kernel-packages team mailing list archive

Thread
Date
[Bug 1448269] Re: qemu guest hangs on nested kvm startup with host kernel oops

To: kernel-packages@xxxxxxxxxxxxxxxxxxx
From: Launchpad Bug Tracker <1448269@xxxxxxxxxxxxxxxxxx>
Date: Wed, 22 Jul 2015 15:40:36 -0000
Reply-to: Bug 1448269 <1448269@xxxxxxxxxxxxxxxxxx>
Sender: bounces@xxxxxxxxxxxxx
This bug was fixed in the package linux - 3.16.0-44.59

---------------
linux (3.16.0-44.59) utopic; urgency=low

  [ Brad Figg ]

  * Release Tracking Bug
    - LP: #1472030

  [ Iyappan Subramanian ]

  * SAUCE: (no-up) drivers: net: xgene: fix: Out of order descriptor bytes
    read
    - LP: #1425576

  [ Upstream Kernel Changes ]

  * Revert "tools/vm: fix page-flags build"
    - LP: #1471170
  * NVMe: Add shutdown timeout as module parameter.
    - LP: #1465136
  * Drivers: hv: vmbus: Add support for VMBus panic notifier handler
    - LP: #1463584
  * Drivers: hv: vmbus: Correcting truncation error for constant
    HV_CRASH_CTL_CRASH_NOTIFY
    - LP: #1463584
  * KVM: nVMX: fix lifetime issues for vmcs02
    - LP: #1448269
  * KVM: nVMX: Fix nested vmexit ack intr before load vmcs01
    - LP: #1448269
  * mm/slab_common: support the slub_debug boot option on specific object
    size
    - LP: #1456952
  * kvm: x86: fix kvm_apic_has_events to check for NULL pointer
  * cpuidle: powernv: Populate cpuidle state details by querying the
    device-tree
    - LP: #1470404
  * cpuidle: powernv: Read target_residency value of idle states from DT if
    available
    - LP: #1470404
  * cpuidle: powernv: Avoid endianness conversions while parsing DT
    - LP: #1470404
  * cpuidle: powernv/pseries: Auto-promotion of snooze to deeper idle state
    - LP: #1470404
  * iio: adis16400: Report pressure channel scale
    - LP: #1471170
  * iio: adis16400: Use != channel indices for the two voltage channels
    - LP: #1471170
  * iio: adis16400: Compute the scan mask from channel indices
    - LP: #1471170
  * iio: adis16400: Remove unused variable
    - LP: #1471170
  * iio: adis16400: Fix burst mode
    - LP: #1471170
  * iio: adis16400: Fix burst transfer for adis16448
    - LP: #1471170
  * USB: serial: ftdi_sio: Add support for a Motion Tracker Development
    Board
    - LP: #1471170
  * iio: adc: twl6030-gpadc: Fix modalias
    - LP: #1471170
  * serial: imx: Fix DMA handling for IDLE condition aborts
    - LP: #1471170
  * usb: dwc3: gadget: Fix incorrect DEPCMD and DGCMD status macros
    - LP: #1471170
  * ALSA: usb-audio: Add mic volume fix quirk for Logitech Quickcam Fusion
    - LP: #1471170
  * n_tty: Fix auditing support for cannonical mode
    - LP: #1471170
  * drm/i915/hsw: Fix workaround for server AUX channel clock divisor
    - LP: #1471170
  * x86/asm/irq: Stop relying on magic JMP behavior for early_idt_handlers
    - LP: #1471170
  * lib: Fix strnlen_user() to not touch memory after specified maximum
    - LP: #1471170
  * Input: elantech - fix detection of touchpads where the revision matches
    a known rate
    - LP: #1471170
  * ALSA: hda/realtek - Add a fixup for another Acer Aspire 9420
    - LP: #1471170
  * ALSA: usb-audio: add MAYA44 USB+ mixer control names
    - LP: #1471170
  * ALSA: usb-audio: fix missing input volume controls in MAYA44 USB(+)
    - LP: #1471170
  * USB: cp210x: add ID for HubZ dual ZigBee and Z-Wave dongle
    - LP: #1471170
  * Input: elantech - add new icbody type
    - LP: #1471170
  * MIPS: Fix enabling of DEBUG_STACKOVERFLOW
    - LP: #1471170
  * xfrm: fix a race in xfrm_state_lookup_byspi
    - LP: #1471170
  * kconfig: Fix warning "‘jump’ may be used uninitialized"
    - LP: #1471170
  * scripts/sortextable: suppress warning: `relocs_size' may be used
