca8 Aug 24 20:00:55 gwbvm4 kernel: [277318.831675] 815bcf5a 8809707043d8 8817ccbc1cd0 815bd012 Aug 24 20:00:55 gwbvm4 kernel: [277318.81] 8809707043d8 f4ee 880a2c048800 8817ccbc1d58 Aug 24 20:00:55 gwbvm4 kernel: [277318.879408] Call Trace: Aug 24 20:00:55 gwbvm4 kernel: [277318.891138] [815bcebf] ? skb_release_data+0x8f/0x110 Aug 24 20:00:55 gwbvm4 kernel: [277318.903096] [815bcf5a] __kfree_skb+0x1a/0xa0 Aug 24 20:00:55 gwbvm4
[Kernel-packages] [Bug 1216444] [NEW] Vhost-net made unstable by linux_3.8.0-28.41
Public bug reported: On multiple machines with vm's using vhost-net this bug takes out the guest network interface under load. The vm is only able to see broadcast traffic after this happens. Started happening immediately after upgrading from linux-image-3.8.0-27-generic to linux- image-3.8.0-29-generic. This changelog entry from linux_3.8.0-28.41 seems particularly relevant: * vhost-net: fix use-after-free in vhost_net_flush - LP: #1202992 - CVE-2013-4127 Also seems to be giving the fedora folks fits as well: https://bugzilla.redhat.com/show_bug.cgi?id=975065 Aug 24 20:00:55 gwbvm4 kernel: [277318.536525] BUG: unable to handle kernel NULL pointer dereference at 01ea Aug 24 20:00:55 gwbvm4 kernel: [277318.537027] IP: [8113c1a5] put_page+0x5/0x40 Aug 24 20:00:55 gwbvm4 kernel: [277318.537359] PGD 0 Aug 24 20:00:55 gwbvm4 kernel: [277318.537505] Oops: [#1] SMP Aug 24 20:00:55 gwbvm4 kernel: [277318.537716] Modules linked in: xt_recent(F) nfnetlink_log(F) nfnetlink(F) vhost_net macvtap(F) macvlan(F) brcompat(OF) openvswitch(OF) mptctl(F) mptbase(F) ipmi_devintf ipmi_si ipmi_msghandler ebtable_nat(F) ebtables(F) ipt_MASQUERADE(F) iptable_nat(F) nf_nat_ipv4(F) xt_CHECKSUM(F) iptable_mangle(F) ib_iser rdma_cm ib_addr iw_cm ib_cm ib_sa ib_mad ib_core iscsi_tcp(F) libiscsi_tcp(F) libiscsi(F) scsi_transport_iscsi(F) stp(F) llc(F) ip6t_REJECT(F) xt_hl(F) ip6t_rt(F) nf_conntrack_ipv6(F) nf_defrag_ipv6(F) ipt_REJECT(F) xt_comment(F) xt_limit(F) xt_tcpudp(F) vesafb(F) xt_addrtype(F) nf_conntrack_ipv4(F) nf_defrag_ipv4(F) xt_state(F) ip6table_filter(F) ip6_tables(F) nf_conntrack_netbios_ns(F) nf_conntrack_broadcast(F) nf_nat_ftp(F) nf_nat(F) nf_conntrack_ftp(F) nf_conntrack(F) iptable_filter(F) ip_tables(F) coretemp x_tables(F) kvm_intel kvm ghash_clmulni_intel(F) aesni_intel(F) aes_x86_64(F) xts(F) lrw(F) gf128mul(F) ablk_helper(F) cryptd(F) gpio_ich lpc_ich microcode(F) serio_r Aug 24 20:00:55 gwbvm4 kernel: aw(F) i7core_edac mac_hid