RE: [Xen-devel] Test report for Xen-3.3.0-rc4 (#18314)

["Xu, Jiajun" <jiajun.xu@xxxxxxxxx>]

On Wednesday, August 13, 2008 10:48 PM
xen-devel-bounces@xxxxxxxxxxxxxxxxxxx wrote:

> As of c/s 18326 I've not been able to reproduce the hypervisor crash
> in around 40 attempts. Could you give that a go (don't remove OOS from
> SHADOW_OPTIMIZATIONS -- just test the tree as it is)?

We tried c/s 18326, the two issues still exist. We found it is more easy
to reproduce these issues on 32pae host than on 32e host. See following
log:
If remove OOS, the two issues will disapear and no other error found.

Booting Indiana(2008.05) cause Xen Crash:
###################
(XEN) sh error: sh_remove_shadows(): can't find all shadows of mfn
2291c6 (shadow_flags=60000010)
(XEN) domain_crash called from common.c:2714
(XEN) Domain 2 (vcpu#1) crashed on cpu#1:
(XEN) ----[ Xen-3.3.0-rc5-pre  x86_32p  debug=n  Not tainted ]----
(XEN) CPU:    1
(XEN) EIP:    0158:[<fe832375>]
(XEN) EFLAGS: 00010202   CONTEXT: hvm guest
(XEN) eax: fe832381   ebx: d996dc40   ecx: 00000004   edx: d826c800
(XEN) esi: dc285114   edi: da67511c   ebp: d996daec   esp: d996dae0
(XEN) cr0: 8005003b   cr4: 000006b8   cr3: 023cb040   cr2: 08047e54
(XEN) ds: 0160   es: 0160   fs: 0000   gs: 01b0   ss: 0160   cs: 0158
(XEN) sh error: oos_snapshot_lookup(): gmfn 2291c6 was OOS but not in
hash table
(XEN) Xen BUG at common.c:817
(XEN) ----[ Xen-3.3.0-rc5-pre  x86_32p  debug=n  Not tainted ]----
(XEN) CPU:    1
(XEN) EIP:    e008:[<ff18a7bc>] oos_snapshot_lookup+0xcc/0xf0
(XEN) EFLAGS: 00010286   CONTEXT: hypervisor
(XEN) eax: 00000000   ebx: 00000000   ecx: 0000000a   edx: 00000000
(XEN) esi: ffbcf034   edi: 002291c6   ebp: 00000008   esp: ff2abd90
(XEN) cr0: 80050033   cr4: 000026f0   cr3: 00bced20   cr2: 08047e54
(XEN) ds: e010   es: e010   fs: 0000   gs: 0000   ss: e010   cs: e008
(XEN) Xen stack trace from esp=ff2abd90:
(XEN)    ff1b5a68 ff1a4d78 002291c6 00000002 00000000 00000000 ffbcf040
fe6e1428
(XEN)    ffbce080 fdff3708 ffbd0080 ff197b6b ffbce080 002291c6 0022a235
00000001
(XEN)    00000001 ff2abe50 ff2abfb4 ff167149 ffbce080 ffbd0080 033a9d58
00000054
(XEN)    0000002c 00227139 0022a235 00000002 00000000 00000428 00000708
00000000
(XEN)    fefe2238 00000020 fe6a4240 000000f8 ffbd0080 000dc285 2a0bf001
00000002
(XEN)    fe040338 00000020 ffbd0080 ff13acd3 001e9e65 ff2abfb4 00000020
00000020
(XEN)    ff2abfb4 00000020 00000020 ff190001 00b09089 08eb0000 b90843ff
ffffffff
(XEN)    feade1e5 00000010 0c9b0158 ffffffff 00000000 00000000 0c930160
ffffffff
(XEN)    00000000 00000000 0c930160 ffffffff 00000000 00000000 00000000
ff2abfb4
(XEN)    ffbce080 00000000 ffbd0080 ff194f79 00000000 00000000 0022a03f
00000001
(XEN)    00000001 00003708 f6800000 001e9e65 ffffffff 00000000 dc285114
06062001
(XEN)    00000000 025c6027 00000000 01539361 80000000 001e9262 002291c6
000aa289
(XEN)    2a235067 00000002 27139021 80000002 ff17e469 00000001 ffbce080
dc285114
(XEN)    00000000 ffbce080 ff2abfb4 ff1839eb ffbce080 dc285114 ff2abfb4
c8589e63
(XEN)    c8d856e1 000000d6 c85961b3 000000d6 ffbce080 ffbd0080 00000003
0000d900
(XEN)    0000e002 c8d856e1 000000d6 00000000 ff2abfb4 ff1dc180 ff1de100
ff2abfb4
(XEN)    00000001 ff2abfb4 ffbce080 ffbce080 dc285114 ff2abfd4 d996daec
ff17e2d9
(XEN)    ff2abfb4 d996dc40 00000004 d826c800 dc285114 da67511c d996daec
fe832381
(XEN)    00f00001 fe832375 00000000 00010202 d996dae0 00000000 00000000
00000000
(XEN)    00000000 00000000 00000001 ffbce080
(XEN) Xen call trace:
(XEN)    [<ff18a7bc>] oos_snapshot_lookup+0xcc/0xf0
(XEN)    [<ff197b6b>] sh_page_fault__guest_3+0x117b/0x1420
(XEN)    [<ff167149>] hvmemul_get_seg_reg+0x49/0x60
(XEN)    [<ff13acd3>] put_page_from_l1e+0x63/0xf0
(XEN)    [<ff190001>] shadow_set_l2e+0x341/0x400
(XEN)    [<ff194f79>] sh_invlpg__guest_3+0x2c9/0x2e0
(XEN)    [<ff17e469>] vmx_intr_assist+0x89/0x380
(XEN)    [<ff1839eb>] vmx_vmexit_handler+0x63b/0x1230
(XEN)    [<ff17e2d9>] vmx_asm_vmexit_handler+0x49/0x4c
(XEN)    
(XEN) 
(XEN) ****************************************
(XEN) Panic on CPU 1:
(XEN) Xen BUG at common.c:817
(XEN) ****************************************
################

