Hi Marc, Here is the log on a recent kernel: Unable to handle kernel NULL pointer dereference at virtual address 00000000 [ 149.590000] pgd = c0003000 [ 149.590000] [00000000] *pgd=80000080004003, *pmd=00000000 [ 149.600000] Internal error: Oops: 207 [#1] PREEMPT SMP ARM [ 149.600000] CPU: 0 Not tainted (3.9.0-rc4-00262-g2cd03b4-dirty #18) [ 149.610000] PC is at unmap_range+0x9c/0x2f4 [ 149.610000] LR is at kvm_free_stage2_pgd+0x30/0x4c [ 149.610000] pc : [<c001473c>] lr : [<c0014db8>] psr: 800f0013 [ 149.610000] sp : ee109e60 ip : 00000000 fp : ee1c4000 [ 149.630000] r10: ee7ac808 r9 : 00000000 r8 : 00000000 [ 149.630000] r7 : ae710003 r6 : c0000000 r5 : ee1c4000 r4 : 00000000 [ 149.630000] r3 : 00000000 r2 : ae710003 r1 : 00000000 r0 : 00000000 [ 149.630000] Flags: Nzcv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user [ 149.630000] Control: 30c5387d Table: af2a8780 DAC: fffffffd [ 149.630000] Process qemu-system-arm (pid: 3024, stack limit = 0xee108238) [ 149.630000] Stack: (0xee109e60 to 0xee10a000) [ 149.630000] 9e60: ee109e84 00040003 c058bdc8 c058bdc0 c058bdc8 000c0000 c0000000 00000000 [ 149.630000] 9e80: c0b84fe0 ee7ac800 ee497180 00000000 00000100 ee5ea740 00000002 ee7ac808 [ 149.630000] 9ea0: ef184b50 c0014db8 00000000 00000100 ee7ac800 eec4a330 00000000 c0012af8 [ 149.630000] 9ec0: ee7ac800 ee497180 eec4a330 c000ebd0 ef1bc9c0 edcebb48 eec4a330 00000000 [ 149.630000] 9ee0: eec4a330 00000008 ef1bc9c8 c000f0d0 c000f0c0 c00bee2c 00000000 00000000 [ 149.630000] 9f00: edcbc000 ee59159c ee548300 ee5912c0 c0583e04 c001a128 ee108000 ee4971c8 [ 149.630000] 9f20: 00000001 c0044b54 ee5912c0 1c7c1c7c ee5915ac ee5912c0 ee108000 ee5915ac [ 149.630000] 9f40: ee497180 c0031034 c001a128 00000000 ee131a40 1c7c1c7c 00000100 ee131a40 [ 149.630000] 9f60: 00000001 ee18dd40 00000000 ee108000 ee1ab444 c001a128 ee108000 00000000 [ 149.630000] 9f80: 00000001 c00316c8 00000000 000703c2 b6df8760 b6df8760 000000f8 c0031740 [ 149.630000] 9fa0: 00000000 c0019f80 000703c2 b6df8760 00000000 000703ae b6ce14c0 00000000 [ 149.630000] 9fc0: 000703c2 b6df8760 b6df8760 000000f8 00251804 00000001 bec2b3f9 00000001 [ 149.630000] 9fe0: 000000f8 bec2b34c b6d89ce3 b6d311e6 600f0030 00000000 00000000 00000000 [ 149.780000] [<c001473c>] (unmap_range+0x9c/0x2f4) from [<c0014db8>] (kvm_free_stage2_pgd+0x30/0x4c) [ 149.780000] [<c0014db8>] (kvm_free_stage2_pgd+0x30/0x4c) from [<c0012af8>] (kvm_arch_destroy_vm+0xc/0x38) [ 149.780000] [<c0012af8>] (kvm_arch_destroy_vm+0xc/0x38) from [<c000ebd0>] (kvm_put_kvm+0xf0/0x154) [ 149.780000] [<c000ebd0>] (kvm_put_kvm+0xf0/0x154) from [<c000f0d0>] (kvm_vcpu_release+0x10/0x18) [ 149.780000] [<c000f0d0>] (kvm_vcpu_release+0x10/0x18) from [<c00bee2c>] (__fput+0x8c/0x1e4) [ 149.780000] [<c00bee2c>] (__fput+0x8c/0x1e4) from [<c0044b54>] (task_work_run+0xac/0xe8) [ 149.780000] [<c0044b54>] (task_work_run+0xac/0xe8) from [<c0031034>] (do_exit+0x250/0x870) [ 149.780000] [<c0031034>] (do_exit+0x250/0x870) from [<c00316c8>] (do_group_exit+0x48/0xb0) [ 149.780000] [<c00316c8>] (do_group_exit+0x48/0xb0) from [<c0031740>] (__wake_up_parent+0x0/0x18) [ 149.780000] Code: e1927003 0afffff0 e7e80658 e3a0c000 (e1cc20d0) [ 149.860000] ---[ end trace f51b49c6341d5660 ]--- [ 149.870000] Fixing recursive fault but reboot is needed! Thanks, Giridhar On 19 April 2013 14:37, Marc Zyngier <marc.zyngier@xxxxxxx> wrote: > On 19/04/13 05:38, Giridhar Maruthy wrote: >> Hi Marc and Christoffer, >> >> Below are the steps I took and the complete crash dump. >> 1. start the host with all cpus in hyp mode. >> 2. start the guest os. >> 3. offline and hotplug the all of the secondary cpus. >> 4. verify that the guest os is still alive and start one more guest os. >> 5. halt the first guest os. >> 6. quit qemu process. The crash happens now. >> >> [ 123.700000] Unable to handle kernel NULL pointer dereference at >> virtual address 00000000 >> [ 123.700000] pgd = c0003000 >> [ 123.700000] [00000000] *pgd=80000080004003, *pmd=00000000 >> [ 123.710000] Internal error: Oops: 207 [#1] PREEMPT SMP ARM >> [ 123.710000] CPU: 1 Not tainted (3.8.0-rc7-00196-g063f56c-dirty #269) > > Any chance you could try to reproduce it with a recent kernel, using the > branch I mentioned earlier? You obviously had to shoehorn some of the > patches in, and I don't really feel like chasing a ghost. ;-) > > M. > -- > Jazz is not dead. It just smells funny... > _______________________________________________ kvmarm mailing list kvmarm@xxxxxxxxxxxxxxxxxxxxx https://lists.cs.columbia.edu/cucslists/listinfo/kvmarm