xen-devel.lists.xenproject.org archive mirror
 help / color / mirror / Atom feed
* kernel-ml-4.15.0-1.el7.elrepo.x86_64 doesn't boot as Xen PV domU
@ 2018-01-31  0:18 Adi Pircalabu
  2018-01-31 22:13 ` Michael Young
  0 siblings, 1 reply; 4+ messages in thread
From: Adi Pircalabu @ 2018-01-31  0:18 UTC (permalink / raw)
  To: xen-devel

Initially submitted here: http://elrepo.org/bugs/view.php?id=820

No issues with the latest 4.14.1x versions. The crash replicates on 3 
hypervisors:
- CentOS 7.4 running kernel 4.9.77-30.el7.x86_64 and 
xen-4.6.6-9.el7.x86_64 on Intel(R) Core(TM) i7-7700 CPU @ 3.60GHz
- CentOS 7.4 running kernel 4.9.77-30.el7.x86_64 and 
xen-4.6.6-9.el7.x86_64 on AMD Phenom(tm) II X6 1090T Processor
- CentOS 6.9 running kernel 4.9.75-30.el6.x86_64 and 
xen-4.6.6-8.el6.x86_64 on Intel(R) Xeon(R) CPU E5420  @ 2.50GHz

xl dmesg on CentOS 7.4
[...]
(d6) HVM Loader
(d6) Detected Xen v4.6.6-9.el7
(d6) Xenbus rings @0xfeffc000, event channel 1
(d6) System requested SeaBIOS
(d6) CPU speed is 3607 MHz
(d6) Relocating guest memory for lowmem MMIO space disabled
(d6) PCI-ISA link 0 routed to IRQ5
(d6) PCI-ISA link 1 routed to IRQ10
(d6) PCI-ISA link 2 routed to IRQ11
(d6) PCI-ISA link 3 routed to IRQ5
(d6) pci dev 01:2 INTD->IRQ5
(d6) pci dev 01:3 INTA->IRQ10
(d6) pci dev 02:0 INTA->IRQ11
(d6) pci dev 04:0 INTA->IRQ5
(d6) No RAM in high memory; setting high_mem resource base to 100000000
(d6) pci dev 03:0 bar 10 size 002000000: 0f0000008
(d6) pci dev 02:0 bar 14 size 001000000: 0f2000008
(d6) pci dev 04:0 bar 30 size 000040000: 0f3000000
(d6) pci dev 03:0 bar 30 size 000010000: 0f3040000
(d6) pci dev 03:0 bar 14 size 000001000: 0f3050000
(d6) pci dev 02:0 bar 10 size 000000100: 00000c001
(d6) pci dev 04:0 bar 10 size 000000100: 00000c101
(d6) pci dev 04:0 bar 14 size 000000100: 0f3051000
(d6) pci dev 01:2 bar 20 size 000000020: 00000c201
(d6) pci dev 01:1 bar 20 size 000000010: 00000c221
(d6) Multiprocessor initialisation:
(d6) - CPU0 ... 39-bit phys ... fixed MTRRs ... var MTRRs [1/8] ... 
done.
(d6) - CPU1 ... 39-bit phys ... fixed MTRRs ... var MTRRs [1/8] ... 
done.
(d6) Writing SMBIOS tables ...
(d6) Loading SeaBIOS ...
(d6) Creating MP tables ...
(d6) Loading ACPI ...
(d6) vm86 TSS at fc00a180
(d6) BIOS map:
(d6) 10000-100e3: Scratch space
(d6) c0000-fffff: Main BIOS
(d6) E820 table:
(d6) [00]: 00000000:00000000 - 00000000:000a0000: RAM
(d6) HOLE: 00000000:000a0000 - 00000000:000c0000
(d6) [01]: 00000000:000c0000 - 00000000:00100000: RESERVED
(d6) [02]: 00000000:00100000 - 00000000:bf800000: RAM
(d6) HOLE: 00000000:bf800000 - 00000000:fc000000
(d6) [03]: 00000000:fc000000 - 00000001:00000000: RESERVED
(d6) Invoking SeaBIOS ...
(d6) SeaBIOS (version ?-20150729_130325-)
(d6)
(d6) Found Xen hypervisor signature at 40000000
(d6) Running on QEMU (i440fx)
(d6) xen: copy e820...
