* [xen-4.17-testing test] 176250: trouble: broken/fail/pass/starved
@ 2023-01-28 0:38 osstest service owner
0 siblings, 0 replies; only message in thread
From: osstest service owner @ 2023-01-28 0:38 UTC (permalink / raw)
To: xen-devel
flight 176250 xen-4.17-testing real [real]
http://logs.test-lab.xenproject.org/osstest/logs/176250/
Failures and problems with tests :-(
Tests which did not succeed and are blocking,
including tests which could not be run:
test-armhf-armhf-libvirt <job status> broken
test-armhf-armhf-libvirt-qcow2 <job status> broken
test-armhf-armhf-libvirt-raw <job status> broken
test-armhf-armhf-xl <job status> broken
test-armhf-armhf-xl-arndale <job status> broken
test-armhf-armhf-xl-credit1 <job status> broken
test-armhf-armhf-xl-credit2 <job status> broken
test-armhf-armhf-xl-cubietruck <job status> broken
test-armhf-armhf-xl-multivcpu <job status> broken
test-armhf-armhf-xl-rtds <job status> broken
test-armhf-armhf-xl-vhd <job status> broken
test-armhf-armhf-libvirt-qcow2 5 host-install(5) broken REGR. vs. 175447
test-armhf-armhf-xl-credit1 5 host-install(5) broken REGR. vs. 175447
test-armhf-armhf-xl-vhd 5 host-install(5) broken REGR. vs. 175447
test-armhf-armhf-libvirt-raw 5 host-install(5) broken REGR. vs. 175447
test-armhf-armhf-libvirt 5 host-install(5) broken REGR. vs. 175447
test-armhf-armhf-xl-credit2 5 host-install(5) broken REGR. vs. 175447
test-armhf-armhf-xl-multivcpu 5 host-install(5) broken REGR. vs. 175447
test-armhf-armhf-xl-arndale 5 host-install(5) broken REGR. vs. 175447
test-armhf-armhf-xl 5 host-install(5) broken REGR. vs. 175447
test-armhf-armhf-xl-cubietruck 5 host-install(5) broken REGR. vs. 175447
test-amd64-i386-qemut-rhel6hvm-intel <job status> broken in 176238
build-arm64-xsm <job status> broken in 176238
build-arm64-pvops <job status> broken in 176238
build-armhf <job status> broken in 176238
test-amd64-i386-xl-qemut-ws16-amd64 <job status> broken in 176238
build-armhf 4 host-install(4) broken in 176238 REGR. vs. 175447
build-arm64-xsm 4 host-install(4) broken in 176238 REGR. vs. 175447
build-arm64-pvops 4 host-install(4) broken in 176238 REGR. vs. 175447
build-armhf 3 syslog-server running in 176238
Tests which are failing intermittently (not blocking):
test-amd64-i386-xl-qemut-ws16-amd64 5 host-install(5) broken in 176238 pass in 176250
test-amd64-i386-qemut-rhel6hvm-intel 19 host-reuse/final broken in 176238 pass in 176250
test-amd64-i386-qemut-rhel6hvm-amd 7 xen-install fail in 176238 pass in 176250
test-amd64-amd64-xl-qemuu-debianhvm-amd64 20 guest-start/debianhvm.repeat fail in 176238 pass in 176250
test-amd64-i386-qemuu-rhel6hvm-amd 7 xen-install fail pass in 176238
Regressions which are regarded as allowable (not blocking):
test-armhf-armhf-xl-rtds 5 host-install(5) broken REGR. vs. 175447
Tests which did not succeed, but are not blocking:
test-arm64-arm64-xl-seattle 1 build-check(1) blocked in 176238 n/a
test-armhf-armhf-xl-cubietruck 1 build-check(1) blocked in 176238 n/a