    uninitialized
    - LP: #1471170
  * thermal: step_wise: Revert optimization
    - LP: #1471170
  * MIPS: KVM: Do not sign extend on unsigned MMIO load
    - LP: #1471170
  * arch/x86/kvm/mmu.c: work around gcc-4.4.4 bug
    - LP: #1471170
  * net: core: Correct an over-stringent device loop detection.
    - LP: #1471170
  * net: phy: Allow EEE for all RGMII variants
    - LP: #1471170
  * net: dp83640: fix broken calibration routine.
    - LP: #1471170
  * net: dp83640: reinforce locking rules.
    - LP: #1471170
  * unix/caif: sk_socket can disappear when state is unlocked
    - LP: #1471170
  * xen/netback: Properly initialize credit_bytes
    - LP: #1471170
  * udp: fix behavior of wrong checksums
    - LP: #1471170
  * xen: netback: read hotplug script once at start of day.
    - LP: #1471170
  * ipv4/udp: Verify multicast group is ours in upd_v4_early_demux()
    - LP: #1471170
  * bridge: disable softirqs around br_fdb_update to avoid lockup
    - LP: #1471170
  * drm/i915: Assume dual channel LVDS if pixel clock necessitates it
    - LP: #1471170
  * Btrfs: send, add missing check for dead clone root
    - LP: #1471170
  * Btrfs: send, don't leave without decrementing clone root's
    send_progress
    - LP: #1471170
  * btrfs: incorrect handling for fiemap_fill_next_extent return
    - LP: #1471170
  * btrfs: cleanup orphans while looking up default subvolume
    - LP: #1471170
  * iommu/vt-d: Allow RMRR on graphics devices too
    - LP: #1471170
  * iommu/vt-d: Fix passthrough mode with translation-disabled devices
    - LP: #1471170
  * ata: ahci_mvebu: Fix wrongly set base address for the MBus window
    setting
    - LP: #1471170
  * virtio_pci: Clear stale cpumask when setting irq affinity
    - LP: #1471170
  * irqchip: sunxi-nmi: Fix off-by-one error in irq iterator
    - LP: #1471170
  * pata_octeon_cf: fix broken build
    - LP: #1471170
  * Input: synaptics - add min/max quirk for Lenovo S540
    - LP: #1471170
  * drm/i915: Fix DDC probe for passive adapters
    - LP: #1471170
  * cfg80211: wext: clear sinfo struct before calling driver
    - LP: #1471170
  * mm/memory_hotplug.c: set zone->wait_table to null after freeing it
    - LP: #1471170
  * ring-buffer-benchmark: Fix the wrong sched_priority of producer
    - LP: #1471170
  * block: fix ext_dev_lock lockdep report
    - LP: #1471170
  * iser-target: Fix variable-length response error completion
    - LP: #1471170
  * iser-target: release stale iser connections
    - LP: #1471170
  * ALSA: hda - adding a DAC/pin preference map for a HP Envy TS machine
    - LP: #1471170
  * drm/mgag200: Reject non-character-cell-aligned mode widths
    - LP: #1471170
  * crypto: caam - fix uninitialized state->buf_dma field
    - LP: #1471170
  * crypto: caam - improve initalization for context state saves
    - LP: #1471170
  * crypto: caam - fix RNG buffer cache alignment
    - LP: #1471170
  * tracing: Have filter check for balanced ops
    - LP: #1471170
  * drm/radeon: fix freeze for laptop with Turks/Thames GPU.
    - LP: #1471170
  * Linux 3.16.7-ckt14
    - LP: #1471170

 -- Brad Figg <brad.figg@xxxxxxxxxxxxx>  Mon, 06 Jul 2015 17:48:28 -0700

** Changed in: linux (Ubuntu Utopic)
       Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1448269

Title:
  qemu guest hangs on nested kvm startup with host kernel oops

Status in linux package in Ubuntu:
  Fix Released
Status in linux source package in Utopic:
  Fix Released

Bug description:
  [Impact]
  Users of nested KVM may experience the L1 VM hanging when booting an L2 VM. Overall this seems to be due to issues with external interrupts not reaching L1 when L2 gets booted.