(d6) Relocating init from 0x000de920 to 0xbf7aec10 (size 70448)
(d6) CPU Mhz=3608
(d6) Found 8 PCI devices (max PCI bus is 00)
(d6) Allocated Xen hypercall page at bf7ff000
(d6) Detected Xen v4.6.6-9.el7
(d6) xen: copy BIOS tables...
(d6) Copying SMBIOS entry point from 0x00010020 to 0x000f6600
(d6) Copying MPTABLE from 0xfc001160/fc001170 to 0x000f6500
(d6) Copying PIR from 0x00010040 to 0x000f6480
(d6) Copying ACPI RSDP from 0x000100c0 to 0x000f6450
(d6) Using pmtimer, ioport 0xb008
(d6) Scan for VGA option rom
(d6) Running option rom at c000:0003
(d6) pmm call arg1=0
(d6) Turning on vga text mode console
(d6) SeaBIOS (version ?-20150729_130325-)
(d6) Machine UUID 8ebc5a48-2f57-4408-9fcb-344604913e27
(d6) UHCI init on dev 00:01.2 (io=c200)
(d6) Found 0 lpt ports
(d6) Found 1 serial ports
(d6) ATA controller 1 at 1f0/3f4/0 (irq 14 dev 9)
(d6) ATA controller 2 at 170/374/0 (irq 15 dev 9)
(d6) ata0-0: QEMU HARDDISK ATA-7 Hard-Disk (40960 MiBytes)
(d6) Searching bootorder for: /pci@i0cf8/*@1,1/drive@0/disk@0
(d6) DVD/CD [ata1-0: QEMU DVD-ROM ATAPI-4 DVD/CD]
(d6) Searching bootorder for: /pci@i0cf8/*@1,1/drive@1/disk@0
(d6) PS2 keyboard initialized
(d6) All threads complete.
(d6) Scan for option roms
(d6) Running option rom at c980:0003
(d6) pmm call arg1=1
(d6) pmm call arg1=0
(d6) pmm call arg1=1
(d6) pmm call arg1=0
(d6) Searching bootorder for: /pci@i0cf8/*@4
(d6)
(d6) Press F12 for boot menu.
(d6)
(d6) Searching bootorder for: HALT
(d6) drive 0x000f6400: PCHS=16383/16/63 translation=lba LCHS=1024/255/63 
s=83886080
(d6) Space available for UMB: ca800-ee800, f5e20-f63a0
(d6) Returned 258048 bytes of ZoneHigh
(d6) e820 map has 6 items:
(d6) 0: 0000000000000000 - 000000000009fc00 = 1 RAM
(d6) 1: 000000000009fc00 - 00000000000a0000 = 2 RESERVED
(d6) 2: 00000000000f0000 - 0000000000100000 = 2 RESERVED
(d6) 3: 0000000000100000 - 00000000bf7ff000 = 1 RAM
(d6) 4: 00000000bf7ff000 - 00000000bf800000 = 2 RESERVED
(d6) 5: 00000000fc000000 - 0000000100000000 = 2 RESERVED
(d6) enter handle_19:
(d6) NULL
(d6) Booting from Hard Disk...
(d6) Booting from 0000:7c00
(d7) HVM Loader
(d7) Detected Xen v4.6.6-9.el7
(d7) Xenbus rings @0xfeffc000, event channel 1
(d7) System requested SeaBIOS
(d7) CPU speed is 3607 MHz
(d7) Relocating guest memory for lowmem MMIO space disabled
(d7) PCI-ISA link 0 routed to IRQ5
(d7) PCI-ISA link 1 routed to IRQ10
(d7) PCI-ISA link 2 routed to IRQ11
(d7) PCI-ISA link 3 routed to IRQ5
(d7) pci dev 01:2 INTD->IRQ5
(d7) pci dev 01:3 INTA->IRQ10
(d7) pci dev 02:0 INTA->IRQ11
(d7) pci dev 04:0 INTA->IRQ5
(d7) No RAM in high memory; setting high_mem resource base to 100000000
(d7) pci dev 03:0 bar 10 size 002000000: 0f0000008
(d7) pci dev 02:0 bar 14 size 001000000: 0f2000008
(d7) pci dev 04:0 bar 30 size 000040000: 0f3000000
(d7) pci dev 03:0 bar 30 size 000010000: 0f3040000
(d7) pci dev 03:0 bar 14 size 000001000: 0f3050000
