https://bugzilla.suse.com/show_bug.cgi?id=1186332 https://bugzilla.suse.com/show_bug.cgi?id=1186332#c1 Takashi Iwai changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |colyli@suse.com, | |tiwai@suse.com --- Comment #1 from Takashi Iwai --- Something weird about kcrypt dm stuff, judging from the output. Adding Coly to Cc. -- You are receiving this mail because: You are on the CC list for the bug.

https://bugzilla.suse.com/show_bug.cgi?id=1186332 https://bugzilla.suse.com/show_bug.cgi?id=1186332#c3 --- Comment #3 from Coly Li --- (In reply to Petr Tesa����k from comment #0)

Created attachment 849559 [details] dmesg after lockup

I've just experienced a kernel stall on my Lenovo Thinkpad X270, attached.

At this point I have no idea how to proceed, and no, I cannot reproduce the hang at will.

The information is very limited. I understand there is no more stack trace, and I can only guess what happened. I see one fix is about using an encrypted swap device, do you encrypt the swap partition ? Thanks. Coly Li -- You are receiving this mail because: You are on the CC list for the bug.

https://bugzilla.suse.com/show_bug.cgi?id=1186332 https://bugzilla.suse.com/show_bug.cgi?id=1186332#c5 --- Comment #5 from Coly Li --- (In reply to Coly Li from comment #4)

(In reply to Coly Li from comment #3)

...

(In reply to Petr Tesa����k from comment #0)

...

Created attachment 849559 [details] dmesg after lockup

I've just experienced a kernel stall on my Lenovo Thinkpad X270, attached.

At this point I have no idea how to proceed, and no, I cannot reproduce the hang at will.

The information is very limited. I understand there is no more stack trace, and I can only guess what happened.

I see one fix is about using an encrypted swap device, do you encrypt the swap partition ?

I see some suspicious and necessary fixes from dm-crypt deadlocking.

commit 528b16bfc3ae ("dm crypt: Avoid percpu_counter spinlock contention in crypt_page_alloc()") commit c87a95dc28b1 ("dm crypt: defer decryption to a tasklet if interrupts disabled") commit a666e5c05e7c ("dm: fix deadlock when swapping to encrypted device")

Let me try to do the backport.

It turns out only the last patch is potential helpful to this workqueue blocking condition. I start to test this backport. Coly Li -- You are receiving this mail because: You are on the CC list for the bug.

https://bugzilla.suse.com/show_bug.cgi?id=1186332 https://bugzilla.suse.com/show_bug.cgi?id=1186332#c7 --- Comment #7 from Coly Li --- (In reply to Coly Li from comment #6)

...

...

commit a666e5c05e7c ("dm: fix deadlock when swapping to encrypted device")

Since there is no further information or clue for the deadlock, I assume there is swap I/O hitting encrypted device. And btw, the idea of limiting swap I/O on encrypted device looks interesting, it may also be helpful for Bug #1177529, which causes deadlock for swap I/O on dm-thin device.

This patch breaks our KABI, let me do more KABI fix and testing before submitting it to our tree.

The kABI issue is solved. Patches for SLE15-SP2 are submitted, patches for SLE15-SP3 are under testing now. Coly Li -- You are receiving this mail because: You are on the CC list for the bug.

https://bugzilla.suse.com/show_bug.cgi?id=1186332 https://bugzilla.suse.com/show_bug.cgi?id=1186332#c15 --- Comment #15 from Swamp Workflow Management --- openSUSE-SU-2022:0056-1: An update that solves 14 vulnerabilities and has 62 fixes is now available. Category: security (important) Bug References: 1139944,1151927,1152489,1153275,1154353,1154355,1161907,1164565,1166780,1169514,1176242,1176447,1176536,1176544,1176545,1176546,1176548,1176558,1176559,1176774,1176940,1176956,1177440,1178134,1178270,1179211,1179424,1179426,1179427,1179599,1181148,1181507,1181710,1182404,1183534,1183540,1183897,1184318,1185726,1185902,1186332,1187541,1189126,1189158,1191793,1191876,1192267,1192320,1192507,1192511,1192569,1192606,1192691,1192845,1192847,1192874,1192877,1192946,1192969,1192987,1192990,1192998,1193002,1193042,1193139,1193169,1193306,1193318,1193349,1193440,1193442,1193655,1193993,1194087,1194094,1194266 CVE References: CVE-2020-24504,CVE-2020-27820,CVE-2021-28711,CVE-2021-28712,CVE-2021-28713,CVE-2021-28714,CVE-2021-28715,CVE-2021-33098,CVE-2021-4001,CVE-2021-4002,CVE-2021-43975,CVE-2021-43976,CVE-2021-45485,CVE-2021-45486 JIRA References: Sources used: openSUSE Leap 15.3 (src): kernel-azure-5.3.18-38.34.1, kernel-source-azure-5.3.18-38.34.1, kernel-syms-azure-5.3.18-38.34.1 -- You are receiving this mail because: You are on the CC list for the bug.