test-armhf-armhf-xl-multivcpu 1 build-check(1) blocked in 176238 n/a
test-armhf-armhf-xl-credit2 1 build-check(1) blocked in 176238 n/a
test-armhf-armhf-libvirt-qcow2 1 build-check(1) blocked in 176238 n/a
test-armhf-armhf-xl-arndale 1 build-check(1) blocked in 176238 n/a
test-arm64-arm64-xl-credit2 1 build-check(1) blocked in 176238 n/a
test-arm64-arm64-xl-credit1 1 build-check(1) blocked in 176238 n/a
test-armhf-armhf-xl-credit1 1 build-check(1) blocked in 176238 n/a
test-armhf-armhf-xl-vhd 1 build-check(1) blocked in 176238 n/a
test-arm64-arm64-libvirt-xsm 1 build-check(1) blocked in 176238 n/a
test-arm64-arm64-libvirt-raw 1 build-check(1) blocked in 176238 n/a
test-armhf-armhf-libvirt 1 build-check(1) blocked in 176238 n/a
test-arm64-arm64-xl-vhd 1 build-check(1) blocked in 176238 n/a
test-armhf-armhf-libvirt-raw 1 build-check(1) blocked in 176238 n/a
test-arm64-arm64-xl-thunderx 1 build-check(1) blocked in 176238 n/a
test-armhf-armhf-xl-rtds 1 build-check(1) blocked in 176238 n/a
test-armhf-armhf-xl 1 build-check(1) blocked in 176238 n/a
test-arm64-arm64-xl-xsm 1 build-check(1) blocked in 176238 n/a
test-arm64-arm64-xl 1 build-check(1) blocked in 176238 n/a
build-armhf-libvirt 1 build-check(1) blocked in 176238 n/a
test-armhf-armhf-xl-credit1 6 capture-logs(6) broken blocked in 175447
test-armhf-armhf-libvirt-qcow2 6 capture-logs(6) broken blocked in 175447
test-armhf-armhf-libvirt-raw 6 capture-logs(6) broken blocked in 175447
test-armhf-armhf-libvirt 6 capture-logs(6) broken blocked in 175447
test-armhf-armhf-xl-credit2 6 capture-logs(6) broken blocked in 175447
test-armhf-armhf-xl-multivcpu 6 capture-logs(6) broken blocked in 175447
test-armhf-armhf-xl-vhd 6 capture-logs(6) broken blocked in 175447
test-armhf-armhf-xl-rtds 6 capture-logs(6) broken blocked in 175447
test-armhf-armhf-xl-arndale 6 capture-logs(6) broken blocked in 175447
test-armhf-armhf-xl 6 capture-logs(6) broken blocked in 175447
test-armhf-armhf-xl-cubietruck 6 capture-logs(6) broken blocked in 175447
build-armhf 5 capture-logs broken in 176238 blocked in 175447
test-amd64-i386-xl-qemuu-win7-amd64 19 guest-stop fail like 175447
test-amd64-i386-xl-qemut-win7-amd64 19 guest-stop fail like 175447
test-amd64-amd64-xl-qemuu-win7-amd64 19 guest-stop fail like 175447
test-amd64-amd64-xl-qemut-win7-amd64 19 guest-stop fail like 175447
test-amd64-i386-xl-qemuu-ws16-amd64 19 guest-stop fail like 175447
test-amd64-amd64-xl-qemut-ws16-amd64 19 guest-stop fail like 175447
test-amd64-i386-xl-qemut-ws16-amd64 19 guest-stop fail like 175447
test-amd64-amd64-xl-qemuu-ws16-amd64 19 guest-stop fail like 175447
test-amd64-amd64-qemuu-nested-amd 20 debian-hvm-install/l1/l2 fail like 175447
test-amd64-i386-xl-pvshim 14 guest-start fail never pass
test-amd64-i386-libvirt-qemuu-debianhvm-amd64-xsm 13 migrate-support-check fail never pass
test-amd64-amd64-libvirt-xsm 15 migrate-support-check fail never pass
test-amd64-amd64-libvirt 15 migrate-support-check fail never pass