Destroy Nevada 81 HVM casue xen crash:
################
(XEN) mm.c:706:d1 Error getting mfn 2235b0 (pfn 23b0) from L1 entry
00000002235b0023 for dom1
(XEN) mm.c:1941:d1 Type count overflow on pfn 2235b0
(XEN) mm.c:706:d1 Error getting mfn 2235b0 (pfn 23b0) from L1 entry
00000002235b0023 for dom1
(XEN) mm.c:1941:d1 Type count overflow on pfn 2235b0
(XEN) mm.c:706:d1 Error getting mfn 2235b0 (pfn 23b0) from L1 entry
00000002235b0023 for dom1
(XEN) mm.c:1941:d1 Type count overflow on pfn 2235b0
(XEN) mm.c:706:d1 Error getting mfn 2235b0 (pfn 23b0) from L1 entry
00000002235b0023 for dom1
(XEN) mm.c:1941:d1 Type count overflow on pfn 2235b0
(XEN) mm.c:706:d1 Error getting mfn 2235b0 (pfn 23b0) from L1 entry
00000002235b0023 for dom1
(XEN) mm.c:1941:d1 Type count overflow on pfn 2235b0
(XEN) mm.c:706:d1 Error getting mfn 2235b0 (pfn 23b0) from L1 entry
00000002235b0023 for dom1
(XEN) mm.c:1941:d1 Type count overflow on pfn 2235b0
(XEN) mm.c:706:d1 Error getting mfn 2235b0 (pfn 23b0) from L1 entry
00000002235b0023 for dom1
(XEN) mm.c:1941:d1 Type count overflow on pfn 2235b0
(XEN) mm.c:706:d1 Error getting mfn 2235b0 (pfn 23b0) from L1 entry
00000002235b0023 for dom1
(XEN) mm.c:1941:d1 Type count overflow on pfn 2235b0
(XEN) mm.c:706:d1 Error getting mfn 2235b0 (pfn 23b0) from L1 entry
00000002235b0023 for dom1
(XEN) mm.c:1941:d1 Type count overflow on pfn 2235b0
(XEN) mm.c:706:d1 Error getting mfn 2235b0 (pfn 23b0) from L1 entry
00000002235b0023 for dom1
(XEN) mm.c:1941:d1 Type count overflow on pfn 2235b0
(XEN) mm.c:706:d1 Error getting mfn 2235b0 (pfn 23b0) from L1 entry
00000002235b0023 for dom1
(XEN) mm.c:1941:d1 Type count overflow on pfn 2235b0
(XEN) mm.c:706:d1 Error getting mfn 2235b0 (pfn 23b0) from L1 entry
00000002235b0023 for dom1
(XEN) mm.c:1941:d1 Type count overflow on pfn 2235b0
(XEN) mm.c:706:d1 Error getting mfn 2235b0 (pfn 23b0) from L1 entry
00000002235b0023 for dom1
(XEN) mm.c:1941:d1 Type count overflow on pfn 2235b(XEN) 
(XEN) ****************************************
(XEN) Panic on CPU 7:
(XEN) Xen BUG at page_alloc.c:839
(XEN) ****************************************
(XEN) 
(XEN) Reboot in five seconds...
#######################


Best Regards
Jiajun

_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-devel