From: Joe Jin <joe.jin@oracle.com>
To: Ian Campbell <Ian.Campbell@citrix.com>
Cc: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com>,
xen-devel <xen-devel@lists.xen.org>,
Roger Pau Monne <roger.pau@citrix.com>
Subject: Re: [PATCH] xend: disallow multiple destroy() call
Date: Sun, 17 Feb 2013 12:04:37 +0800 [thread overview]
Message-ID: <512056D5.6080507@oracle.com> (raw)
In-Reply-To: <1360057377.17017.7.camel@zakaz.uk.xensource.com>
I got serial console output now and mostly like panic happened by "xl create":
(XEN) HVM1: Detected Xen v4.1.2-OVM
(XEN) HVM1: CPU speed is 2926 MHz
(XEN) HVM1: Xenbus rings @0xfeffc000, event channel 13
(XEN) irq.c:264: Dom1 PCI link 0 changed 0 -> 5
(XEN) HVM1: PCI-ISA link 0 routed to IRQ5
(XEN) irq.c:264: Dom1 PCI link 1 changed 0 -> 10
(XEN) HVM1: PCI-ISA link 1 routed to IRQ10
(XEN) irq.c:264: Dom1 PCI link 2 changed 0 -> 11
(XEN) HVM1: PCI-ISA link 2 routed to IRQ11
(XEN) irq.c:264: Dom1 PCI link 3 changed 0 -> 5
(XEN) HVM1: PCI-ISA link 3 routed to IRQ5
(XEN) HVM1: pci dev 01:3 INTA->IRQ10
(XEN) HVM1: pci dev 03:0 INTA->IRQ5
(XEN) HVM1: pci dev 04:0 INTA->IRQ5
(XEN) HVM1: pci dev 05:0 INTA->IRQ10
(XEN) HVM1: pci dev 02:0 bar 10 size 02000000: f0000008
(XEN) HVM1: pci dev 03:0 bar 14 size 01000000: f2000008
(XEN) HVM1: pci dev 04:0 bar 30 size 00080000: f3000000
(XEN) HVM1: pci dev 05:0 bar 30 size 00080000: f3080000
(XEN) domctl.c:985:d0 memory_map:add: gfn=f3100 mfn=df040 nr_mfns=40
(XEN) HVM1: pci dev 04:0 bar 1c size 00040000: f3100004
(XEN) domctl.c:985:d0 memory_map:add: gfn=f3140 mfn=df640 nr_mfns=40
(XEN) HVM1: pci dev 05:0 bar 1c size 00040000: f3140004
(XEN) domctl.c:985:d0 memory_map:add: gfn=f3180 mfn=df03c nr_mfns=4
(XEN) domctl.c:995:d0 memory_map:remove: gfn=f3182 mfn=df03e nr_mfns=1
(XEN) HVM1: pci dev 04:0 bar 14 size 00004000: f3180004
(XEN) domctl.c:985:d0 memory_map:add: gfn=f3184 mfn=df63c nr_mfns=4
(XEN) domctl.c:995:d0 memory_map:remove: gfn=f3186 mfn=df63e nr_mfns=1
(XEN) HVM1: pci dev 05:0 bar 14 size 00004000: f3184004
(XEN) HVM1: pci dev 02:0 bar 14 size 00001000: f3188000
(XEN) HVM1: pci dev 03:0 bar 10 size 00000100: 0000c001
(XEN) HVM1: pci dev 04:0 bar 10 size 00000100: 0000c101
(XEN) domctl.c:1041:d0 ioport_map:add f_gport=c100 f_mport=9000 np=100
(XEN) HVM1: pci dev 05:0 bar 10 size 00000100: 0000c201
(XEN) domctl.c:1041:d0 ioport_map:add f_gport=c200 f_mport=d000 np=100
(XEN) HVM1: pci dev 01:1 bar 20 size 00000010: 0000c301
(XEN) HVM1: Multiprocessor initialisation:
(XEN) HVM1: - CPU0 ... 40-bit phys ... fixed MTRRs ... var MTRRs [2/8] ... done.
(XEN) HVM1: - CPU1 ... 40-bit phys ... fixed MTRRs ... var MTRRs [2/8] ... done.
(XEN) HVM1: - CPU2 ... 40-bit phys ... fixed MTRRs ... var MTRRs [2/8] ... done.
(XEN) HVM1: - CPU3 ... 40-bit phys ... fixed MTRRs ... var MTRRs [2/8] ... done.
(XEN) HVM1: - CPU4 ... 40-bit phys ... fixed MTRRs ... var MTRRs [2/8] ... done.
