[Fedora-xen] more crashes

[Adrian Chadd]

another crash seen w/ the FC5 Xen kernel 2.6.20-1.2307.fc5xen0.
This is easy to reproduce (I just scp a large file over 100megabytes from
a local disk over to a remote machine; it dies after a few 10s of megabytes.)




Adrian

iret exception: 0000 [#9]
SMP 
last sysfs file: /class/net/xenbr2/bridge/topology_change_detected
Modules linked in: xt_physdev bridge blktap ipv6 autofs4 sunrpc 8021q nf_conntrack_netbios_ns ipt_REJECT nf_conntrack_ipv4 xt_state nf_conntrack nfnetlink xt_tcpudp iptable_filter ip_tables x_tables video sbs i2c_ec dock button battery asus_acpi backlight ac lp parport_pc parport floppy ohci1394 ieee1394 ehci_hcd ohci_hcd snd_intel8x0 sata_nv snd_ac97_codec sata_sil libata ac97_bus snd_seq_dummy snd_seq_oss scsi_mod e100 snd_seq_midi_event e1000 snd_seq mii snd_seq_device snd_pcm_oss snd_mixer_oss pcspkr snd_pcm snd_timer snd soundcore snd_page_alloc i2c_nforce2 forcedeth i2c_core dm_snapshot dm_zero dm_mirror dm_mod raid1 ext3 jbd
CPU:    0
EIP:    4000:[<00000300>]    Not tainted VLI
EFLAGS: 002d7300   (2.6.20-1.2307.fc5xen0 #1)
EIP is at 0x300
eax: 00000000   ebx: 0059f402   ecx: 00000073   edx: 00000246
esi: bfaa274c   edi: 0000007b   ebp: 00000000   esp: f1f4f01c
ds: 0000   es: 0000   ss: 0069
Process sshd (pid: 3850, ti=f1f4e000 task=f3f0a110 task.ti=f1f4e000)
Stack: 00640000 00006b00 5a00016c 64010001 00660001 00026400 83000084 5a590000 
       03640002 00008400 6400035a 28530004 00000005 00000128 00087300 73780000 
       646e6168 0a74656c 78000000 61727473 6361736e 00006374 00000000 00020000 
Call Trace:
BUG: unable to handle kernel paging request at virtual address 83000084
 printing eip:
c1005562
*pde = ma 00000000 pa fffff000
Oops: 0000 [#10]
SMP 
last sysfs file: /class/net/xenbr2/bridge/topology_change_detected
Modules linked in: xt_physdev bridge blktap ipv6 autofs4 sunrpc 8021q nf_conntrack_netbios_ns ipt_REJECT nf_conntrack_ipv4 xt_state nf_conntrack nfnetlink xt_tcpudp iptable_filter ip_tables x_tables video sbs i2c_ec dock button battery asus_acpi backlight ac lp parport_pc parport floppy ohci1394 ieee1394 ehci_hcd ohci_hcd snd_intel8x0 sata_nv snd_ac97_codec sata_sil libata ac97_bus snd_seq_dummy snd_seq_oss scsi_mod e100 snd_seq_midi_event e1000 snd_seq mii snd_seq_device snd_pcm_oss snd_mixer_oss pcspkr snd_pcm snd_timer snd soundcore snd_page_alloc i2c_nforce2 forcedeth i2c_core dm_snapshot dm_zero dm_mirror dm_mod raid1 ext3 jbd
CPU:    0
EIP:    0061:[<c1005562>]    Not tainted VLI
EFLAGS: 00010097   (2.6.20-1.2307.fc5xen0 #1)
