[Xen-bugs] [Bug 1382] New: stubdom based guest crashes at creating stage.

[bugzilla-daemon@xxxxxxxxxxxxxxxxxxx]

http://bugzilla.xensource.com/bugzilla/show_bug.cgi?id=1382

           Summary: stubdom based guest crashes at creating stage.
           Product: Xen
           Version: unstable
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: blocker
          Priority: P1
         Component: Unspecified
        AssignedTo: xen-bugs@xxxxxxxxxxxxxxxxxxx
        ReportedBy: haicheng.li@xxxxxxxxx


Environment:
------------
Service Arch (ia32/ia32e/IA64): 
Guest Arch (ia32/ia32e/IA64): 
Guest OS Type (Linux/Windows):
Change Set: 18711
Hardware: SantaRosa/HP Desktop Computer dc7700p/SmackOver



Bug detailed description:
--------------------------
Stubdom based guest crashes at creating stage. with same configuration, it can
boot up with c/s 18569. 

Reproduce steps:
----------------
1. build xen with stubdom enabled;
2. prepare the two configurations for stubdom based guest;
3. xm create <you configuration file>

Current result:
----------------
The domain crashes while creating the <Domain>-dm

Expected result:
----------------
The stubdom based guest can boot up normally.

Basic root-causing log:
----------------------
bellow xm create error message:
  1 Using config file "/etc/xen/hvmachine-dm".
  2 Started domain hvmachine-dm
  3 Xen Minimal OS!
  4 start_info:   0x528000
  5   nr_pages:   8192  shared_inf: 4e7ae000
  6   pt_base:    0x52b000  mod_start:  0x0
  7   mod_len:    0
  8   flags:      0x0
  9   cmd_line:    -d 14
 10   stack:      0x4d74a0-0x4f74a0
 11 MM: Init
 12   _text:        0x0
 13   _etext:       0xdac4d
 14   _erodata:     0x11e000
 15   _edata:       0x12d7a4
 16   stack start:  0x4d74a0
 17   _end:         0x517db0
 18   start_pfn:    535
 19   max_pfn:      2000
 20 Mapping memory range 0x800000 - 0x2000000
 21 setting 0x0-0x11e000 readonly
 22 skipped 0x1000
 23 MM: Initialise page allocator for 541000(541000)-2000000(2000000)
 24 MM: done
 25 Demand map pfns at 2001000-2002001000.
 26 Heap resides at 2002002000-4002002000.
 27 Initialising timer interface
 28 Initialising console ... done.
 29 gnttab_table mapped at 0x2001000.
 30 Initialising scheduler
 31 Thread "Idle": pointer: 0x2002002010, stack: 0x560000
 32 Initialising xenbus
 33 Thread "xenstore": pointer: 0x20020027c0, stack: 0x570000
 34 Dummy main: start_info=0x4f75a0
 35 Thread "main": pointer: 0x2002002f70, stack: 0x580000
 36 [main] Waiting for network.
 37 ************************ NETFRONT for device/vif/0 **********
 38 
 39 
 40 net TX ring size 256
 41 net RX ring size 256
 42 backend at /local/domain/0/backend/vif/16/0
 43 mac is 00:16:3e:76:48:d5
 44 **************************
 45 [main] IP 0 netmask 0 gateway 0.
 46 [main] TCP/IP bringup begins.
 47 Thread "tcpip_thread": pointer: 0x2002005cb0, stack: 0x690000
 48 [tcpip_thread] TCP/IP bringup ends.
 49 [main] Network is ready.
 50 Initing FS fronend(s).
 51 FS export [dom=0, id=0] found
 52 Initialising FS fortend to backend dom 0
 53 Allocating request array for import 0, nr_entries = 128.
 54 Our own id is 16
 55 Backend found at /local/domain/0/backend/vfs/9
 56 Backend ready.
 57 dom vm is at /vm/691a183a-dc28-4125-3123-83a2ac86022f
 58 "main" "-d" "14" "-domain-name" "hvmachine" "-nographic" "-vcpus" "2"
"-boot" "c" "-acpi" "-net" "nic,vlan=1,macaddr=aa:00:00:12:23:34,model=rtl8139"
"-net" "tap,vlan=1,if    name=tap14.0,bridge=xenbr0"
 59 domid: 14
 60 qemu: the number of cpus is 2
 61 ************************ NETFRONT for device/vif/1 **********
 62 
 63 
 64 net TX ring size 256
 65 net RX ring size 256
 66 backend at /local/domain/0/backend/vif/16/1
 67 mac is aa:00:00:12:23:34
 68 **************************
 69 tap_open(device/vif/1) -> 3
 70 xs_daemon_open -> 5, 0x129a78
 71 ******************* BLKFRONT for /local/domain/16/device/vbd/768
**********