test-amd64-i386-libvirt 15 migrate-support-check fail never pass
test-amd64-i386-libvirt-xsm 15 migrate-support-check fail never pass
test-arm64-arm64-xl-xsm 15 migrate-support-check fail never pass
test-arm64-arm64-xl-xsm 16 saverestore-support-check fail never pass
test-arm64-arm64-xl-credit2 15 migrate-support-check fail never pass
test-arm64-arm64-xl-credit2 16 saverestore-support-check fail never pass
test-arm64-arm64-xl-thunderx 15 migrate-support-check fail never pass
test-arm64-arm64-xl-thunderx 16 saverestore-support-check fail never pass
test-arm64-arm64-xl 15 migrate-support-check fail never pass
test-arm64-arm64-xl 16 saverestore-support-check fail never pass
test-arm64-arm64-xl-credit1 15 migrate-support-check fail never pass
test-arm64-arm64-xl-credit1 16 saverestore-support-check fail never pass
test-arm64-arm64-libvirt-xsm 15 migrate-support-check fail never pass
test-arm64-arm64-libvirt-xsm 16 saverestore-support-check fail never pass
test-amd64-amd64-libvirt-vhd 14 migrate-support-check fail never pass
test-amd64-amd64-libvirt-qemuu-debianhvm-amd64-xsm 13 migrate-support-check fail never pass
test-amd64-i386-libvirt-raw 14 migrate-support-check fail never pass
test-arm64-arm64-libvirt-raw 14 migrate-support-check fail never pass
test-arm64-arm64-libvirt-raw 15 saverestore-support-check fail never pass
test-arm64-arm64-xl-vhd 14 migrate-support-check fail never pass
test-arm64-arm64-xl-vhd 15 saverestore-support-check fail never pass
test-arm64-arm64-xl-seattle 3 hosts-allocate starved n/a
version targeted for testing:
xen 2f8851c37f88e4eb4858e16626fcb2379db71a4f
baseline version:
xen c4972a4272690384b15d5706f2a833aed636895e
Last test of basis 175447 2022-12-22 00:40:06 Z 36 days
Testing same since 176224 2023-01-26 22:14:43 Z 1 days 3 attempts
------------------------------------------------------------
People who touched revisions under test:
Jason Andryuk <jandryuk@gmail.com>
jobs:
build-amd64-xsm pass
build-arm64-xsm pass
build-i386-xsm pass
build-amd64-xtf pass
build-amd64 pass
build-arm64 pass
build-armhf pass
build-i386 pass
build-amd64-libvirt pass
build-arm64-libvirt pass
build-armhf-libvirt pass
build-i386-libvirt pass
build-amd64-prev pass
build-i386-prev pass
build-amd64-pvops pass
build-arm64-pvops pass
build-armhf-pvops pass
build-i386-pvops pass
test-xtf-amd64-amd64-1 pass
test-xtf-amd64-amd64-2 pass
test-xtf-amd64-amd64-3 pass
test-xtf-amd64-amd64-4 pass
test-xtf-amd64-amd64-5 pass
test-amd64-amd64-xl pass
test-amd64-coresched-amd64-xl pass
test-arm64-arm64-xl pass
test-armhf-armhf-xl broken
test-amd64-i386-xl pass
test-amd64-coresched-i386-xl pass
test-amd64-amd64-libvirt-qemuu-debianhvm-amd64-xsm pass
test-amd64-i386-libvirt-qemuu-debianhvm-amd64-xsm pass
test-amd64-amd64-xl-qemut-stubdom-debianhvm-amd64-xsm pass
test-amd64-i386-xl-qemut-stubdom-debianhvm-amd64-xsm pass
test-amd64-amd64-xl-qemut-debianhvm-i386-xsm pass
test-amd64-i386-xl-qemut-debianhvm-i386-xsm pass
