{"action":"created","issue":{"url":"https://api.github.com/repos/QubesOS/qubes-issues/issues/2044","repository_url":"https://api.github.com/repos/QubesOS/qubes-issues","labels_url":"https://api.github.com/repos/QubesOS/qubes-issues/issues/2044/labels{/name}","comments_url":"https://api.github.com/repos/QubesOS/qubes-issues/issues/2044/comments","events_url":"https://api.github.com/repos/QubesOS/qubes-issues/issues/2044/events","html_url":"https://github.com/QubesOS/qubes-issues/issues/2044","id":158449885,"number":2044,"title":"'timekeeping watchdog: Marking clocksource 'tsc' as unstable, because the skew is too large' - may lead to connection and privacy issues","user":{"login":"adrelanos","id":1985040,"avatar_url":"https://avatars.githubusercontent.com/u/1985040?v=3","gravatar_id":"","url":"https://api.github.com/users/adrelanos","html_url":"https://github.com/adrelanos","followers_url":"https://api.github.com/users/adrelanos/followers","following_url":"https://api.github.com/users/adrelanos/following{/other_user}","gists_url":"https://api.github.com/users/adrelanos/gists{/gist_id}","starred_url":"https://api.github.com/users/adrelanos/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/adrelanos/subscriptions","organizations_url":"https://api.github.com/users/adrelanos/orgs","repos_url":"https://api.github.com/users/adrelanos/repos","events_url":"https://api.github.com/users/adrelanos/events{/privacy}","received_events_url":"https://api.github.com/users/adrelanos/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/QubesOS/qubes-issues/labels/bug","name":"bug","color":"fc2929"},{"url":"https://api.github.com/repos/QubesOS/qubes-issues/labels/C:%20templates","name":"C: templates","color":"cccccc"},{"url":"https://api.github.com/repos/QubesOS/qubes-issues/labels/P:%20major","name":"P: major","color":"fbca04"},{"url":"https://api.github.com/repos/QubesOS/qubes-issues/labels/privacy","name":"privacy","color":"5319e7"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2016-06-03T20:37:49Z","updated_at":"2016-06-04T21:52:06Z","closed_at":null,"body":"#### Qubes OS version (e.g., `R3.1`):\r\n\r\nR3.1\r\n\r\n#### Affected TemplateVMs (e.g., `fedora-23`, if applicable):\r\n\r\ndebian-8, Fedora-23, Whonix 13, probably every template\r\n\r\n---\r\n\r\n### Actual behavior:\r\n\r\n```\r\nqvm-run --pass-io sys-firewall date ; date\r\n```\r\nA two seconds time draft. (VM clock is two seconds faster.)\r\n\r\nDoes not always happen. If I spot this in one already running VM, I spot this in any already running VM that I test.\r\n\r\n\r\n```\r\n[271095.072610] timekeeping watchdog: Marking clocksource 'tsc' as unstable, because the skew is too large:\r\n[271095.072619]         'xen' wd_now: f6aa707c0c8f wd_last: f6a8d4762faa mask: ffffffffffffffff\r\n[271095.072624]         'tsc' cs_now: 1b6861d00 cs_last: 21d7172f2b8c4 mask: ffffffffffffffff\r\n```\r\n\r\n```\r\n[user@sys-firewall ~]$ dmesg | grep clock\r\n[    0.000000] clocksource refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns\r\n[    0.000000] clocksource xen: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns\r\n[    0.068803] clocksource jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns\r\n[    0.149025] Switched to clocksource xen\r\n[    1.160042] clocksource tsc: mask: 0xffffffffffffffff max_cycles: 0x1fa3ddc950a, max_idle_ns: 440795245325 ns\r\n[271095.072610] timekeeping watchdog: Marking clocksource 'tsc' as unstable, because the skew is too large:\r\n```\r\n\r\n```\r\n[user@sys-firewall ~]$ dmesg | grep time\r\n[    0.000000] Xen: using vcpuop timer interface\r\n[    0.000000] installing Xen timer for CPU 0\r\n[    0.001000] Calibrating delay loop (skipped), value calculated using timer frequency.. 