From mboxrd@z Thu Jan 1 00:00:00 1970 From: Konrad Rzeszutek Wilk Subject: Is: xen-netfront on 3.2.x crashes on TCP traffic. Was Re: kernel panic on Xen Date: Fri, 7 Dec 2012 16:13:01 -0500 Message-ID: <20121207211300.GB9664@phenom.dumpdata.com> References: Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Return-path: Content-Disposition: inline In-Reply-To: List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: xen-devel-bounces@lists.xen.org Errors-To: xen-devel-bounces@lists.xen.org To: David Xu Cc: xen-devel@lists.xen.org List-Id: xen-devel@lists.xenproject.org On Sun, Nov 25, 2012 at 10:40:10PM -0500, David Xu wrote: > Hi all, > > When I run the iperf benchmark to measure the TCP throughput between a > physical machine and a VM, the TCP server which is a Xen VM crashed. Do you > know what's the problem of this bug? Thanks. No idea. Is this easy to reproduce? Do you see it only with 3.2.x kernels? > > [ 100.973027] BUG: unable to handle kernel NULL pointer dereference at > 0000000000000008 > [ 100.973040] IP: [] xennet_alloc_rx_buffers+0x166/0x350 > [ 100.973050] PGD 1cc98067 PUD 1d74c067 PMD 0 > [ 100.973051] Oops: 0002 [#1] SMP > [ 100.973051] CPU 1 > [ 100.973051] Modules linked in: > [ 100.973051] > [ 100.973051] Pid: 9, comm: ksoftirqd/1 Not tainted 3.2.23 #131 > [ 100.973051] RIP: e030:[] [] > xennet_alloc_rx_buffers+0x166/0x350 > [ 100.973051] RSP: e02b:ffff88001e8f1c10 EFLAGS: 00010206 > [ 100.973051] RAX: 0000000000000000 RBX: ffff88001da98000 RCX: > 00000000000012b0 > [ 100.973051] RDX: 0000000000000000 RSI: 0000000000000000 RDI: > 0000000000000256 > [ 100.973051] RBP: ffff88001e8f1c60 R08: ffffc90000000000 R09: > 0000000000017a41 > [ 100.973051] R10: 0000000000000002 R11: 0000000000017298 R12: > ffff880019a7b700 > [ 100.973051] R13: 0000000000000256 R14: 0000000000012092 R15: > 0000000000000092 > [ 100.973051] FS: 00007f7ace91f700(0000) GS:ffff88001fd00000(0000) > knlGS:0000000000000000 > [ 100.973051] CS: e033 DS: 0000 ES: 0000 CR0: 000000008005003b > [ 100.973051] CR2: 0000000000000008 CR3: 000000001da64000 CR4: > 0000000000002660 > [ 100.973051] DR0: 0000000000000000 DR1: 0000000000000000 DR2: > 0000000000000000 > [ 100.973051] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: > 0000000000000400 > [ 100.973051] Process ksoftirqd/1 (pid: 9, threadinfo ffff88001e8f0000, > task ffff88001e8d7000) > [ 100.973051] Stack: > [ 100.973051] 0000000000000091 ffff88001da99c80 ffff88001da99400 > 0000000100012091 > [ 100.973051] ffff88001e8f1c60 000000000000002d ffff880019a8ac4e > ffff88001fd1a590 > [ 100.973051] 0000160000000000 ffff880000000000 ffff88001e8f1db0 > ffffffff8145699a > [ 100.973051] Call Trace: > [ 100.973051] [] xennet_poll+0x7ca/0xe80 > [ 100.973051] [] net_rx_action+0x151/0x2b0 > [ 100.973051] [] __do_softirq+0xbd/0x250 > [ 100.973051] [] run_ksoftirqd+0xc7/0x170 > [ 100.973051] [] ? __do_softirq+0x250/0x250 > [ 100.973051] [] kthread+0x8c/0xa0 > [ 100.973051] [] kernel_thread_helper+0x4/0x10 > [ 100.973051] [] ? retint_restore_args+0x13/0x13 > [ 100.973051] [] ? gs_change+0x13/0x13 > [ 100.973051] Code: 0f 84 19 01 00 00 83 ab 10 14 00 00 01 45 0f b6 fe 49 > 8b 14 24 49 8b 44 24 08 49 c7 04 24 00 00 00 00 49 c7 44 24 08 00 00 00 00 > <48> 89 42 08 48 89 10 41 0f b6 d7 49 89 5c 24 20 48 8d 82 b8 01 > [ 100.973051] RIP [] xennet_alloc_rx_buffers+0x166/0x350 > [ 100.973051] RSP > [ 100.973051] CR2: 0000000000000008 > [ 100.973259] ---[ end trace b0530821c3527d70 ]--- > [ 100.973263] Kernel panic - not syncing: Fatal exception in interrupt > [ 100.973267] Pid: 9, comm: ksoftirqd/1 Tainted: G D 3.2.23 #131 > [ 100.973270] Call Trace: > [ 100.973273] [] panic+0x91/0x1a2 > [ 100.973278] [] ? check_events+0x12/0x20 > [ 100.973282] [] oops_end+0xea/0xf0 > [ 100.973286] [] no_context+0x214/0x223 > [ 100.973291] [] ? kmem_cache_free+0x104/0x110 > [ 100.973295] [] __bad_area_nosemaphore+0x1d1/0x1f0 > [ 100.973299] [] bad_area_nosemaphore+0x13/0x15 > [ 100.973304] [] do_page_fault+0x35b/0x4f0 > [ 100.973308] [] ? __netdev_alloc_skb+0x24/0x50 > [ 100.973313] [] ? trace_hardirqs_off_thunk+0x3a/0x6c > [ 100.973318] [] page_fault+0x25/0x30 > [ 100.973322] [] ? xennet_alloc_rx_buffers+0x166/0x350 > [ 100.973326] [] xennet_poll+0x7ca/0xe80 > [ 100.973330] [] net_rx_action+0x151/0x2b0 > [ 100.973334] [] __do_softirq+0xbd/0x250 > [ 100.973338] [] run_ksoftirqd+0xc7/0x170 > [ 100.973342] [] ? __do_softirq+0x250/0x250 > [ 100.973346] [] kthread+0x8c/0xa0 > [ 100.973350] [] kernel_thread_helper+0x4/0x10 > [ 100.973354] [] ? retint_restore_args+0x13/0x13 > [ 100.973358] [] ? gs_change+0x13/0x13 > > Regards, > Cong > _______________________________________________ > Xen-devel mailing list > Xen-devel@lists.xen.org > http://lists.xen.org/xen-devel