test-amd64-amd64-xl-qemuu-debianhvm-i386-xsm pass
test-amd64-i386-xl-qemuu-debianhvm-i386-xsm pass
test-amd64-amd64-libvirt-xsm pass
test-arm64-arm64-libvirt-xsm pass
test-amd64-i386-libvirt-xsm pass
test-amd64-amd64-xl-xsm pass
test-arm64-arm64-xl-xsm pass
test-amd64-i386-xl-xsm pass
test-amd64-amd64-qemuu-nested-amd fail
test-amd64-amd64-xl-pvhv2-amd pass
test-amd64-i386-qemut-rhel6hvm-amd pass
test-amd64-i386-qemuu-rhel6hvm-amd fail
test-amd64-amd64-dom0pvh-xl-amd pass
test-amd64-amd64-xl-qemut-debianhvm-amd64 pass
test-amd64-i386-xl-qemut-debianhvm-amd64 pass
test-amd64-amd64-xl-qemuu-debianhvm-amd64 pass
test-amd64-i386-xl-qemuu-debianhvm-amd64 pass
test-amd64-i386-freebsd10-amd64 pass
test-amd64-amd64-qemuu-freebsd11-amd64 pass
test-amd64-amd64-qemuu-freebsd12-amd64 pass
test-amd64-amd64-xl-qemuu-ovmf-amd64 pass
test-amd64-i386-xl-qemuu-ovmf-amd64 pass
test-amd64-amd64-xl-qemut-win7-amd64 fail
test-amd64-i386-xl-qemut-win7-amd64 fail
test-amd64-amd64-xl-qemuu-win7-amd64 fail
test-amd64-i386-xl-qemuu-win7-amd64 fail
test-amd64-amd64-xl-qemut-ws16-amd64 fail
test-amd64-i386-xl-qemut-ws16-amd64 fail
test-amd64-amd64-xl-qemuu-ws16-amd64 fail
test-amd64-i386-xl-qemuu-ws16-amd64 fail
test-armhf-armhf-xl-arndale broken
test-amd64-amd64-xl-credit1 pass
test-arm64-arm64-xl-credit1 pass
test-armhf-armhf-xl-credit1 broken
test-amd64-amd64-xl-credit2 pass
test-arm64-arm64-xl-credit2 pass
test-armhf-armhf-xl-credit2 broken
test-armhf-armhf-xl-cubietruck broken
test-amd64-amd64-xl-qemuu-dmrestrict-amd64-dmrestrict pass
test-amd64-i386-xl-qemuu-dmrestrict-amd64-dmrestrict pass
test-amd64-i386-freebsd10-i386 pass
test-amd64-amd64-qemuu-nested-intel pass
test-amd64-amd64-xl-pvhv2-intel pass
test-amd64-i386-qemut-rhel6hvm-intel pass
test-amd64-i386-qemuu-rhel6hvm-intel pass
test-amd64-amd64-dom0pvh-xl-intel pass
test-amd64-amd64-libvirt pass
test-armhf-armhf-libvirt broken
test-amd64-i386-libvirt pass
test-amd64-amd64-livepatch pass
test-amd64-i386-livepatch pass
test-amd64-amd64-migrupgrade pass
test-amd64-i386-migrupgrade pass
test-amd64-amd64-xl-multivcpu pass
test-armhf-armhf-xl-multivcpu broken
test-amd64-amd64-pair pass
test-amd64-i386-pair pass
test-amd64-amd64-libvirt-pair pass
test-amd64-i386-libvirt-pair pass
test-amd64-amd64-xl-pvshim pass
test-amd64-i386-xl-pvshim fail
test-amd64-amd64-pygrub pass
test-armhf-armhf-libvirt-qcow2 broken
test-amd64-amd64-xl-qcow2 pass
test-arm64-arm64-libvirt-raw pass
test-armhf-armhf-libvirt-raw broken
test-amd64-i386-libvirt-raw pass
test-amd64-amd64-xl-rtds pass
test-armhf-armhf-xl-rtds broken
test-arm64-arm64-xl-seattle starved
test-amd64-amd64-xl-qemuu-debianhvm-amd64-shadow pass
test-amd64-i386-xl-qemuu-debianhvm-amd64-shadow pass
test-amd64-amd64-xl-shadow pass
test-amd64-i386-xl-shadow pass
test-arm64-arm64-xl-thunderx pass
test-amd64-amd64-libvirt-vhd pass
test-arm64-arm64-xl-vhd pass
test-armhf-armhf-xl-vhd broken
test-amd64-i386-xl-vhd pass
------------------------------------------------------------
