Replicated on another Xen node, CentOS 6.9 running Xen-4.6.6-8.el6. xl dmesg: (XEN) d38v0: unhandled page fault (ec=0000) (XEN) Pagetable walk from 0000000000000028: (XEN) L4[0x000] = 0000000000000000 ffffffffffffffff (XEN) domain_crash_sync called from entry.S: fault at ffff82d080230983 create_bounce_frame+0x12b/0x13a (XEN) Domain 38 (vcpu#0) crashed on cpu#2: (XEN) ----[ Xen-4.6.6-8.el6 x86_64 debug=n Not tainted ]---- (XEN) CPU: 2 (XEN) RIP: e033:[<ffffffff8103f261>] (XEN) RFLAGS: 0000000000000292 EM: 1 CONTEXT: pv guest (d38v0) (XEN) rax: 0000000000000000 rbx: ffffffff81e05720 rcx: 0000000000000000 (XEN) rdx: 0000000000000030 rsi: ffffffff82203efc rdi: ffffffff8241d460 (XEN) rbp: ffffffff82203ec8 rsp: ffffffff82203e10 r8: 0000000000000000 (XEN) r9: ffffffff82203f00 r10: 00000000ffffffff r11: ffffffff82203f04 (XEN) r12: ffffffff82203e78 r13: ffffffff82203e7c r14: ffffffff82203e80 (XEN) r15: ffffffff82203e84 cr0: 000000008005003b cr4: 00000000000426e4 (XEN) cr3: 000000049c571000 cr2: 0000000000000028 (XEN) ds: 0000 es: 0000 fs: 0000 gs: 0000 ss: e02b cs: e033 (XEN) Guest stack trace from rsp=ffffffff82203e10: (XEN) 0000000000000000 ffffffff82203f04 0000000000000000 ffffffff8103f261 (XEN) 000000010000e030 0000000000010092 ffffffff82203e58 000000000000e02b (XEN) 0000000000000000 ffffffff8241d460 0000000000000000 0000000000000000 (XEN) 0000000000000000 0000000000000000 0000000000000000 0000000000000000 (XEN) 0000000000000000 0000000000000000 ffffffff8241d460 ffffffff82203f04 (XEN) ffffffff82203f00 ffffffff82203efc ffffffff82203ef8 ffffffff82203f40 (XEN) ffffffff8103fce6 ffffffff82203f14 ffffffff82203f10 ffffffff82203f0c (XEN) ffffffff82203f08 0000000000003026 0000000000000000 0000000080000008 (XEN) 0000000000000000 0000000000000000 0000000000000000 0000000000000000 (XEN) 0000000000000000 0000000000000000 ffffffff82203ff8 ffffffff8246c490 (XEN) 0000000000000000 0000000000000000 0000000000000000 0000000000000000 (XEN) 0000000000000000 0000000000000000 0000000000000000 0000000000000000 (XEN) 0000000000000000 0000000000000000 0000000000000000 0000000000000000 (XEN) 0000000000000000 0000000000000000 0000000000000000 0000000000000000 (XEN) 0000000000000000 0000000000000000 0000000000000000 0000000000000000 (XEN) 0000000000000000 0000000000000000 0f00000060c0c748 ccccccccccccc305 (XEN) cccccccccccccccc cccccccccccccccc cccccccccccccccc cccccccccccccccc (XEN) cccccccccccccccc cccccccccccccccc cccccccccccccccc cccccccccccccccc (XEN) cccccccccccccccc cccccccccccccccc cccccccccccccccc cccccccccccccccc (XEN) cccccccccccccccc cccccccccccccccc cccccccccccccccc cccccccccccccccc --- Adi Pircalabu On 31-01-2018 10:37, Adi Pircalabu wrote: > Hi, has anyone managed to boot 4.15.0 as Xen PV domU? I've been > loading 4.14.12 to 4.14.15 ELRepo builds no problem, but 4.15 crashes. > Replicates on 2 CentOS 7.4 hypervisors running xen-4.6.6-9.el7.x86_64 > on: > - Intel(R) Core(TM) i7-7700 CPU @ 3.60GHz > - AMD Phenom(tm) II X6 1090T Processor > > xl dmesg shows: > [...] > (d6) HVM Loader > (d6) Detected Xen v4.6.6-9.el7 > (d6) Xenbus rings @0xfeffc000, event channel 1 > (d6) System requested SeaBIOS > (d6) CPU speed is 