(XEN) HVM1: - CPU5 ... 40-bit phys ... fixed MTRRs ... var MTRRs [2/8] ... done.
(XEN) HVM1: - CPU6 ... 40-bit phys ... fixed MTRRs ... var MTRRs [2/8] ... done.
(XEN) HVM1: - CPU7 ... 40-bit phys ... fixed MTRRs ... var MTRRs [2/8] ... done.
(XEN) HVM1: - CPU8 ... 40-bit phys ... fixed MTRRs ... var MTRRs [2/8] ... done.
(XEN) HVM1: - CPU9 ... 40-bit phys ... fixed MTRRs ... var MTRRs [2/8] ... done.
(XEN) HVM1: - CPU10 ... 40-bit phys ... fixed MTRRs ... var MTRRs [2/8] ... done.
(XEN) HVM1: - CPU11 ... 40-bit phys ... fixed MTRRs ... var MTRRs [2/8] ... done.
(XEN) HVM1: Writing SMBIOS tables ...
(XEN) HVM1: Loading ROMBIOS ...
(XEN) HVM1: 10364 bytes of ROMBIOS high-memory extensions:
(XEN) HVM1: Relocating to 0xfc000000-0xfc00287c ... done
(XEN) HVM1: Creating MP tables ...
(XEN) HVM1: Loading Cirrus VGABIOS ...
(XEN) domctl.c:985:d0 memory_map:add: gfn=f3000 mfn=df080 nr_mfns=80
(XEN) HVM1: Loading PCI Option ROM ...
(XEN) HVM1: - Manufacturer: LSI Corporation
(XEN) HVM1: - Product name: LSI MPI Boot Support
(XEN) domctl.c:995:d0 memory_map:remove: gfn=f3000 mfn=df080 nr_mfns=80
(XEN) domctl.c:985:d0 memory_map:add: gfn=f3080 mfn=df680 nr_mfns=80
(XEN) domctl.c:995:d0 memory_map:remove: gfn=f3080 mfn=df680 nr_mfns=80
(XEN) HVM1: Loading ACPI ...
(XEN) HVM1: - Lo data: 000ea020-000ea04f
(XEN) HVM1: - Hi data: fc002c00-fc00eb4f
(XEN) HVM1: vm86 TSS at fc00ec00
(XEN) HVM1: BIOS map:
(XEN) HVM1: c0000-c8fff: VGA BIOS
(XEN) HVM1: c9000-d4fff: PCI Option ROMs
(XEN) HVM1: eb000-eb302: SMBIOS tables
(XEN) HVM1: f0000-fffff: Main BIOS
(XEN) HVM1: E820 table:
(XEN) HVM1: [00]: 00000000:00000000 - 00000000:0009e000: RAM
(XEN) HVM1: [01]: 00000000:0009e000 - 00000000:0009fc00: RESERVED
(XEN) HVM1: [02]: 00000000:0009fc00 - 00000000:000a0000: RESERVED
(XEN) HVM1: HOLE: 00000000:000a0000 - 00000000:000e0000
(XEN) HVM1: [03]: 00000000:000e0000 - 00000000:00100000: RESERVED
(XEN) HVM1: [04]: 00000000:00100000 - 00000000:f0000000: RAM
(XEN) HVM1: HOLE: 00000000:f0000000 - 00000000:fc000000
(XEN) HVM1: [05]: 00000000:fc000000 - 00000001:00000000: RESERVED
(XEN) HVM1: [06]: 00000001:00000000 - 00000004:0f800000: RAM
(XEN) HVM1: Invoking ROMBIOS ...
