You are not logged in.

#1 2022-05-23 22:34:42

justasug
Member
Registered: 2014-08-03
Posts: 165

[SOLVED] Qemu kernel bug: kernel NULL pointer dereference

I have installed qemu and use it to run a virtual machine. After some time, I have noticed that I lose internet connectivity, even in the host. The computer doesn't seem to crash immediately, but after some time it becomes unresponsive and I have to do a hard-reset.
I am running Arch Linux with the linux 5.17.9.arch1-1 kernel, fully updated as of writing this, on a Thinkpad T410 Laptop.
This is how I run qemu:

qemu-system-x86_64 -drive file=/home/dino/image,format=raw -m 2G -enable-kvm

Looking at the logs, I noticed this:

May 23 17:26:28 masina-l kernel: BUG: kernel NULL pointer dereference, address: 000000000000000b
May 23 17:26:28 masina-l kernel: #PF: supervisor write access in kernel mode
May 23 17:26:28 masina-l kernel: #PF: error_code(0x0002) - not-present page
May 23 17:26:28 masina-l kernel: PGD 0 P4D 0 
May 23 17:26:28 masina-l kernel: Oops: 0002 [#1] PREEMPT SMP PTI
May 23 17:26:28 masina-l kernel: CPU: 1 PID: 1463 Comm: qemu-system-x86 Tainted: G           OE     5.17.9-arch1-1 #1 e077767f2d3b4d5004a14cb6f791c01d77538db3
May 23 17:26:28 masina-l kernel: Hardware name: LENOVO 2537KR6/2537KR6, BIOS 6IET85WW (1.45 ) 02/14/2013
May 23 17:26:28 masina-l kernel: RIP: 0010:kvm_replace_memslot+0xc0/0x380 [kvm]
May 23 17:26:28 masina-l kernel: Code: 04 00 00 48 85 c0 0f 84 3b 02 00 00 48 89 d9 48 c1 e1 04 48 01 c1 48 8b 71 08 48 85 f6 74 1e 48 8b 39 48 89 3e 48 85 ff 74 04 <48> 89 77 08 48 c7 01 00 00 00 00 48 c7 41 08 00 00 00 00 48 8d 0c
May 23 17:26:28 masina-l kernel: RSP: 0018:ffffae0e013b3d20 EFLAGS: 00010206
May 23 17:26:28 masina-l kernel: RAX: ffff8b83d5446400 RBX: 0000000000000000 RCX: ffff8b83d5446400
May 23 17:26:28 masina-l kernel: RDX: 0000000000000000 RSI: ffffae0e01399080 RDI: 0000000000000003
May 23 17:26:28 masina-l kernel: RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000003
May 23 17:26:28 masina-l kernel: R10: 0000000000000001 R11: ffff8b82db4a6000 R12: 0000000000000000
May 23 17:26:28 masina-l kernel: R13: 0000000000000000 R14: 0000000000000000 R15: ffffae0e01399000
May 23 17:26:28 masina-l kernel: FS:  00007f229e2fa640(0000) GS:ffff8b83f3e80000(0000) knlGS:0000000000000000
May 23 17:26:28 masina-l kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
May 23 17:26:28 masina-l kernel: CR2: 000000000000000b CR3: 000000000cae2000 CR4: 00000000000026e0
May 23 17:26:28 masina-l kernel: Call Trace:
May 23 17:26:28 masina-l kernel:  <TASK>
May 23 17:26:28 masina-l kernel:  kvm_set_memslot+0x3a5/0x4a0 [kvm 56a7a126b70c70747b6cb0214ef6944f236be929]
May 23 17:26:28 masina-l kernel:  kvm_vm_ioctl+0x33b/0xe90 [kvm 56a7a126b70c70747b6cb0214ef6944f236be929]
May 23 17:26:28 masina-l kernel:  __x64_sys_ioctl+0x8d/0xc0
May 23 17:26:28 masina-l kernel:  do_syscall_64+0x5b/0x80
May 23 17:26:28 masina-l kernel:  ? exc_page_fault+0x71/0x170
May 23 17:26:28 masina-l kernel:  entry_SYSCALL_64_after_hwframe+0x44/0xae
May 23 17:26:28 masina-l kernel: RIP: 0033:0x7f22a8d6ab1f
May 23 17:26:28 masina-l kernel: Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 18 48 8b 44 24 18 64 48 2b 04 25 28 00 00
May 23 17:26:28 masina-l kernel: RSP: 002b:00007f229e2f8fa0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
May 23 17:26:28 masina-l kernel: RAX: ffffffffffffffda RBX: 000000004020ae46 RCX: 00007f22a8d6ab1f
May 23 17:26:28 masina-l kernel: RDX: 00007f229e2f9140 RSI: 000000004020ae46 RDI: 000000000000000f
May 23 17:26:28 masina-l kernel: RBP: 00007f229e2f9140 R08: 0000000000000000 R09: 0000000000000000
May 23 17:26:28 masina-l kernel: R10: 00007f229419c720 R11: 0000000000000246 R12: 0000564aa1743200
May 23 17:26:28 masina-l kernel: R13: 00000000000a0000 R14: 00007f220fe00000 R15: 0000000000000000
May 23 17:26:28 masina-l kernel:  </TASK>
May 23 17:26:28 masina-l kernel: Modules linked in: ccm uvcvideo videobuf2_vmalloc videobuf2_memops videobuf2_v4l2 videobuf2_common cdc_acm videodev mc joydev mousedev intel_powerclamp coretemp iwldvm iTCO_wdt snd_hda_codec_hdmi kvm_intel snd_ctl_led mac80211 snd_hda_codec_conexant intel_pmc_bxt at24 wmi_bmof iTCO_vendor_support mei_wdt snd_hda_codec_generic libarc4 mei_pxp kvm think_lmi mxm_wmi firmware_attributes_class snd_hda_intel snd_intel_dspcfg snd_intel_sdw_acpi snd_hda_codec irqbypass iwlwifi snd_hda_core iwlmei intel_cstate snd_hwdep intel_uncore i2c_i801 psmouse snd_pcm i2c_smbus thinkpad_acpi intel_ips cfg80211 ledtrig_audio platform_profile snd_timer rfkill mei_me e1000e snd lpc_ich mac_hid mei soundcore wmi acpi_cpufreq intel_agp tp_smapi(OE) thinkpad_ec(OE) dm_multipath fuse bpf_preload ip_tables x_tables ext4 crc32c_generic crc16 mbcache jbd2 dm_crypt cbc encrypted_keys dm_mod trusted asn1_encoder tee tpm rng_core crct10dif_pclmul crc32_pclmul crc32c_intel ghash_clmulni_intel serio_raw
May 23 17:26:28 masina-l kernel:  aesni_intel atkbd libps2 sr_mod crypto_simd sdhci_pci cqhci cdrom i8042 cryptd sdhci mmc_core serio i915 intel_gtt video ttm
May 23 17:26:28 masina-l kernel: CR2: 000000000000000b
May 23 17:26:28 masina-l kernel: ---[ end trace 0000000000000000 ]---
May 23 17:26:28 masina-l kernel: RIP: 0010:kvm_replace_memslot+0xc0/0x380 [kvm]
May 23 17:26:28 masina-l kernel: Code: 04 00 00 48 85 c0 0f 84 3b 02 00 00 48 89 d9 48 c1 e1 04 48 01 c1 48 8b 71 08 48 85 f6 74 1e 48 8b 39 48 89 3e 48 85 ff 74 04 <48> 89 77 08 48 c7 01 00 00 00 00 48 c7 41 08 00 00 00 00 48 8d 0c
May 23 17:26:28 masina-l kernel: RSP: 0018:ffffae0e013b3d20 EFLAGS: 00010206
May 23 17:26:28 masina-l kernel: RAX: ffff8b83d5446400 RBX: 0000000000000000 RCX: ffff8b83d5446400
May 23 17:26:28 masina-l kernel: RDX: 0000000000000000 RSI: ffffae0e01399080 RDI: 0000000000000003
May 23 17:26:28 masina-l kernel: RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000003
May 23 17:26:28 masina-l kernel: R10: 0000000000000001 R11: ffff8b82db4a6000 R12: 0000000000000000
May 23 17:26:28 masina-l kernel: R13: 0000000000000000 R14: 0000000000000000 R15: ffffae0e01399000
May 23 17:26:28 masina-l kernel: FS:  00007f229e2fa640(0000) GS:ffff8b83f3e80000(0000) knlGS:0000000000000000
May 23 17:26:28 masina-l kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
May 23 17:26:28 masina-l kernel: CR2: 000000000000000b CR3: 000000000cae2000 CR4: 00000000000026e0

