kvm-48: kernel BUG at mmu.c:307! - invalid opcode: 0000 [#1]

kvm-48: kernel BUG at mmu.c:307! - invalid opcode: 0000 [#1]

[Pedro Alves]

Hello.

I've been using kvm for a while, and it's been working great so far. Today
I got a kernel error pasted below.

Some system infos:

Host: Slackware

$ uname -a
Linux nicola 2.6.23.1-smp #2 SMP Mon Oct 15 17:49:01 CDT 2007 i686 Intel(R) Core(TM)2 Duo CPU     T7300  @ 2.00GHz GenuineIntel GNU/Linux

kvm-48

launch instructions: sudo /opt/kvm-46/bin/qemu-system-x86_64 -hda /shared/vm/xp_pro_sp2.qcow2 -cdrom /dev/cdrom -usb -m 1250 -L /opt/kvm-46/share/qemu/ -redir tcp:1433::1433 -redir tcp:3389::3389 -redir tcp:8022::22


Cliene:

Windows xp pro xp2


I had booted the VM and was doing nothing - AVG antivirus was running. 



Here is the paste:

------------[ cut here ]------------
kernel BUG at /home/pedro/can2/kvm-48/kernel/mmu.c:307!
invalid opcode: 0000 [#1]
SMP 
Modules linked in: i915 drm sch_ingress cls_u32 sch_sfq sch_cbq fuse tun kvm_intel kvm snd_seq_dummy snd_seq_oss snd_seq_midi_event snd_seq snd_seq_device snd_pcm_oss snd_mixer_oss ipv6 cifs capability commoncap lp parport_pc parport pcmcia e1000 intel_agp agpgart rtc_cmos sdhci rtc_core yenta_socket rtc_lib rsrc_nonstatic mmc_core tifm_7xx1 serio_raw pcmcia_core tifm_core thermal video output ac button battery processor snd_hda_intel psmouse mac80211 snd_pcm cfg80211 snd_timer snd soundcore snd_page_alloc evdev pcspkr sg
CPU:    1
EIP:    0060:[<f9319c32>]    Not tainted VLI
EFLAGS: 00010246   (2.6.23.1-smp #2)
EIP is at mmu_memory_cache_alloc+0x32/0x40 [kvm]
eax: 00000000   ebx: f95658ec   ecx: d7a621b0   edx: 00000014
esi: f7daf838   edi: d7a62000   ebp: 00000000   esp: f6de5b28
ds: 007b   es: 007b   fs: 00d8  gs: 0000  ss: 0068
Process qemu-system-x86 (pid: 3688, ti=f6de4000 task=f27aaaa0 task.ti=f6de4000)
Stack: d7a62000 f95658ec d7a62000 f931a271 00000002 00000000 2d8ff043 f931a683 
       392fb000 00000000 000392fb 00000000 00000000 00000000 00000002 00000000 
       392fb000 00000000 f7daf838 d7a62000 392fb000 00000000 2d8ff000 00000000 
Call Trace:
 [<f931a271>] rmap_add+0xe1/0x100 [kvm]
 [<f931a683>] paging32_set_pte_common+0x163/0x310 [kvm]
 [<f931a895>] paging32_set_pte+0x65/0x80 [kvm]
 [<f931afce>] kvm_mmu_pte_write+0x37e/0x3e0 [kvm]
 [<f9315831>] kvm_write_guest_page+0x71/0xa0 [kvm]
 [<c02ebc1c>] xfs_fs_geometry+0x21c/0x2d0
 [<f931595b>] emulator_write_emulated_onepage+0x9b/0x120 [kvm]
 [<f931d205>] x86_emulate_insn+0x525/0x3630 [kvm]
 [<f9315c5f>] emulator_read_std+0x3f/0x90 [kvm]
 [<c02ebc1c>] xfs_fs_geometry+0x21c/0x2d0
 [<f931c9bb>] x86_decode_insn+0x7ab/0xad0 [kvm]
 [<c02ebc1c>] xfs_fs_geometry+0x21c/0x2d0
 [<f9315ebc>] emulate_instruction+0x16c/0x2a0 [kvm]
 [<f911dc0a>] handle_exception+0x25a/0x2c0 [kvm_intel]
 [<f911babd>] vmx_set_cr3+0xd/0x20 [kvm_intel]
 [<c02ebc1c>] xfs_fs_geometry+0x21c/0x2d0
 [<f911d889>] kvm_handle_exit+0x79/0xc0 [kvm_intel]
 [<f9316743>] kvm_vcpu_ioctl_run+0x123/0x440 [kvm]
 [<f9316dd0>] kvm_vcpu_ioctl+0x0/0xba0 [kvm]
 [<f9317914>] kvm_vcpu_ioctl+0xb44/0xba0 [kvm]
 [<c06d6e75>] sock_common_recvmsg+0x45/0x70
 [<c06d5383>] sock_recvmsg+0x123/0x140
 [<c06daa00>] skb_dequeue+0x40/0x60
 [<c0746d2e>] unix_stream_recvmsg+0x24e/0x580
 [<c0122985>] resched_task+0x55/0x60
 [<c018334b>] core_sys_select+0x23b/0x2d0
 [<c0122921>] update_curr+0x141/0x150
 [<c0133a10>] __dequeue_signal+0x10/0x170
 [<c013375b>] recalc_sigpending+0xb/0x20
 [<c0135458>] dequeue_signal+0x48/0x140
 [<c0141e56>] getnstimeofday+0x36/0xd0
 [<c014005f>] enqueue_hrtimer+0x5f/0x80
 [<c01405aa>] hrtimer_start+0xba/0x120
 [<f9316dd0>] kvm_vcpu_ioctl+0x0/0xba0 [kvm]
 [<c0181ebb>] do_ioctl+0x2b/0x90
 [<c0181f7c>] vfs_ioctl+0x5c/0x290
 [<c0182222>] sys_ioctl+0x72/0x90
 [<c010428a>] syscall_call+0x7/0xb
 =======================
Code: 8b 00 85 c0 74 25 48 8b 5c 81 04 89 01 89 d1 31 c0 c1 e9 02 89 df f3 ab f6 c2 02 74 02 66 ab f6 c2 01 74 01 aa 5a 89 d8 5b 5f c3 <0f> 0b eb fe 8d 76 00 8d bc 27 00 00 00 00 05 b0 01 00 00 ba 14 
EIP: [<f9319c32>] mmu_memory_cache_alloc+0x32/0x40 [kvm] SS:ESP 0068:f6de5b28