sg-report-flight on osstest.test-lab.xenproject.org
logs: /home/logs/logs
images: /home/logs/images
Logs, config files, etc. are available at
http://logs.test-lab.xenproject.org/osstest/logs
Explanation of these reports, and of osstest in general, is at
http://xenbits.xen.org/gitweb/?p=osstest.git;a=blob;f=README.email;hb=master
http://xenbits.xen.org/gitweb/?p=osstest.git;a=blob;f=README;hb=master
Test harness code can be found at
http://xenbits.xen.org/gitweb?p=osstest.git;a=summary
broken-job test-armhf-armhf-libvirt broken
broken-job test-armhf-armhf-libvirt-qcow2 broken
broken-job test-armhf-armhf-libvirt-raw broken
broken-job test-armhf-armhf-xl broken
broken-job test-armhf-armhf-xl-arndale broken
broken-job test-armhf-armhf-xl-credit1 broken
broken-job test-armhf-armhf-xl-credit2 broken
broken-job test-armhf-armhf-xl-cubietruck broken
broken-job test-armhf-armhf-xl-multivcpu broken
broken-job test-armhf-armhf-xl-rtds broken
broken-job test-armhf-armhf-xl-vhd broken
broken-step test-armhf-armhf-libvirt-qcow2 host-install(5)
broken-step test-armhf-armhf-xl-credit1 host-install(5)
broken-step test-armhf-armhf-xl-credit1 capture-logs(6)
broken-step test-armhf-armhf-libvirt-qcow2 capture-logs(6)
broken-step test-armhf-armhf-xl-vhd host-install(5)
broken-step test-armhf-armhf-libvirt-raw host-install(5)
broken-step test-armhf-armhf-libvirt-raw capture-logs(6)
broken-step test-armhf-armhf-libvirt host-install(5)
broken-step test-armhf-armhf-libvirt capture-logs(6)
broken-step test-armhf-armhf-xl-credit2 host-install(5)
broken-step test-armhf-armhf-xl-multivcpu host-install(5)
broken-step test-armhf-armhf-xl-arndale host-install(5)
broken-step test-armhf-armhf-xl-credit2 capture-logs(6)
broken-step test-armhf-armhf-xl-rtds host-install(5)
broken-step test-armhf-armhf-xl-multivcpu capture-logs(6)
broken-step test-armhf-armhf-xl host-install(5)
broken-step test-armhf-armhf-xl-vhd capture-logs(6)
broken-step test-armhf-armhf-xl-rtds capture-logs(6)
broken-step test-armhf-armhf-xl-arndale capture-logs(6)
broken-step test-armhf-armhf-xl capture-logs(6)
broken-step test-armhf-armhf-xl-cubietruck host-install(5)
broken-step test-armhf-armhf-xl-cubietruck capture-logs(6)
broken-job test-amd64-i386-qemut-rhel6hvm-intel broken
broken-job build-arm64-xsm broken
broken-job build-arm64-pvops broken
broken-job build-armhf broken
broken-job test-amd64-i386-xl-qemut-ws16-amd64 broken
Not pushing.
------------------------------------------------------------
commit 2f8851c37f88e4eb4858e16626fcb2379db71a4f
Author: Jason Andryuk <jandryuk@gmail.com>
Date: Thu Jan 26 11:00:24 2023 +0100
Revert "tools/xenstore: simplify loop handling connection I/O"
I'm observing guest kexec trigger xenstored to abort on a double free.
gdb output:
Program received signal SIGABRT, Aborted.
__pthread_kill_implementation (no_tid=0, signo=6, threadid=140645614258112) at ./nptl/pthread_kill.c:44
44 ./nptl/pthread_kill.c: No such file or directory.