(XEN) HVM1: $Revision: 1.221 $ $Date: 2008/12/07 17:32:29 $
(XEN) stdvga.c:147:d1 entering stdvga and caching modes
(XEN) HVM1: VGABios $Id: vgabios.c,v 1.67 2008/01/27 09:44:12 vruppert Exp $
(XEN) HVM1: Bochs BIOS - build: 06/23/99
(XEN) HVM1: $Revision: 1.221 $ $Date: 2008/12/07 17:32:29 $
(XEN) HVM1: Options: apmbios pcibios eltorito PMM
(XEN) HVM1:
(XEN) HVM1: ata0-0: PCHS=16383/16/63 translation=lba LCHS=1024/255/63
(XEN) HVM1: ata0 master: QEMU HARDDISK ATA-7 Hard-Disk (60000 MBytes)
(XEN) HVM1: ata0-1: PCHS=16383/16/63 translation=lba LCHS=1024/255/63
(XEN) HVM1: ata0 slave: QEMU HARDDISK ATA-7 Hard-Disk ( 97 GBytes)
(XEN) HVM1: ata1-0: PCHS=16383/16/63 translation=lba LCHS=1024/255/63
(XEN) HVM1: ata1 master: QEMU HARDDISK ATA-7 Hard-Disk (20000 MBytes)
(XEN) HVM1: IDE time out
(XEN) HVM1:
(XEN) HVM1: PCI device 1000:0070 not found at index 0
(XEN) HVM1: PCI device 1000:0072 not found at index 2
(XEN) HVM1: PCI device 1000:0074 not found at index 0
(XEN) HVM1: PCI device 1000:0076 not found at index 0
(XEN) HVM1: PCI device 1000:0077 not found at index 0
(XEN) HVM1: PCI device 1000:0064 not found at index 0
(XEN) HVM1: PCI device 1000:0065 not found at index 0
(XEN) HVM1: PCI device 1000:0080 not found at index 0
(XEN) HVM1: PCI device 1000:0081 not found at index 0
(XEN) HVM1: PCI device 1000:0082 not found at index 0
(XEN) HVM1: PCI device 1000:0083 not found at index 0
(XEN) HVM1: PCI device 1000:0084 not found at index 0
(XEN) HVM1: PCI device 1000:0085 not found at index 0
(XEN) HVM1: PCI device 1000:0086 not found at index 0
(XEN) HVM1: PCI device 1000:0087 not found at index 0
(XEN) HVM1: PCI device 1000:0070 not found at index 0
(XEN) HVM1: PCI device 1000:0072 not found at index 2
(XEN) HVM1: PCI device 1000:0074 not found at index 0
(XEN) HVM1: PCI device 1000:0076 not found at index 0
(XEN) HVM1: PCI device 1000:0077 not found at index 0
(XEN) HVM1: PCI device 1000:0064 not found at index 0
(XEN) HVM1: PCI device 1000:0065 not found at index 0
(XEN) HVM1: PCI device 1000:0080 not found at index 0
(XEN) HVM1: PCI device 1000:0081 not found at index 0
(XEN) HVM1: PCI device 1000:0082 not found at index 0
(XEN) HVM1: PCI device 1000:0083 not found at index 0
(XEN) HVM1: PCI device 1000:0084 not found at index 0
(XEN) HVM1: PCI device 1000:0085 not found at index 0
(XEN) HVM1: PCI device 1000:0086 not found at index 0
(XEN) HVM1: PCI device 1000:0087 not found at index 0
(XEN) HVM1:
(XEN) HVM1:
(XEN) HVM1: Press F12 for boot menu.
(XEN) HVM1:
(XEN) HVM1: Booting from Hard Disk...
(XEN) HVM1: Booting from 0000:7c00
(XEN) HVM1: *** int 15h function AX=00c0, BX=0000 not yet supported!
(XEN) HVM1: *** int 15h function AX=ec00, BX=0002 not yet supported!
(XEN) HVM1: KBD: unsupported int 16h function 03
(XEN) HVM1: *** int 15h function AX=e980, BX=0000 not yet supported!
(XEN) irq.c:330: Dom1 callback via changed to Direct Vector 0xe9
(XEN) domctl.c:1065:d0 ioport_map:remove f_gport=c100 f_mport=9000 np=100
(XEN) domctl.c:1041:d0 ioport_map:add f_gport=c100 f_mport=9000 np=100
(XEN) domctl.c:1065:d0 ioport_map:remove f_gport=c200 f_mport=d000 np=100
(XEN) domctl.c:1041:d0 ioport_map:add f_gport=c200 f_mport=d000 np=100
(XEN) irq.c:264: Dom1 PCI link 0 changed 5 -> 0
(XEN) irq.c:264: Dom1 PCI link 1 changed 10 -> 0
