From mboxrd@z Thu Jan 1 00:00:00 1970 From: Giovanni Bellac Subject: AW: 2.6.32.22 (amd64) domU Kernel doesnt boot - kernel panic Date: Thu, 23 Sep 2010 16:18:50 +0000 (GMT) Message-ID: <183020.68190.qm@web29709.mail.ird.yahoo.com> References: <181628.18427.qm@web29720.mail.ird.yahoo.com> <4C9A87D9.9050400@goop.org> Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="===============0116509474==" Return-path: In-Reply-To: <4C9A87D9.9050400@goop.org> List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: xen-devel-bounces@lists.xensource.com Errors-To: xen-devel-bounces@lists.xensource.com To: Jeremy Fitzhardinge Cc: xen-devel@lists.xensource.com List-Id: xen-devel@lists.xenproject.org --===============0116509474== Content-Type: multipart/alternative; boundary="0-1350879335-1285258730=:68190" --0-1350879335-1285258730=:68190 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hello=0A=0Ano, got a kernel panic too:=0A=0A[7257008.739405] SLUB: Genslabs= =3D14, HWalign=3D64, Order=3D0-3, MinObjects=3D0, =0ACPUs=3D4, = Nodes=3D1=0A[7257008.739427= ] Hierarchical RCU implementation.=0A[7257008.739432] NR_IRQS:2304=0A[72570= 08.739821] Console: colour dummy device 80x25=0A[7257008.739918] console [t= ty0] enabled=0A[7257008.740107] console [hvc0] enabled=0A[7257008.740137] i= nstalling Xen timer for CPU 0=0A[7257008.740160] BUG: unable to handle kern= el NULL pointer dereference at (null)=0A[7257008.740169] IP: [<(null)>] (nu= ll)=0A[7257008.740175] PGD 0=0A[7257008.740179] Thread overran stack, or st= ack corrupted=0A[7257008.740184] Oops: 0010 [#1] SMP=0A[7257008.740190] las= t sysfs file:=0A[7257008.740194] CPU 0=0A[7257008.740198] Modules linked in= :=0A[7257008.740205] Pid: 0, comm: swapper Not tainted 2.6.32.22 #1=0A[7257= 008.740210] RIP: e030:[<0000000000000000>] [<(null)>] (null)=0A[7257008.74= 0217] RSP: e02b:ffffffff81807da0 EFLAGS: 00010082=0A[7257008.740222] RAX: = ffffffff81b64a50 RBX: 0000000000000000 RCX: =0A00000000000002 = 00=0A[7257008.740229] RDX: 00= 00000000000000 RSI: ffffffff81b454a8 RDI: =0A00000000000000 = 00=0A[7257008.740235] RBP: ffff= ffff81807db8 R08: ffff88007fc18080 R09: =0Affffffff818957 = 30=0A[7257008.740241] R10: ffffff= ff81895750 R11: 0000000000000001 R12: =0Affffffff818292 = 40=0A[7257008.740248] R13: ffff8800= 7fc1b000 R14: 0000000000000000 R15: =0Affffffff818292 = a4=0A[7257008.740259] FS: 0000000000= 000000(0000) GS:ffff880001fd8000(0000) =0AknlGS:000 = =0A0000000000000=0A[7257008.740266] CS:= e033 DS: 0000 ES: 0000 CR0: 000000008005003b=0A[7257008.740272] CR2: 0000= 000000000000 CR3: 0000000001001000 CR4: =0A00000000000026 = 60=0A[7257008.740279] DR0: 000000= 0000000000 DR1: 0000000000000000 DR2: =0A00000000000000 = 00=0A[7257008.740286] DR3: 00000000= 00000000 DR6: 00000000ffff0ff0 DR7: =0A00000000000004 = 00=0A[7257008.740292] Process swapper= (pid: 0, threadinfo ffffffff81806000, task =0Affff = ffff818999f0)=0A[7257008.740299] Stack:= =0A[7257008.740302] ffffffff8107cac5 0000000000000000 00000000ffffffda =0A= ffffffff818 07dd= 8=0A[7257008.740312] <0> ffffffff8107caa5 ffffffff815a94b1 ffffffff81829240= =0Affffffff 818= 07e18=0A[7257008.740323] <0> ffffffff8107c009 0000000000000200 ffff88007fc1= b000 =0A00000000 = fffffff4=0A[7257008.740336] Call Trace:=0A[7257008.740346] [] ? default_enable+0x1a/0x28=0A[7257008.740354] [] = default_startup+0x19/0x1f=0A[7257008.740363] [] ? _spin_= lock_irqsave+0x19/0x32=0A[7257008.740371] [] __setup_irq= +0x197/0x2cf=0A[7257008.740379] [] ? xen_timer_interrupt= +0x0/0x182=0A[7257008.740386] [] request_threaded_irq+0x= ec/0x12b=0A[7257008.740396] [] bind_virq_to_irqhandler+0= x13f/0x163=0A[7257008.740404] [] ? xen_timer_interrupt+0= x0/0x182=0A[7257008.740411] [] xen_setup_timer+0x59/0x9e= =0A[7257008.740420] [] xen_time_init+0xb7/0xc0=0A[725700= 8.740427] [] x86_late_time_init+0xa/0x11=0A[7257008.7404= 34] [] start_kernel+0x2fe/0x385=0A[7257008.740441] [] x86_64_start_reservations+0xaa/0xae=0A[7257008.740448] [<= ffffffff8198ead2>] xen_start_kernel+0x541/0x548=0A[7257008.740453] Code: B= ad RIP value.