Re: [Xen-devel] Xen 4.3 + tmem = Xen BUG at domain_page.c:143

[Konrad Rzeszutek Wilk <konrad.wilk@xxxxxxxxxx>]

On Wed, Jun 12, 2013 at 12:37:53PM +0100, George Dunlap wrote:
> On Wed, Jun 12, 2013 at 12:00 PM, George Dunlap
> <George.Dunlap@xxxxxxxxxxxxx> wrote:
> > This is probably not something we need to fix for 4.3, but we should
> > put it on our to-do list.
> 
> Konrad,
> 
> Could you try the attached patch with your debug patch, to see if it
> successfully falls back to the "replace a map hash" patch?

It does, but I believe it falls in the BUG_ON scenario where
the idx = 32 and the BUG_ON gets hit. Please see the serial log:

(attached is the debug patch + your patch)

(XEN) domain_page.c:137:d1 mfn: 1eb533, [0]: ff000000->ff000000, garbage: 0 -> 
~0 (mask: 0), idx: 0,  ~garbage: ffffffffffffffff 
(XEN) domain_page.c:137:d1 mfn: 1eb864, [0]: ff000000->ff000000, garbage: 0 -> 
~0 (mask: 0), idx: 0,  ~garbage: ffffffffffffffff 
(XEN) domain_page.c:137:d1 mfn: 1eb862, [0]: ff000000->ff000000, garbage: 0 -> 
~0 (mask: 0), idx: 0,  ~garbage: ffffffffffffffff 
(XEN) domain_page.c:137:d1 mfn: 1eb531, [0]: ff000000->ff000000, garbage: 0 -> 
~0 (mask: 0), idx: 0,  ~garbage: ffffffffffffffff 
(XEN) domain_page.c:137:d1 mfn: 1ebd14, [0]: ff000000->ff000000, garbage: 0 -> 
~0 (mask: 0), idx: 0,  ~garbage: ffffffffffffffff 
(XEN) domain_page.c:137:d1 mfn: 18e8bb, [0]: ff000000->ff000000, garbage: 0 -> 
~0 (mask: 0), idx: 0,  ~garbage: ffffffffffffffff 
(XEN) domain_page.c:137:d1 mfn: 2062e2, [0]: ff000000->ff000000, garbage: 0 -> 
~0 (mask: 0), idx: 0,  ~garbage: ffffffffffffffff 
(XEN) domain_page.c:137:d1 mfn: 1eb525, [0]: ff000000->ff000000, garbage: 0 -> 
~0 (mask: 0), idx: 0,  ~garbage: ffffffffffffffff 
(XEN) domain_page.c:137:d1 mfn: 20653e, [0]: ff000000->ff000000, garbage: 0 -> 
~0 (mask: 0), idx: 0,  ~garbage: ffffffffffffffff 
(XEN) domain_page.c:137:d1 mfn: 1ed3a6, [0]: ff000000->ff000000, garbage: 0 -> 
~0 (mask: 0), idx: 0,  ~garbage: ffffffffffffffff 

(XEN) domain_page.c:137:d1 mfn: 1ed3a6, [0]: ff000000->7f000000, garbage: 
80000000 -> ~0 (mask: 0), idx: 0,  ~garbage: ffffffff7fffffff 
(XEN) domain_page.c:137:d1 mfn: 1eb525, [0]: ff000000->df000000, garbage: 
20000000 -> ~0 (mask: 0), idx: 0,  ~garbage: ffffffffdfffffff 
(XEN) domain_page.c:137:d1 mfn: 1ed3a4, [0]: df000000->df000000, garbage: 0 -> 
~0 (mask: 0), idx: 0,  ~garbage: ffffffffffffffff 
 

BusyBox v1.14.3 (2013-06-10 16:30:12 EDT) built-in shell (ash)
Enter 'help' for a list of built-in commands.

# 
(XEN) domain_page.c:137:d1 mfn: 18e8c8, [0]: ff000000->7f000000, garbage: 
80000000 -> ~0 (mask: 0), idx: 0,  ~garbage: ffffffff7fffffff 