4390.06 BogoMIPS (lpj=2195032)\r\n[    0.001000] AppArmor: AppArmor disabled by boot time parameter\r\n[    0.060351] installing Xen timer for CPU 1\r\n[    0.061365] installing Xen timer for CPU 2\r\n[    0.062398] installing Xen timer for CPU 3\r\n[    0.063370] installing Xen timer for CPU 4\r\n[    0.064337] installing Xen timer for CPU 5\r\n[    0.065292] installing Xen timer for CPU 6\r\n[    0.066241] installing Xen timer for CPU 7\r\n[    0.089007] RTC time: 165:165:165, date: 165/165/65\r\n[    1.797777] systemd-journald[174]: Received request to flush runtime journal from PID 1\r\n[271095.072610] timekeeping watchdog: Marking clocksource 'tsc' as unstable, because the skew is too large:\r\n```\r\n\r\nFull dmesg attached below.\r\n\r\n### Expected behavior:\r\n\r\nNone of this should be happening.\r\n\r\n### Steps to reproduce the behavior:\r\n\r\nNo cause / effect witnessed yet. Please run `dmesg | grep clock` in your AppVMs every now and then (on various computers). If we are lucky you will be able to reproduce it yourself.\r\n\r\n### General notes:\r\n\r\nImpact: Anonymity / Whonix is affected by this bug. Might break connectivity for some users. (#1779) On my systems, I witnessed only small skews yet, but for other users it may be much bigger and therefore causing Tor connection interruptions. Possibly also worsening privacy / fingerprinting.\r\n\r\n---\r\n\r\n#### Related issues:\r\n\r\n#1779\r\n\r\n---\r\n\r\n```\r\n[    0.000000] PAT configuration [0-7]: WB  WT  UC- UC  WC  WP  UC  UC  \r\n[    0.000000] Initializing cgroup subsys cpuset\r\n[    0.000000] Initializing cgroup subsys cpu\r\n[    0.000000] Initializing cgroup subsys cpuacct\r\n[    0.000000] Linux version 4.1.13-9.pvops.qubes.x86_64 (user@release) (gcc version 4.8.3 20140911 (Red Hat 4.8.3-7) (GCC) ) #1 SMP Thu Feb 11 15:46:02 UTC 2016\r\n[    0.000000] Command line: root=/dev/mapper/dmroot ro nomodeset console=hvc0 rd_NO_PLYMOUTH 3 nopat\r\n[    0.000000] ACPI in unprivileged domain disabled\r\n[    0.000000] Released 0 page(s)\r\n[    0.000000] e820: BIOS-provided physical RAM map:\r\n[    0.000000] Xen: [mem 0x0000000000000000-0x000000000009ffff] usable\r\n[    0.000000] Xen: [mem 0x00000000000a0000-0x00000000000fffff] reserved\r\n[    0.000000] Xen: [mem 0x0000000000100000-0x00000000bb7fffff] usable\r\n[    0.000000] PAT support disabled.\r\n[    0.000000] NX (Execute Disable) protection: active\r\n[    0.000000] DMI not present or invalid.\r\n[    0.000000] Hypervisor detected: Xen\r\n[    0.000000] e820: update [mem 0x00000000-0x00000fff] usable ==> reserved\r\n[    0.000000] e820: remove [mem 0x000a0000-0x000fffff] usable\r\n[    0.000000] e820: last_pfn = 0xbb800 max_arch_pfn = 0x400000000\r\n[    0.000000] Base memory trampoline at [ffff88000009a000] 9a000 size 24576\r\n[    0.000000] init_memory_mapping: [mem 0x00000000-0x000fffff]\r\n[    0.000000]  [mem 0x00000000-0x000fffff] page 4k\r\n[    0.000000] init_memory_mapping: [mem 0x12a00000-0x12bfffff]\r\n[    0.000000]  [mem 0x12a00000-0x12bfffff] page 4k\r\n[    0.000000] BRK [0x0201f000, 0x0201ffff] PGTABLE\r\n[    0.000000] init_memory_mapping: [mem 0x00100000-0x129fffff]\r\n[    0.000000]  [mem 0x00100000-0x129fffff] page 4k\r\n[    0.000000] init_memory_mapping: [mem 0x12c00000-0xbb7fffff]\r\n[    0.000000]  [mem 0x12c00000-0xbb7fffff] page 4k\r\n[    0.000000] BRK [0x02020000, 0x02020fff] PGTABLE\r\n[    0.000000] BRK [0x02021000, 0x02021fff] PGTABLE\r\n[    0.000000] BRK [0x02022000, 0x02022fff] PGTABLE\r\n[    0.000000] BRK [0x02023000, 0x02023fff] PGTABLE\r\n[    0.000000] BRK [0x02024000, 0x02024fff] PGTABLE\r\n[    0.000000] RAMDISK: [mem 0x02046000-0x027dcfff]\r\n[    0.000000] NUMA turned off\r\n[    0.000000] Faking a node at [mem 0x0000000000000000-0x00000000bb7fffff]\r\n[    0.000000] NODE_DATA(0) allocated [mem 0x1262a000-0x1263dfff]\r\n[    0.000000] Zone ranges:\r\n[    0.000000]   DMA      [mem 0x0000000000001000-0x0000000000ffffff]\r\n[    0.000000]   DMA32    [mem 0x0000000001000000-0x00000000bb7fffff]\r\n[    0.000000]   Normal   empty\r\n[    0.000000] Movable zone start for each node\r\n[    0.000000] Early memory node ranges\r\n[    0.000000]   node   0: [mem 0x0000000000001000-0x000000000009ffff]\r\n[    0.000000]   node   0: [mem 0x0000000000100000-0x00000000bb7fffff]\r\n[    0.000000] Initmem