linux-azure: main(): sched_setscheduler(): Operation not permitted

Bug #1942092 reported by Marcelo Cerri
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
ubuntu-kernel-tests
New
Undecided
Marcelo Cerri
linux-azure (Ubuntu)
New
Undecided
Unassigned
Trusty
New
Undecided
Unassigned
Xenial
New
Undecided
Unassigned
Bionic
Invalid
Undecided
Unassigned
Focal
Fix Released
Undecided
Unassigned
Hirsute
Fix Released
Undecided
Unassigned
linux-azure-4.15 (Ubuntu)
New
Undecided
Unassigned
Trusty
Invalid
Undecided
Unassigned
Xenial
Invalid
Undecided
Unassigned
Bionic
New
Undecided
Unassigned
Focal
Invalid
Undecided
Unassigned
Hirsute
Invalid
Undecided
Unassigned
linux-azure-5.11 (Ubuntu)
New
Undecided
Unassigned
Trusty
Invalid
Undecided
Unassigned
Xenial
Invalid
Undecided
Unassigned
Bionic
Invalid
Undecided
Unassigned
Focal
Fix Released
Undecided
Unassigned
Hirsute
Invalid
Undecided
Unassigned
linux-azure-5.4 (Ubuntu)
New
Undecided
Unassigned
Trusty
Invalid
Undecided
Unassigned
Xenial
Invalid
Undecided
Unassigned
Bionic
Fix Released
Undecided
Unassigned
Focal
Invalid
Undecided
Unassigned
Hirsute
Invalid
Undecided
Unassigned
linux-azure-5.8 (Ubuntu)
New
Undecided
Unassigned
Trusty
Invalid
Undecided
Unassigned
Xenial
Invalid
Undecided
Unassigned
Bionic
Invalid
Undecided
Unassigned
Focal
New
Undecided
Unassigned
Hirsute
Invalid
Undecided
Unassigned

Bug Description

[Impact]

We have several regressions with RT and ADT with the azure kernels. The tests seem to fail when calling sched_setscheduler() or with related operations. This was probably introduced by LP:#1939024 that enabled CONFIG_RT_GROUP_SCHED.

We should revert this change until we better understand the impact it can cause.

* ubuntu_ltp_stable

The ltp syscall regression test is failing for all the azure kernels with:

main(): sched_setscheduler(): Operation not permitted

http://10.246.75.167/2021.08.16/hirsute/linux-azure/5.11.0-1014.15/sru-azure-azure-Standard_A2_v2-ubuntu_ltp_stable-log.txt

* ubuntu_qrt_apparmor

Error: syscall_setscheduler failed. Test 'syscall_setscheduler -- unconfined' was expected to 'pass'. Reason for failure 'FAIL: Can't set SCHED_RR: Operation not permitted'

Error: syscall_setscheduler failed. Test 'syscall_setscheduler -- unconfined' was expected to 'pass'. Reason for failure 'FAIL: Can't set SCHED_RR: Operation not permitted'

* systemd ADT (Hirsute)

https://autopkgtest.ubuntu.com/results/autopkgtest-hirsute/hirsute/amd64/s/systemd/20210827_233206_a2599@/log.gz

[Test Plan]

The kernel should pass the regression and adt tests.

[Where problems could occur]

CVE References

Marcelo Cerri (mhcerri)
tags: added: 4.15 5.11 5.4 azure bionic focal hirsute kqa-blocker sru-20210816 trusty ubuntu-ltp-stable ubuntu-qrt-apparmor xenial
Changed in linux-azure (Ubuntu Bionic):
status: New → Invalid
Changed in linux-azure-5.11 (Ubuntu Trusty):
status: New → Invalid
Changed in linux-azure-5.11 (Ubuntu Xenial):
status: New → Invalid
Changed in linux-azure-5.11 (Ubuntu Bionic):
status: New → Invalid
Changed in linux-azure-5.11 (Ubuntu Hirsute):
status: New → Invalid
Changed in linux-azure-4.15 (Ubuntu Trusty):
status: New → Invalid
Changed in linux-azure-4.15 (Ubuntu Xenial):
status: New → Invalid
Changed in linux-azure-4.15 (Ubuntu Focal):
status: New → Invalid
Changed in linux-azure-4.15 (Ubuntu Hirsute):
status: New → Invalid
Marcelo Cerri (mhcerri)
Changed in linux-azure-5.4 (Ubuntu Xenial):
status: New → Invalid
Changed in linux-azure-5.4 (Ubuntu Trusty):
status: New → Invalid
Changed in linux-azure-5.4 (Ubuntu Focal):
status: New → Invalid
Changed in linux-azure-5.4 (Ubuntu Hirsute):
status: New → Invalid
Changed in linux-azure-5.8 (Ubuntu Trusty):
status: New → Invalid
Changed in linux-azure-5.8 (Ubuntu Xenial):
status: New → Invalid
Changed in linux-azure-5.8 (Ubuntu Bionic):
status: New → Invalid
Changed in linux-azure-5.8 (Ubuntu Hirsute):
status: New → Invalid
Revision history for this message
Ubuntu Kernel Bot (ubuntu-kernel-bot) wrote :