=0A[7257008.740463] RIP [<(null)>] (null)=0A[7257008.740468] = RSP =0A[7257008.740472] CR2: 0000000000000000=0A[7257008= .740482] ---[ end trace 4eaa2a86a8e2da22 ]---=0A[7257008.740487] Kernel pan= ic - not syncing: Attempted to kill the idle task!=0A[7257008.740494] Pid: = 0, comm: swapper Tainted: G D 2.6.32.22 #1=0A[7257008.740499] Call = Trace:=0A[7257008.740504] [] panic+0xa0/0x158=0A[7257008= .740510] [] ? printk+0x67/0x69=0A[7257008.740519] [] ? blocking_notifier_call_chain+0xf/0x11=0A[7257008.740528] = [] do_exit+0x79/0x6c9=0A[7257008.740534] [] oops_end+0xb9/0xc1=0A[7257008.740541] [] no_conte= xt+0x1ea/0x1f9=0A[7257008.740547] [] __bad_area_nosemaph= ore+0x1b9/0x1df=0A[7257008.740556] [] ? __alloc_pages_no= demask+0x11a/0x5e7=0A[7257008.740563] [] ? xen_force_evt= chn_callback+0xd/0xf=0A[7257008.740570] [] ? check_event= s+0x12/0x20=0A[7257008.740576] [] bad_area_nosemaphore+0= xe/0x10=0A[7257008.740584] [] do_page_fault+0x1a0/0x2d6= =0A[7257008.740590] [] page_fault+0x25/0x30=0A[7257008.7= 40597] [] ? default_enable+0x1a/0x28=0A[7257008.740604] = [] default_startup+0x19/0x1f=0A[7257008.740611] [] ? _spin_lock_irqsave+0x19/0x32=0A[7257008.740617] [] __setup_irq+0x197/0x2cf=0A[7257008.740624] []= ? xen_timer_interrupt+0x0/0x182=0A[7257008.740631] [] r= equest_threaded_irq+0xec/0x12b=0A[7257008.740638] [] bin= d_virq_to_irqhandler+0x13f/0x163=0A[7257008.940292] [] ?= xen_timer_interrupt+0x0/0x182=0A[7257008.940305] [] xen= _setup_timer+0x59/0x9e=0A[7257008.940317] [] xen_time_in= it+0xb7/0xc0=0A[7257008.940327] [] x86_late_time_init+0x= a/0x11=0A[7257008.940336] [] start_kernel+0x2fe/0x385=0A= [7257008.940345] [] x86_64_start_reservations+0xaa/0xae= =0A[7257008.940355] [] xen_start_kernel+0x541/0x548=0A= =0A=0A=0ABest regards=0AGio=0A=0A=0A=0A=0A=0A______________________________= __=0AVon: Jeremy Fitzhardinge =0AAn: Giovanni Bellac =0ACC: xen-devel@lists.xensource.com=0AGesendet: Donner= stag, den 23. September 2010, 0:48:57 Uhr=0ABetreff: Re: [Xen-devel] 2.6.32= .22 (amd64) domU Kernel doesnt boot - kernel =0Apanic=0A=0AOn 09/21/2010 03= :02 AM, Giovanni Bellac wrote:=0A> Hello=0A>=0A> I have used my 2.6.32.20 c= onfig and compiled now a 2.6.32.22 from=0A> kernel.org.=0A> 2.6.32.22 has t= he important security fix (local user can be root with=0A> a exploit).=0A= =0ADoes this help?=0A=0AThanks,=0A J=0A=0AFrom: Jeremy Fitzhardinge =0ADate: Wed, 22 Sep 2010 15:28:52 -0700=0ASubj= ect: [PATCH] xen: set up IRQ before binding virq to evtchn=0A=0AMake sure t= he irq is set up before binding a virq event channel to it.=0A=0ASigned-off= -by: Jeremy Fitzhardinge =0A=0Adiff --git a= /drivers/xen/events.c b/drivers/xen/events.c=0Aindex 3132a5e..cd17f86 10064= 4=0A--- a/drivers/xen/events.c=0A+++ b/drivers/xen/events.c=0A@@ -426,6 +42= 6,11 @@ static int bind_virq_to_irq(unsigned int virq, unsigned int =0Acpu)= =0A irq =3D per_cpu(virq_to_irq, cpu)[virq];=0A=0A if (irq =3D=3D -1)= {=0A+ irq =3D find_unbound_irq();=0A+=0A+ set_irq_chip_and_h= andler_name(irq, &xen_percpu_chip,=0A+ handle_perc= pu_irq, "virq");=0A+=0A bind_virq.virq =3D virq;=0A bind_virq= .vcpu =3D cpu;=0A if (HYPERVISOR_event_channel_op(EVTCHNOP_bind_virq= ,=0A@@ -433,11 +438,6 @@ static int bind_virq_to_irq(unsigned int virq, uns= igned int =0Acpu)=0A BUG();=0A evtchn =3D bind_virq.port;= =0A=0A- irq =3D find_unbound_irq();=0A-=0A- set_irq_chip_and_= handler_name(irq, &xen_percpu_chip,=0A- handle_per= cpu_irq, "virq");=0A-=0A evtchn_to_irq[evtchn] =3D irq;=0A ir= q_info[irq] =3D mk_virq_info(evtchn, virq);=0A=0A --0-1350879335-1285258730=:68190 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable
Hello

