[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Xen-devel] [xen-unstable bisection] complete test-amd64-amd64-qemuu-nested-intel



branch xen-unstable
xenbranch xen-unstable
job test-amd64-amd64-qemuu-nested-intel
testid debian-hvm-install/l1/l2

Tree: linux git://xenbits.xen.org/linux-pvops.git
Tree: linuxfirmware git://xenbits.xen.org/osstest/linux-firmware.git
Tree: qemu git://xenbits.xen.org/qemu-xen-traditional.git
Tree: qemuu git://xenbits.xen.org/qemu-xen.git
Tree: xen git://xenbits.xen.org/xen.git

*** Found and reproduced problem changeset ***

  Bug is in tree:  xen git://xenbits.xen.org/xen.git
  Bug introduced:  59e89cdabc71b5c3a956028ef1c439e6bae947f0
  Bug not present: 6dacdcd439c1ddd32110d4a008de346e367409ec
  Last fail repro: http://logs.test-lab.xenproject.org/osstest/logs/144183/


  commit 59e89cdabc71b5c3a956028ef1c439e6bae947f0
  Author: Andrew Cooper <andrew.cooper3@xxxxxxxxxx>
  Date:   Thu Dec 20 17:25:29 2018 +0000
  
      x86/vtx: Disable executable EPT superpages to work around CVE-2018-12207
      
      CVE-2018-12207 covers a set of errata on various Intel processors, 
whereby a
      machine check exception can be generated in a corner case when an 
executable
      mapping changes size or cacheability without TLB invalidation.  HVM guest
      kernels can trigger this to DoS the host.
      
      To mitigate, in affected hardware, all EPT superpages are marked NX.  
When an
      instruction fetch violation is observed against the superpage, the 
superpage
      is shattered to 4k and has execute permissions restored.  This prevents 
the
      guest kernel from being able to create the necessary preconditions in the 
iTLB
      to exploit the vulnerability.
      
      This does come with a workload-dependent performance overhead, caused by
      increased TLB pressure.  Performance can be restored, if guest kernels are
      trusted not to mount an attack, by specifying ept=exec-sp on the command 
line.
      
      This is part of XSA-304 / CVE-2018-12207
      
      Signed-off-by: Andrew Cooper <andrew.cooper3@xxxxxxxxxx>
      Acked-by: George Dunlap <george.dunlap@xxxxxxxxxx>
      Reviewed-by: Jan Beulich <jbeulich@xxxxxxxx>


For bisection revision-tuple graph see:
   
http://logs.test-lab.xenproject.org/osstest/results/bisect/xen-unstable/test-amd64-amd64-qemuu-nested-intel.debian-hvm-install--l1--l2.html
Revision IDs in each graph node refer, respectively, to the Trees above.

----------------------------------------
Running cs-bisection-step 
--graph-out=/home/logs/results/bisect/xen-unstable/test-amd64-amd64-qemuu-nested-intel.debian-hvm-install--l1--l2
 --summary-out=tmp/144183.bisection-summary --basis-template=144042 
--blessings=real,real-bisect xen-unstable test-amd64-amd64-qemuu-nested-intel 
debian-hvm-install/l1/l2
Searching for failure / basis pass:
 144171 fail [host=chardonnay1] / 144042 [host=debina0] 144020 
[host=huxelrebe0] 144001 [host=albana1] 143985 [host=chardonnay0] 143967 
[host=godello0] 143937 [host=italia0] 143895 [host=godello1] 143715 
[host=baroque0] 143563 [host=huxelrebe1] 143437 [host=albana0] 143360 
[host=fiano1] 143288 [host=debina1] 143250 [host=albana1] 143205 
[host=elbling1] 143172 [host=fiano0] 143133 ok.
Failure / basis pass flights: 144171 / 143133
(tree with no url: minios)
(tree with no url: ovmf)
(tree with no url: seabios)
Tree: linux git://xenbits.xen.org/linux-pvops.git
Tree: linuxfirmware git://xenbits.xen.org/osstest/linux-firmware.git
Tree: qemu git://xenbits.xen.org/qemu-xen-traditional.git
Tree: qemuu git://xenbits.xen.org/qemu-xen.git
Tree: xen git://xenbits.xen.org/xen.git
Latest b98aebd298246df37b472c52a2ee1023256d02e3 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
d0d8ad39ecb51cd7497cd524484fe09f50876798 
933ebad2470a169504799a1d95b8e410bd9847ef 
b92a286cfb72eacbc988b500f4bb04dbe6bedc0c
Basis pass b98aebd298246df37b472c52a2ee1023256d02e3 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
d0d8ad39ecb51cd7497cd524484fe09f50876798 
933ebad2470a169504799a1d95b8e410bd9847ef 
4f05a0c775871abd4b8147048f067c1cfe408645
Generating revisions with ./adhoc-revtuple-generator  
git://xenbits.xen.org/linux-pvops.git#b98aebd298246df37b472c52a2ee1023256d02e3-b98aebd298246df37b472c52a2ee1023256d02e3
 