(d7) pci dev 02:0 bar 10 size 000000100: 00000c001
(d7) pci dev 04:0 bar 10 size 000000100: 00000c101
(d7) pci dev 04:0 bar 14 size 000000100: 0f3051000
(d7) pci dev 01:2 bar 20 size 000000020: 00000c201
(d7) pci dev 01:1 bar 20 size 000000010: 00000c221
(d7) Multiprocessor initialisation:
(d7) - CPU0 ... 39-bit phys ... fixed MTRRs ... var MTRRs [1/8] ... 
done.
(d7) - CPU1 ... 39-bit phys ... fixed MTRRs ... var MTRRs [1/8] ... 
done.
(d7) Writing SMBIOS tables ...
(d7) Loading SeaBIOS ...
(d7) Creating MP tables ...
(d7) Loading ACPI ...
(d7) vm86 TSS at fc00a180
(d7) BIOS map:
(d7) 10000-100e3: Scratch space
(d7) c0000-fffff: Main BIOS
(d7) E820 table:
(d7) [00]: 00000000:00000000 - 00000000:000a0000: RAM
(d7) HOLE: 00000000:000a0000 - 00000000:000c0000
(d7) [01]: 00000000:000c0000 - 00000000:00100000: RESERVED
(d7) [02]: 00000000:00100000 - 00000000:9f800000: RAM
(d7) HOLE: 00000000:9f800000 - 00000000:fc000000
(d7) [03]: 00000000:fc000000 - 00000001:00000000: RESERVED
(d7) Invoking SeaBIOS ...
(d7) SeaBIOS (version ?-20150729_130325-)
(d7)
(d7) Found Xen hypervisor signature at 40000000
(d7) Running on QEMU (i440fx)
(d7) xen: copy e820...
(d7) Relocating init from 0x000de920 to 0x9f7aec10 (size 70448)
(d7) CPU Mhz=3607
(d7) Found 8 PCI devices (max PCI bus is 00)
(d7) Allocated Xen hypercall page at 9f7ff000
(d7) Detected Xen v4.6.6-9.el7
(d7) xen: copy BIOS tables...
(d7) Copying SMBIOS entry point from 0x00010020 to 0x000f6600
(d7) Copying MPTABLE from 0xfc001160/fc001170 to 0x000f6500
(d7) Copying PIR from 0x00010040 to 0x000f6480
(d7) Copying ACPI RSDP from 0x000100c0 to 0x000f6450
(d7) Using pmtimer, ioport 0xb008
(d7) Scan for VGA option rom
(d7) Running option rom at c000:0003
(d7) pmm call arg1=0
(d7) Turning on vga text mode console
(d7) SeaBIOS (version ?-20150729_130325-)
(d7) Machine UUID a83aa702-f987-40f0-842e-469ae25100e9
(d7) UHCI init on dev 00:01.2 (io=c200)
(d7) Found 0 lpt ports
(d7) Found 1 serial ports
(d7) ATA controller 1 at 1f0/3f4/0 (irq 14 dev 9)
(d7) ATA controller 2 at 170/374/0 (irq 15 dev 9)
(d7) ata0-0: QEMU HARDDISK ATA-7 Hard-Disk (51200 MiBytes)
(d7) Searching bootorder for: /pci@i0cf8/*@1,1/drive@0/disk@0
(d7) PS2 keyboard initialized
(d7) All threads complete.
(d7) Scan for option roms
(d7) Running option rom at c980:0003
(d7) pmm call arg1=1
(d7) pmm call arg1=0
(d7) pmm call arg1=1
(d7) pmm call arg1=0
(d7) Searching bootorder for: /pci@i0cf8/*@4
(d7)
(d7) Press F12 for boot menu.
(d7)
(d7) Searching bootorder for: HALT
(d7) drive 0x000f6400: PCHS=16383/16/63 translation=lba LCHS=1024/255/63 
s=104857600
(d7)
(d7) Space available for UMB: ca800-ef000, f5e20-f6400
(d7) Returned 258048 bytes of ZoneHigh
(d7) e820 map has 6 items:
(d7) 0: 0000000000000000 - 000000000009fc00 = 1 RAM
(d7) 1: 000000000009fc00 - 00000000000a0000 = 2 RESERVED