(XEN) irq.c:264: Dom1 PCI link 2 changed 11 -> 0
(XEN) irq.c:264: Dom1 PCI link 3 changed 5 -> 0
------------[ cut here ]------------
WARNING: at fs/proc/generic.c:850 remove_proc_entry+0x22d/0x240()
Hardware name: SUN FIRE X4370 M2 SERVER
remove_proc_entry: removing non-empty directory 'irq/536', leaking at least 'eth7'
Modules linked in: xt_physdev iptable_filter ip_tables xen_blkback xen_netback xen_pciback xen_gntdev xen_evtchn ipmi_devintf ipmi_si lockd sunrpc bridge stp llc bonding dm_round_robin dm_multipath be2iscsi iscsi_boot_sysfs ib_iser rdma_cm ib_cm iw_cm ib_sa ib_mad ib_core ib_addr iscsi_tcp bnx2i cnic uio ipv6 cxgb3i libcxgbi cxgb3 libiscsi_tcp libiscsi scsi_transport_iscsi xenfs xen_privcmd dm_mirror video sbs sbshc acpi_memhotplug acpi_ipmi ipmi_msghandler parport_pc lp parport ses enclosure ixgbe igb e1000e mdio snd_seq_dummy snd_seq_oss snd_seq_midi_event snd_seq snd_seq_device snd_pcm_oss snd_mixer_oss snd_pcm snd_timer snd soundcore snd_page_alloc i2c_i801 i2c_core i7core_edac iTCO_wdt pcspkr ioatdma iTCO_vendor_support edac_core dca ghes hed dm_region_hash dm_log dm_mod usb_storage s
hpchp sg ahci libahci sd_mod crc_t10dif raid1 ext3 jbd mbcache [last unloaded: raid_class]
Pid: 19329, comm: qemu-dm Not tainted 2.6.39-200.1.15.el5uek #1
Call Trace:
[<ffffffff811d10dd>] ? remove_proc_entry+0x22d/0x240
[<ffffffff8106de10>] warn_slowpath_common+0x90/0xc0
[<ffffffff8106df3e>] warn_slowpath_fmt+0x6e/0x70
[<ffffffff8100a7cf>] ? xen_restore_fl_direct_reloc+0x4/0x4
[<ffffffff8125cf98>] ? sprintf+0x68/0x70
[<ffffffff811cfef1>] ? __xlate_proc_name+0x41/0xc0
[<ffffffff81501b9e>] ? _raw_spin_lock+0xe/0x20
[<ffffffff811d10dd>] remove_proc_entry+0x22d/0x240
[<ffffffff8113232c>] ? zap_pte_range+0x1ec/0x400
[<ffffffff810d9430>] unregister_irq_proc+0xd0/0xf0
[<ffffffff810d571a>] free_desc+0x2a/0x70
[<ffffffff810d579e>] irq_free_descs+0x3e/0x80
[<ffffffff812f7822>] xen_free_irq+0x52/0x70
[<ffffffff812f82cb>] unbind_from_irq+0xeb/0x180
[<ffffffff81009f0d>] ? xen_force_evtchn_callback+0xd/0x10
[<ffffffff812f837f>] evtchn_put+0x1f/0x40
[<ffffffffa055b4e9>] gntdev_put_map+0x39/0x110 [xen_gntdev]
[<ffffffff812640e1>] ? list_del+0x11/0x40
[<ffffffffa055c38c>] gntdev_ioctl_unmap_grant_ref+0xac/0xd0 [xen_gntdev]
[<ffffffffa055c708>] gntdev_ioctl+0x98/0xa0 [xen_gntdev]
[<ffffffff8117eb8d>] vfs_ioctl+0x1d/0x50
[<ffffffff8117f623>] do_vfs_ioctl+0x63/0x1b0
[<ffffffff8113a740>] ? do_munmap+0x240/0x280
[<ffffffff8117f804>] sys_ioctl+0x94/0xa0
[<ffffffff8150a242>] system_call_fastpath+0x16/0x1b
---[ end trace fa61ba514bac93c7 ]---
BUG: unable to handle kernel NULL pointer dereference at 000000000000001c
IP: [<ffffffff812f6a76>] evtchn_from_irq+0x16/0x40
PGD 6a2cb067 PUD 71d8c067 PMD 0
Oops: 0000 [#1] SMP
CPU 0
Modules linked in: xt_physdev iptable_filter ip_tables xen_blkback xen_netback xen_pciback xen_gntdev xen_evtchn ipmi_devintf ipmi_si lockd sunrpc bridge stp llc bonding dm_round_robin dm_multipath be2iscsi iscsi_boot_sysfs ib_iser rdma_cm ib_cm iw_cm ib_sa ib_mad ib_core ib_addr iscsi_tcp bnx2i cnic uio ipv6 cxgb3i libcxgbi cxgb3 libiscsi_tcp libiscsi scsi_transport_iscsi xenfs xen_privcmd dm_mirror video sbs sbshc acpi_memhotplug acpi_ipmi ipmi_msghandler parport_pc lp parport ses enclosure ixgbe igb e1000e mdio snd_seq_dummy snd_seq_oss snd_seq_midi_event snd_seq snd_seq_device snd_pcm_oss snd_mixer_oss snd_pcm snd_timer snd soundcore snd_page_alloc i2c_i801 i2c_core i7core_edac iTCO_wdt pcspkr ioatdma iTCO_vendor_support edac_core dca ghes hed dm_region_hash dm_log dm_mod usb_storage s