git://xenbits.xen.org/osstest/linux-firmware.git#c530a75c1e6a472b0eb9558310b518f0dfcd8860-c530a75c1e6a472b0eb9558310b518f0dfcd8860
 
git://xenbits.xen.org/qemu-xen-traditional.git#d0d8ad39ecb51cd7497cd524484fe09f50876798-d0d8ad39ecb51cd7497cd524484fe09f50876798
 git://xenbits.xen.org/qemu-xen.git#933ebad2470a169504799a1d95b8e41\
 0bd9847ef-933ebad2470a169504799a1d95b8e410bd9847ef 
git://xenbits.xen.org/xen.git#4f05a0c775871abd4b8147048f067c1cfe408645-b92a286cfb72eacbc988b500f4bb04dbe6bedc0c
Loaded 5002 nodes in revision graph
Searching for test results:
 143133 pass b98aebd298246df37b472c52a2ee1023256d02e3 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
d0d8ad39ecb51cd7497cd524484fe09f50876798 
933ebad2470a169504799a1d95b8e410bd9847ef 
4f05a0c775871abd4b8147048f067c1cfe408645
 143250 [host=albana1]
 143172 [host=fiano0]
 143205 [host=elbling1]
 143288 [host=debina1]
 143437 [host=albana0]
 143360 [host=fiano1]
 143563 [host=huxelrebe1]
 143715 [host=baroque0]
 143895 [host=godello1]
 143937 [host=italia0]
 143985 [host=chardonnay0]
 144001 [host=albana1]
 143967 [host=godello0]
 144020 [host=huxelrebe0]
 144042 [host=debina0]
 144067 fail b98aebd298246df37b472c52a2ee1023256d02e3 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
d0d8ad39ecb51cd7497cd524484fe09f50876798 
933ebad2470a169504799a1d95b8e410bd9847ef 
8c4330818f6ee70cbf7428a40a28a73df1272d10
 144160 pass b98aebd298246df37b472c52a2ee1023256d02e3 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
d0d8ad39ecb51cd7497cd524484fe09f50876798 
933ebad2470a169504799a1d95b8e410bd9847ef 
c40b33d72630dcfa506d6fd856532d6152cb97dc
 144167 pass b98aebd298246df37b472c52a2ee1023256d02e3 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
d0d8ad39ecb51cd7497cd524484fe09f50876798 
933ebad2470a169504799a1d95b8e410bd9847ef 
8f1d6c049c0439d8c5b175a0f8369cfde57ba08c
 144091 fail b98aebd298246df37b472c52a2ee1023256d02e3 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
d0d8ad39ecb51cd7497cd524484fe09f50876798 
933ebad2470a169504799a1d95b8e410bd9847ef 
85e1424de2dda289a4ee92e6b4f5328dd10e75ae
 144149 fail b98aebd298246df37b472c52a2ee1023256d02e3 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
d0d8ad39ecb51cd7497cd524484fe09f50876798 
933ebad2470a169504799a1d95b8e410bd9847ef 
09242da55b32e2d1c3728c23cd43d0377b74bed6
 144164 fail b98aebd298246df37b472c52a2ee1023256d02e3 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
d0d8ad39ecb51cd7497cd524484fe09f50876798 
933ebad2470a169504799a1d95b8e410bd9847ef 
09242da55b32e2d1c3728c23cd43d0377b74bed6
 144124 fail b98aebd298246df37b472c52a2ee1023256d02e3 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
d0d8ad39ecb51cd7497cd524484fe09f50876798 
933ebad2470a169504799a1d95b8e410bd9847ef 
85e1424de2dda289a4ee92e6b4f5328dd10e75ae
 144156 pass b98aebd298246df37b472c52a2ee1023256d02e3 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
d0d8ad39ecb51cd7497cd524484fe09f50876798 
933ebad2470a169504799a1d95b8e410bd9847ef 
4f05a0c775871abd4b8147048f067c1cfe408645
 144159 fail b98aebd298246df37b472c52a2ee1023256d02e3 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
d0d8ad39ecb51cd7497cd524484fe09f50876798 
933ebad2470a169504799a1d95b8e410bd9847ef 
85e1424de2dda289a4ee92e6b4f5328dd10e75ae
 144161 pass b98aebd298246df37b472c52a2ee1023256d02e3 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
d0d8ad39ecb51cd7497cd524484fe09f50876798 
933ebad2470a169504799a1d95b8e410bd9847ef 
92f91d283d8149dbd6a083589ec6d73c34c06459
 144166 pass b98aebd298246df37b472c52a2ee1023256d02e3 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
d0d8ad39ecb51cd7497cd524484fe09f50876798 
933ebad2470a169504799a1d95b8e410bd9847ef 