(d7) 2: 00000000000f0000 - 0000000000100000 = 2 RESERVED
(d7) 3: 0000000000100000 - 000000009f7ff000 = 1 RAM
(d7) 4: 000000009f7ff000 - 000000009f800000 = 2 RESERVED
(d7) 5: 00000000fc000000 - 0000000100000000 = 2 RESERVED
(d7) enter handle_19:
(d7) NULL
(d7) Booting from Hard Disk...
(d7) Booting from 0000:7c00
(XEN) d8v0: unhandled page fault (ec=0000)
(XEN) Pagetable walk from 0000000000000028:
(XEN) L4[0x000] = 0000000000000000 ffffffffffffffff
(XEN) domain_crash_sync called from entry.S: fault at ffff82d08022a472 
create_bounce_frame+0x12b/0x13a
(XEN) Domain 8 (vcpu#0) crashed on cpu#6:
(XEN) ----[ Xen-4.6.6-9.el7 x86_64 debug=n Not tainted ]----
(XEN) CPU: 6
(XEN) RIP: e033:[<ffffffff8103f261>]
(XEN) RFLAGS: 0000000000000292 EM: 1 CONTEXT: pv guest (d8v0)
(XEN) rax: 0000000000000000 rbx: ffffffff81e05720 rcx: 0000000000000000
(XEN) rdx: 0000000000000030 rsi: ffffffff82203efc rdi: ffffffff8241d460
(XEN) rbp: ffffffff82203ec8 rsp: ffffffff82203e10 r8: 0000000000000000
(XEN) r9: ffffffff82203f00 r10: 00000000ffffffff r11: ffffffff82203f04
(XEN) r12: ffffffff82203e78 r13: ffffffff82203e7c r14: ffffffff82203e80
(XEN) r15: ffffffff82203e84 cr0: 000000008005003b cr4: 00000000003526e0
(XEN) cr3: 0000000426314000 cr2: 0000000000000028
(XEN) ds: 0000 es: 0000 fs: 0000 gs: 0000 ss: e02b cs: e033
(XEN) Guest stack trace from rsp=ffffffff82203e10:
(XEN) 0000000000000000 ffffffff82203f04 0000000000000000 
ffffffff8103f261
(XEN) 000000010000e030 0000000000010092 ffffffff82203e58 
000000000000e02b
(XEN) 0000000000000000 ffffffff8241d460 0000000000000000 
0000000000000000
(XEN) 0000000000000000 0000000000000000 0000000000000000 
0000000000000000
(XEN) 0000000000000000 0000000000000000 ffffffff8241d460 
ffffffff82203f04
(XEN) ffffffff82203f00 ffffffff82203efc ffffffff82203ef8 
ffffffff82203f40
(XEN) ffffffff8103fce6 ffffffff82203f14 ffffffff82203f10 
ffffffff82203f0c
(XEN) ffffffff82203f08 0000000000003027 0000000000000000 
0000000080000008
(XEN) 0000000000000000 0000000000000000 0000000000000000 
0000000000000000
(XEN) 0000000000000000 0000000000000000 ffffffff82203ff8 
ffffffff8246c490
(XEN) 0000000000000000 0000000000000000 0000000000000000 
0000000000000000
(XEN) 0000000000000000 0000000000000000 0000000000000000 
0000000000000000
(XEN) 0000000000000000 0000000000000000 0000000000000000 
0000000000000000
(XEN) 0000000000000000 0000000000000000 0000000000000000 
0000000000000000
(XEN) 0000000000000000 0000000000000000 0000000000000000 
0000000000000000
(XEN) 0000000000000000 0000000000000000 0f00000060c0c748 
ccccccccccccc305
(XEN) cccccccccccccccc cccccccccccccccc cccccccccccccccc 
cccccccccccccccc
(XEN) cccccccccccccccc cccccccccccccccc cccccccccccccccc 
cccccccccccccccc
(XEN) cccccccccccccccc cccccccccccccccc cccccccccccccccc 
cccccccccccccccc
(XEN) cccccccccccccccc cccccccccccccccc cccccccccccccccc 
cccccccccccccccc