setup node 0 [mem 0x0000000000001000-0x00000000bb7fffff]\r\n[    0.000000] On node 0 totalpages: 767903\r\n[    0.000000]   DMA zone: 64 pages used for memmap\r\n[    0.000000]   DMA zone: 21 pages reserved\r\n[    0.000000]   DMA zone: 3999 pages, LIFO batch:0\r\n[    0.000000]   DMA32 zone: 11936 pages used for memmap\r\n[    0.000000]   DMA32 zone: 763904 pages, LIFO batch:31\r\n[    0.000000] p2m virtual area at ffffc90000000000, size is 600000\r\n[    0.000000] Remapped 0 page(s)\r\n[    0.000000] SFI: Simple Firmware Interface v0.81 http://simplefirmware.org\r\n[    0.000000] smpboot: Allowing 8 CPUs, 0 hotplug CPUs\r\n[    0.000000] e820: [mem 0xbb800000-0xffffffff] available for PCI devices\r\n[    0.000000] Booting paravirtualized kernel on Xen\r\n[    0.000000] Xen version: 4.6.0 (preserve-AD)\r\n[    0.000000] clocksource refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns\r\n[    0.000000] setup_percpu: NR_CPUS:64 nr_cpumask_bits:64 nr_cpu_ids:8 nr_node_ids:1\r\n[    0.000000] PERCPU: Embedded 34 pages/cpu @ffff88000ec00000 s101080 r8192 d29992 u262144\r\n[    0.000000] pcpu-alloc: s101080 r8192 d29992 u262144 alloc=1*2097152\r\n[    0.000000] pcpu-alloc: [0] 0 1 2 3 4 5 6 7 \r\n[    0.000000] xen: PV spinlocks enabled\r\n[    0.000000] Built 1 zonelists in Node order, mobility grouping on.  Total pages: 755882\r\n[    0.000000] Policy zone: DMA32\r\n[    0.000000] Kernel command line: root=/dev/mapper/dmroot ro nomodeset console=hvc0 rd_NO_PLYMOUTH 3 nopat\r\n[    0.000000] PID hash table entries: 4096 (order: 3, 32768 bytes)\r\n[    0.000000] xsave: enabled xstate_bv 0x7, cntxt size 0x340 using standard form\r\n[    0.000000] Memory: 219700K/3071612K available (7578K kernel code, 1219K rwdata, 3272K rodata, 1504K init, 1464K bss, 2851912K reserved, 0K cma-reserved)\r\n[    0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=8, Nodes=1\r\n[    0.000000] Hierarchical RCU implementation.\r\n[    0.000000] \tRCU dyntick-idle grace-period acceleration is enabled.\r\n[    0.000000] \tRCU restricting CPUs from NR_CPUS=64 to nr_cpu_ids=8.\r\n[    0.000000] RCU: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=8\r\n[    0.000000] NR_IRQS:4352 nr_irqs:144 16\r\n[    0.000000] xen:events: Using FIFO-based ABI\r\n[    0.000000] \tOffload RCU callbacks from all CPUs\r\n[    0.000000] \tOffload RCU callbacks from CPUs: 0-7.\r\n[    0.000000] Console: colour dummy device 80x25\r\n[    0.000000] console [tty0] enabled\r\n[    0.000000] console [hvc0] enabled\r\n[    0.000000] clocksource xen: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns\r\n[    0.000000] Xen: using vcpuop timer interface\r\n[    0.000000] installing Xen timer for CPU 0\r\n[    0.000000] tsc: Detected 2195.032 MHz processor\r\n[    0.001000] Calibrating delay loop (skipped), value calculated using timer frequency.. 4390.06 BogoMIPS (lpj=2195032)\r\n[    0.001000] pid_max: default: 32768 minimum: 301\r\n[    0.001000] Security Framework initialized\r\n[    0.001000] AppArmor: AppArmor disabled by boot time parameter\r\n[    0.001000] Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes)\r\n[    0.001423] Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes)\r\n[    0.001679] Mount-cache hash table entries: 8192 (order: 4, 65536 bytes)\r\n[    0.001693] Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes)\r\n[    0.001888] Initializing cgroup subsys blkio\r\n[    0.001895] Initializing cgroup subsys memory\r\n[    0.001907] Initializing cgroup subsys devices\r\n[    0.001913] Initializing cgroup subsys freezer\r\n[    0.001918] Initializing cgroup subsys net_cls\r\n[    0.001924] Initializing cgroup subsys perf_event\r\n[    0.001930] Initializing cgroup subsys net_prio\r\n[    0.001936] Initializing cgroup subsys hugetlb\r\n[    0.001985] ENERGY_PERF_BIAS: Set to 'normal', was 'performance'\r\n[    0.001989] ENERGY_PERF_BIAS: View and update with x86_energy_perf_policy(8)\r\n[    0.001995] CPU: Physical Processor ID: 0\r\n[    0.001999] CPU: Processor Core ID: 1\r\n[    0.002798] Last level iTLB entries: 4KB 1024, 2MB 1024, 4MB 1024\r\n[    0.002802] Last level dTLB entries: 4KB 1024, 2MB 1024, 4MB 1024, 1GB 4\r\n[    0.027351] ftrace: allocating 27794 entries in 109 pages\r\n[    0.032050] cpu 0 spinlock event irq 17\r\n[    0.039131] Performance Events: unsupported p6 CPU model 70 no PMU driver, software events only.