ad591454f069647c36a7daaa9ec23384c0263f0b
 144162 fail b98aebd298246df37b472c52a2ee1023256d02e3 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
d0d8ad39ecb51cd7497cd524484fe09f50876798 
933ebad2470a169504799a1d95b8e410bd9847ef 
b92a286cfb72eacbc988b500f4bb04dbe6bedc0c
 144175 pass b98aebd298246df37b472c52a2ee1023256d02e3 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
d0d8ad39ecb51cd7497cd524484fe09f50876798 
933ebad2470a169504799a1d95b8e410bd9847ef 
6dacdcd439c1ddd32110d4a008de346e367409ec
 144168 fail b98aebd298246df37b472c52a2ee1023256d02e3 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
d0d8ad39ecb51cd7497cd524484fe09f50876798 
933ebad2470a169504799a1d95b8e410bd9847ef 
59e89cdabc71b5c3a956028ef1c439e6bae947f0
 144172 pass b98aebd298246df37b472c52a2ee1023256d02e3 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
d0d8ad39ecb51cd7497cd524484fe09f50876798 
933ebad2470a169504799a1d95b8e410bd9847ef 
4f05a0c775871abd4b8147048f067c1cfe408645
 144178 pass b98aebd298246df37b472c52a2ee1023256d02e3 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
d0d8ad39ecb51cd7497cd524484fe09f50876798 
933ebad2470a169504799a1d95b8e410bd9847ef 
6dacdcd439c1ddd32110d4a008de346e367409ec
 144170 pass b98aebd298246df37b472c52a2ee1023256d02e3 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
d0d8ad39ecb51cd7497cd524484fe09f50876798 
933ebad2470a169504799a1d95b8e410bd9847ef 
d13dfb02aafaba376b24ff0dc64e19ba1c360803
 144173 fail b98aebd298246df37b472c52a2ee1023256d02e3 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
d0d8ad39ecb51cd7497cd524484fe09f50876798 
933ebad2470a169504799a1d95b8e410bd9847ef 
b92a286cfb72eacbc988b500f4bb04dbe6bedc0c
 144183 fail b98aebd298246df37b472c52a2ee1023256d02e3 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
d0d8ad39ecb51cd7497cd524484fe09f50876798 
933ebad2470a169504799a1d95b8e410bd9847ef 
59e89cdabc71b5c3a956028ef1c439e6bae947f0
 144177 fail b98aebd298246df37b472c52a2ee1023256d02e3 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
d0d8ad39ecb51cd7497cd524484fe09f50876798 
933ebad2470a169504799a1d95b8e410bd9847ef 
59e89cdabc71b5c3a956028ef1c439e6bae947f0
 144171 fail b98aebd298246df37b472c52a2ee1023256d02e3 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
d0d8ad39ecb51cd7497cd524484fe09f50876798 
933ebad2470a169504799a1d95b8e410bd9847ef 
b92a286cfb72eacbc988b500f4bb04dbe6bedc0c
 144179 fail b98aebd298246df37b472c52a2ee1023256d02e3 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
d0d8ad39ecb51cd7497cd524484fe09f50876798 
933ebad2470a169504799a1d95b8e410bd9847ef 
59e89cdabc71b5c3a956028ef1c439e6bae947f0
 144182 pass b98aebd298246df37b472c52a2ee1023256d02e3 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
d0d8ad39ecb51cd7497cd524484fe09f50876798 
933ebad2470a169504799a1d95b8e410bd9847ef 
6dacdcd439c1ddd32110d4a008de346e367409ec
Searching for interesting versions
 Result found: flight 143133 (pass), for basis pass
 Result found: flight 144162 (fail), for basis failure
 Repro found: flight 144172 (pass), for basis pass
 Repro found: flight 144173 (fail), for basis failure
 0 revisions at b98aebd298246df37b472c52a2ee1023256d02e3 
c530a75c1e6a472b0eb9558310b518f0dfcd8860 
d0d8ad39ecb51cd7497cd524484fe09f50876798 
933ebad2470a169504799a1d95b8e410bd9847ef 
6dacdcd439c1ddd32110d4a008de346e367409ec
No revisions left to test, checking graph state.
 Result found: flight 144175 (pass), for last pass
 Result found: flight 144177 (fail), for first failure
 Repro found: flight 144178 (pass), for last pass
 Repro found: flight 144179 (fail), for first failure
 Repro found: flight 144182 (pass), for last pass
 Repro found: flight 144183 (fail), for first failure