What is the culprit for this? Is it a kernel bug or a qemu bug? I would like to perhaps report this, but I don't know where.

Last edited by justasug (2022-05-24 21:02:04)

Offline

#2 2022-05-23 23:01:49

loqs
Member
Registered: 2014-03-06
Posts: 17,315

Re: [SOLVED] Qemu kernel bug: kernel NULL pointer dereference

I would suggest trying the patch from https://lore.kernel.org/all/YnHALvjWw6E … oogle.com/

Online

#3 2022-05-24 21:01:22

justasug
Member
Registered: 2014-08-03
Posts: 165

Re: [SOLVED] Qemu kernel bug: kernel NULL pointer dereference

Thanks. I applied it and it seemed to have to fixed it, but I haven't tested it extensively. What keyword did you search for to find this?
How would I go about seeing if this patch has been merged upstream?

Offline

#4 2022-05-24 21:33:53

loqs
Member
Registered: 2014-03-06
Posts: 17,315

Re: [SOLVED] Qemu kernel bug: kernel NULL pointer dereference

justasug wrote:

What keyword did you search for to find this?

https://lore.kernel.org/kvm/?q=kvm_replace_memslot

justasug wrote:

How would I go about seeing if this patch has been merged upstream?

https://lore.kernel.org/kvm/20220523191 … edhat.com/ the reply says applied and I found it at https://git.kernel.org/pub/scm/virt/kvm … c622ed28ed
So looking at that tree it was not in the last tag for-linus which was the last of the 5.18 KVM fixes,  I think the KVM pull for 5.19 has not gone in yet so it could still make that.  If not it would be be in the first KVM fixes pull.

Online

#5 2022-05-25 03:07:32

justasug
Member
Registered: 2014-08-03
Posts: 165

Re: [SOLVED] Qemu kernel bug: kernel NULL pointer dereference

Thanks, I will keep an eye on those.

Offline

Board footer

Powered by FluxBB