\r\n[    0.039645] NMI watchdog: disabled (cpu0): hardware events not enabled\r\n[    0.039649] NMI watchdog: Shutting down hard lockup detector on all cpus\r\n[    0.039705] SMP alternatives: switching to SMP code\r\n[    0.060351] installing Xen timer for CPU 1\r\n[    0.060366] cpu 1 spinlock event irq 24\r\n[    0.061365] installing Xen timer for CPU 2\r\n[    0.061374] cpu 2 spinlock event irq 31\r\n[    0.062398] installing Xen timer for CPU 3\r\n[    0.062404] cpu 3 spinlock event irq 38\r\n[    0.063370] installing Xen timer for CPU 4\r\n[    0.063377] cpu 4 spinlock event irq 45\r\n[    0.064337] installing Xen timer for CPU 5\r\n[    0.064344] cpu 5 spinlock event irq 52\r\n[    0.065292] installing Xen timer for CPU 6\r\n[    0.065299] cpu 6 spinlock event irq 59\r\n[    0.066241] installing Xen timer for CPU 7\r\n[    0.066248] cpu 7 spinlock event irq 66\r\n[    0.067135] x86: Booted up 1 node, 8 CPUs\r\n[    0.067193] devtmpfs: initialized\r\n[    0.068803] clocksource jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns\r\n[    0.069012] atomic64_test: passed for x86-64 platform with CX8 and with SSE\r\n[    0.069018] pinctrl core: initialized pinctrl subsystem\r\n[    0.089007] RTC time: 165:165:165, date: 165/165/65\r\n[    0.089127] NET: Registered protocol family 16\r\n[    0.089149] xen:grant_table: Grant tables using version 1 layout\r\n[    0.089157] Grant table initialized\r\n[    0.089379] PCI: setting up Xen PCI frontend stub\r\n[    0.089385] PCI: pci_cache_line_size set to 64 bytes\r\n[    0.093079] ACPI: Interpreter disabled.\r\n[    0.093079] xen:balloon: Initialising balloon driver\r\n[    0.100018] xen_balloon: Initialising balloon driver\r\n[    0.100037] vgaarb: loaded\r\n[    0.100057] SCSI subsystem initialized\r\n[    0.100083] libata version 3.00 loaded.\r\n[    0.100083] usbcore: registered new interface driver usbfs\r\n[    0.100083] usbcore: registered new interface driver hub\r\n[    0.100083] usbcore: registered new device driver usb\r\n[    0.100128] PCI: System does not support PCI\r\n[    0.100128] PCI: System does not support PCI\r\n[    0.100128] NetLabel: Initializing\r\n[    0.100128] NetLabel:  domain hash size = 128\r\n[    0.100128] NetLabel:  protocols = UNLABELED CIPSOv4\r\n[    0.100128] NetLabel:  unlabeled traffic allowed by default\r\n[    0.149025] Switched to clocksource xen\r\n[    0.153214] pnp: PnP ACPI: disabled\r\n[    0.154680] NET: Registered protocol family 2\r\n[    0.154834] TCP established hash table entries: 32768 (order: 6, 262144 bytes)\r\n[    0.154930] TCP bind hash table entries: 32768 (order: 7, 524288 bytes)\r\n[    0.154976] TCP: Hash tables configured (established 32768 bind 32768)\r\n[    0.154995] UDP hash table entries: 2048 (order: 4, 65536 bytes)\r\n[    0.155019] UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes)\r\n[    0.155058] NET: Registered protocol family 1\r\n[    0.155071] PCI: CLS 0 bytes, default 64\r\n[    0.155105] Unpacking initramfs...\r\n[    0.160131] Freeing initrd memory: 7772K (ffff880002046000 - ffff8800027dd000)\r\n[    0.160227] platform rtc_cmos: registered platform RTC device (no PNP device found)\r\n[    0.160796] AVX2 version of gcm_enc/dec engaged.