 72 
 73 
 74 backend at /local/domain/0/backend/vbd/16/768
 75 Failed to read /local/domain/0/backend/vbd/16/768/feature-flush-cache.
 76 8388608 sectors of 512 bytes
 77 **************************
 78 blk_open(/local/domain/16/device/vbd/768) -> 6
 79 xs_watch(/local/domain/0/device-model/14/logdirty/next-active, logdirty)
 80 Watching /local/domain/0/device-model/14/logdirty/next-active
 81 xs_watch(/local/domain/0/device-model/14/command, dm-command)
 82 Watching /local/domain/0/device-model/14/command
 83 xs_read(/local/domain/0/backend/pci/16/0/num_devs): ENOENT
 84 Thread "kbdfront": pointer: 0x200200ea50, stack: 0x7b0000
 85 fcntl(0, 3, 58e700/26163400)
 86 fcntl(0, 4, ffffffff/37777777777)
 87 fcntl(1, 3, 2/2)
 88 fcntl(1, 4, ffffffff/37777777777)
 89 fcntl(0, 3, 200200c300/2000200141400)
 90 fcntl(0, 4, 4000/40000)
 91 can't store dev mon:stdio name for domid 14 in /serial/0 from a stub
domain
 92 can't store dev mon:stdio name for domid 14 in /console from a stub
domain
 93 qemu_map_cache_init nr_buckets = 10000 size 3145728
 94 shared page at pfn fffe
 95 buffered io page at pfn fffc
 96 Page fault at linear address 0x0, rip 0xd014d, regs 0x58e7d8, sp
0x58e888, our_sp 0x58e7a0, code 0
 97 Thread: main
 98 RIP: e030:[<00000000000d014d>]
 99 RSP: e02b:000000000058e888  EFLAGS: 00010246
100 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
101 RDX: 000000000058e8e0 RSI: 0000000000000000 RDI: 0000000000000000
102 RBP: 000000000058e888 R08: 0000000000000000 R09: 0000000000fc0838
103 R10: 000000000000000e R11: 0000000000000001 R12: 0000000000000000
104 R13: 0000000000143a80 R14: 000000000058e8e0 R15: 0000000000800000
105 base is 0x58e888 caller is 0xb6ce3
106 base is 0x58e8c8 caller is 0xb5694
107 base is 0x58e8f8 caller is 0x1bf84
108 base is 0x58e918 caller is 0x60c06
109 base is 0x58e938 caller is 0x1e1bf
110 base is 0x58e9a8 caller is 0xb794
111 base is 0x58fe68 caller is 0xae525
112 base is 0x58ffe8 caller is 0x33da
113 
114 58e870: 88 e8 58 00 00 00 00 00 2b e0 00 00 00 00 00 00
115 58e880: 00 60 30 02 00 00 00 00 c8 e8 58 00 00 00 00 00
116 58e890: e3 6c 0b 00 00 00 00 00 01 00 00 00 00 00 00 00
117 58e8a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
118 
119 58e870: 88 e8 58 00 00 00 00 00 2b e0 00 00 00 00 00 00
120 58e880: 00 60 30 02 00 00 00 00 c8 e8 58 00 00 00 00 00
121 58e890: e3 6c 0b 00 00 00 00 00 01 00 00 00 00 00 00 00
122 58e8a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
123 
124 d0130: 8b 75 f0 4c 8b 7d f8 c9 c3 90 90 90 90 90 90 90
125 d0140: 55 40 f6 c7 07 49 89 f8 48 89 e5 75 4f 48 8b 07
126 d0150: 48 b9 ff fe fe fe fe fe fe fe 48 8d 14 08 48 f7
127 d0160: d0 48 21 c2 48 b8 80 80 80 80 80 80 80 80 48 85
128 Pagetable walk from virt 0, base 52b000:
129  L4 = 000000003633f067 (0x52c000)  [offset = 0]
130   L3 = 000000003633e067 (0x52d000)  [offset = 0]
131    L2 = 000000003633d067 (0x52e000)  [offset = 0]
132     L1 = 0000000000000000 [offset = 0]
133


-- 
Configure bugmail: 
http://bugzilla.xensource.com/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

_______________________________________________
Xen-bugs mailing list
Xen-bugs@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-bugs