(gdb) bt
at ./nptl/pthread_kill.c:44
at ./nptl/pthread_kill.c:78
at ./nptl/pthread_kill.c:89
at ../sysdeps/posix/raise.c:26
at talloc.c:119
ptr=ptr@entry=0x559fae724290) at talloc.c:232
at xenstored_core.c:2945
(gdb) frame 5
at talloc.c:119
119 TALLOC_ABORT("Bad talloc magic value - double free");
(gdb) frame 7
at xenstored_core.c:2945
2945 talloc_increase_ref_count(conn);
(gdb) p conn
$1 = (struct connection *) 0x559fae724290
Looking at a xenstore trace, we have:
IN 0x559fae71f250 20230120 17:40:53 READ (/local/domain/3/image/device-model-dom
id )
wrl: dom 0 1 msec 10000 credit 1000000 reserve 100 disc
ard
wrl: dom 3 1 msec 10000 credit 1000000 reserve 100 disc
ard
wrl: dom 0 0 msec 10000 credit 1000000 reserve 0 disc
ard
wrl: dom 3 0 msec 10000 credit 1000000 reserve 0 disc
ard
OUT 0x559fae71f250 20230120 17:40:53 ERROR (ENOENT )
wrl: dom 0 1 msec 10000 credit 1000000 reserve 100 disc
ard
wrl: dom 3 1 msec 10000 credit 1000000 reserve 100 disc
ard
IN 0x559fae71f250 20230120 17:40:53 RELEASE (3 )
DESTROY watch 0x559fae73f630
DESTROY watch 0x559fae75ddf0
DESTROY watch 0x559fae75ec30
DESTROY watch 0x559fae75ea60
DESTROY watch 0x559fae732c00
DESTROY watch 0x559fae72cea0
DESTROY watch 0x559fae728fc0
DESTROY watch 0x559fae729570
DESTROY connection 0x559fae724290
orphaned node /local/domain/3/device/suspend/event-channel deleted
orphaned node /local/domain/3/device/vbd/51712 deleted
orphaned node /local/domain/3/device/vkbd/0 deleted
orphaned node /local/domain/3/device/vif/0 deleted
orphaned node /local/domain/3/control/shutdown deleted
orphaned node /local/domain/3/control/feature-poweroff deleted
orphaned node /local/domain/3/control/feature-reboot deleted
orphaned node /local/domain/3/control/feature-suspend deleted
orphaned node /local/domain/3/control/feature-s3 deleted
orphaned node /local/domain/3/control/feature-s4 deleted
orphaned node /local/domain/3/control/sysrq deleted
orphaned node /local/domain/3/data deleted
orphaned node /local/domain/3/drivers deleted
orphaned node /local/domain/3/feature deleted
orphaned node /local/domain/3/attr deleted
orphaned node /local/domain/3/error deleted
orphaned node /local/domain/3/console/backend-id deleted
and no further output.
The trace shows that DESTROY was called for connection 0x559fae724290,
but that is the same pointer (conn) main() was looping through from
connections. So it wasn't actually removed from the connections list?
Reverting commit e8e6e42279a5 "tools/xenstore: simplify loop handling
connection I/O" fixes the abort/double free. I think the use of
list_for_each_entry_safe is incorrect. list_for_each_entry_safe makes
traversal safe for deleting the current iterator, but RELEASE/do_release
will delete some other entry in the connections list. I think the
observed abort is because list_for_each_entry has next pointing to the
deleted connection, and it is used in the subsequent iteration.
Add a comment explaining the unsuitability of list_for_each_entry_safe.
Also notice that the old code takes a reference on next which would
prevents a use-after-free.
This reverts commit e8e6e42279a5723239c5c40ba4c7f579a979465d.
This is XSA-425/CVE-2022-42330.
Fixes: e8e6e42279a5 ("tools/xenstore: simplify loop handling connection I/O")
Signed-off-by: Jason Andryuk <jandryuk@gmail.com>
Reviewed-by: Juergen Gross <jgross@suse.com>
Reviewed-by: Julien Grall <jgrall@amazon.com>
(qemu changes not included)
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2023-01-28 0:39 UTC | newest]
Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2023-01-28 0:38 [xen-4.17-testing test] 176250: trouble: broken/fail/pass/starved osstest service owner
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.