This is an archived copy of the Xen.org mailing list, which we have preserved to ensure that existing links to archives are not broken. The live archive, which contains the latest emails, can be found at http://lists.xen.org/
Home Products Support Community News


Re: [Xen-devel] Re: xen/stable 32bit dom0 kernel crashes early

To: M A Young <m.a.young@xxxxxxxxxxxx>
Subject: Re: [Xen-devel] Re: xen/stable 32bit dom0 kernel crashes early on boot
From: Jeremy Fitzhardinge <jeremy@xxxxxxxx>
Date: Fri, 19 Mar 2010 18:00:12 -0700
Cc: xen-devel@xxxxxxxxxxxxxxxxxxx, Keir Fraser <keir.fraser@xxxxxxxxxxxxx>, Konrad Rzeszutek Wilk <kliw@xxxxxxxxxx>
Delivery-date: Fri, 19 Mar 2010 18:00:57 -0700
Envelope-to: www-data@xxxxxxxxxxxxxxxxxxx
In-reply-to: <alpine.LFD.2.00.1003192214430.23340@xxxxxxxxxxxxxxx>
List-help: <mailto:xen-devel-request@lists.xensource.com?subject=help>
List-id: Xen developer discussion <xen-devel.lists.xensource.com>
List-post: <mailto:xen-devel@lists.xensource.com>
List-subscribe: <http://lists.xensource.com/mailman/listinfo/xen-devel>, <mailto:xen-devel-request@lists.xensource.com?subject=subscribe>
List-unsubscribe: <http://lists.xensource.com/mailman/listinfo/xen-devel>, <mailto:xen-devel-request@lists.xensource.com?subject=unsubscribe>
References: <20100304195337.GF2761@xxxxxxxxxxx> <4BA2B7FA.4050306@xxxxxxxx> <alpine.LFD.2.00.1003192214430.23340@xxxxxxxxxxxxxxx>
Sender: xen-devel-bounces@xxxxxxxxxxxxxxxxxxx
User-agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv: Gecko/20100301 Fedora/3.0.3-1.fc12 Lightning/1.0b2pre Thunderbird/3.0.3
On 03/19/2010 03:20 PM, M A Young wrote:
I submitted an earlier report with a more complete dump of this function, which is at http://lists.xensource.com/archives/html/xen-devel/2010-02/msg00844.html The code may have changed slightly since then but it looks to be the same issue.

I can reproduce this with 32-bit Xen even on a system supporting NX (below). Due to a brainfart I had been reading it as bit 9 (for programmer use), but its actually Global, which we don't allow. Not sure why Global is leaking through; I'll have a look later. (With luck it will also explain why NX is leaking through; probably a path which isn't masking the supported pte flags).


[    0.000000] ACPI: LAPIC (acpi_id[0x0c] lapic_id[0x18] disabled)
[    0.000000] ACPI: LAPIC (acpi_id[0x0d] lapic_id[0x1a] disabled)
[    0.000000] ACPI: LAPIC (acpi_id[0x0e] lapic_id[0x1c] disabled)
[    0.000000] ACPI: IOAPIC (id[0x01] address[0xfec00000] gsi_base[0])
(XEN) mm.c:1746:d0 Bad L1 flags 100
(XEN) mm.c:778:d0 Bad L1 flags 100
(XEN) mm.c:4637:d0 ptwr_emulate: could not get_page_from_l1e()
(XEN) d0:v0: unhandled page fault (ec=0003)
(XEN) Pagetable walk from c17d9fd0:
(XEN)  L3[0x003] = 00000000197d7001 000017d7
(XEN)  L2[0x00b] = 000000001a3c8067 000023c8
(XEN)  L1[0x1d9] = 80000000197d9061 000017d9
(XEN) domain_crash_sync called from entry.S (ff1cb682)
(XEN) Domain 0 (vcpu#0) crashed on cpu#0:
(XEN) ----[ Xen-4.0.0-rc6  x86_32p  debug=y  Not tainted ]----
(XEN) CPU:    0
(XEN) EIP:    e019:[<c1005ed9>]
(XEN) EFLAGS: 00000296   EM: 1   CONTEXT: pv guest
(XEN) eax: 00000000   ebx: c17d9fd0   ecx: 80000000   edx: 197d8163
(XEN) esi: 80000000   edi: 00000000   ebp: c16d3e54   esp: c16d3e34
(XEN) cr0: 8005003b   cr4: 000006f0   cr3: 003f4c80   cr2: c17d9fd0
(XEN) ds: e021   es: e021   fs: 00d8   gs: 0000   ss: e021   cs: e019
(XEN) Guest stack trace from esp=c16d3e34:
(XEN)    00000003 c1005ed9 0001e019 00010096 197d8163 deadbeef deadbeef f57fa000
(XEN)    c16d3e74 c1006037 c17d9fd0 80000000 197d8163 80000000 c17d9fd0 f57fa000
(XEN)    c16d3e98 c10281c5 197d8163 80000000 80000000 017d8163 00005000 f57ff000
(XEN)    0000017b c16d3ea8 c10273ab 00000005 80000000 c16d3ec4 c1005058 c160fa5f
(XEN)    c16d3ec4 00000000 00000000 00000001 c16d3ee0 c1766642 0000017b 80000000
(XEN)    f5600c24 f5600c24 c160fa5f c16d3eec c1761b92 00000001 c16d3f10 c1778ad9
(XEN)    f5600ca8 00000001 000000d8 f5600bd0 00000000 00000000 00000000 c16d3f20
(XEN)    c1778b4f c1761b65 00000040 c16d3f30 c1762127 1d010000 00000000 c16d3fac
(XEN)    c175c965 c17e8dac c103a2f1 02341600 00000000 00000035 019b8000 00000000
(XEN)    c16d3f6d 00000000 205b8000 00989600 3030302e 1d010000 00000000 c16e10ac
(XEN)    00000002 00000002 c16d3f8c 00000000 00000000 c16e034c c16d3f9c 00000000
(XEN)    00000000 00000000 00000000 00000000 00000000 c16e034c c16d3fc4 c17575bd
(XEN)    c16078d7 c1494010 c178e90c 019b8000 c16d3fd4 c17570a8 019b8000 c178d6f8
(XEN)    c16d3ffc c175a26b 17889375 80980201 00200800 000106e5 00000001 00000000
(XEN)    c23b7000 00000000 00000000
(XEN) Domain 0 crashed: rebooting machine in 5 seconds.

Xen-devel mailing list

<Prev in Thread] Current Thread [Next in Thread>