  [Test Case]
  Run a nested KVM instance:
  https://gist.github.com/arges/9d21c6da03a8c10d3980

  [Fix]
  commit 4fa7734c62cdd8c07edd54fa5a5e91482273071a
  commit f3380ca5d7edb5e31932998ab2e29dfdce39c5ed

  --

  I'm creating a vivid qemu guest on a trusty host with
  3.13.0-48-generic kernel.  When I start a guest inside that guest, I
  get the oops below on the host while the first guest hangs and must be
  (virsh) destroyed.

  Apr 24 20:40:08 sergeh2 kernel: [1575627.844208] ------------[ cut here ]------------
  Apr 24 20:40:08 sergeh2 kernel: [1575627.844227] WARNING: CPU: 2 PID: 17176 at /build/buildd/linux-3.13.0/arch/x86/kvm/vmx.c:8414 nested_vmx_vmexit+0x11c/0x150 [kvm_intel]()
  Apr 24 20:40:08 sergeh2 kernel: [1575627.844229] Modules linked in: vhost_net vhost macvtap macvlan xts gf128mul xt_conntrack ipt_REJECT ip6table_filter ip6_tables ebtable_nat ebtables veth xt_nat xt_CHECKSUM iptable_mangle ipt_MASQUERADE
  iptable_nat nf_conntrack_ipv4 nf_defrag_ipv4 nf_nat_ipv4 nf_nat nf_conntrack xt_tcpudp bridge stp llc iptable_filter ip_tables x_tables dm_crypt gpio_ich coretemp kvm_intel kvm i7core_edac edac_core lpc_ich shpchp mac_hid serio_raw lp parp
  ort btrfs libcrc32c raid10 raid456 async_raid6_recov async_memcpy async_pq async_xor async_tx xor raid6_pq raid0 multipath linear dm_snapshot raid1 nouveau mxm_wmi video i2c_algo_bit ttm drm_kms_helper drm ahci r8169 libahci mii wmi
  Apr 24 20:40:08 sergeh2 kernel: [1575627.844281] CPU: 2 PID: 17176 Comm: qemu-system-x86 Not tainted 3.13.0-48-generic #80-Ubuntu
  Apr 24 20:40:08 sergeh2 kernel: [1575627.844283] Hardware name: MSI MS-7522/MSI X58 Pro (MS-7522)  , BIOS V8.14B8 11/09/2012
  Apr 24 20:40:08 sergeh2 kernel: [1575627.844286]  0000000000000009 ffff880907561c98 ffffffff81721506 0000000000000000
  Apr 24 20:40:08 sergeh2 kernel: [1575627.844290]  ffff880907561cd0 ffffffff810677dd ffff880bfa808000 0000000000000014
  Apr 24 20:40:08 sergeh2 kernel: [1575627.844293]  ffff8806da7a7000 ffff880bfca9c800 0000000000000000 ffff880907561ce0
  Apr 24 20:40:08 sergeh2 kernel: [1575627.844297] Call Trace:
  Apr 24 20:40:08 sergeh2 kernel: [1575627.844305]  [<ffffffff81721506>] dump_stack+0x45/0x56
  Apr 24 20:40:08 sergeh2 kernel: [1575627.844310]  [<ffffffff810677dd>] warn_slowpath_common+0x7d/0xa0
  Apr 24 20:40:08 sergeh2 kernel: [1575627.844314]  [<ffffffff810678ba>] warn_slowpath_null+0x1a/0x20
  Apr 24 20:40:08 sergeh2 kernel: [1575627.844321]  [<ffffffffa081f8ec>] nested_vmx_vmexit+0x11c/0x150 [kvm_intel]
  Apr 24 20:40:08 sergeh2 kernel: [1575627.844327]  [<ffffffffa081fafd>] vmx_queue_exception+0xfd/0x140 [kvm_intel]
  Apr 24 20:40:08 sergeh2 kernel: [1575627.844347]  [<ffffffffa03b7020>] vcpu_enter_guest+0x9f0/0xce0 [kvm]
  Apr 24 20:40:08 sergeh2 kernel: [1575627.844364]  [<ffffffffa03bb2d8>] kvm_arch_vcpu_ioctl_run+0x1e8/0x460 [kvm]
  Apr 24 20:40:08 sergeh2 kernel: [1575627.844376]  [<ffffffffa03a5042>] kvm_vcpu_ioctl+0x2a2/0x5e0 [kvm]
  Apr 24 20:40:08 sergeh2 kernel: [1575627.844381]  [<ffffffff810aaa38>] ? __wake_up_common+0x58/0x90
  Apr 24 20:40:08 sergeh2 kernel: [1575627.844387]  [<ffffffff811ffc91>] ? fsnotify+0x241/0x320
  Apr 24 20:40:08 sergeh2 kernel: [1575627.844391]  [<ffffffff811d11c0>] do_vfs_ioctl+0x2e0/0x4c0
  Apr 24 20:40:08 sergeh2 kernel: [1575627.844406]  [<ffffffffa03b0504>] ? kvm_on_user_return+0x74/0x80 [kvm]
  Apr 24 20:40:08 sergeh2 kernel: [1575627.844409]  [<ffffffff811d1421>] SyS_ioctl+0x81/0xa0
  Apr 24 20:40:08 sergeh2 kernel: [1575627.844414]  [<ffffffff81731fbd>] system_call_fastpath+0x1a/0x1f
  Apr 24 20:40:08 sergeh2 kernel: [1575627.844416] ---[ end trace 351396e62b6ef224 ]---
  Apr 24 20:48:29 sergeh2 dnsmasq-dhcp[1409]: DHCPREQUEST(lxcbr0) 10.0.3.104 00:16:3e:72:73:32