xl dmesg on CentOS 6.9:
(XEN) d38v0: unhandled page fault (ec=0000)
(XEN) Pagetable walk from 0000000000000028:
(XEN) L4[0x000] = 0000000000000000 ffffffffffffffff
(XEN) domain_crash_sync called from entry.S: fault at ffff82d080230983 
create_bounce_frame+0x12b/0x13a
(XEN) Domain 38 (vcpu#0) crashed on cpu#2:
(XEN) ----[ Xen-4.6.6-8.el6 x86_64 debug=n Not tainted ]----
(XEN) CPU: 2
(XEN) RIP: e033:[<ffffffff8103f261>]
(XEN) RFLAGS: 0000000000000292 EM: 1 CONTEXT: pv guest (d38v0)
(XEN) rax: 0000000000000000 rbx: ffffffff81e05720 rcx: 0000000000000000
(XEN) rdx: 0000000000000030 rsi: ffffffff82203efc rdi: ffffffff8241d460
(XEN) rbp: ffffffff82203ec8 rsp: ffffffff82203e10 r8: 0000000000000000
(XEN) r9: ffffffff82203f00 r10: 00000000ffffffff r11: ffffffff82203f04
(XEN) r12: ffffffff82203e78 r13: ffffffff82203e7c r14: ffffffff82203e80
(XEN) r15: ffffffff82203e84 cr0: 000000008005003b cr4: 00000000000426e4
(XEN) cr3: 000000049c571000 cr2: 0000000000000028
(XEN) ds: 0000 es: 0000 fs: 0000 gs: 0000 ss: e02b cs: e033
(XEN) Guest stack trace from rsp=ffffffff82203e10:
(XEN) 0000000000000000 ffffffff82203f04 0000000000000000 
ffffffff8103f261
(XEN) 000000010000e030 0000000000010092 ffffffff82203e58 
000000000000e02b
(XEN) 0000000000000000 ffffffff8241d460 0000000000000000 
0000000000000000
(XEN) 0000000000000000 0000000000000000 0000000000000000 
0000000000000000
(XEN) 0000000000000000 0000000000000000 ffffffff8241d460 
ffffffff82203f04
(XEN) ffffffff82203f00 ffffffff82203efc ffffffff82203ef8 
ffffffff82203f40
(XEN) ffffffff8103fce6 ffffffff82203f14 ffffffff82203f10 
ffffffff82203f0c
(XEN) ffffffff82203f08 0000000000003026 0000000000000000 
0000000080000008
(XEN) 0000000000000000 0000000000000000 0000000000000000 
0000000000000000
(XEN) 0000000000000000 0000000000000000 ffffffff82203ff8 
ffffffff8246c490
(XEN) 0000000000000000 0000000000000000 0000000000000000 
0000000000000000
(XEN) 0000000000000000 0000000000000000 0000000000000000 
0000000000000000
(XEN) 0000000000000000 0000000000000000 0000000000000000 
0000000000000000
(XEN) 0000000000000000 0000000000000000 0000000000000000 
0000000000000000
(XEN) 0000000000000000 0000000000000000 0000000000000000 
0000000000000000
(XEN) 0000000000000000 0000000000000000 0f00000060c0c748 
ccccccccccccc305
(XEN) cccccccccccccccc cccccccccccccccc cccccccccccccccc 
cccccccccccccccc
(XEN) cccccccccccccccc cccccccccccccccc cccccccccccccccc 
cccccccccccccccc
(XEN) cccccccccccccccc cccccccccccccccc cccccccccccccccc 
cccccccccccccccc
(XEN) cccccccccccccccc cccccccccccccccc cccccccccccccccc 
cccccccccccccccc