3607 MHz > (d6) Relocating guest memory for lowmem MMIO space disabled > (d6) PCI-ISA link 0 routed to IRQ5 > (d6) PCI-ISA link 1 routed to IRQ10 > (d6) PCI-ISA link 2 routed to IRQ11 > (d6) PCI-ISA link 3 routed to IRQ5 > (d6) pci dev 01:2 INTD->IRQ5 > (d6) pci dev 01:3 INTA->IRQ10 > (d6) pci dev 02:0 INTA->IRQ11 > (d6) pci dev 04:0 INTA->IRQ5 > (d6) No RAM in high memory; setting high_mem resource base to 100000000 > (d6) pci dev 03:0 bar 10 size 002000000: 0f0000008 > (d6) pci dev 02:0 bar 14 size 001000000: 0f2000008 > (d6) pci dev 04:0 bar 30 size 000040000: 0f3000000 > (d6) pci dev 03:0 bar 30 size 000010000: 0f3040000 > (d6) pci dev 03:0 bar 14 size 000001000: 0f3050000 > (d6) pci dev 02:0 bar 10 size 000000100: 00000c001 > (d6) pci dev 04:0 bar 10 size 000000100: 00000c101 > (d6) pci dev 04:0 bar 14 size 000000100: 0f3051000 > (d6) pci dev 01:2 bar 20 size 000000020: 00000c201 > (d6) pci dev 01:1 bar 20 size 000000010: 00000c221 > (d6) Multiprocessor initialisation: > (d6) - CPU0 ... 39-bit phys ... fixed MTRRs ... var MTRRs [1/8] ... > done. > (d6) - CPU1 ... 39-bit phys ... fixed MTRRs ... var MTRRs [1/8] ... > done. > (d6) Writing SMBIOS tables ... > (d6) Loading SeaBIOS ... > (d6) Creating MP tables ... > (d6) Loading ACPI ... > (d6) vm86 TSS at fc00a180 > (d6) BIOS map: > (d6) 10000-100e3: Scratch space > (d6) c0000-fffff: Main BIOS > (d6) E820 table: > (d6) [00]: 00000000:00000000 - 00000000:000a0000: RAM > (d6) HOLE: 00000000:000a0000 - 00000000:000c0000 > (d6) [01]: 00000000:000c0000 - 00000000:00100000: RESERVED > (d6) [02]: 00000000:00100000 - 00000000:bf800000: RAM > (d6) HOLE: 00000000:bf800000 - 00000000:fc000000 > (d6) [03]: 00000000:fc000000 - 00000001:00000000: RESERVED > (d6) Invoking SeaBIOS ... > (d6) SeaBIOS (version ?-20150729_130325-) > (d6) > (d6) Found Xen hypervisor signature at 40000000 > (d6) Running on QEMU (i440fx) > (d6) xen: copy e820... > (d6) Relocating init from 0x000de920 to 0xbf7aec10 (size 70448) > (d6) CPU Mhz=3608 > (d6) Found 8 PCI devices (max PCI bus is 00) > (d6) Allocated Xen hypercall page at bf7ff000 > (d6) Detected Xen v4.6.6-9.el7 > (d6) xen: copy BIOS tables... > (d6) Copying SMBIOS entry point from 0x00010020 to 0x000f6600 > (d6) Copying MPTABLE from 0xfc001160/fc001170 to 0x000f6500 > (d6) Copying PIR from 0x00010040 to 0x000f6480 > (d6) Copying ACPI RSDP from 0x000100c0 to 0x000f6450 > (d6) Using pmtimer, ioport 0xb008 > (d6) Scan for VGA option rom > (d6) Running option rom at c000:0003 > (d6) pmm call arg1=0 > (d6) Turning on vga text mode console > (d6) SeaBIOS (version ?-20150729_130325-) > (d6) Machine UUID 8ebc5a48-2f57-4408-9fcb-344604913e27 > (d6) UHCI init on dev 00:01.2 (io=c200) > (d6) Found 0 lpt ports > (d6) Found 1 serial ports > (d6) ATA controller 1 at 1f0/3f4/0 (irq 14 dev 9) > (d6) ATA controller 2 at 170/374/0 (irq 15 dev 9) > (d6) ata0-0: QEMU HARDDISK ATA-7 Hard-Disk (40960 MiBytes) > (d6) Searching bootorder for: /pci at i0cf8/*@1,1/drive at 0/disk at 0 > (d6) DVD/CD [ata1-0: QEMU DVD-ROM ATAPI-4 DVD/CD] > (d6) Searching bootorder for: /pci at i0cf8/*@1,1/drive at 1/disk at 0 > (d6) PS2 keyboard initialized > (d6) All