https://bugzilla.suse.com/show_bug.cgi?id=1186332 https://bugzilla.suse.com/show_bug.cgi?id=1186332#c17 --- Comment #17 from Swamp Workflow Management --- SUSE-SU-2022:0079-1: An update that solves 14 vulnerabilities, contains four features and has 58 fixes is now available. Category: security (important) Bug References: 1139944,1151927,1152489,1153275,1154353,1154355,1161907,1164565,1166780,1169514,1176242,1176447,1176536,1176544,1176545,1176546,1176548,1176558,1176559,1176774,1176940,1176956,1177440,1178134,1178270,1179211,1179426,1179427,1179599,1181148,1181507,1181710,1182404,1183534,1183540,1183897,1184318,1185726,1185902,1186332,1187541,1189126,1191793,1191876,1192267,1192320,1192507,1192511,1192569,1192606,1192845,1192847,1192877,1192946,1192969,1192987,1192990,1192998,1193002,1193042,1193139,1193169,1193306,1193318,1193349,1193440,1193442,1193655,1193993,1194087,1194094,1194266 CVE References: CVE-2020-24504,CVE-2020-27820,CVE-2021-28711,CVE-2021-28712,CVE-2021-28713,CVE-2021-28714,CVE-2021-28715,CVE-2021-33098,CVE-2021-4001,CVE-2021-4002,CVE-2021-43975,CVE-2021-43976,CVE-2021-45485,CVE-2021-45486 JIRA References: ECO-3666,SLE-17823,SLE-20042,SLE-23139 Sources used: SUSE MicroOS 5.1 (src): kernel-rt-5.3.18-68.1 SUSE Linux Enterprise Module for Realtime 15-SP3 (src): kernel-rt-5.3.18-68.1, kernel-rt_debug-5.3.18-68.1, kernel-source-rt-5.3.18-68.1, kernel-syms-rt-5.3.18-68.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

https://bugzilla.suse.com/show_bug.cgi?id=1186332 https://bugzilla.suse.com/show_bug.cgi?id=1186332#c19 --- Comment #19 from Swamp Workflow Management --- openSUSE-SU-2022:0131-1: An update that solves 13 vulnerabilities, contains one feature and has 61 fixes is now available. Category: security (important) Bug References: 1139944,1151927,1152489,1153275,1154353,1154355,1161907,1164565,1166780,1169514,1176242,1176447,1176536,1176544,1176545,1176546,1176548,1176558,1176559,1176774,1176940,1176956,1177440,1178134,1178270,1179211,1179424,1179426,1179427,1179599,1181148,1181507,1181710,1182404,1183534,1183540,1183897,1184318,1185726,1185902,1186332,1187541,1189126,1189158,1191793,1191876,1192267,1192320,1192507,1192511,1192569,1192606,1192691,1192845,1192847,1192874,1192946,1192969,1192987,1192990,1192998,1193002,1193042,1193139,1193169,1193306,1193318,1193349,1193440,1193442,1193655,1193993,1194087,1194094 CVE References: CVE-2020-24504,CVE-2020-27820,CVE-2021-28711,CVE-2021-28712,CVE-2021-28713,CVE-2021-28714,CVE-2021-28715,CVE-2021-4001,CVE-2021-4002,CVE-2021-43975,CVE-2021-43976,CVE-2021-45485,CVE-2021-45486 JIRA References: SLE-22574 Sources used: openSUSE Leap 15.3 (src): dtb-aarch64-5.3.18-59.40.1, kernel-64kb-5.3.18-59.40.1, kernel-debug-5.3.18-59.40.1, kernel-default-5.3.18-59.40.1, kernel-default-base-5.3.18-59.40.1.18.25.1, kernel-docs-5.3.18-59.40.1, kernel-kvmsmall-5.3.18-59.40.1, kernel-obs-build-5.3.18-59.40.1, kernel-obs-qa-5.3.18-59.40.1, kernel-preempt-5.3.18-59.40.1, kernel-source-5.3.18-59.40.1, kernel-syms-5.3.18-59.40.1, kernel-zfcpdump-5.3.18-59.40.1 -- You are receiving this mail because: You are on the CC list for the bug.

https://bugzilla.suse.com/show_bug.cgi?id=1186332 https://bugzilla.suse.com/show_bug.cgi?id=1186332#c21 --- Comment #21 from Swamp Workflow Management --- openSUSE-SU-2022:0131-1: An update that solves 14 vulnerabilities, contains one feature and has 61 fixes is now available. Category: security (important) Bug References: 1139944,1151927,1152489,1153275,1154353,1154355,1161907,1164565,1166780,1169514,1176242,1176447,1176536,1176544,1176545,1176546,1176548,1176558,1176559,1176774,1176940,1176956,1177440,1178134,1178270,1179211,1179424,1179426,1179427,1179599,1181148,1181507,1181710,1182404,1183534,1183540,1183897,1184318,1185726,1185902,1186332,1187541,1189126,1189158,1191793,1191876,1192267,1192320,1192507,1192511,1192569,1192606,1192691,1192845,1192847,1192874,1192946,1192969,1192987,1192990,1192998,1193002,1193042,1193139,1193169,1193306,1193318,1193349,1193440,1193442,1193655,1193993,1194087,1194094,1195323 CVE References: CVE-2020-24504,CVE-2020-27820,CVE-2021-2032,CVE-2021-28711,CVE-2021-28712,CVE-2021-28713,CVE-2021-28714,CVE-2021-28715,CVE-2021-4001,CVE-2021-4002,CVE-2021-43975,CVE-2021-43976,CVE-2021-45485,CVE-2021-45486 JIRA References: SLE-22574 Sources used: openSUSE Leap 15.4 (src): keycloak-18.0.0-lp154.2.3.1 openSUSE Leap 15.3 (src): dtb-aarch64-5.3.18-59.40.1, kernel-64kb-5.3.18-59.40.1, kernel-debug-5.3.18-59.40.1, kernel-default-5.3.18-59.40.1, kernel-default-base-5.3.18-59.40.1.18.25.1, kernel-docs-5.3.18-59.40.1, kernel-kvmsmall-5.3.18-59.40.1, kernel-obs-build-5.3.18-59.40.1, kernel-obs-qa-5.3.18-59.40.1, kernel-preempt-5.3.18-59.40.1, kernel-source-5.3.18-59.40.1, kernel-syms-5.3.18-59.40.1, kernel-zfcpdump-5.3.18-59.40.1 -- You are receiving this mail because: You are on the CC list for the bug.