no, got a kernel panic too:

[7257008.73940= 5] SLUB: Genslabs=3D14, HWalign=3D64, Order=3D0-3, MinObjects=3D0, CPUs=3D4= ,            &n= bsp;            = ;            &n= bsp;            = ;           Nodes=3D1
= [7257008.739427] Hierarchical RCU implementation.
[7257008.739432] NR_IR= QS:2304
[7257008.739821] Console: colour dummy device 80x25
[7257008.= 739918] console [tty0] enabled
[7257008.740107] console [hvc0] enabled[7257008.740137] installing Xen timer for CPU 0
[7257008.740160] BUG: = unable to handle kernel NULL pointer dereference at (null)
[7257008.740169] IP: [= <(null)>] (null)
[7257008.740175] PGD 0
[7257008.740179] Thread= overran stack, or stack corrupted
[7257008.740184] Oops: 0010 [#1] SMP<= br>[7257008.740190] last sysfs file:
[7257008.740194] CPU 0
[7257008.= 740198] Modules linked in:
[7257008.740205] Pid: 0, comm: swapper Not ta= inted 2.6.32.22 #1
[7257008.740210] RIP: e030:[<0000000000000000>]=   [<(null)>] (null)
[7257008.740217] RSP: e02b:ffffffff81807d= a0  EFLAGS: 00010082
[7257008.740222] RAX: ffffffff81b64a50 RBX: 00= 00000000000000 RCX: 00000000000002          =             &nb= sp;            =             &nb= sp;            00[7257008.740229] RDX: 0000000000000000 RSI: ffffffff81b454a8 RDI: 00000000= 000000           &nb= sp;            =             &nb= sp;            =            00
[7257008= .740235] RBP: ffffffff81807db8 R08: ffff88007fc18080 R09: ffffffff818957          =             &nb= sp;            =             &nb= sp;            30[7257008.740241] R10: ffffffff81895750 R11: 0000000000000001 R12: ffffffff= 818292           &nb= sp;            =             &nb= sp;            =            40
[7257008= .740248] R13: ffff88007fc1b000 R14: 0000000000000000 R15: ffffffff818292          =             &nb= sp;            =             &nb= sp;            a4[7257008.740259] FS:  0000000000000000(0000) GS:ffff880001fd8000(0000= ) knlGS:000          &nbs= p;            &= nbsp;           &nbs= p;            &= nbsp;           000000000= 0000
[7257008.740266] CS:  e033 DS: 0000 ES: 0000 CR0: 000000008005= 003b
[7257008.740272] CR2: 0000000000000000 CR3: 0000000001001000 CR4: 00000000000026         &= nbsp;           &nbs= p;            &= nbsp;           &nbs= p;             = 60
[7257008.740279] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 000= 00000000000          &nbs= p;            &= nbsp;           &nbs= p;            &= nbsp;           00
[72= 57008.740286] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 00000000000004          =             &nb= sp;            =             &nb= sp;            00[7257008.740292] Process swapper (pid: 0, threadinfo ffffffff81806000, tas= k ffff           &nb= sp;            =             &nb= sp;            =            ffff818999f0)<= br>[7257008.740299] Stack:
[7257008.740302]  ffffffff8107cac5 00000= 00000000000 00000000ffffffda ffffffff818          &nb= sp;            =             &nb= sp;            =             07dd8[7257008.740312] <0> ffffffff8107caa5 ffffffff815a94b1 ffffffff81829= 240 ffffffff          &nb= sp;            =             &nb= sp;            =             81807e18=
[7257008.740323] <0> ffffffff8107c009 0000000000000200 ffff88007f= c1b000 00000000           =             &nb= sp;            =             &nb= sp;           fffffff4[7257008.740336] Call Trace:
[7257008.740346]  [<ffffffff8107ca= c5>] ? default_enable+0x1a/0x28
[7257008.740354]  [<ffffffff8= 107caa5>] default_startup+0x19/0x1f
[7257008.740363]  [<fffff= fff815a94b1>] ? _spin_lock_irqsave+0x19/0x32
[7257008.740371]  [= <ffffffff8107c009>] __setup_irq+0x197/0x2cf
[7257008.740379] = [<ffffffff8100e05f>] ? xen_timer_interrupt+0x0/0x182
[7257008.740= 386]  [<ffffffff8107c22d>] request_threaded_irq+0xec/0x12b
[7= 257008.740396]  [<ffffffff812b278c>] bind_virq_to_irqhandler+0x13f/0x163
[7257008.740404]  [<fffffff= f8100e05f>] ? xen_timer_interrupt+0x0/0x182
[7257008.740411]  [&= lt;ffffffff8100e01a>] xen_setup_timer+0x59/0x9e
[7257008.740420] = ; [<ffffffff8198f5a3>] xen_time_init+0xb7/0xc0
[7257008.740427]&nb= sp; [<ffffffff8198fa27>] x86_late_time_init+0xa/0x11
[7257008.7404= 34]  [<ffffffff8198bc2f>] start_kernel+0x2fe/0x385
[7257008.7= 40441]  [<ffffffff8198b2bf>] x86_64_start_reservations+0xaa/0xae=
[7257008.740448]  [<ffffffff8198ead2>] xen_start_kernel+0x54= 1/0x548
[7257008.740453] Code:  Bad RIP value.
[7257008.740463] = RIP  [<(null)>] (null)
[7257008.740468]  RSP <fffffff= f81807da0>
[7257008.740472] CR2: 0000000000000000
[7257008.740482]= ---[ end trace 4eaa2a86a8e2da22 ]---
[7257008.740487] Kernel panic - no= t syncing: Attempted to kill the idle task!
[7257008.740494] Pid: 0, comm: swapper Tainted: G      D  &nb= sp; 2.6.32.22 #1
[7257008.740499] Call Trace:
[7257008.740504]  = [<ffffffff815a7537>] panic+0xa0/0x158
[7257008.740510]  [<= ffffffff815a7656>] ? printk+0x67/0x69
[7257008.740519]  [<fff= fffff81055e60>] ? blocking_notifier_call_chain+0xf/0x11
[7257008.7405= 28]  [<ffffffff81042b76>] do_exit+0x79/0x6c9
[7257008.740534]=   [<ffffffff815aa492>] oops_end+0xb9/0xc1
[7257008.740541]&nb= sp; [<ffffffff8102aeed>] no_context+0x1ea/0x1f9
[7257008.740547]&n= bsp; [<ffffffff8102b0b5>] __bad_area_nosemaphore+0x1b9/0x1df
[7257= 008.740556]  [<ffffffff8108ec17>] ? __alloc_pages_nodemask+0x11a= /0x5e7
[7257008.740563]  [<ffffffff8100dd01>] ? xen_force_evt= chn_callback+0xd/0xf
[7257008.740570]  [<ffffffff8100e352>] ?= check_events+0x12/0x20
[7257008.740576]  [<ffffffff8102b0e9>] bad_area_nosemaphore+0xe/0x10
[7257008.74058= 4]  [<ffffffff815ab98a>] do_page_fault+0x1a0/0x2d6
[7257008.7= 40590]  [<ffffffff815a9975>] page_fault+0x25/0x30
[7257008.74= 0597]  [<ffffffff8107cac5>] ? default_enable+0x1a/0x28
[72570= 08.740604]  [<ffffffff8107caa5>] default_startup+0x19/0x1f
[7= 257008.740611]  [<ffffffff815a94b1>] ? _spin_lock_irqsave+0x19/0= x32
[7257008.740617]  [<ffffffff8107c009>] __setup_irq+0x197/= 0x2cf
[7257008.740624]  [<ffffffff8100e05f>] ? xen_timer_inte= rrupt+0x0/0x182
[7257008.740631]  [<ffffffff8107c22d>] reques= t_threaded_irq+0xec/0x12b
[7257008.740638]  [<ffffffff812b278c&g= t;] bind_virq_to_irqhandler+0x13f/0x163
[7257008.940292]  [<ffff= ffff8100e05f>] ? xen_timer_interrupt+0x0/0x182
[7257008.940305] = [<ffffffff8100e01a>] xen_setup_timer+0x59/0x9e
[7257008.940317]  [<ffffffff8198f5a3&= gt;] xen_time_init+0xb7/0xc0
[7257008.940327]  [<ffffffff8198fa2= 7>] x86_late_time_init+0xa/0x11
[7257008.940336]  [<ffffffff8= 198bc2f>] start_kernel+0x2fe/0x385
[7257008.940345]  [<ffffff= ff8198b2bf>] x86_64_start_reservations+0xaa/0xae
[7257008.940355]&nbs= p; [<ffffffff8198ead2>] xen_start_kernel+0x541/0x548