This bug is awaiting verification that the kernel in -proposed solves the problem. Please test the kernel and update this bug with the results. If the problem is solved, change the tag 'verification-needed-focal' to 'verification-done-focal'. If the problem still exists, change the tag 'verification-needed-focal' to 'verification-failed-focal'.

If verification is not done by 5 working days from today, this fix will be dropped from the source code, and this bug will be closed.

See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you!

tags: added: verification-needed-focal
Revision history for this message
Marcelo Cerri (mhcerri) wrote :

Confirmed with the kernel regression tests that the problem was solved. Marking verification as done.

tags: added: verification-done-focal
removed: verification-needed-focal
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (63.8 KiB)

This bug was fixed in the package linux-azure-5.11 - 5.11.0-1015.16~20.04.1

---------------
linux-azure-5.11 (5.11.0-1015.16~20.04.1) focal; urgency=medium

  * focal/linux-azure-5.11: 5.11.0-1015.16~20.04.1 -proposed tracker
    (LP: #1942125)

  [ Ubuntu: 5.11.0-1015.16 ]

  * hirsute/linux-azure: 5.11.0-1015.16 -proposed tracker (LP: #1942116)
  * linux-azure: main(): sched_setscheduler(): Operation not permitted
    (LP: #1942092)
    - Revert "UBUNTU: [Config] azure: CONFIG_RT_GROUP_SCHED=y"
  * hirsute/linux: 5.11.0-34.36 -proposed tracker (LP: #1941766)
  * Server boot failure after adding checks for ACPI IRQ override (LP: #1941657)
    - Revert "ACPI: resources: Add checks for ACPI IRQ override"

linux-azure-5.11 (5.11.0-1014.15~20.04.1) focal; urgency=medium

  * focal/linux-azure-5.11: 5.11.0-1014.15~20.04.1 -proposed tracker
    (LP: #1939759)

  * Hirsute update: upstream stable patchset 2021-07-28 (LP: #1938340)
    - updateconfigs for PSTORE_BLK (BROKEN)

  [ Ubuntu: 5.11.0-1014.15 ]

  * hirsute/linux-azure: 5.11.0-1014.15 -proposed tracker (LP: #1939760)
  * Hirsute update: upstream stable patchset 2021-07-19 (LP: #1936863)
    - [Config] enable CONFIG_SYSTEM_REVOCATION_LIST
    - [Config] update annotations for XILINX_ZYNQMP_DPDMA
  * Hirsute update: upstream stable patchset 2021-07-28 (LP: #1938340)
    - updateconfigs for PSTORE_BLK (BROKEN)
  * Support builtin revoked certificates (LP: #1932029)
    - [Config] Configure CONFIG_SYSTEM_REVOCATION_KEYS with revoked keys
  * linux-azure Enable CONFIG_RT_GROUP_SCHED (LP: #1939024)
    - [Config] azure: CONFIG_RT_GROUP_SCHED=y
  * hirsute/linux: 5.11.0-33.35 -proposed tracker (LP: #1940101)
  * libvirtd fails to create VM (LP: #1940107)
    - sched: Stop PF_NO_SETAFFINITY from being inherited by various init system
      threads
  * hirsute/linux: 5.11.0-32.34 -proposed tracker (LP: #1939769)
  * Packaging resync (LP: #1786013)
    - debian/dkms-versions -- update from kernel-versions (main/2021.08.16)
  * CVE-2021-3656
    - SAUCE: KVM: nSVM: always intercept VMLOAD/VMSAVE when nested
  * CVE-2021-3653
    - SAUCE: KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl
  * [regression] USB device is not detected during boot (LP: #1939638)
    - SAUCE: Revert "usb: core: reduce power-on-good delay time of root hub"
  * Support builtin revoked certificates (LP: #1932029)
    - [Packaging] build canonical-revoked-certs.pem from branch/arch certs
    - [Packaging] Revoke 2012 UEFI signing certificate as built-in
    - [Config] Configure CONFIG_SYSTEM_REVOCATION_KEYS with revoked keys
  * Support importing mokx keys into revocation list from the mok table
    (LP: #1928679)
    - SAUCE: integrity: add informational messages when revoking certs
  * Support importing mokx keys into revocation list from the mok table
    (LP: #1928679) // CVE-2020-26541 when certificates are revoked via
    MokListXRT.
    - SAUCE: integrity: Load mokx certs from the EFI MOK config table
  * Include product_sku info to modalias (LP: #1938143)
    - firmware/dmi: Include product_sku info to modalias
  * Fix Ethernet not working by hotplug - RTL8106E (LP: #1930645)
    - net: phy: rename PHY_IG...