(XEN) domain_page.c:137:d1 mfn: 1eb531, [0]: ff000000->ef000000, garbage: 
10000000 -> ~0 (mask: 0), idx: 0,  ~garbage: ffffffffeb531) -> 1 idx: 
32(i:1,j:8), branch:a accum: 0x0
(XEN) domain_page.c:222:d1 [0] mfn=0, [EIP=0]
(XEN) domain_page.c:222:d1 [1] mfn=0, [EIP=0]
(XEN) domain_page.c:222:d1 [2] mfn=0, [EIP=0]
(XEN) domain_page.c:222:d1 [3] mfn=0, [EIP=0]
(XEN) domain_page.c:222:d1 [4] mfn=0, [EIP=0]
(XEN) domain_page.c:222:d1 [5] mfn=0, [EIP=0]
(XEN) domain_page.c:222:d1 [6] mfn=0, [EIP=0]
(XEN) domain_page.c:222:d1 [7] mfn=0, [EIP=0]
(XEN) domain_page.c:222:d1 [8] mfn=0, [EIP=0]
(XEN) domain_page.c:222:d1 [9] mfn=0, [EIP=0]
(XEN) domain_page.c:222:d1 [10] mfn=0, [EIP=0]
(XEN) domain_page.c:222:d1 [11] mfn=0, [EIP=0]
(XEN) domain_page.c:222:d1 [12] mfn=0, [EIP=0]
(XEN) domain_page.c:222:d1 [13] mfn=0, [EIP=0]
(XEN) domain_page.c:222:d1 [14] mfn=0, [EIP=0]
(XEN) domain_page.c:222:d1 [15] mfn=0, [EIP=0]
(XEN) domain_page.c:222:d1 [16] mfn=0, [EIP=0]
(XEN) domain_page.c:222:d1 [17] mfn=0, [EIP=0]
(XEN) domain_page.c:222:d1 [18] mfn=0, [EIP=0]
(XEN) domain_page.c:222:d1 [19] mfn=0, [EIP=0]
(XEN) domain_page.c:222:d1 [20] mfn=0, [EIP=0]
(XEN) domain_page.c:222:d1 [21] mfn=0, [EIP=0]
(XEN) domain_page.c:222:d1 [22] mfn=0, [EIP=0]
(XEN) domain_page.c:222:d1 [23] mfn=0, [EIP=0]
(XEN) domain_page.c:222:d1 [24] mfn=1eb531, [EIP=0]
(XEN) domain_page.c:222:d1 [25] mfn=2062e2, [EIP=0]
(XEN) domain_page.c:222:d1 [26] mfn=18e8bb, [EIP=0]
(XEN) domain_page.c:222:d1 [27] mfn=18e8c8, [EIP=0]
(XEN) domain_page.c:222:d1 [28] mfn=0, [EIP=0]
(XEN) domain_page.c:222:d1 [29] mfn=1ed3a5, [EIP=0]
(XEN) domain_page.c:222:d1 [30] mfn=1ed3a6, [EIP=0]
(XEN) domain_page.c:222:d1 [31] mfn=1ebc14, [EIP=0]
(XEN) Xen BUG at domain_page.c:226
(XEN) ----[ Xen-4.3-unstable  x86_64  debug=y  Tainted:    C ]----
(XEN) CPU:    0
(XEN) RIP:    e008:[<ffff82c4c01609bf>] map_domain_page+0x920/0xa03
(XEN) RFLAGS: 0000000000010046   CONTEXT: hypervisor
(XEN) rax: 0000000000000000   rbx: ffff8300c68f8000   rcx: 0000000000000000
(XEN) rdx: ffff82c4c03191a0   rsi: 000000000000000a   rdi: ffff82c4c027a6e8
(XEN) rbp: ffff82c4c02c7e58   rsp: ffff82c4c02c7d78   r8:  0000000000000004
(XEN) r9:  0000000000000004   r10: 0000000000000004   r11: 0000000000000001
(XEN) r12: ffff83022d7b7000   r13: 00000000001eb531   r14: 0000000000000020
(XEN) r15: 0000000000000020   cr0: 000000008005003b   cr4: 00000000000426f0
(XEN) cr3: 000000020653e000   cr2: 00007f808ece33e0
(XEN) ds: 002b   es: 002b   fs: 0000   gs: 0000   ss: e010   cs: e008
(XEN) Xen stack trace from rsp=ffff82c4c02c7d78:
(XEN)    ffff82c4c02f0de0 0000000000000001 0000000000000008 000000000000000a
(XEN)    0000000000000000 ffff830000000000 ffffffffefffffff 0000000000000000
(XEN)    0000000000000000 0000002000000000 00000000ff000000 00000000001eb531
(XEN)    ffff82c4c02c7e20 0000000000000020 ffff82c4c02c7e18 ffff8300c68f83c8
(XEN)    0000000ac02c7f08 ffff82c400000000 ffff83022d7b72d8 0000000000000286
(XEN)    ffff82c4c03191c0 0000000000000002 0000000900000000 ffff83022d7b7000
(XEN)    ffff83022d7b7000 ffff8300c68f8000 0000000000000000 ffff88003f904000
(XEN)    ffff82c4c02c7ee8 ffff82c4c017a242 ffffffff81039c19 00000000000426f0
(XEN)    80100001ebc14065 ffff82c4c02c0000 ffffffffffffffff ffff82c4c02c7ed0
(XEN)    ffff82c4c0126e77 ffff82c4c02e0000 ffff82c4c02c00e7 00000000001eb531
(XEN)    ffffffffffffffff ffff8300c68f8000 0000000000000000 ffff88003e29fe40
(XEN)    ffff88003e29fee0 0000000000000080 ffff82c4c02c7ef8 ffff82c4c017a50f
(XEN)    00007d3b3fd380c7 ffff82c4c0223c4b ffffffff810011ca 000000000000000e
(XEN)    ffff88003e27f800 ffff88003f90c740 0000000000000001 ffff88003f911640
(XEN)    ffff88003e29fe30 ffff88003f904000 0000000000000286 0000000000000000
(XEN)    ffff880000000000 00003ffffffff000 000000000000000e ffffffff810011ca
(XEN)    0000000000000000 80100001ebc14065 ffff88003f904000 0001010000000000
(XEN)    ffffffff810011ca 000000000000e033 0000000000000286 ffff88003e29fdf8
(XEN)    000000000000e02b 0000000000000000 0000000000000000 0000000000000000
(XEN)    0000000000000000 0000000000000000 ffff8300c68f8000 0000000000000000
(XEN) Xen call trace:
(XEN)    [<ffff82c4c01609bf>] map_domain_page+0x920/0xa03
(XEN)    [<ffff82c4c017a242>] __do_update_va_mapping+0xd6/0x316
(XEN)    [<ffff82c4c017a50f>] do_update_va_mapping+0x1e/0x22
(XEN)    [<ffff82c4c0223c4b>] syscall_enter+0xeb/0x145
(XEN)    
(XEN) 
(XEN) ****************************************
(XEN) Panic on CPU 0:
(XEN) Xen BUG at domain_page.c:226
(XEN) ****************************************
(XEN) 
(XEN) Manual reset required ('noreboot' specified)

Attachment: xen-domain_page-v5.patch
Description: Text document

_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxx
http://lists.xen.org/xen-devel