EIP is at dump_trace+0x5c/0x93
eax: 83000ffd   ebx: 83000084   ecx: fffff5a8   edx: 00466400
esi: 20202020   edi: 83000000   ebp: c125b39e   esp: f1f4ee7c
ds: 007b   es: 007b   ss: 0069
Process sshd (pid: 3850, ti=f1f4e000 task=f3f0a110 task.ti=f1f4e000)
Stack: c125b25e c125b39e 00000018 00000000 c125b39e c10055b1 c12af4e0 c125b39e 
       f1f4f07f c1005660 c125b39e c125b39e f1f4efe4 f1f4f01c 00000002 002d7300 
       f1f4efe4 f1f4f01c c10057f6 c125b39e 00000010 f3f0a2bc 00000f0a f1f4e000 
Call Trace:
 [<c10055b1>] show_trace_log_lvl+0x18/0x2c
 [<c1005660>] show_stack_log_lvl+0x9b/0xa3
 [<c10057f6>] show_registers+0x18e/0x25d
 [<c1216dbc>] notifier_call_chain+0x19/0x29
 [<c10059f8>] die+0x133/0x22f
 [<c10062ab>] do_iret_error+0xa7/0xb1
 [<c1004fac>] scrit+0xc/0x1a
 [<c1004fad>] scrit+0xd/0x1a
 [<c1004fae>] scrit+0xe/0x1a
 [<c1004fb3>] scrit+0x13/0x1a
 [<c102f487>] search_exception_tables+0x14/0x25
 [<c101739f>] fixup_exception+0xb/0x20
 [<c12158e5>] do_general_protection+0x11c/0x16f
 [<c1006879>] do_IRQ+0xc6/0xdd
 [<c12157c9>] do_general_protection+0x0/0x16f
 [<c1006204>] do_iret_error+0x0/0xb1
 [<c12153cd>] error_code+0x35/0x3c
 =======================
Code: 9a f4 01 00 00 89 df 81 e7 00 f0 ff ff eb 0e 8b 4c 24 18 89 f2 89 e8 ff 51 08 83 c3 04 39 fb 76 29 8d 87 fd 0f 00 00 39 c3 73 1f <8b> 33 89 f0 e8 e5 9e 02 00 85 c0 74 e2 eb d5 8b 4f 34 85 c9 74 
EIP: [<c1005562>] dump_trace+0x5c/0x93 SS:ESP 0069:f1f4ee7c
 <3>BUG: sleeping function called from invalid context at kernel/rwsem.c:20
in_atomic():0, irqs_disabled():1
 [<c10339aa>] down_read+0x12/0x28
 [<c103c052>] acct_collect+0x38/0x13e
 [<c10227e4>] do_exit+0x1b2/0x719
 [<c1020663>] printk+0x1f/0xa1
 [<c1005acf>] die+0x20a/0x22f
 [<c1216c38>] do_page_fault+0x6da/0x845
 [<c121655e>] do_page_fault+0x0/0x845
 [<c12153cd>] error_code+0x35/0x3c
 [<c1005562>] dump_trace+0x5c/0x93
 [<c10055b1>] show_trace_log_lvl+0x18/0x2c
 [<c1005660>] show_stack_log_lvl+0x9b/0xa3
 [<c10057f6>] show_registers+0x18e/0x25d
 [<c1216dbc>] notifier_call_chain+0x19/0x29
 [<c10059f8>] die+0x133/0x22f
 [<c10062ab>] do_iret_error+0xa7/0xb1
 [<c1004fac>] scrit+0xc/0x1a
 [<c1004fad>] scrit+0xd/0x1a
 [<c1004fae>] scrit+0xe/0x1a
 [<c1004fb3>] scrit+0x13/0x1a
 [<c102f487>] search_exception_tables+0x14/0x25
 [<c101739f>] fixup_exception+0xb/0x20
 [<c12158e5>] do_general_protection+0x11c/0x16f
 [<c1006879>] do_IRQ+0xc6/0xdd
 [<c12157c9>] do_general_protection+0x0/0x16f
 [<c1006204>] do_iret_error+0x0/0xb1
 [<c12153cd>] error_code+0x35/0x3c
 =======================
[root at hosting-2 ~]#