\r\n[    0.160800] AES CTR mode by8 optimization enabled\r\n[    0.162047] alg: No test for __gcm-aes-aesni (__driver-gcm-aes-aesni)\r\n[    0.162367] futex hash table entries: 2048 (order: 5, 131072 bytes)\r\n[    0.162387] Initialise system trusted keyring\r\n[    0.162404] audit: initializing netlink subsys (disabled)\r\n[    0.162414] audit: type=2000 audit(1464686860.700:1): initialized\r\n[    0.162607] HugeTLB registered 2 MB page size, pre-allocated 0 pages\r\n[    0.163535] zpool: loaded\r\n[    0.163540] zbud: loaded\r\n[    0.163663] VFS: Disk quotas dquot_6.6.0\r\n[    0.163687] VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes)\r\n[    0.163961] Key type big_key registered\r\n[    0.164420] alg: No test for stdrng (krng)\r\n[    0.164430] NET: Registered protocol family 38\r\n[    0.164439] Key type asymmetric registered\r\n[    0.164443] Asymmetric key parser 'x509' registered\r\n[    0.164469] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 252)\r\n[    0.164531] io scheduler noop registered\r\n[    0.164535] io scheduler deadline registered\r\n[    0.164561] io scheduler cfq registered (default)\r\n[    0.164617] pci_hotplug: PCI Hot Plug PCI Core version: 0.5\r\n[    0.164629] pciehp: PCI Express Hot Plug Controller Driver version: 0.4\r\n[    0.164650] intel_idle: does not run on family 6 model 70\r\n[    0.164786] xen:xen_evtchn: Event-channel device installed\r\n[    0.165091] Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled\r\n[    0.165394] Non-volatile memory driver v1.3\r\n[    0.165424] Linux agpgart interface v0.103\r\n[    0.165975] libphy: Fixed MDIO Bus: probed\r\n[    0.166036] usbcore: registered new interface driver usbserial\r\n[    0.166044] usbcore: registered new interface driver usbserial_generic\r\n[    0.166052] usbserial: USB Serial support registered for generic\r\n[    0.166067] i8042: PNP: No PS/2 controller found. Probing ports directly.\r\n[    1.160042] clocksource tsc: mask: 0xffffffffffffffff max_cycles: 0x1fa3ddc950a, max_idle_ns: 440795245325 ns\r\n[    1.176408] i8042: No controller found\r\n[    1.176511] mousedev: PS/2 mouse device common for all mice\r\n[    1.196638] rtc_cmos rtc_cmos: rtc core: registered rtc_cmos as rtc0\r\n[    1.196709] rtc_cmos: probe of rtc_cmos failed with error -38\r\n[    1.196778] device-mapper: uevent: version 1.0.3\r\n[    1.196854] device-mapper: ioctl: 4.31.0-ioctl (2015-3-12) initialised: dm-devel@redhat.com\r\n[    1.196941] hidraw: raw HID events driver (C) Jiri Kosina\r\n[    1.196977] usbcore: registered new interface driver usbhid\r\n[    1.196981] usbhid: USB HID core driver\r\n[    1.197019] drop_monitor: Initializing network drop monitor service\r\n[    1.197078] ip_tables: (C) 2000-2006 Netfilter Core Team\r\n[    1.197314] Initializing XFRM netlink socket\r\n[    1.197388] NET: Registered protocol family 10\r\n[    1.197588] mip6: Mobile IPv6\r\n[    1.197596] NET: Registered protocol family 17\r\n[    1.197605] mce: Unable to init device /dev/mcelog (rc: -5)\r\n[    1.197781] Loading compiled-in X.509 certificates\r\n[    1.197795] registered taskstats version 1\r\n[    1.197858] xenbus_probe_frontend: Device with no driver: device/vbd/51712\r\n[    1.197864] xenbus_probe_frontend: Device with no driver: device/vbd/51728\r\n[    1.197868] xenbus_probe_frontend: Device with no driver: device/vbd/51744\r\n[    1.197873] xenbus_probe_frontend: Device with no driver: device/vbd/51760\r\n[    1.197877] xenbus_probe_frontend: Device with no driver: device/vif/0\r\n[    1.197937]   Magic number: 1:252:3141\r\n[    1.197960] hctosys: unable to open rtc device (rtc0)\r\n[    1.198409] Freeing unused kernel memory: 1504K (ffffffff81d32000 - ffffffff81eaa000)\r\n[    1.198415] Write protecting the kernel read-only data: 12288k\r\n[    1.200693] Freeing unused kernel memory: 604K (ffff880001769000 - ffff880001800000)\r\n[    1.200937] Freeing unused kernel memory: 824K (ffff880001b32000 - ffff880001c00000)\r\n[    1.203962] random: modprobe urandom read with 38 bits of entropy available\r\n[    1.216108] blkfront: xvda: flush diskcache: enabled; persistent grants: enabled; indirect descriptors: enabled;\r\n[    1.229243] blkfront: xvdb: flush diskcache: enabled; persistent grants: enabled; indirect descriptors: enabled;\r\n[    1.235364] blkfront: xvdc: flush diskcache: enabled; persistent grants: enabled; indirect descriptors: enabled;\r\n[    1.239219] blkfront: xvdd: barrier or flush: disabled; persistent