Re: [Xen-devel] LVM userspace causing dom0 crash

["Christopher S. Aker" <caker@xxxxxxxxxxxx>]

On May 11, 2012, at 2:30 PM, Konrad Rzeszutek Wilk wrote:
> On Mon, May 07, 2012 at 11:36:22AM -0400, Christopher S. Aker wrote:
>> Xen: 4.1.3-rc1-pre (xenbits @ 23285)
> I just did this with 3.2.16 and didn't experience this. Can you
> try 3.2.16 pls?
> 
> I used the attached .config
> <.config.txt>

Thanks, but no joy with 3.2.16 and your config - only changes made were to 
build in a few drivers verses as modules to avoid initrd.  Two boxes hit it out 
of a dozen in under an hour.

[ 2152.285097] BUG: unable to handle kernel paging request at bffff3f0 
[ 2152.285160] IP: [<c1137f4a>] __page_check_address+0xca/0x1b0 
[ 2152.285238] *pdpt = 000000001b5ac027 *pde = 0000000000000000  
[ 2152.285286] Oops: 0000 [#1] PREEMPT SMP  
[ 2152.285338] Modules linked in: dm_snapshot xen_evtchn xenfs ext2 dm_mod 
tpm_tis ata_generic ata_piix e1000e sg 
[ 2152.285468]  
[ 2152.285495] Pid: 506, comm: lvremove Tainted: G        W    3.2.16 #4 
Supermicro X8DT6/X8DT6 
[ 2152.285572] EIP: 0061:[<c1137f4a>] EFLAGS: 00010246 CPU: 14 
[ 2152.285607] EIP is at __page_check_address+0xca/0x1b0 
[ 2152.285641] EAX: bffff000 EBX: dbe79dd8 ECX: 00000000 EDX: e2c00000 
[ 2152.285678] ESI: bffff3f0 EDI: e33538e0 EBP: daf03e58 ESP: daf03e48 
[ 2152.285715]  DS: 007b ES: 007b FS: 00d8 GS: 00e0 SS: 0069 
[ 2152.285750] Process lvremove (pid: 506, ti=daf02000 task=dd18a3e0 
task.ti=daf02000) 
[ 2152.285804] Stack: 
[ 2152.285830]  00000fff e33538e0 dd1a5400 da4826c0 daf03e8c c1138b69 daf03e7c 
00000000 
[ 2152.285938]  00000124 00000000 c158df53 b767e000 00000000 b7686000 da4826c0 
b767e000 
[ 2152.286042]  e33538e0 daf03f1c c11390e3 00000002 e2c00280 008c7025 daf03ebc 
c1037d59 
[ 2152.286146] Call Trace: 
[ 2152.286178]  [<c1138b69>] try_to_unmap_one+0x29/0x370 
[ 2152.286218]  [<c158df53>] ? _raw_spin_unlock+0x13/0x40 
[ 2152.286255]  [<c11390e3>] try_to_unmap_file+0x83/0x5a0 
[ 2152.286295]  [<c1037d59>] ? xen_pte_val+0xb9/0x140 
[ 2152.286332]  [<c1036c46>] ? __raw_callee_save_xen_pte_val+0x6/0x8 
[ 2152.286372]  [<c112d6e8>] ? vm_normal_page+0x28/0xe0 
[ 2152.286408]  [<c1037a5d>] ? xen_pmd_val+0x6d/0xf0 
[ 2152.286446]  [<c107995b>] ? get_parent_ip+0xb/0x40 
[ 2152.286482]  [<c113972c>] try_to_munlock+0x1c/0x40 
[ 2152.286518]  [<c11331d9>] munlock_vma_page+0x49/0x90 
[ 2152.286582]  [<c113332d>] munlock_vma_pages_range+0x6d/0xb0 
[ 2152.286620]  [<c1133437>] mlock_fixup+0xc7/0x130 
[ 2152.286656]  [<c1133717>] do_mlock+0x97/0xc0 
[ 2152.286690]  [<c1133782>] sys_munlock+0x42/0x60 
[ 2152.286728]  [<c159465f>] sysenter_do_call+0x12/0x28 
[ 2152.286761] Code: e0 c4 76 c1 8b 04 85 c0 c4 76 c1 2b 90 b0 12 00 00 c1 e2 
05 03 90 ac 12 00 00 89 d0 e8 b0 9e f3 ff 8b 4d 0c 85 c9 8d 34 30 75 0c <f7> 06 
01 01 00 00 0f 84 ab 00 00 00 8b 03 8b 53 04 ff 15 14 25  