-- 
Pedro Alves

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/

Re: kvm-48: kernel BUG at mmu.c:307! - invalid opcode: 0000 [#1]

[Aurelien Jarno]

On Fri, Oct 26, 2007 at 03:09:06PM +0100, Pedro Alves wrote:
> 
> 
> Hello.
> 
> I've been using kvm for a while, and it's been working great so far. Today
> I got a kernel error pasted below.

Strangely I got the same problem one or two hours ago.

Here are some info about the host:
- Distribution: Debian
- Architecture: x86_64
- Kernel: 2.6.22-2
- CPU: Intel Core 2 Q6600
- KVM 48

The system is running 10 KVM guests and the operating systems are BSD, Linux, Hurd, GNU/kFreeBSD.

Only one of the two GNU/kFreeBSD amd64 guests crashed, the others are
still running fine. It was under heavy load (building a glibc).

And the dmesg log:


------------[ cut here ]------------
kernel BUG at /usr/local/src/kvm-48/kernel/mmu.c:307!
invalid opcode: 0000 [1] SMP 
CPU 3 
Modules linked in: usb_storage kvm_intel kvm cpufreq_userspace nfs nfsd exportfs lockd nfs_acl sunrpc ppdev lp button ac battery xt_mark xt_MARK ipt_REDIRECT ipt_REJECT ipt_recent xt_state ipt_TOS xt_tcpudp ipt_LOG xt_limit iptable_mangle iptable_nat nf_conntrack_ipv4 iptable_filter ip_tables x_tables nf_nat_h323 nf_conntrack_h323 nf_nat_rtsp nf_conntrack_rtsp nf_nat_tftp nf_conntrack_tftp nf_nat_ftp nf_conntrack_ftp nf_nat_irc nf_nat nf_conntrack_irc nf_conntrack nfnetlink aoe sit tunnel4 wlan_wep bridge quota_v2 dm_snapshot dm_mirror dm_mod cpufreq_stats cpufreq_ondemand acpi_cpufreq freq_table tun loop it87 hwmon_vid i2c_isa coretemp 8021q ipv6 snd_hda_intel ftdi_sio wlan_scan_ap snd_pcm snd_timer snd ath_rate_sample usbserial evdev intel_agp soundcore snd_page_alloc i2c_i801 ath_pci wl
 an usblp i2c_core ath_hal(P) parport_pc parport pcspkr ext3 jbd mbcache raid456 xor raid1 raid0 md_mod ide_generic ide_cd cdrom ata_generic sd_mod usbhid hid jmicron r8169 firewire_ohci fire
 wire_core crc_itu_t ahci generic ide_core e1000 ehci_hcd libata scsi_mod uhci_hcd thermal processor fan
Pid: 11409, comm: qemu-system-x86 Tainted: P       2.6.22-2-amd64 #1
RIP: 0010:[<ffffffff8839a3dd>]  [<ffffffff8839a3dd>] :kvm:mmu_memory_cache_alloc+0xd/0x29
RSP: 0018:ffff8102206a39c8  EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffffc20013238810 RCX: 0000000000000028
RDX: ffff810133d84088 RSI: 0000000000000028 RDI: ffff8101c5b04758
RBP: ffff8101c5b04440 R08: 0000000000000000 R09: 0000000000000004
R10: 00000000071c2067 R11: ffffffff885a137c R12: ffff8101009c6010
R13: 0000000000000002 R14: ffff8101c5b04440 R15: ffff8101009c6010
FS:  00002b2e3cc37550(0000) GS:ffff810227b29b40(0000) knlGS:0000000000000000
CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
CR2: 00000000005b19a4 CR3: 000000014f225000 CR4: 00000000000026e0
Process qemu-system-x86 (pid: 11409, threadinfo ffff8102206a2000, task ffff810226c370a0)
Stack:  00000000000071c2 ffffffff8839a48c 000000018c586047 000000018c586000
 0000000000000045 ffffffff8839ae92 0000000000000001 00000000000071c2
 0000000000000000 0000000000000000 00000000071c2000 00000000071c2000
Call Trace:
 [<ffffffff8839a48c>] :kvm:rmap_add+0x85/0xe7
 [<ffffffff8839ae92>] :kvm:paging64_set_pte_common+0x1c5/0x22e
 [<ffffffff8839af45>] :kvm:paging64_set_pte+0x4a/0x4f
 [<ffffffff8839b202>] :kvm:kvm_mmu_pte_write+0x2b8/0x328
 [<ffffffff88396581>] :kvm:emulator_write_emulated_onepage+0x6e/0xce
 [<ffffffff8839f697>] :kvm:x86_emulate_insn+0x2ba1/0x4146
 [<ffffffff8839c85d>] :kvm:x86_decode_insn+0x78c/0xa25
 [<ffffffff885a1377>] :kvm_intel:vmcs_readl+0x17/0x1c
 [<ffffffff88396a57>] :kvm:emulate_instruction+0x152/0x290
 [<ffffffff885a3a57>] :kvm_intel:handle_exception+0x170/0x250
 [<ffffffff88397492>] :kvm:kvm_vcpu_ioctl+0x357/0xf57
 [<ffffffff80229db3>] task_rq_lock+0x3d/0x6f
 [<ffffffff80229976>] __activate_task+0x26/0x38
 [<ffffffff8038b360>] memcpy_toiovec+0x36/0x66
 [<ffffffff8038b7aa>] skb_copy_datagram_iovec+0x49/0x1ed
 [<ffffffff80243de3>] remove_wait_queue+0x12/0x45
 [<ffffffff883b998f>] :tun:tun_chr_aio_read+0x2a8/0x2ba
 [<ffffffff8028fe5c>] core_sys_select+0x234/0x265
 [<ffffffff8023aec4>] __dequeue_signal+0x19/0x15a
 [<ffffffff8023c4bc>] dequeue_signal+0xa5/0x126
 [<ffffffff8024722b>] getnstimeofday+0x32/0x8b
 [<ffffffff8028eb9f>] do_ioctl+0x2b/0xb6
 [<ffffffff8028ee77>] vfs_ioctl+0x24d/0x266
 [<ffffffff8028eee9>] sys_ioctl+0x59/0x7c
 [<ffffffff80209d8e>] system_call+0x7e/0x83


Code: 0f 0b eb fe ff c8 89 07 48 98 48 8b 54 c7 08 31 c0 fc 48 89 
RIP  [<ffffffff8839a3dd>] :kvm:mmu_memory_cache_alloc+0xd/0x29
 RSP <ffff8102206a39c8>


-- 
  .''`.  Aurelien Jarno	            | GPG: 1024D/F1BCDB73
 : :' :  Debian developer           | Electrical Engineer
 `. `'   aurel32-8fiUuRrzOP0dnm+yROfE0A@public.gmane.org         | aurelien-rXXEIb44qovR7s880joybQ@public.gmane.org
   `-    people.debian.org/~aurel32 | www.aurel32.net

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/