-- 
Adi Pircalabu

_______________________________________________
Xen-devel mailing list
Xen-devel@lists.xenproject.org
https://lists.xenproject.org/mailman/listinfo/xen-devel

^ permalink raw reply	[flat|nested] 4+ messages in thread

* Re: kernel-ml-4.15.0-1.el7.elrepo.x86_64 doesn't boot as Xen PV domU
  2018-01-31  0:18 kernel-ml-4.15.0-1.el7.elrepo.x86_64 doesn't boot as Xen PV domU Adi Pircalabu
@ 2018-01-31 22:13 ` Michael Young
  2018-02-01  0:17   ` Michael Young
  0 siblings, 1 reply; 4+ messages in thread
From: Michael Young @ 2018-01-31 22:13 UTC (permalink / raw)
  To: Adi Pircalabu; +Cc: xen-devel

On Wed, 31 Jan 2018, Adi Pircalabu wrote:

> (XEN) d8v0: unhandled page fault (ec=0000)
> (XEN) Pagetable walk from 0000000000000028:
> (XEN) L4[0x000] = 0000000000000000 ffffffffffffffff
> (XEN) domain_crash_sync called from entry.S: fault at ffff82d08022a472 
> create_bounce_frame+0x12b/0x13a
> (XEN) Domain 8 (vcpu#0) crashed on cpu#6:
> (XEN) ----[ Xen-4.6.6-9.el7 x86_64 debug=n Not tainted ]----
> (XEN) CPU: 6
> (XEN) RIP: e033:[<ffffffff8103f261>]
> (XEN) RFLAGS: 0000000000000292 EM: 1 CONTEXT: pv guest (d8v0)
> (XEN) rax: 0000000000000000 rbx: ffffffff81e05720 rcx: 0000000000000000
> (XEN) rdx: 0000000000000030 rsi: ffffffff82203efc rdi: ffffffff8241d460
> (XEN) rbp: ffffffff82203ec8 rsp: ffffffff82203e10 r8: 0000000000000000
> (XEN) r9: ffffffff82203f00 r10: 00000000ffffffff r11: ffffffff82203f04
> (XEN) r12: ffffffff82203e78 r13: ffffffff82203e7c r14: ffffffff82203e80
> (XEN) r15: ffffffff82203e84 cr0: 000000008005003b cr4: 00000000003526e0
> (XEN) cr3: 0000000426314000 cr2: 0000000000000028
> (XEN) ds: 0000 es: 0000 fs: 0000 gs: 0000 ss: e02b cs: e033
> (XEN) Guest stack trace from rsp=ffffffff82203e10:
> (XEN) 0000000000000000 ffffffff82203f04 0000000000000000 ffffffff8103f261
> (XEN) 000000010000e030 0000000000010092 ffffffff82203e58 000000000000e02b
> (XEN) 0000000000000000 ffffffff8241d460 0000000000000000 0000000000000000
> (XEN) 0000000000000000 0000000000000000 0000000000000000 0000000000000000
> (XEN) 0000000000000000 0000000000000000 ffffffff8241d460 ffffffff82203f04
> (XEN) ffffffff82203f00 ffffffff82203efc ffffffff82203ef8 ffffffff82203f40
> (XEN) ffffffff8103fce6 ffffffff82203f14 ffffffff82203f10 ffffffff82203f0c
> (XEN) ffffffff82203f08 0000000000003027 0000000000000000 0000000080000008
> (XEN) 0000000000000000 0000000000000000 0000000000000000 0000000000000000
> (XEN) 0000000000000000 0000000000000000 ffffffff82203ff8 ffffffff8246c490
> (XEN) 0000000000000000 0000000000000000 0000000000000000 0000000000000000
> (XEN) 0000000000000000 0000000000000000 0000000000000000 0000000000000000
> (XEN) 0000000000000000 0000000000000000 0000000000000000 0000000000000000
> (XEN) 0000000000000000 0000000000000000 0000000000000000 0000000000000000
> (XEN) 0000000000000000 0000000000000000 0000000000000000 0000000000000000
> (XEN) 0000000000000000 0000000000000000 0f00000060c0c748 ccccccccccccc305
> (XEN) cccccccccccccccc cccccccccccccccc cccccccccccccccc cccccccccccccccc
> (XEN) cccccccccccccccc cccccccccccccccc cccccccccccccccc cccccccccccccccc
> (XEN) cccccccccccccccc cccccccccccccccc cccccccccccccccc cccccccccccccccc
> (XEN) cccccccccccccccc cccccccccccccccc cccccccccccccccc cccccccccccccccc

I an getting a similar crash with a PV guest running Fedora rawhide

(XEN) d26v0 Unhandled page fault fault/trap [#14, ec=0000]
(XEN) Pagetable walk from 0000000000000028:
(XEN)  L4[0x000] = 0000000000000000 ffffffffffffffff
(XEN) domain_crash_sync called from entry.S: fault at ffff82d080348a68 entry.o#create_bounce_frame+0x135/0x14d
(XEN) Domain 26 (vcpu#0) crashed on cpu#0:
(XEN) ----[ Xen-4.9.1  x86_64  debug=n   Not tainted ]----
(XEN) CPU:    0
(XEN) RIP:    e033:[<ffffffff81036a89>]
(XEN) RFLAGS: 0000000000000292   EM: 1   CONTEXT: pv guest (d26v0)
(XEN) rax: 0000000000000000   rbx: ffffffff81e03fa0   rcx: 0000000000000000
(XEN) rdx: 0000000000000000   rsi: ffffffff82203f04   rdi: ffffffff823777e0
(XEN) rbp: ffffffff82203f08   rsp: ffffffff82203e20   r8:  ffffffff82203f08
(XEN) r9:  00000000ffffffff   r10: ffffffff82203f0c   r11: 0000000000000000
(XEN) r12: ffffffff82203f0c   r13: ffffffff82203e88   r14: ffffffff82203f00
(XEN) r15: ffffffff82203e98   cr0: 000000008005003b   cr4: 00000000001526e0
(XEN) cr3: 000000021709a000   cr2: 0000000000000028
(XEN) fsb: 0000000000000000   gsb: 0000000000000000   gss: 0000000000000000
(XEN) ds: 0000   es: 0000   fs: 0000   gs: 0000   ss: e02b   cs: e033
(XEN) Guest stack trace from rsp=ffffffff82203e20:
(XEN)    0000000000000000 0000000000000000 0000000000000000 ffffffff81036a89
(XEN)    000000010000e030 0000000000010092 ffffffff82203e68 000000000000e02b
(XEN)    0000000000000000 0000000000000000 0000000000000000 0000000000000000

This example is when booting 4.15.0-1.fc28.x86_64, the last kernel I 
successfully booted on this guest was 4.15.0-0.rc4.git3.1.fc28.x86_64