*** Found and reproduced problem changeset ***

  Bug is in tree:  xen git://xenbits.xen.org/xen.git
  Bug introduced:  59e89cdabc71b5c3a956028ef1c439e6bae947f0
  Bug not present: 6dacdcd439c1ddd32110d4a008de346e367409ec
  Last fail repro: http://logs.test-lab.xenproject.org/osstest/logs/144183/


  commit 59e89cdabc71b5c3a956028ef1c439e6bae947f0
  Author: Andrew Cooper <andrew.cooper3@xxxxxxxxxx>
  Date:   Thu Dec 20 17:25:29 2018 +0000
  
      x86/vtx: Disable executable EPT superpages to work around CVE-2018-12207
      
      CVE-2018-12207 covers a set of errata on various Intel processors, 
whereby a
      machine check exception can be generated in a corner case when an 
executable
      mapping changes size or cacheability without TLB invalidation.  HVM guest
      kernels can trigger this to DoS the host.
      
      To mitigate, in affected hardware, all EPT superpages are marked NX.  
When an
      instruction fetch violation is observed against the superpage, the 
superpage
      is shattered to 4k and has execute permissions restored.  This prevents 
the
      guest kernel from being able to create the necessary preconditions in the 
iTLB
      to exploit the vulnerability.
      
      This does come with a workload-dependent performance overhead, caused by
      increased TLB pressure.  Performance can be restored, if guest kernels are
      trusted not to mount an attack, by specifying ept=exec-sp on the command 
line.
      
      This is part of XSA-304 / CVE-2018-12207
      
      Signed-off-by: Andrew Cooper <andrew.cooper3@xxxxxxxxxx>
      Acked-by: George Dunlap <george.dunlap@xxxxxxxxxx>
      Reviewed-by: Jan Beulich <jbeulich@xxxxxxxx>

Revision graph left in 
/home/logs/results/bisect/xen-unstable/test-amd64-amd64-qemuu-nested-intel.debian-hvm-install--l1--l2.{dot,ps,png,html,svg}.
----------------------------------------
144183: tolerable ALL FAIL

flight 144183 xen-unstable real-bisect [real]
http://logs.test-lab.xenproject.org/osstest/logs/144183/

Failures :-/ but no regressions.

Tests which did not succeed,
including tests which could not be run:
 test-amd64-amd64-qemuu-nested-intel 17 debian-hvm-install/l1/l2 fail baseline 
untested


jobs:
 test-amd64-amd64-qemuu-nested-intel                          fail    


------------------------------------------------------------
sg-report-flight on osstest.test-lab.xenproject.org
logs: /home/logs/logs
images: /home/logs/images

Logs, config files, etc. are available at
    http://logs.test-lab.xenproject.org/osstest/logs

Explanation of these reports, and of osstest in general, is at
    http://xenbits.xen.org/gitweb/?p=osstest.git;a=blob;f=README.email;hb=master
    http://xenbits.xen.org/gitweb/?p=osstest.git;a=blob;f=README;hb=master

Test harness code can be found at
    http://xenbits.xen.org/gitweb?p=osstest.git;a=summary


_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxxx
https://lists.xenproject.org/mailman/listinfo/xen-devel

 


Rackspace

Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.