grants: enabled; indirect descriptors: enabled;\r\n[    1.334371]  xvdc: xvdc1 xvdc2\r\n[    1.367029] EXT4-fs (dm-0): couldn't mount as ext3 due to feature incompatibilities\r\n[    1.367121] EXT4-fs (dm-0): couldn't mount as ext2 due to feature incompatibilities\r\n[    1.367762] EXT4-fs (dm-0): mounted filesystem with ordered data mode. Opts: (null)\r\n[    1.370004] EXT4-fs (xvdd): mounting ext3 file system using the ext4 subsystem\r\n[    1.370425] EXT4-fs (xvdd): mounted filesystem with ordered data mode. Opts: (null)\r\n[    1.409008] random: nonblocking pool is initialized\r\n[    1.423375] systemd[1]: systemd 222 running in system mode. (+PAM +AUDIT +SELINUX +IMA -APPARMOR +SMACK +SYSVINIT +UTMP +LIBCRYPTSETUP +GCRYPT +GNUTLS +ACL +XZ -LZ4 +SECCOMP +BLKID +ELFUTILS +KMOD +IDN)\r\n[    1.423423] systemd[1]: Detected virtualization xen.\r\n[    1.423433] systemd[1]: Detected architecture x86-64.\r\n[    1.423841] systemd[1]: No hostname configured.\r\n[    1.423851] systemd[1]: Set hostname to <localhost>.\r\n[    1.464233] systemd[1]: Started Forward Password Requests to Wall Directory Watch.\r\n[    1.464253] systemd[1]: Starting Forward Password Requests to Wall Directory Watch.\r\n[    1.464344] systemd[1]: Reached target Remote File Systems.\r\n[    1.464354] systemd[1]: Starting Remote File Systems.\r\n[    1.464593] systemd[1]: Created slice Root Slice.\r\n[    1.464602] systemd[1]: Starting Root Slice.\r\n[    1.464711] systemd[1]: Listening on Journal Audit Socket.\r\n[    1.464720] systemd[1]: Starting Journal Audit Socket.\r\n[    1.464785] systemd[1]: Listening on udev Control Socket.\r\n[    1.464794] systemd[1]: Starting udev Control Socket.\r\n[    1.464856] systemd[1]: Listening on /dev/initctl Compatibility Named Pipe.\r\n[    1.464864] systemd[1]: Starting /dev/initctl Compatibility Named Pipe.\r\n[    1.464925] systemd[1]: Listening on Journal Socket (/dev/log).\r\n[    1.464933] systemd[1]: Starting Journal Socket (/dev/log).\r\n[    1.464987] systemd[1]: Listening on udev Kernel Socket.\r\n[    1.464995] systemd[1]: Starting udev Kernel Socket.\r\n[    1.465072] systemd[1]: Listening on Journal Socket.\r\n[    1.465085] systemd[1]: Starting Journal Socket.\r\n[    1.465211] systemd[1]: Created slice User and Session Slice.\r\n[    1.465220] systemd[1]: Starting User and Session Slice.\r\n[    1.465338] systemd[1]: Created slice System Slice.\r\n[    1.465351] systemd[1]: Starting System Slice.\r\n[    1.466141] systemd[1]: Starting Journal Service...\r\n[    1.466322] systemd[1]: Created slice system-serial\\x2dgetty.slice.\r\n[    1.466339] systemd[1]: Starting system-serial\\x2dgetty.slice.\r\n[    1.561456] systemd[1]: Mounting Huge Pages File System...\r\n[    1.562708] systemd[1]: Mounting Debug File System...\r\n[    1.562870] systemd[1]: Reached target Slices.\r\n[    1.562896] systemd[1]: Starting Slices.\r\n[    1.564379] systemd[1]: Starting Load Kernel Modules...\r\n[    1.564664] systemd[1]: Created slice system-getty.slice.\r\n[    1.564693] systemd[1]: Starting system-getty.slice.\r\n[    1.565776] systemd[1]: Starting Load legacy module configuration...\r\n[    1.567146] systemd[1]: Starting Setup Virtual Console...\r\n[    1.568162] systemd[1]: Mounting POSIX Message Queue File System...\r\n[    1.569729] systemd[1]: Starting Create list of required static device nodes for the current kernel...\r\n[    1.569948] systemd[1]: tmp.mount: Directory /tmp to mount over is not empty, mounting anyway.\r\n[    1.571185] systemd[1]: Mounting Temporary Directory...\r\n[    1.571578] systemd[1]: Set up automount Arbitrary Executable File Formats File System Automount Point.\r\n[    1.571619] systemd[1]: Starting Arbitrary Executable File Formats File System Automount Point.\r\n[    1.571870] systemd[1]: Started Set Up Additional Binary Formats.\r\n[    1.573227] systemd[1]: Starting File System Check on Root Device...\r\n[    1.574577] systemd[1]: Mounting /proc/xen...\r\n[    1.574756] systemd[1]: Reached target Encrypted Volumes.