In this build of xen the code at create_bounce_frame+0x135 (ie. 309) is
    0xffff82d080348a61 <create_bounce_frame+302>:	mov    0x8(%rdx),%rax
    0xffff82d080348a65 <create_bounce_frame+306>:	test   %rax,%rax
    0xffff82d080348a68 <create_bounce_frame+309>:
     je     0xffff82d080349e60 <arch/x86/x86_64/entry.o.unlikely+116>
    0xffff82d080348a6e <create_bounce_frame+315>:	mov    %rax,0x88(%rsp)
    0xffff82d080348a76 <create_bounce_frame+323>:	retq
    0xffff82d080348a77 <create_bounce_frame+324>:	nopw   0x0(%rax,%rax,1)

ie. at
         movq  TRAPBOUNCE_eip(%rdx),%rax
         testq %rax,%rax
UNLIKELY_START(z, create_bounce_frame_bad_bounce_ip)
         lea   UNLIKELY_DISPATCH_LABEL(create_bounce_frame_bad_bounce_ip)(%rip), %rdi
         jmp   asm_domain_crash_synchronous  /* Does not return */
__UNLIKELY_END(create_bounce_frame_bad_bounce_ip)
         movq  %rax,UREGS_rip+8(%rsp)
         ret
in xen/arch/x86/x86_64/entry.S

 	Michael Young

_______________________________________________
Xen-devel mailing list
Xen-devel@lists.xenproject.org
https://lists.xenproject.org/mailman/listinfo/xen-devel

^ permalink raw reply	[flat|nested] 4+ messages in thread

* Re: kernel-ml-4.15.0-1.el7.elrepo.x86_64 doesn't boot as Xen PV domU
  2018-01-31 22:13 ` Michael Young
@ 2018-02-01  0:17   ` Michael Young
  2018-02-01  7:25     ` Juergen Gross
  0 siblings, 1 reply; 4+ messages in thread
From: Michael Young @ 2018-02-01  0:17 UTC (permalink / raw)
  To: Adi Pircalabu; +Cc: xen-devel

On Wed, 31 Jan 2018, Michael Young wrote:

> (XEN) Guest stack trace from rsp=ffffffff82203e20:
> (XEN)    0000000000000000 0000000000000000 0000000000000000 ffffffff81036a89
> (XEN)    000000010000e030 0000000000010092 ffffffff82203e68 000000000000e02b
> (XEN)    0000000000000000 0000000000000000 0000000000000000 0000000000000000

I have just spotted this is truncated. The full Guest stack trace is

(XEN) Guest stack trace from rsp=ffffffff82203e20:
(XEN)    0000000000000000 0000000000000000 0000000000000000 ffffffff81036a89
(XEN)    000000010000e030 0000000000010092 ffffffff82203e68 000000000000e02b
(XEN)    0000000000000000 0000000000000000 0000000000000000 0000000000000000
(XEN)    ffffffff823777e0 0000000000000000 0000000000000000 0000000000000000
(XEN)    0000000000000000 0000000000000000 ffffffff823777e0 ffffffff82203f08
(XEN)    ffffffff82203f0c ffffffff82203f04 ffffffff82203f00 ffffffff82203f1c
(XEN)    ffffffff81037673 ffffffff82203f10 ffffffff82203f14 ffffffff82203f18
(XEN)    0000000000003024 0000000000000000 0000000080000008 0000000000000000
(XEN)    ffffffff81029d10 0000000000000000 0000000000000000 0000000000000000
(XEN)    0000000000000000 0000000000000000 ffffffff82727b49 0000000000000000
(XEN)    0000000000000000 0000000000000000 0000000000000000 0000000000000000
(XEN)    0000000000000000 0000000000000000 0000000000000000 0000000000000000
(XEN)    0000000000000000 0000000000000000 0000000000000000 0000000000000000
(XEN)    0000000000000000 0000000000000000 0000000000000000 0000000000000000
(XEN)    0000000000000000 0000000000000000 0000000000000000 0000000000000000
(XEN)    0f00000060c0c748 ccccccccccccc305 cccccccccccccccc cccccccccccccccc
(XEN)    cccccccccccccccc cccccccccccccccc cccccccccccccccc cccccccccccccccc
(XEN)    cccccccccccccccc cccccccccccccccc cccccccccccccccc cccccccccccccccc
(XEN)    cccccccccccccccc cccccccccccccccc cccccccccccccccc cccccccccccccccc
(XEN)    cccccccccccccccc cccccccccccccccc cccccccccccccccc cccccccccccccccc

Some addresses from this that look like they might be relevant are
0xffffffff82203e20 <init_thread_union+15904>:	add    %al,(%rax)
0xffffffff81036a89 <init_scattered_cpuid_features+41>:
     mov    %gs:0x28,%rax
0xffffffff81037673 <get_cpu_cap+723>:	xor    %edx,%edx
0xffffffff81029d10 <x86_init_noop>:	callq  0xffffffff81a01f90 <__fentry__>
0xffffffff82727b49 <xen_start_kernel+215>:
     callq  0xffffffff8106d6d0 <x86_configure_nx>

