On Wed, Mar 7, 2012 at 8:19 AM, Avi Kivity <avi@xxxxxxxxxx> wrote: > On 03/07/2012 01:00 PM, Gleb Natapov wrote: >> > >> > > KVM internal error. Suberror: 1 >> > > emulation failure >> > > EAX=8004003b EBX=38d54633 ECX=c0460a7e EDX=8005003b >> > > ESI=e49329a8 EDI=f7c98d60 EBP=00000286 ESP=f7fecf68 >> > > EIP=f91d1778 EFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 >> > > ES =007b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] >> > > CS =0060 00000000 ffffffff 00c09b00 DPL=0 CS32 [-RA] >> > > SS =0068 00000000 ffffffff 00c09300 DPL=0 DS [-WA] >> > > DS =007b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] >> > > FS =0000 00000000 ffffffff 00000000 >> > > GS =0000 b7f526c0 ffffffff 00000000 >> > > LDT=0088 c074a020 00000027 00008200 DPL=0 LDT >> > > TR =0080 c180a7c4 00002073 00008b00 DPL=0 TSS32-busy >> > > GDT= f7c9f000 000000ff >> > > IDT= c06fa000 000007ff >> > > CR0=8005003b CR2=0046b044 CR3=3100d000 CR4=000006d0 >> > > DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 >> > > DR3=0000000000000000 >> > > DR6=00000000ffff0ff0 DR7=0000000000000400 >> > > EFER=0000000000000000 >> > > Code=?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? <??> >> > > ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? >> > > ?? ?? ?? ?? ?? ?? >> > >> > What are all these ?? doing here? Usually they indicate the bad code, >> > but here they don't, this is strange. >> > >> I think it tries to execute code from mmio. >> > > Likely. But let's be sure. > > When it happens again, please keep the guest alive so we can examine it > via qemu monitor commands. > It happened again. Here's the output requested. Before resuming: # virsh qemu-monitor-command bb-rhel-5.3-i686 --hmp x/20i 0xf91b4748 0x00000000f91b4748: lock popf 0x00000000f91b474a: lock popf 0x00000000f91b474c: lock popf 0x00000000f91b474e: lock popf 0x00000000f91b4750: lock popf 0x00000000f91b4752: lock popf 0x00000000f91b4754: lock popf 0x00000000f91b4756: lock popf 0x00000000f91b4758: lock popf 0x00000000f91b475a: lock popf 0x00000000f91b475c: lock popf 0x00000000f91b475e: lock popf 0x00000000f91b4760: lock popf 0x00000000f91b4762: lock popf 0x00000000f91b4764: lock popf 0x00000000f91b4766: lock popf 0x00000000f91b4768: lock popf 0x00000000f91b476a: lock popf 0x00000000f91b476c: lock popf 0x00000000f91b476e: lock popf After resuming and immediately running the requested command: # virsh qemu-monitor-command bb-rhel-5.3-i686 --hmp x/20i 0xf91b4748 0x00000000f91b4748: mov %eax,%cr0 0x00000000f91b474b: mov %ebx,(%ecx) 0x00000000f91b474d: mov %edx,%cr0 0x00000000f91b4750: mov (%esi),%esi 0x00000000f91b4752: mov (%esi),%eax 0x00000000f91b4754: prefetchnta (%eax) 0x00000000f91b4757: nop 0x00000000f91b4758: mov 0xf91db9f8,%eax 0x00000000f91b475d: add $0x8,%eax 0x00000000f91b4760: cmp %eax,%esi 0x00000000f91b4762: jne 0xf91b4738 0x00000000f91b4764: lock incl 0xf91da3b0 0x00000000f91b476b: pop %ebx 0x00000000f91b476c: mov $0x5,%edx 0x00000000f91b4771: pop %esi 0x00000000f91b4772: mov $0xf91da380,%eax 0x00000000f91b4777: jmp 0xc0432047 0x00000000f91b477c: push %ebp 0x00000000f91b477d: push %edi 0x00000000f91b477e: push %esi LC_ALL=C PATH=/bin:/sbin:/bin:/sbin:/usr/bin:/usr/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin HOME=/ USER=root QEMU_AUDIO_DRV=none /usr/bin/qemu-kvm -S -M pc-0.13 -cpu qemu32 -enable-kvm -m 1024 -smp 2,sockets=2,cores=1,threads=1 -name bb-rhel-5.3-i686,process=qemu:bb-rhel-5.3-i686 -uuid bc053d3a-ece8-8f25-92ea-7ff197f72ac5 -nodefconfig -nodefaults -chardev socket,id=charmonitor,path=/var/lib/libvirt/qemu/bb-rhel-5.3-i686.monitor,server,nowait -mon chardev=charmonitor,id=monitor,mode=control -rtc base=utc -drive file=/dev/disk/by-path/ip-192.168.200.20:3260-iscsi-iqn.2011-07.com.pikewerks.lab.san-1:bb-rhel-5.3-i686-lun-0,if=none,id=drive-ide0-0-0,format=raw,cache=none -device ide-drive,bus=ide.0,unit=0,drive=drive-ide0-0-0,id=ide0-0-0,bootindex=1 -netdev tap,fd=15,id=hostnet0 -device rtl8139,netdev=hostnet0,id=net0,mac=52:54:00:af:90:fa,bus=pci.0,multifunction=on,addr=0x3.0x0 -chardev file,id=charserial0,path=/var/log/libvirt/qemu/serial/bb-rhel-5.3-i686.log -device isa-serial,chardev=charserial0,id=serial0 -usb -vnc 0.0.0.0:19,password -vga cirrus -device AC97,id=sound0,bus=pci.0,multifunction=on,addr=0x4.0x0 -device i6300esb,id=watchdog0,bus=pci.0,multifunction=on,addr=0x6.0x0 -watchdog-action reset -device virtio-balloon-pci,id=balloon0,bus=pci.0,multifunction=on,addr=0x5.0x0 Domain id=30 is tainted: high-privileges KVM internal error. Suberror: 1 emulation failure EAX=8004003b EBX=00685b04 ECX=f8b1767e EDX=8005003b ESI=ce687888 EDI=f7caff60 EBP=00000286 ESP=f7feff68 EIP=f91b4748 EFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =007b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0060 00000000 ffffffff 00c09b00 DPL=0 CS32 [-RA] SS =0068 00000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =007b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 00000000 ffffffff 00000000 GS =0000 b7ff06c0 ffffffff 00000000 LDT=0088 c073f020 00000027 00008200 DPL=0 LDT TR =0080 c1804000 00002073 00008b00 DPL=0 TSS32-busy GDT= c1812000 000000ff IDT= c06ee000 000007ff CR0=8005003b CR2=091020c8 CR3=37f5f000 CR4=000006d0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000000 Code=?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? <??> ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? ?? -- Doug Goldstein -- To unsubscribe from this list: send the line "unsubscribe kvm" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html