Changed in linux-azure-5.11 (Ubuntu Focal):
status: New → Fix Released
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (37.7 KiB)

This bug was fixed in the package linux-azure - 5.4.0-1058.60

---------------
linux-azure (5.4.0-1058.60) focal; urgency=medium

  * focal/linux-azure: 5.4.0-1058.60 -proposed tracker (LP: #1942117)

  * linux-azure: main(): sched_setscheduler(): Operation not permitted
    (LP: #1942092)
    - Revert "UBUNTU: [Config] azure: CONFIG_RT_GROUP_SCHED=y"

  [ Ubuntu: 5.4.0-84.94 ]

  * focal/linux: 5.4.0-84.94 -proposed tracker (LP: #1941767)
  * Server boot failure after adding checks for ACPI IRQ override (LP: #1941657)
    - Revert "ACPI: resources: Add checks for ACPI IRQ override"

linux-azure (5.4.0-1057.59) focal; urgency=medium

  * focal/linux-azure: 5.4.0-1057.59 -proposed tracker (LP: #1939775)

  * Focal update: v5.4.129 upstream stable release (LP: #1936242)
    - [Config] enable CONFIG_SYSTEM_REVOCATION_LIST

  * linux-azure Enable CONFIG_RT_GROUP_SCHED (LP: #1939024)
    - [Config] azure: CONFIG_RT_GROUP_SCHED=y

  * Sync to SGX 1.33.2 (LP: #1936240)
    - SAUCE: ubuntu/sgx: backport fixes to 1.33
    - SAUCE: ubuntu/sgx: missing synchronize_srcu call before cleanup
    - SAUCE: ubuntu/sgx: fix a synchronization issue for mmput
    - SAUCE: ubuntu/sgx: look for exported symbols in Makefile
    - SAUCE: ubuntu/sgx: hardening compiler options
    - SAUCE: ubuntu/sgx: Fix signed integer overflow on shift
    - SAUCE: ubuntu/sgx: move use space header
    - SAUCE: ubuntu/sgx: Version 1.33.2

  [ Ubuntu: 5.4.0-83.93 ]

  * focal/linux: 5.4.0-83.93 -proposed tracker (LP: #1940159)
  * fails to launch linux L2 guests on AMD (LP: #1940134) // CVE-2021-3653
    - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl
      (CVE-2021-3653)
  * fails to launch linux L2 guests on AMD (LP: #1940134)
    - SAUCE: Revert "UBUNTU: SAUCE: KVM: nSVM: avoid picking up unsupported bits
      from L2 in int_ctl"

  [ Ubuntu: 5.4.0-82.92 ]

  * focal/linux: 5.4.0-82.92 -proposed tracker (LP: #1939799)
  * Packaging resync (LP: #1786013)
    - debian/dkms-versions -- update from kernel-versions (main/2021.08.16)
  * CVE-2021-3656
    - SAUCE: KVM: nSVM: always intercept VMLOAD/VMSAVE when nested
  * CVE-2021-3653
    - SAUCE: KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl
  * [regression] USB device is not detected during boot (LP: #1939638)
    - SAUCE: Revert "usb: core: reduce power-on-good delay time of root hub"
  * dev_forward_skb: do not scrub skb mark within the same name space
    (LP: #1935040)
    - dev_forward_skb: do not scrub skb mark within the same name space
  * XPS 9510 (TGL) Screen Brightness could not be changed (LP: #1933566)
    - SAUCE: drm/i915: Force DPCD backlight mode for Dell XPS 9510(TGL)
  * Acer Aspire 5 sound driver issues (LP: #1930188)
    - ALSA: hda/realtek: headphone and mic don't work on an Acer laptop
  * Sony Dualshock 4 usb dongle crashes the whole system (LP: #1935846)
    - HID: sony: Workaround for DS4 dongle hotplug kernel crash.
  * [21.10 FEAT] KVM: Provide a secure guest indication (LP: #1933173)
    - s390/uv: add prot virt guest/host indication files
    - s390/uv: fix prot virt host indication compilation
  * Skip rtcpie test in kselftests/timers if the default RTC device does ...

