linux-kernel - Re: RIP: e030:move_page

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <bd659aca-e896-adf5-000e-b06d78d8e029@suse.com>
Date:   Mon, 4 Feb 2019 13:27:32 +0100
From:   Juergen Gross <jgross@...e.com>
To:     Christian Kujau <lists@...dbynature.de>,
        linux-kernel@...r.kernel.org
Cc:     Hans van Kranenburg <hans.van.kranenburg@...dix.com>,
        Stefano Stabellini <sstabellini@...nel.org>,
        Boris Ostrovsky <boris.ostrovsky@...cle.com>
Subject: Re: RIP: e030:move_page_tables+0xaa3/0xb80

On 02/02/2019 05:37, Christian Kujau wrote:
> Hi,
> 
> I'm running an Ubuntu "mainline" kernel[0] as a Xen 4.11.1 DomU (PV) and 
> ever since upgrading to Linux 5.0-rcX I get these WARNING messages shown 
> below. Going back in my logs[1] I can see that I got a similar messages 
> for v4.20 too, but with v5.0 they appear more often and upgrading from 
> v5.0-rc3 to -rc4 made it even worse, now the messages show up quickly 
> after boot and some commands (w, ps, top) become stuck and shutdown would 
> hang too.

Hmm, I suspect a new allocated page table was to be pinned but the
Hypervisor refused to do so as it already was marked as pinned.

This should normally not be able to happen. The only way I could imagine
this happened would be a missing unpin of that physical memory page when
it was freed before.

Recently there has been a rework in memory management for delayed struct
page initialization and other memory management init code. This could be
related somehow.

> I found an email thread[2] from earlier this month (hence the CC list) 
> about this, but could not find out if this issue has been concluded or 
> even fixed.

No, this is not related at all.

> I've gone back to v4.20 now and the message hasn't appeared yet, but it 
> probably will in a few days again. Let me know if you need more details, 
> v5.0-rc4 should make it easier for me to reproduce.

Thanks, I might come back to you.


Juergen

> 
> Thanks,
> Christian.
> 
> [0] https://kernel.ubuntu.com/~kernel-ppa/mainline
>     https://wiki.ubuntu.com/Kernel/MainlineBuilds
> [1] http://nerdbynature.de/bits/5.0.0-rc4/kern_msg.txt
> [2] https://www.spinics.net/lists/stable/msg279001.html
> 
> 
> WARNING: CPU: 1 PID: 386 at arch/x86/xen/multicalls.c:102 
> xen_mc_flush+0x196/0x1f0
> Modules linked in: rpcsec_gss_krb5 auth_rpcgss lz4 lz4_compress 
> crct10dif_pclmul xen_kbdfront(-) ghash_clmulni_intel xen_fbfront 
> fb_sys_fops syscopyarea sysfillrect sysimgblt aesni_intel aes_x86_64 
> crypto_simd cryptd glue_helper intel_rapl_perf sch_fq_codel 
> nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct 
> nf_conntrack zram nf_defrag_ipv6 nf_defrag_ipv4 reiserfs nfsv4 nfs 
> nf_tables_set lockd grace fscache dm_crypt sunrpc btrfs nf_tables 
> nfnetlink zstd_compress ip_tables x_tables autofs4 raid10 raid456 
> async_raid6_recov async_memcpy async_pq async_xor async_tx xor raid6_pq 
> libcrc32c raid1 raid0 multipath linear [last unloaded: mac_hid]
> CPU: 1 PID: 386 Comm: systemd-udevd Not tainted 5.0.0-050000rc4-generic 
> #201901272036
> RIP: e030:xen_mc_flush+0x196/0x1f0
> Code: 48 c1 e0 05 4d 8b 55 38 4d 8b 45 40 48 05 00 10 00 81 e8 5d ae dd 00 
> 49 89 45 18 48 c1 e8 3f 48 89 c6 85 f6 0f 84 05 ff ff ff <0f> 0b 65 8b 0d 
> b1 92 fe 7e 41 8b 55 00 48 c7 c7 30 b0 2d 82 e8 f4
> RSP: e02b:ffffc900410dbd00 EFLAGS: 00010002
> RAX: ffff888175c946d8 RBX: 0000777f80000000 RCX: 0000000000000001
> RDX: ffff888175c946d8 RSI: 0000000000000001 RDI: ffff888175c94310
> RBP: ffffc900410dbd30 R08: 0000000000000001 R09: ffff88816fe5b000
> R10: 0000000000007ff0 R11: 0000000000000011 R12: 000000000000000f
> R13: ffff888175c94300 R14: 0000000000000200 R15: 0000000000000000
> FS:  00007fca75421680(0000) GS:ffff888175c80000(0000) 
> knlGS:0000000000000000
> CS:  10000e030 DS: 0000 ES: 0000 CR0: 0000000080050033
> CR2: 00005606a0d8bfb8 CR3: 000000016d51a000 CR4: 0000000000042660
> Call Trace:
>  __xen_pgd_pin+0x10c/0x300
>  xen_activate_mm+0x28/0x40
>  xen_dup_mmap+0xe/0x10
>  copy_process.part.37+0x1e7a/0x1f70
>  _do_fork+0xe8/0x3a0
>  __x64_sys_clone+0x27/0x30
>  do_syscall_64+0x5a/0x110
>  entry_SYSCALL_64_after_hwframe+0x44/0xa9
> 
> 
>