hpchp sg ahci libahci sd_mod crc_t10dif raid1 ext3 jbd mbcache [last unloaded: raid_class]
Pid: 19329, comm: qemu-dm Tainted: G W 2.6.39-200.1.15.el5uek #1 ORACLE CORPORATION SUN FIRE X4370 M2 SERVER /ASSY,SC_BD,T4
RIP: e030:[<ffffffff812f6a76>] [<ffffffff812f6a76>] evtchn_from_irq+0x16/0x40
RSP: e02b:ffff88006cfc5dd8 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff88007e38be48
RDX: 0000000000000000 RSI: 0000000000000218 RDI: ffff88007e38bd70
RBP: ffff88006cfc5dd8 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000218
R13: 0000000000000000 R14: 0000000000000017 R15: 0000000000104701
FS: 00007ff36f4046e0(0000) GS:ffff88007f49a000(0000) knlGS:0000000000000000
CS: e033 DS: 0000 ES: 0000 CR0: 000000008005003b
CR2: 000000000000001c CR3: 000000005f445000 CR4: 0000000000002660
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
Process qemu-dm (pid: 19329, threadinfo ffff88006cfc4000, task ffff880067084200)
Stack:
ffff88006cfc5e38 ffffffff812f81fc 00007ff36e620000 0000003e38e10000
ffff88006cfc5e38 000000000000014f 0000000000000206 ffff88006b2e8138
ffffffff81009f0d ffff88006b951cc0 ffff88006b951cc0 0000000000000000
Call Trace:
[<ffffffff812f81fc>] unbind_from_irq+0x1c/0x180
[<ffffffff81009f0d>] ? xen_force_evtchn_callback+0xd/0x10
[<ffffffff812f837f>] evtchn_put+0x1f/0x40
[<ffffffffa055b4e9>] gntdev_put_map+0x39/0x110 [xen_gntdev]
[<ffffffff812640e1>] ? list_del+0x11/0x40
[<ffffffffa055c38c>] gntdev_ioctl_unmap_grant_ref+0xac/0xd0 [xen_gntdev]
[<ffffffffa055c708>] gntdev_ioctl+0x98/0xa0 [xen_gntdev]
[<ffffffff8117eb8d>] vfs_ioctl+0x1d/0x50
[<ffffffff8117f623>] do_vfs_ioctl+0x63/0x1b0
[<ffffffff8113a740>] ? do_munmap+0x240/0x280
[<ffffffff8117f804>] sys_ioctl+0x94/0xa0
[<ffffffff8150a242>] system_call_fastpath+0x16/0x1b
Code: 8b 64 24 08 c9 c3 0f 1f 80 00 00 00 00 0f 1f 84 00 00 00 00 00 55 48 89 e5 66 66 66 66 90 39 3d f1 16 4c 00 76 0b e8 ea fa ff ff <0f> b7 40 1c c9 c3 89 f9 31 c0 48 c7 c2 2f 72 70 81 be d1 00 00
RIP [<ffffffff812f6a76>] evtchn_from_irq+0x16/0x40
RSP <ffff88006cfc5dd8>
CR2: 000000000000001c
Thanks,
Joe
On 02/05/13 17:42, Ian Campbell wrote:
> On Tue, 2013-02-05 at 06:47 +0000, Joe Jin wrote:
>> execute xl-destroy twice crashed my server!
>
> Can you give more details please.
>
> Ian.
>
>
>
next prev parent reply other threads:[~2013-02-17 4:04 UTC|newest]
Thread overview: 10+ messages / expand[flat|nested] mbox.gz Atom feed top
2013-02-04 1:54 [PATCH] xend: disallow multiple destroy() call Joe Jin
2013-02-04 9:52 ` Roger Pau Monné
2013-02-05 6:47 ` Joe Jin
2013-02-05 9:42 ` Ian Campbell
2013-02-16 5:38 ` Joe Jin
2013-02-18 10:33 ` Ian Campbell
2013-02-17 4:04 ` Joe Jin [this message]
2013-02-17 5:07 ` Joe Jin
2013-02-18 10:39 ` Ian Campbell
2013-03-19 17:41 ` Konrad Rzeszutek Wilk
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=512056D5.6080507@oracle.com \
--to=joe.jin@oracle.com \
--cc=Ian.Campbell@citrix.com \
--cc=konrad.wilk@oracle.com \
--cc=roger.pau@citrix.com \
--cc=xen-devel@lists.xen.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.