[Xen-bugs] [Bug 1516] New: memtest86 cause hvm crash with EPT violation

[bugzilla-daemon@xxxxxxxxxxxxxxxxxxx]

http://bugzilla.xensource.com/bugzilla/show_bug.cgi?id=1516

           Summary: memtest86 cause hvm crash with EPT violation
           Product: Xen
           Version: unstable
          Platform: Other
        OS/Version: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Hypervisor
        AssignedTo: xen-bugs@xxxxxxxxxxxxxxxxxxx
        ReportedBy: jiajun.xu@xxxxxxxxx


Environment:
------------
Service Arch (ia32/ia32e/IA64): ia32e
Guest Arch (ia32/ia32e/IA64): ia32e
Guest OS Type (Linux/Windows):
Change Set: 20145
Hardware: NHM-HEDT
Other:

xen-changeset:   20145:8fc927798476

pvops git:
commit 433389fa03c3b9a13914471dd5547bd463555f23
Author: Michal Schmidt <mschmidt@xxxxxxxxxx>
Date:   Sat Aug 29 18:27:18 2009 +0200

ioemu git:
commit a83d119cfcc20bc7edb427992d6e31b3e99430be
Author: Ian Jackson <ian.jackson@xxxxxxxxxxxxx>
Date:   Mon Aug 10 18:02:56 2009 +0100


Bug detailed description:
--------------------------
When running memtest86 in guest with EPT enabled, guest will crash with EPT
violation error.

There is no guest crash if EPT is disabled for guest.

xm dmesg info:

(XEN) HVM10: HVM Loader
(XEN) HVM10: Detected Xen v3.5-unstable
(XEN) HVM10: CPU speed is 2400 MHz
(XEN) irq.c:243: Dom10 PCI link 0 changed 0 -> 5
(XEN) HVM10: PCI-ISA link 0 routed to IRQ5
(XEN) irq.c:243: Dom10 PCI link 1 changed 0 -> 10
(XEN) HVM10: PCI-ISA link 1 routed to IRQ10
(XEN) irq.c:243: Dom10 PCI link 2 changed 0 -> 11
(XEN) HVM10: PCI-ISA link 2 routed to IRQ11
(XEN) irq.c:243: Dom10 PCI link 3 changed 0 -> 5
(XEN) HVM10: PCI-ISA link 3 routed to IRQ5
(XEN) HVM10: pci dev 01:3 INTA->IRQ10
(XEN) HVM10: pci dev 03:0 INTA->IRQ5
(XEN) HVM10: pci dev 02:0 bar 10 size 02000000: f0000008
(XEN) HVM10: pci dev 03:0 bar 14 size 01000000: f2000008
(XEN) HVM10: pci dev 02:0 bar 14 size 00001000: f3000000
(XEN) HVM10: pci dev 03:0 bar 10 size 00000100: 0000c001
(XEN) HVM10: pci dev 01:1 bar 20 size 00000010: 0000c101
(XEN) HVM10: Multiprocessor initialisation:
(XEN) HVM10:  - CPU0 ... 40-bit phys ... fixed MTRRs ... var MTRRs [2/8] ...
done.
(XEN) HVM10: Testing HVM environment:
(XEN) HVM10:  - REP INSB across page boundaries ... passed
(XEN) HVM10:  - GS base MSRs and SWAPGS ... passed
(XEN) HVM10: Passed 2 of 2 tests
(XEN) HVM10: Writing SMBIOS tables ...
(XEN) HVM10: Loading ROMBIOS ...
(XEN) HVM10: 9628 bytes of ROMBIOS high-memory extensions:
(XEN) HVM10:   Relocating to 0xfc000000-0xfc00259c ... done
(XEN) HVM10: Creating MP tables ...
(XEN) HVM10: Loading Cirrus VGABIOS ...
(XEN) HVM10: Loading ACPI ...
(XEN) HVM10:  - Lo data: 000ea020-000ea04f
(XEN) HVM10:  - Hi data: fc002800-fc011dcf
(XEN) HVM10: vm86 TSS at fc012000
(XEN) HVM10: BIOS map:
(XEN) HVM10:  c0000-c8fff: VGA BIOS
(XEN) HVM10:  eb000-eb14e: SMBIOS tables
(XEN) HVM10:  f0000-fffff: Main BIOS
(XEN) HVM10: Invoking ROMBIOS ...
(XEN) HVM10: $Revision: 1.221 $ $Date: 2008/12/07 17:32:29 $
(XEN) stdvga.c:147:d10 entering stdvga and caching modes
(XEN) HVM10: VGABios $Id: vgabios.c,v 1.67 2008/01/27 09:44:12 vruppert Exp $
(XEN) HVM10: Bochs BIOS - build: 06/23/99
(XEN) HVM10: $Revision: 1.221 $ $Date: 2008/12/07 17:32:29 $
(XEN) HVM10: Options: apmbios pcibios eltorito PMM
(XEN) HVM10:
(XEN) HVM10: ata0-0: PCHS=16383/16/63 translation=lba LCHS=1024/255/63
(XEN) HVM10: ata0 master: QEMU HARDDISK ATA-7 Hard-Disk (10240 MBytes)
(XEN) HVM10: IDE time out
(XEN) HVM10: ata1 master: QEMU DVD-ROM ATAPI-4 CD-Rom/DVD-Rom
(XEN) HVM10: IDE time out
(XEN) HVM10:
(XEN) HVM10:
(XEN) HVM10:
(XEN) HVM10: Press F12 for boot menu.
(XEN) HVM10:
(XEN) HVM10: Booting from CD-Rom...
(XEN) HVM10: 1MB medium detected
(XEN) HVM10: Booting from 0000:7c00
(XEN) vmx.c:2182:d10 EPT violation 0x1aa (-w-/r-x), gpa 0x000000000c0000, mfn
0x3055af, type 3.
(XEN) vmx.c:2200:d10  --- guest access to 0xc0000 failed
(XEN) domain_crash called from vmx.c:2204
(XEN) Domain 10 (vcpu#0) crashed on cpu#2:
(XEN) ----[ Xen-3.5-unstable  x86_64  debug=y  Not tainted ]----
(XEN) CPU:    2
(XEN) RIP:    0010:[<00000000000046e1>]
(XEN) RFLAGS: 0000000000010087   CONTEXT: hvm guest
(XEN) rax: 00000000ffffffff   rbx: 0000000000080000   rcx: 0000000000040000
(XEN) rdx: 00000000000c0000   rsi: 0000000000000000   rdi: 0000000000000000
(XEN) rbp: 000000007fffff00   rsp: 000000000001ecd0   r8:  0000000000000000
(XEN) r9:  0000000000000000   r10: 0000000000000000   r11: 0000000000000000
(XEN) r12: 0000000000000000   r13: 0000000000000000   r14: 0000000000000000
(XEN) r15: 0000000000000000   cr0: 0000000000000011   cr4: 0000000000000000
(XEN) cr3: 0000000000800000   cr2: 0000000000000000
(XEN) ds: 0018   es: 0018   fs: 0018   gs: 0018   ss: 0018   cs: 0010


-- 
Configure bugmail: 
http://bugzilla.xensource.com/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

_______________________________________________
Xen-bugs mailing list
Xen-bugs@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-bugs