Changed in linux-azure (Ubuntu Focal):
status: New → Fix Released
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (63.5 KiB)

This bug was fixed in the package linux-azure - 5.11.0-1015.16

---------------
linux-azure (5.11.0-1015.16) hirsute; urgency=medium

  * hirsute/linux-azure: 5.11.0-1015.16 -proposed tracker (LP: #1942116)

  * linux-azure: main(): sched_setscheduler(): Operation not permitted
    (LP: #1942092)
    - Revert "UBUNTU: [Config] azure: CONFIG_RT_GROUP_SCHED=y"

  [ Ubuntu: 5.11.0-34.36 ]

  * hirsute/linux: 5.11.0-34.36 -proposed tracker (LP: #1941766)
  * Server boot failure after adding checks for ACPI IRQ override (LP: #1941657)
    - Revert "ACPI: resources: Add checks for ACPI IRQ override"

linux-azure (5.11.0-1014.15) hirsute; urgency=medium

  * hirsute/linux-azure: 5.11.0-1014.15 -proposed tracker (LP: #1939760)

  * Hirsute update: upstream stable patchset 2021-07-19 (LP: #1936863)
    - [Config] enable CONFIG_SYSTEM_REVOCATION_LIST
    - [Config] update annotations for XILINX_ZYNQMP_DPDMA

  * Hirsute update: upstream stable patchset 2021-07-28 (LP: #1938340)
    - updateconfigs for PSTORE_BLK (BROKEN)

  * Support builtin revoked certificates (LP: #1932029)
    - [Config] Configure CONFIG_SYSTEM_REVOCATION_KEYS with revoked keys

  * linux-azure Enable CONFIG_RT_GROUP_SCHED (LP: #1939024)
    - [Config] azure: CONFIG_RT_GROUP_SCHED=y

  [ Ubuntu: 5.11.0-33.35 ]

  * hirsute/linux: 5.11.0-33.35 -proposed tracker (LP: #1940101)
  * libvirtd fails to create VM (LP: #1940107)
    - sched: Stop PF_NO_SETAFFINITY from being inherited by various init system
      threads

  [ Ubuntu: 5.11.0-32.34 ]

  * hirsute/linux: 5.11.0-32.34 -proposed tracker (LP: #1939769)
  * Packaging resync (LP: #1786013)
    - debian/dkms-versions -- update from kernel-versions (main/2021.08.16)
  * CVE-2021-3656
    - SAUCE: KVM: nSVM: always intercept VMLOAD/VMSAVE when nested
  * CVE-2021-3653
    - SAUCE: KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl
  * [regression] USB device is not detected during boot (LP: #1939638)
    - SAUCE: Revert "usb: core: reduce power-on-good delay time of root hub"
  * Support builtin revoked certificates (LP: #1932029)
    - [Packaging] build canonical-revoked-certs.pem from branch/arch certs
    - [Packaging] Revoke 2012 UEFI signing certificate as built-in
    - [Config] Configure CONFIG_SYSTEM_REVOCATION_KEYS with revoked keys
  * Support importing mokx keys into revocation list from the mok table
    (LP: #1928679)
    - SAUCE: integrity: add informational messages when revoking certs
  * Support importing mokx keys into revocation list from the mok table
    (LP: #1928679) // CVE-2020-26541 when certificates are revoked via
    MokListXRT.
    - SAUCE: integrity: Load mokx certs from the EFI MOK config table
  * Include product_sku info to modalias (LP: #1938143)
    - firmware/dmi: Include product_sku info to modalias
  * Fix Ethernet not working by hotplug - RTL8106E (LP: #1930645)
    - net: phy: rename PHY_IGNORE_INTERRUPT to PHY_MAC_INTERRUPT
    - SAUCE: r8169: Use PHY_POLL when RTL8106E enable ASPM
  * [SRU][H/OEM-5.10/OEM-5.13/U] Fix system hang after unplug tbt dock
    (LP: #1938689)
    - SAUCE: igc: fix page fault when thunderbolt is unplugged
  * [Regression] Audio card [8086:9d71] not detec...

