| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <20140827121559.GA14286@sucs.org> Date: Wed, 27 Aug 2014 13:15:59 +0100 From: Sitsofe Wheeler <sitsofe@...il.com> To: Dexuan Cui <decui@...rosoft.com> Cc: KY Srinivasan <kys@...rosoft.com>, Greg Kroah-Hartman <gregkh@...uxfoundation.org>, Haiyang Zhang <haiyangz@...rosoft.com>, "devel@...uxdriverproject.org" <devel@...uxdriverproject.org>, "linux-kernel@...r.kernel.org" <linux-kernel@...r.kernel.org> Subject: Re: [PANIC, hyperv] BUG: unable to handle kernel paging request at ffff880077800004 (hv_ringbuffer_write) On Wed, Aug 27, 2014 at 11:30:54AM +0000, Dexuan Cui wrote: > > -----Original Message----- > > From: Sitsofe Wheeler > > On Tue, Aug 26, 2014 at 10:30:54AM +0000, Dexuan Cui wrote: > > > > > Actually I found the direct cause of the panic: sometimes > > > vmbus_post_msg() can return 4 (HV_STATUS_INVALID_ALIGNMENT), but > > > vmbus_open() doesn't propagate this error to the caller > > > synthvid_connect_vsp(), and vmbus_open() " goto error1" and frees the > > > ringbuffer! So later the access to ring_buffer->read_index is caught > > > by CONFIG_DEBUG_PAGEALLOC. > > > > > > I don't see any "invalid alignment" here... and I can't explain why > > > vcpus=4 seems OK... Debugging WIP. > I think I found out why we got HV_STATUS_INVALID_ALIGNMENT: > according to Hypervisor Top Level Functional Specification(available at > http://blogs.msdn.com/b/virtual_pc_guy/archive/2014/02/17/updated-hypervisor-top-level-functional-specification.aspx), That document is massive! > do_hypercall() fails due to HV_STATUS_INVALID_ALIGNMENT, if "the > specified input or output GPA pointer is not aligned to 8 bytes", > or, "the specified input or output parameter lists spans pages". > Here the 'input' can rarely across the page boundary, especially when > CONFIG_DEBUG_PAGEALLOC is on. It can also be returned when "The input or output GPA pointer is not within the bounds of the GPA space." but I'm guessing that's not the case here? > I'm making a patch for this. Thanks! Could these alignment problems have been the cause of all sorts of intermittent errors like https://lkml.org/lkml/2014/7/11/870 (which was caused by support being added for a bigger receive buffer)? > > I rebased your patch on top of the K.Y.'s "Drivers: hv: vmbus: Eliminate > > calls to BUG_ON()" patch set (see below). The combination no longer > > triggers the bug and it doesn't take too long to boot but the network > > interface fails to work (which I believe is . > the sentence is accidently trimmed here? :-) *Cough* That bit in brackets shouldn't be there. I've been unable to link that stacktrace to an existing issue (I thought it might have been https://lkml.org/lkml/2014/8/19/227 but that seems unlikely). > > Rebased vmbus open fixes patch. > The patch doesn't resolve all the issues. OK. > > Boot dmesg output (there's no line that mentions retries). The > > framebuffer window also didn't resize itself: > > > > [ 7.848030] hv_vmbus: registering driver hyperv_fb > > [ 7.859759] hyperv_fb: Unable to open vmbus channel > > [ 7.871812] hyperv_fb: Unable to connect to VSP > We still see hyperv_fb can't work. How come things didn't work even though the retries message (which is presumably printed if we exceed 10 attempts) was never printed? -- Sitsofe | http://sucs.org/~sits/ -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@...r.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
Powered by blists - more mailing lists