[ 2152.287263] EIP: [<c1137f4a>] __page_check_address+0xca/0x1b0 SS:ESP 
0069:daf03e48 
[ 2152.287331] CR2: 00000000bffff3f0 
[ 2152.287560] ---[ end trace a7919e7f17c0a74d ]--- 
[ 2152.287622] note: lvremove[506] exited with preempt_count 1 
[ 2152.287685] BUG: sleeping function called from invalid context at 
kernel/rwsem.c:21 
[ 2152.287767] in_atomic(): 1, irqs_disabled(): 0, pid: 506, name: lvremove 
[ 2152.287833] Pid: 506, comm: lvremove Tainted: G      D W    3.2.16 #4 
[ 2152.287897] Call Trace: 
[ 2152.287983]  [<c1078244>] __might_sleep+0xe4/0x110 
[ 2152.288047]  [<c158d337>] down_read+0x17/0x30 
[ 2152.288112]  [<c10cb21a>] acct_collect+0x3a/0x160 
[ 2152.288177]  [<c108a55a>] do_exit+0x65a/0x810 
[ 2152.288240]  [<c1087878>] ? kmsg_dump+0x98/0xc0 
[ 2152.288303]  [<c158f640>] oops_end+0x90/0xd0 
[ 2152.288367]  [<c106b24e>] no_context+0xbe/0x190 
[ 2152.288430]  [<c106b3b8>] __bad_area_nosemaphore+0x98/0x140 
[ 2152.288496]  [<c103b9ec>] ? xen_clocksource_read+0x2c/0x60 
[ 2152.288560]  [<c106b472>] bad_area_nosemaphore+0x12/0x20 
[ 2152.288625]  [<c1591393>] do_page_fault+0x2b3/0x450 
[ 2152.288690]  [<c10e5624>] ? handle_percpu_irq+0x34/0x50 
[ 2152.288753]  [<c103b24a>] ? xen_force_evtchn_callback+0x1a/0x30 
[ 2152.288819]  [<c103b24a>] ? xen_force_evtchn_callback+0x1a/0x30 
[ 2152.288886]  [<c103bc2b>] ? xen_restore_fl_direct_reloc+0x4/0x4 
[ 2152.288953]  [<c10e842a>] ? rcu_enter_nohz+0x4a/0x80 
[ 2152.289017]  [<c103b24a>] ? xen_force_evtchn_callback+0x1a/0x30 
[ 2152.289083]  [<c107995b>] ? get_parent_ip+0xb/0x40 
[ 2152.289145]  [<c15915ab>] ? sub_preempt_count+0x7b/0xb0 
[ 2152.289209]  [<c15910e0>] ? spurious_fault+0x130/0x130 
[ 2152.289273]  [<c158ee9b>] error_code+0x67/0x6c 
[ 2152.289365]  [<c1137f4a>] ? __page_check_address+0xca/0x1b0 
[ 2152.289429]  [<c1138b69>] try_to_unmap_one+0x29/0x370 
[ 2152.289494]  [<c158df53>] ? _raw_spin_unlock+0x13/0x40 
[ 2152.289558]  [<c11390e3>] try_to_unmap_file+0x83/0x5a0 
[ 2152.289623]  [<c1037d59>] ? xen_pte_val+0xb9/0x140 
[ 2152.289686]  [<c1036c46>] ? __raw_callee_save_xen_pte_val+0x6/0x8 
[ 2152.289752]  [<c112d6e8>] ? vm_normal_page+0x28/0xe0 
[ 2152.289816]  [<c1037a5d>] ? xen_pmd_val+0x6d/0xf0 
[ 2152.289879]  [<c107995b>] ? get_parent_ip+0xb/0x40 
[ 2152.289943]  [<c113972c>] try_to_munlock+0x1c/0x40 
[ 2152.291288]  [<c11331d9>] munlock_vma_page+0x49/0x90 
[ 2152.291352]  [<c113332d>] munlock_vma_pages_range+0x6d/0xb0 
[ 2152.291417]  [<c1133437>] mlock_fixup+0xc7/0x130 
[ 2152.291479]  [<c1133717>] do_mlock+0x97/0xc0 
[ 2152.291542]  [<c1133782>] sys_munlock+0x42/0x60 
[ 2152.291606]  [<c159465f>] sysenter_do_call+0x12/0x28 
[ 2152.291759] Modules linked in: dm_snapshot xen_evtchn xenfs ext2 dm_mod 
tpm_tis ata_generic ata_piix e1000e sg 
[ 2152.292366] Pid: 506, comm: lvremove Tainted: G      D W    3.2.16 #4

-Chris


_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxx
http://lists.xen.org/xen-devel