Changed in linux-azure (Ubuntu Hirsute):
status: New → Fix Released
Revision history for this message
Launchpad Janitor (janitor) wrote :
Download full text (37.8 KiB)

This bug was fixed in the package linux-azure-5.4 - 5.4.0-1058.60~18.04.1

---------------
linux-azure-5.4 (5.4.0-1058.60~18.04.1) bionic; urgency=medium

  * bionic/linux-azure-5.4: 5.4.0-1058.60~18.04.1 -proposed tracker
    (LP: #1942138)

  [ Ubuntu: 5.4.0-1058.60 ]

  * focal/linux-azure: 5.4.0-1058.60 -proposed tracker (LP: #1942117)
  * linux-azure: main(): sched_setscheduler(): Operation not permitted
    (LP: #1942092)
    - Revert "UBUNTU: [Config] azure: CONFIG_RT_GROUP_SCHED=y"
  * focal/linux: 5.4.0-84.94 -proposed tracker (LP: #1941767)
  * Server boot failure after adding checks for ACPI IRQ override (LP: #1941657)
    - Revert "ACPI: resources: Add checks for ACPI IRQ override"

linux-azure-5.4 (5.4.0-1057.59~18.04.1) bionic; urgency=medium

  * bionic/linux-azure-5.4: 5.4.0-1057.59~18.04.1 -proposed tracker
    (LP: #1939774)

  [ Ubuntu: 5.4.0-1057.59 ]

  * focal/linux-azure: 5.4.0-1057.59 -proposed tracker (LP: #1939775)
  * Focal update: v5.4.129 upstream stable release (LP: #1936242)
    - [Config] enable CONFIG_SYSTEM_REVOCATION_LIST
  * linux-azure Enable CONFIG_RT_GROUP_SCHED (LP: #1939024)
    - [Config] azure: CONFIG_RT_GROUP_SCHED=y
  * Sync to SGX 1.33.2 (LP: #1936240)
    - SAUCE: ubuntu/sgx: backport fixes to 1.33
    - SAUCE: ubuntu/sgx: missing synchronize_srcu call before cleanup
    - SAUCE: ubuntu/sgx: fix a synchronization issue for mmput
    - SAUCE: ubuntu/sgx: look for exported symbols in Makefile
    - SAUCE: ubuntu/sgx: hardening compiler options
    - SAUCE: ubuntu/sgx: Fix signed integer overflow on shift
    - SAUCE: ubuntu/sgx: move use space header
    - SAUCE: ubuntu/sgx: Version 1.33.2
  * focal/linux: 5.4.0-83.93 -proposed tracker (LP: #1940159)
  * fails to launch linux L2 guests on AMD (LP: #1940134) // CVE-2021-3653
    - KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl
      (CVE-2021-3653)
  * fails to launch linux L2 guests on AMD (LP: #1940134)
    - SAUCE: Revert "UBUNTU: SAUCE: KVM: nSVM: avoid picking up unsupported bits
      from L2 in int_ctl"
  * focal/linux: 5.4.0-82.92 -proposed tracker (LP: #1939799)
  * Packaging resync (LP: #1786013)
    - debian/dkms-versions -- update from kernel-versions (main/2021.08.16)
  * CVE-2021-3656
    - SAUCE: KVM: nSVM: always intercept VMLOAD/VMSAVE when nested
  * CVE-2021-3653
    - SAUCE: KVM: nSVM: avoid picking up unsupported bits from L2 in int_ctl
  * [regression] USB device is not detected during boot (LP: #1939638)
    - SAUCE: Revert "usb: core: reduce power-on-good delay time of root hub"
  * dev_forward_skb: do not scrub skb mark within the same name space
    (LP: #1935040)
    - dev_forward_skb: do not scrub skb mark within the same name space
  * XPS 9510 (TGL) Screen Brightness could not be changed (LP: #1933566)
    - SAUCE: drm/i915: Force DPCD backlight mode for Dell XPS 9510(TGL)
  * Acer Aspire 5 sound driver issues (LP: #1930188)
    - ALSA: hda/realtek: headphone and mic don't work on an Acer laptop
  * Sony Dualshock 4 usb dongle crashes the whole system (LP: #1935846)
    - HID: sony: Workaround for DS4 dongle hotplug kernel crash.
  * [21.10 FEAT] KVM: Provide a secure guest indication (LP: #1933173)
   ...

Changed in linux-azure-5.4 (Ubuntu Bionic):
status: New → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.