\r\n[    1.574796] systemd[1]: Starting Encrypted Volumes.\r\n[    1.576325] systemd[1]: Mounted POSIX Message Queue File System.\r\n[    1.576403] systemd[1]: Mounted Huge Pages File System.\r\n[    1.576477] systemd[1]: Mounted Debug File System.\r\n[    1.576541] systemd[1]: Mounted Temporary Directory.\r\n[    1.576780] systemd[1]: Started Journal Service.\r\n[    1.576933] audit: type=1130 audit(1464686862.114:2): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-journald comm=\"systemd\" exe=\"/usr/lib/systemd/systemd\" hostname=? addr=? terminal=? res=success'\r\n[    1.577058] dummy_hcd dummy_hcd.0: USB Host+Gadget Emulator, driver 02 May 2005\r\n[    1.577071] dummy_hcd dummy_hcd.0: Dummy host controller\r\n[    1.577153] dummy_hcd dummy_hcd.0: new USB bus registered, assigned bus number 1\r\n[    1.577201] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002\r\n[    1.577208] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1\r\n[    1.577216] usb usb1: Product: Dummy host controller\r\n[    1.577223] usb usb1: Manufacturer: Linux 4.1.13-9.pvops.qubes.x86_64 dummy_hcd\r\n[    1.577229] usb usb1: SerialNumber: dummy_hcd.0\r\n[    1.577378] hub 1-0:1.0: USB hub found\r\n[    1.577390] hub 1-0:1.0: 1 port detected\r\n[    1.760971] audit: type=1130 audit(1464686862.298:3): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=fedora-loadmodules comm=\"systemd\" exe=\"/usr/lib/systemd/systemd\" hostname=? addr=? terminal=? res=success'\r\n[    1.761407] audit: type=1130 audit(1464686862.299:4): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-vconsole-setup comm=\"systemd\" exe=\"/usr/lib/systemd/systemd\" hostname=? addr=? terminal=? res=success'\r\n[    1.761926] audit: type=1130 audit(1464686862.299:5): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-modules-load comm=\"systemd\" exe=\"/usr/lib/systemd/systemd\" hostname=? addr=? terminal=? res=success'\r\n[    1.762309] audit: type=1130 audit(1464686862.300:6): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=kmod-static-nodes comm=\"systemd\" exe=\"/usr/lib/systemd/systemd\" hostname=? addr=? terminal=? res=success'\r\n[    1.778778] audit: type=1130 audit(1464686862.316:7): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-sysctl comm=\"systemd\" exe=\"/usr/lib/systemd/systemd\" hostname=? addr=? terminal=? res=success'\r\n[    1.781481] audit: type=1130 audit(1464686862.319:8): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-fsck-root comm=\"systemd\" exe=\"/usr/lib/systemd/systemd\" hostname=? addr=? terminal=? res=success'\r\n[    1.786044] EXT4-fs (dm-0): re-mounted. Opts: (null)\r\n[    1.789829] audit: type=1130 audit(1464686862.327:9): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-remount-fs comm=\"systemd\" exe=\"/usr/lib/systemd/systemd\" hostname=? addr=? terminal=? res=success'\r\n[    1.797777] systemd-journald[174]: Received request to flush runtime journal from PID 1\r\n[    1.801683] audit: type=1130 audit(1464686862.339:10): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-tmpfiles-setup-dev comm=\"systemd\" exe=\"/usr/lib/systemd/systemd\" hostname=? addr=? terminal=? res=success'\r\n[    1.849964] input: PC Speaker as /devices/platform/pcspkr/input/input0\r\n[    1.868373] xen_netfront: Initialising Xen virtual ethernet driver\r\n[    1.961446] alg: No test for crc32 (crc32-pclmul)\r\n[    2.031553] nf_conntrack version 0.5.0 (1800 buckets, 7200 max)\r\n[    4.742400] Adding 1048572k swap on /dev/xvdc1.  