 	Michael Young

_______________________________________________
Xen-devel mailing list
Xen-devel@lists.xenproject.org
https://lists.xenproject.org/mailman/listinfo/xen-devel

^ permalink raw reply	[flat|nested] 4+ messages in thread

* Re: kernel-ml-4.15.0-1.el7.elrepo.x86_64 doesn't boot as Xen PV domU
  2018-02-01  0:17   ` Michael Young
@ 2018-02-01  7:25     ` Juergen Gross
  0 siblings, 0 replies; 4+ messages in thread
From: Juergen Gross @ 2018-02-01  7:25 UTC (permalink / raw)
  To: Michael Young, Adi Pircalabu; +Cc: xen-devel

On 01/02/18 01:17, Michael Young wrote:
> On Wed, 31 Jan 2018, Michael Young wrote:
> 
>> (XEN) Guest stack trace from rsp=ffffffff82203e20:
>> (XEN)    0000000000000000 0000000000000000 0000000000000000
>> ffffffff81036a89
>> (XEN)    000000010000e030 0000000000010092 ffffffff82203e68
>> 000000000000e02b
>> (XEN)    0000000000000000 0000000000000000 0000000000000000
>> 0000000000000000
> 
> I have just spotted this is truncated. The full Guest stack trace is
> 
> (XEN) Guest stack trace from rsp=ffffffff82203e20:
> (XEN)    0000000000000000 0000000000000000 0000000000000000
> ffffffff81036a89
> (XEN)    000000010000e030 0000000000010092 ffffffff82203e68
> 000000000000e02b
> (XEN)    0000000000000000 0000000000000000 0000000000000000
> 0000000000000000
> (XEN)    ffffffff823777e0 0000000000000000 0000000000000000
> 0000000000000000
> (XEN)    0000000000000000 0000000000000000 ffffffff823777e0
> ffffffff82203f08
> (XEN)    ffffffff82203f0c ffffffff82203f04 ffffffff82203f00
> ffffffff82203f1c
> (XEN)    ffffffff81037673 ffffffff82203f10 ffffffff82203f14
> ffffffff82203f18
> (XEN)    0000000000003024 0000000000000000 0000000080000008
> 0000000000000000
> (XEN)    ffffffff81029d10 0000000000000000 0000000000000000
> 0000000000000000
> (XEN)    0000000000000000 0000000000000000 ffffffff82727b49
> 0000000000000000
> (XEN)    0000000000000000 0000000000000000 0000000000000000
> 0000000000000000
> (XEN)    0000000000000000 0000000000000000 0000000000000000
> 0000000000000000
> (XEN)    0000000000000000 0000000000000000 0000000000000000
> 0000000000000000
> (XEN)    0000000000000000 0000000000000000 0000000000000000
> 0000000000000000
> (XEN)    0000000000000000 0000000000000000 0000000000000000
> 0000000000000000
> (XEN)    0f00000060c0c748 ccccccccccccc305 cccccccccccccccc
> cccccccccccccccc
> (XEN)    cccccccccccccccc cccccccccccccccc cccccccccccccccc
> cccccccccccccccc
> (XEN)    cccccccccccccccc cccccccccccccccc cccccccccccccccc
> cccccccccccccccc
> (XEN)    cccccccccccccccc cccccccccccccccc cccccccccccccccc
> cccccccccccccccc
> (XEN)    cccccccccccccccc cccccccccccccccc cccccccccccccccc
> cccccccccccccccc
> 
> Some addresses from this that look like they might be relevant are
> 0xffffffff82203e20 <init_thread_union+15904>:    add    %al,(%rax)
> 0xffffffff81036a89 <init_scattered_cpuid_features+41>:
>     mov    %gs:0x28,%rax

Hmm, my compiler doesn't generate this instruction here. OTOH it does so
in many other functions, but those seem to be called only later.

Seems as if it would be a good idea to setup the GDT and %gs segment as
early as possible.

I'll have a try how far we can move the call of xen_setup_gdt() up in
the boot process.


Juergen

_______________________________________________
Xen-devel mailing list
Xen-devel@lists.xenproject.org
https://lists.xenproject.org/mailman/listinfo/xen-devel

^ permalink raw reply	[flat|nested] 4+ messages in thread

end of thread, other threads:[~2018-02-01  7:25 UTC | newest]

Thread overview: 4+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2018-01-31  0:18 kernel-ml-4.15.0-1.el7.elrepo.x86_64 doesn't boot as Xen PV domU Adi Pircalabu
2018-01-31 22:13 ` Michael Young
2018-02-01  0:17   ` Michael Young
2018-02-01  7:25     ` Juergen Gross

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).