= Best regards
Gio



Von: Jerem= y Fitzhardinge <jeremy@goop.org>
An: Giovanni Bellac <giovannib1979@ymail.com>
<= span style=3D"font-weight: bold;">CC: xen-devel@lists.xensource.com
Ges= endet: Donnerstag, den 23. September 2010, 0:48:57 Uhr
Betreff: Re: [Xen-devel] 2.6.32.= 22 (amd64) domU Kernel doesnt boot - kernel panic

On 09/21/2= 010 03:02 AM, Giovanni Bellac wrote:
> Hello
>
> I have u= sed my 2.6.32.20 config and compiled now a 2.6.32.22 from
> kernel.or= g.
> 2.6.32.22 has the important security fix (local user can be root= with
> a exploit).

Does this help?

Thanks,
  &= nbsp; J

From: Jeremy Fitzhardinge <jerem= y.fitzhardinge@citrix.com>
Date: Wed, 22 Sep 2010 15:28:52 -0700<= br>Subject: [PATCH] xen: set up IRQ before binding virq to evtchn

Ma= ke sure the irq is set up before binding a virq event channel to it.

Signed-off-by: Jeremy Fitzhardinge <jeremy.fitzhardinge@citrix.com>

diff --git a/drivers/xen/eve= nts.c b/drivers/xen/events.c
index 3132a5e..cd17f86 100644
--- a/driv= ers/xen/events.c
+++ b/drivers/xen/events.c
@@ -426,6 +426,11 @@ stat= ic int bind_virq_to_irq(unsigned int virq, unsigned int cpu)
 &nbs= p;  irq =3D per_cpu(virq_to_irq, cpu)[virq];

  &nbs= p; if (irq =3D=3D -1) {
+        irq =3D f= ind_unbound_irq();
+
+        set_irq_c= hip_and_handler_name(irq, &xen_percpu_chip,
+    &nbs= p;               &nb= sp;     handle_percpu_irq, "virq");
+
    &= nbsp;   bind_virq.virq =3D virq;
        bind_virq.vcpu =3D cpu;
     &n= bsp;  if (HYPERVISOR_event_channel_op(EVTCHNOP_bind_virq,
@@ -433,1= 1 +438,6 @@ static int bind_virq_to_irq(unsigned int virq, unsigned int cpu= )
            BUG();
&= nbsp;       evtchn =3D bind_virq.port;

-&n= bsp;       irq =3D find_unbound_irq();
-
-&n= bsp;       set_irq_chip_and_handler_name(irq, &= ;xen_percpu_chip,
-          &nb= sp;               handle_percp= u_irq, "virq");
-
        evtchn_to_ir= q[evtchn] =3D irq;
        irq_info[irq] = =3D mk_virq_info(evtchn, virq);



=0A

--0-1350879335-1285258730=:68190-- --===============0116509474== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Xen-devel mailing list Xen-devel@lists.xensource.com http://lists.xensource.com/xen-devel --===============0116509474==--