https://bugzilla.kernel.org/show_bug.cgi?id=201149 Bug ID: 201149 Summary: kvm vhost crash kernel and server reboot Product: Virtualization Version: unspecified Kernel Version: 3.10.0-327.el7.x86_64 Hardware: Intel OS: Linux Tree: Mainline Status: NEW Severity: high Priority: P1 Component: kvm Assignee: virtualization_kvm@xxxxxxxxxxxxxxxxxxxx Reporter: fzuwwl@xxxxxxxxx Regression: No Created attachment 278569 --> https://bugzilla.kernel.org/attachment.cgi?id=278569&action=edit vmcore-dmesg.txt file Kvm vhost crash kernel randomly and cause the server to reboot, the vmcore-dmesg.txt has the following message: ```txt [38510183.074339] kernel tried to execute NX-protected page - exploit attempt? (uid: 0) [38510183.074874] BUG: unable to handle kernel paging request at ffff88181f354780 [38510183.075337] IP: [<ffff88181f354780>] 0xffff88181f35477f [38510183.075825] PGD 1f32067 PUD 80000018000001e3 [38510183.076326] Oops: 0011 [#1] SMP [38510183.076823] Modules linked in: xt_CHECKSUM fuse btrfs zlib_deflate raid6_pq xor vfat msdos fat ext4 mbcache jbd2 ip_set nfnetlink dm_mod cfg80211 rfkill binfmt_misc dccp_diag dccp tcp_diag udp_diag inet_diag unix_diag ipt_REJECT vhost_net vhost macvtap macvlan xt_nat ebt_dnat ebtable_nat ebt_ip ebt_arp veth 8021q garp mrp bridge stp llc xt_physdev tun ebtable_filter ebtables ip6table_filter ip6_tables bonding xt_conntrack iptable_filter iptable_mangle iptable_nat nf_conntrack_ipv4 nf_defrag_ipv4 nf_nat_ipv4 nf_nat nf_conntrack intel_powerclamp coretemp intel_rapl kvm_intel kvm crc32_pclmul ghash_clmulni_intel aesni_intel lrw gf128mul glue_helper ablk_helper ipmi_devintf cryptd iTCO_wdt iTCO_vendor_support mxm_wmi mei_me dcdbas ipmi_ssif mei pcspkr sg lpc_ich mfd_core sb_edac ipmi_si edac_core ipmi_msghandler [38510183.081571] acpi_power_meter shpchp wmi nfsd auth_rpcgss nfs_acl lockd grace sunrpc ip_tables xfs libcrc32c sd_mod crc_t10dif crct10dif_generic mgag200 syscopyarea sysfillrect sysimgblt drm_kms_helper crct10dif_pclmul crct10dif_common ttm crc32c_intel igb ahci drm ptp libahci pps_core dca libata i2c_algo_bit megaraid_sas i2c_core [38510183.084694] CPU: 20 PID: 196446 Comm: vhost-196443 Not tainted 3.10.0-327.el7.x86_64 #1 [38510183.085833] Hardware name: Dell Inc. PowerEdge R630/02C2CP, BIOS 2.1.7 06/16/2016 [38510183.087009] task: ffff882ff4d60000 ti: ffff8804e2eec000 task.ti: ffff8804e2eec000 [38510183.088216] RIP: 0010:[<ffff88181f354780>] [<ffff88181f354780>] 0xffff88181f35477f [38510183.089463] RSP: 0018:ffff8804e2eefda0 EFLAGS: 00010086 [38510183.090724] RAX: ffff88181ec10000 RBX: ffff88181f354780 RCX: 0000000000000014 [38510183.092034] RDX: ffffffff81dafdc0 RSI: ffff8817e74dd500 RDI: ffff88181f354800 [38510183.093366] RBP: ffff88181f354780 R08: 000000007fffffff R09: 0000000000000002 [38510183.094726] R10: 000000000000008d R11: 00000000000000bb R12: ffff88181f354800 [38510183.096105] R13: ffff88181f354780 R14: 0000000000000001 R15: 0000000000000001 [38510183.097507] FS: 0000000000000000(0000) GS:ffff88181f340000(0000) knlGS:0000000000000000 [38510183.098956] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [38510183.100420] CR2: ffff88181f354780 CR3: 00000017e70ce000 CR4: 00000000003427e0 [38510183.101928] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [38510183.103451] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [38510183.104981] Stack: [38510183.106514] 0000000000000014 00000000684bdcc5 0000000000000000 ffff8804e2eefde0 [38510183.108133] ffffffff810b192e 00000001f30f42d8 ffff882ff4d60000 ffff882ff4d60000 [38510183.109772] ffff8804e2eefdf0 ffffffff810b5c23 ffff8804e2eefe50 ffffffff8163a561 [38510183.111441] Call Trace: [38510183.113115] [<ffffffff810b192e>] ? dequeue_task+0x5e/0xa0 [38510183.114828] [<ffffffff810b5c23>] ? deactivate_task+0x23/0x30 [38510183.116558] [<ffffffff8163a561>] ? __schedule+0x581/0x900 [38510183.118300] [<ffffffff8163a909>] ? schedule+0x29/0x70 [38510183.120030] [<ffffffffa054d625>] ? vhost_worker+0x115/0x1e0 [vhost] [38510183.121789] [<ffffffffa054d510>] ? vhost_dev_reset_owner+0x50/0x50 [vhost] [38510183.123573] [<ffffffff810a5aef>] ? kthread+0xcf/0xe0 [38510183.125368] [<ffffffff810a5a20>] ? kthread_create_on_node+0x140/0x140 [38510183.127188] [<ffffffff81645858>] ? ret_from_fork+0x58/0x90 [38510183.129015] [<ffffffff810a5a20>] ? kthread_create_on_node+0x140/0x140 [38510183.130869] Code: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 <de> 23 e2 23 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [38510183.134882] RIP [<ffff88181f354780>] 0xffff88181f35477f [38510183.136870] RSP <ffff8804e2eefda0> [38510183.138821] CR2: ffff88181f354780 ``` the kernel crash utility show that kernel tried to executed at an illegal address "[exception RIP: unknown or invalid address] RIP: ffff88181f354780" ```txt KERNEL: /usr/lib/debug/lib/modules/3.10.0-327.el7.x86_64/vmlinux DUMPFILE: vmcore [PARTIAL DUMP] CPUS: 40 DATE: Thu Sep 6 10:48:25 2018 UPTIME: 446 days, 03:49:44 LOAD AVERAGE: 2.53, 2.59, 2.53 TASKS: 1227 NODENAME: kvm-p-054013.hz.td RELEASE: 3.10.0-327.el7.x86_64 VERSION: #1 SMP Thu Nov 19 22:10:57 UTC 2015 MACHINE: x86_64 (2199 Mhz) MEMORY: 191.9 GB PANIC: "BUG: unable to handle kernel paging request at ffff88181f354780" PID: 196446 COMMAND: "vhost-196443" TASK: ffff882ff4d60000 [THREAD_INFO: ffff8804e2eec000] CPU: 20 STATE: TASK_INTERRUPTIBLE (PANIC) crash> bt PID: 196446 TASK: ffff882ff4d60000 CPU: 20 COMMAND: "vhost-196443" #0 [ffff8804e2eefa70] machine_kexec at ffffffff81051beb #1 [ffff8804e2eefad0] crash_kexec at ffffffff810f2542 #2 [ffff8804e2eefba0] oops_end at ffffffff8163e1a8 #3 [ffff8804e2eefbc8] no_context at ffffffff8162e2b8 #4 [ffff8804e2eefc18] __bad_area_nosemaphore at ffffffff8162e34e #5 [ffff8804e2eefc60] bad_area_nosemaphore at ffffffff8162e4b8 #6 [ffff8804e2eefc70] __do_page_fault at ffffffff81640fce #7 [ffff8804e2eefcc8] do_page_fault at ffffffff81641113 #8 [ffff8804e2eefcf0] page_fault at ffffffff8163d408 [exception RIP: unknown or invalid address] RIP: ffff88181f354780 RSP: ffff8804e2eefda0 RFLAGS: 00010086 RAX: ffff88181ec10000 RBX: ffff88181f354780 RCX: 0000000000000014 RDX: ffffffff81dafdc0 RSI: ffff8817e74dd500 RDI: ffff88181f354800 RBP: ffff88181f354780 R8: 000000007fffffff R9: 0000000000000002 R10: 000000000000008d R11: 00000000000000bb R12: ffff88181f354800 R13: ffff88181f354780 R14: 0000000000000001 R15: 0000000000000001 ORIG_RAX: ffffffffffffffff CS: 0010 SS: 0018 #9 [ffff8804e2eefdc0] dequeue_task at ffffffff810b192e #10 [ffff8804e2eefde8] deactivate_task at ffffffff810b5c23 #11 [ffff8804e2eefdf8] __schedule at ffffffff8163a561 #12 [ffff8804e2eefe58] schedule at ffffffff8163a909 #13 [ffff8804e2eefe68] vhost_worker at ffffffffa054d625 [vhost] #14 [ffff8804e2eefec8] kthread at ffffffff810a5aef #15 [ffff8804e2eeff50] ret_from_fork at ffffffff81645858 ``` -- You are receiving this mail because: You are watching the assignee of the bug.