edac_core lp(F) parport(F) btrfs(F) zlib_deflate(F) libcrc32c(F) ahci(F) libahci(F) igb cxgb3 dca ptp hpsa mdio pps_core [last unloaded: bridge] Aug 24 20:00:55 gwbvm4 kernel: [277318.544745] CPU 0 Aug 24 20:00:55 gwbvm4 kernel: [277318.544866] Pid: 5489, comm: vhost-5488 Tainted: GF IO 3.8.0-29-generic #42-Ubuntu HP ProLiant DL160 G6 Aug 24 20:00:55 gwbvm4 kernel: [277318.545560] RIP: 0010:[8113c1a5] [8113c1a5] put_page+0x5/0x40 Aug 24 20:00:55 gwbvm4 kernel: [277318.546034] RSP: 0018:8817ccbc1c78 EFLAGS: 00010202 Aug 24 20:00:55 gwbvm4 kernel: [277318.546356] RAX: 8809728a1ac0 RBX: 0012 RCX: 8809728a1ac0 Aug 24 20:00:55 gwbvm4 kernel: [277318.569029] RDX: 0140 RSI: 8809728a1ac0 RDI: 01ea Aug 24 20:00:55 gwbvm4 kernel: [277318.592195] RBP: 8817ccbc1c90 R08: 880970704518 R09: 0010 Aug 24 20:00:55 gwbvm4 kernel: [277318.615537] R10: 0001 R11: 0007 R12: 881645ca5100 Aug 24 20:00:55 gwbvm4 kernel: [277318.639881] R13: 814dfa35 R14: 000c R15: 881645ca5100 Aug 24 20:00:55 gwbvm4 kernel: [277318.664386] FS: () GS:880c0fc0() knlGS: Aug 24 20:00:55 gwbvm4 kernel: [277318.689030] CS: 0010 DS: ES: CR0: 8005003b Aug 24 20:00:55 gwbvm4 kernel: [277318.701226] CR2: 01ea CR3: 00069ca0b000 CR4: 27e0 Aug 24 20:00:55 gwbvm4 kernel: [277318.725240] DR0: DR1: DR2: Aug 24 20:00:55 gwbvm4 kernel: [277318.749120] DR3: DR6: 0ff0 DR7: 0400 Aug 24 20:00:55 gwbvm4 kernel: [277318.773018] Process vhost-5488 (pid: 5489, threadinfo 8817ccbc, task 8817f6a8) Aug 24 20:00:55 gwbvm4 kernel: [277318.796899] Stack: Aug 24 20:00:55 gwbvm4 kernel: [277318.808406] 815bcebf 881645ca5100 881645ca5100 8817ccbc1ca8 Aug 24 20:00:55 gwbvm4 kernel: [277318.831675] 815bcf5a 8809707043d8 8817ccbc1cd0 815bd012 Aug 24 20:00:55 gwbvm4 kernel: [277318.81] 8809707043d8 f4ee 880a2c048800 8817ccbc1d58 Aug 24 20:00:55 gwbvm4 kernel: [277318.879408] Call Trace: Aug 24 20:00:55 gwbvm4 kernel: [277318.891138] [815bcebf] ? skb_release_data+0x8f/0x110 Aug 24 20:00:55 gwbvm4 kernel: [277318.903096] [815bcf5a] __kfree_skb+0x1a/0xa0 Aug 24 20:00:55 gwbvm4 kernel: [277318.914622] [815bd012] kfree_skb+0x32/0x90 Aug 24 20:00:55 gwbvm4 kernel: [277318.925947] [814dfa35] tun_get_user+0x5f5/0x720 Aug 24 20:00:55 gwbvm4 kernel: [277318.937089] [814dfbb7] tun_sendmsg+0x57/0x80 Aug 24 20:00:55 gwbvm4 kernel: [277318.947987] [a0435656] handle_tx+0x266/0x580 [vhost_net] Aug 24 20:00:55 gwbvm4 kernel: [277318.958700] [a04359a5] handle_tx_kick+0x15/0x20 [vhost_net] Aug 24 20:00:55 gwbvm4 kernel:
