From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([2001:4830:134:3::10]:53971) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1VMhzW-00060v-CB for qemu-devel@nongnu.org; Thu, 19 Sep 2013 13:26:16 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1VMhzQ-0002Rr-Cx for qemu-devel@nongnu.org; Thu, 19 Sep 2013 13:26:10 -0400 Received: from mx1.redhat.com ([209.132.183.28]:55898) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1VMhzQ-0002Rn-5Q for qemu-devel@nongnu.org; Thu, 19 Sep 2013 13:26:04 -0400 Message-ID: <523B33B1.3030100@redhat.com> Date: Thu, 19 Sep 2013 19:26:09 +0200 From: Paolo Bonzini MIME-Version: 1.0 References: <52383EED.6080602@FreeBSD.org> <52384BF6.5030302@suse.de> <52386855.7080106@FreeBSD.org> <20130917184954.GA5657@redhat.com> <523B0BE0.90102@FreeBSD.org> <523B2C06.3060309@redhat.com> <523B31ED.9020504@FreeBSD.org> In-Reply-To: <523B31ED.9020504@FreeBSD.org> Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Subject: Re: [Qemu-devel] in_asm substitute for accel=kvm:tcg List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: Andriy Gapon Cc: =?UTF-8?B?QW5kcmVhcyBGw6RyYmVy?= , Gleb Natapov , qemu-devel@nongnu.org Il 19/09/2013 19:18, Andriy Gapon ha scritto: > on 19/09/2013 19:53 Paolo Bonzini said the following: >> 1) Can you try loading the kvm_intel module with >> emulate_invalid_guest_state=0? > > Will do. > >> 2) What are the contents of fs and gs? Why are they not zeroed? >> Perhaps that is causing invalid guest state emulation to run, and then >> something is triggering a bug in emulate_invalid_guest_state itself. > > I will try to find this out. > >> 3) What is at 0x9315? > > This I can answer immediately. It looks like this address even gets executed > earlier: > qemu-system-x86-12024 [002] 278153.809990: kvm_emulate_insn: 0:9315:ea 1a > 93 00 00 (real) > qemu-system-x86-12024 [002] 278153.809991: kvm_entry: vcpu 0 > qemu-system-x86-12024 [002] 278153.809992: kvm_emulate_insn: 0:931a:31 c0 > (real) > > I guess it's a jump to 931a. Yes, it is. > Puzzling that later it becomes a jump to self. I don't think that's what happens. It's more likely that for some reason the emulator mis-parses the instruction. Please confirm with "info cpus" that QEMU is looping there (just in case), and attach the output of "info registers" (you can use "-monitor stdio" to do this and to answer question 2 from my previous email). Paolo