Priority:-1 extents:1 across:1048572k SSFS\r\n[    5.052849] ip6_tables: (C) 2000-2006 Netfilter Core Team\r\n[    5.080762] EXT4-fs (xvdb): mounted filesystem with ordered data mode. Opts: discard\r\n[    6.233084] IPv6: ADDRCONF(NETDEV_UP): vif3.0: link is not ready\r\n[    8.225068] vif vif-3-0 vif3.0: Guest Rx ready\r\n[    8.225102] IPv6: ADDRCONF(NETDEV_CHANGE): vif3.0: link becomes ready\r\n[   24.108738] fuse init (API version 7.23)\r\n[  157.464424] IPv6: ADDRCONF(NETDEV_UP): vif4.0: link is not ready\r\n[  159.660716] vif vif-4-0 vif4.0: Guest Rx ready\r\n[  159.660741] IPv6: ADDRCONF(NETDEV_CHANGE): vif4.0: link becomes ready\r\n[  160.787419] IPv6: ADDRCONF(NETDEV_UP): vif5.0: link is not ready\r\n[  162.878026] vif vif-5-0 vif5.0: Guest Rx ready\r\n[  162.878078] IPv6: ADDRCONF(NETDEV_CHANGE): vif5.0: link becomes ready\r\n[  164.996558] IPv6: ADDRCONF(NETDEV_UP): vif6.0: link is not ready\r\n[  167.380294] vif vif-6-0 vif6.0: Guest Rx ready\r\n[  167.380314] IPv6: ADDRCONF(NETDEV_CHANGE): vif6.0: link becomes ready\r\n[  411.620162] IPv6: ADDRCONF(NETDEV_UP): vif8.0: link is not ready\r\n[  413.701255] vif vif-8-0 vif8.0: Guest Rx ready\r\n[  413.701285] IPv6: ADDRCONF(NETDEV_CHANGE): vif8.0: link becomes ready\r\n[ 4020.216591] IPv6: ADDRCONF(NETDEV_UP): vif9.0: link is not ready\r\n[ 4022.336079] vif vif-9-0 vif9.0: Guest Rx ready\r\n[ 4022.336099] IPv6: ADDRCONF(NETDEV_CHANGE): vif9.0: link becomes ready\r\n[26299.580600] IPv6: ADDRCONF(NETDEV_UP): vif11.0: link is not ready\r\n[26302.059399] vif vif-11-0 vif11.0: Guest Rx ready\r\n[26302.059420] IPv6: ADDRCONF(NETDEV_CHANGE): vif11.0: link becomes ready\r\n[271095.072610] timekeeping watchdog: Marking clocksource 'tsc' as unstable, because the skew is too large:\r\n[271095.072619] \t'xen' wd_now: f6aa707c0c8f wd_last: f6a8d4762faa mask: ffffffffffffffff\r\n[271095.072624] \t'tsc' cs_now: 1b6861d00 cs_last: 21d7172f2b8c4 mask: ffffffffffffffff\r\n[272910.669973] IPv6: ADDRCONF(NETDEV_UP): vif16.0: link is not ready\r\n[272913.183980] vif vif-16-0 vif16.0: Guest Rx ready\r\n[272913.183998] IPv6: ADDRCONF(NETDEV_CHANGE): vif16.0: link becomes ready\r\n[285388.035112] IPv6: ADDRCONF(NETDEV_UP): vif17.0: link is not ready\r\n[285390.265269] vif vif-17-0 vif17.0: Guest Rx ready\r\n[285390.265291] IPv6: ADDRCONF(NETDEV_CHANGE): vif17.0: link becomes ready\r\n```"},"comment":{"url":"https://api.github.com/repos/QubesOS/qubes-issues/issues/comments/223780269","html_url":"https://github.com/QubesOS/qubes-issues/issues/2044#issuecomment-223780269","issue_url":"https://api.github.com/repos/QubesOS/qubes-issues/issues/2044","id":223780269,"user":{"login":"marmarek","id":726704,"avatar_url":"https://avatars.githubusercontent.com/u/726704?v=3","gravatar_id":"","url":"https://api.github.com/users/marmarek","html_url":"https://github.com/marmarek","followers_url":"https://api.github.com/users/marmarek/followers","following_url":"https://api.github.com/users/marmarek/following{/other_user}","gists_url":"https://api.github.com/users/marmarek/gists{/gist_id}","starred_url":"https://api.github.com/users/marmarek/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/marmarek/subscriptions","organizations_url":"https://api.github.com/users/marmarek/orgs","repos_url":"https://api.github.com/users/marmarek/repos","events_url":"https://api.github.com/users/marmarek/events{/privacy}","received_events_url":"https://api.github.com/users/marmarek/received_events","type":"User","site_admin":false},"created_at":"2016-06-04T21:52:06Z","updated_at":"2016-06-04T21:52:06Z","body":"Does it happen after system suspend? That may cause `Marking clocksource 'tsc' as unstable` message.\r\nAs for the clock skew, clock synchronization mechanism in Qubes is quite inaccurate. First of all, it has 1 second precision. But then it is performed by:\r\n1. Call `date -u -Iseconds` in dom0.\r\n2. Pass the output to `qubes.SetDateTime` RPC service.\r\nThere may be arbitrary large time between those two, depending mostly on system load. In most cases it should be in order of milliseconds. Shouldn't be a problem for any connectivity.\r\n\r\nBut how that would lead to privacy problems? AFAIR you've told that slightly different time in VMs is actually a good thing for privacy. In addition to Whonix using its own time synchronization mechanism, it should actually improve privacy (`sys-net` and others have slightly different time than dom0, so even if dom0 time is leaked, it's hard to link it with any timestamp leaked through clearnet connections)."}}
{"actor":{"display_login":"marmarek"}}