  ProblemType: Bug
  DistroRelease: Ubuntu 14.04
  Package: linux-image-3.13.0-48-generic 3.13.0-48.80
  ProcVersionSignature: Ubuntu 3.13.0-48.80-generic 3.13.11-ckt16
  Uname: Linux 3.13.0-48-generic x86_64
  AlsaDevices:
   total 0
   crw-rw---- 1 root audio 116,  1 Apr 10 14:22 seq
   crw-rw---- 1 root audio 116, 33 Apr 10 14:22 timer
  AplayDevices: Error: [Errno 2] No such file or directory: 'aplay'
  ApportVersion: 2.14.1-0ubuntu3.10
  Architecture: amd64
  ArecordDevices: Error: [Errno 2] No such file or directory: 'arecord'
  AudioDevicesInUse: Error: command ['fuser', '-v', '/dev/snd/seq', '/dev/snd/timer'] failed with exit code 1:
  CRDA: Error: [Errno 2] No such file or directory: 'iw'
  CurrentDmesg: Error: command ['sh', '-c', 'dmesg | comm -13 --nocheck-order /var/log/dmesg -'] failed with exit code 1: comm: /var/log/dmesg: Permission denied
  Date: Fri Apr 24 20:59:31 2015
  IwConfig: Error: [Errno 2] No such file or directory: 'iwconfig'
  MachineType: MSI MS-7522
  PciMultimedia:

  ProcFB:

  ProcKernelCmdLine: BOOT_IMAGE=/vmlinuz-3.13.0-48-generic root=UUID=d1920c3b-419d-484b-b1f2-5cbc69ef62f5 ro nomodeset intel_pstate=enable nomdmonddf nomdmonisw
  RfKill: Error: [Errno 2] No such file or directory: 'rfkill'
  SourcePackage: linux
  UpgradeStatus: No upgrade log present (probably fresh install)
  WifiSyslog:

  dmi.bios.date: 11/09/2012
  dmi.bios.vendor: American Megatrends Inc.
  dmi.bios.version: V8.14B8
  dmi.board.asset.tag: To Be Filled By O.E.M.
  dmi.board.name: MSI X58 Pro (MS-7522)
  dmi.board.vendor: MSI
  dmi.board.version: 3.0
  dmi.chassis.asset.tag: To Be Filled By O.E.M.
  dmi.chassis.type: 3
  dmi.chassis.vendor: MICRO-STAR INTERNATIONAL CO.,LTD
  dmi.chassis.version: 3.0
  dmi.modalias: dmi:bvnAmericanMegatrendsInc.:bvrV8.14B8:bd11/09/2012:svnMSI:pnMS-7522:pvr3.0:rvnMSI:rnMSIX58Pro(MS-7522):rvr3.0:cvnMICRO-STARINTERNATIONALCO.,LTD:ct3:cvr3.0:
  dmi.product.name: MS-7522
  dmi.product.version: 3.0
  dmi.sys.vendor: MSI

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1448269/+subscriptions
References

[Bug 1448269] [NEW] qemu guest hangs on nested kvm startup with host kernel oops
From: Serge Hallyn, 2015-04-24