threads complete. > (d6) Scan for option roms > (d6) Running option rom at c980:0003 > (d6) pmm call arg1=1 > (d6) pmm call arg1=0 > (d6) pmm call arg1=1 > (d6) pmm call arg1=0 > (d6) Searching bootorder for: /pci at i0cf8/*@4 > (d6) > (d6) Press F12 for boot menu. > (d6) > (d6) Searching bootorder for: HALT > (d6) drive 0x000f6400: PCHS=16383/16/63 translation=lba > LCHS=1024/255/63 s=83886080 > (d6) Space available for UMB: ca800-ee800, f5e20-f63a0 > (d6) Returned 258048 bytes of ZoneHigh > (d6) e820 map has 6 items: > (d6) 0: 0000000000000000 - 000000000009fc00 = 1 RAM > (d6) 1: 000000000009fc00 - 00000000000a0000 = 2 RESERVED > (d6) 2: 00000000000f0000 - 0000000000100000 = 2 RESERVED > (d6) 3: 0000000000100000 - 00000000bf7ff000 = 1 RAM > (d6) 4: 00000000bf7ff000 - 00000000bf800000 = 2 RESERVED > (d6) 5: 00000000fc000000 - 0000000100000000 = 2 RESERVED > (d6) enter handle_19: > (d6) NULL > (d6) Booting from Hard Disk... > (d6) Booting from 0000:7c00 > (d7) HVM Loader > (d7) Detected Xen v4.6.6-9.el7 > (d7) Xenbus rings @0xfeffc000, event channel 1 > (d7) System requested SeaBIOS > (d7) CPU speed is 3607 MHz > (d7) Relocating guest memory for lowmem MMIO space disabled > (d7) PCI-ISA link 0 routed to IRQ5 > (d7) PCI-ISA link 1 routed to IRQ10 > (d7) PCI-ISA link 2 routed to IRQ11 > (d7) PCI-ISA link 3 routed to IRQ5 > (d7) pci dev 01:2 INTD->IRQ5 > (d7) pci dev 01:3 INTA->IRQ10 > (d7) pci dev 02:0 INTA->IRQ11 > (d7) pci dev 04:0 INTA->IRQ5 > (d7) No RAM in high memory; setting high_mem resource base to 100000000 > (d7) pci dev 03:0 bar 10 size 002000000: 0f0000008 > (d7) pci dev 02:0 bar 14 size 001000000: 0f2000008 > (d7) pci dev 04:0 bar 30 size 000040000: 0f3000000 > (d7) pci dev 03:0 bar 30 size 000010000: 0f3040000 > (d7) pci dev 03:0 bar 14 size 000001000: 0f3050000 > (d7) pci dev 02:0 bar 10 size 000000100: 00000c001 > (d7) pci dev 04:0 bar 10 size 000000100: 00000c101 > (d7) pci dev 04:0 bar 14 size 000000100: 0f3051000 > (d7) pci dev 01:2 bar 20 size 000000020: 00000c201 > (d7) pci dev 01:1 bar 20 size 000000010: 00000c221 > (d7) Multiprocessor initialisation: > (d7) - CPU0 ... 39-bit phys ... fixed MTRRs ... var MTRRs [1/8] ... > done. > (d7) - CPU1 ... 39-bit phys ... fixed MTRRs ... var MTRRs [1/8] ... > done. > (d7) Writing SMBIOS tables ... > (d7) Loading SeaBIOS ... > (d7) Creating MP tables ... > (d7) Loading ACPI ... > (d7) vm86 TSS at fc00a180 > (d7) BIOS map: > (d7) 10000-100e3: Scratch space > (d7) c0000-fffff: Main BIOS > (d7) E820 table: > (d7) [00]: 00000000:00000000 - 00000000:000a0000: RAM > (d7) HOLE: 00000000:000a0000 - 00000000:000c0000 > (d7) [01]: 00000000:000c0000 - 00000000:00100000: RESERVED > (d7) [02]: 00000000:00100000 - 00000000:9f800000: RAM > (d7) HOLE: 00000000:9f800000 - 00000000:fc000000 > (d7) [03]: 00000000:fc000000 - 00000001:00000000: RESERVED > (d7) Invoking SeaBIOS ... > (d7) SeaBIOS (version ?-20150729_130325-) > (d7) > (d7) Found Xen hypervisor signature at 40000000 > (d7) Running on QEMU (i440fx) > (d7) xen: copy e820... > (d7) Relocating init from 0x000de920 to 0x9f7aec10 (size 70448) > (d7) CPU Mhz=3607 > (d7) Found 8 PCI devices (max PCI bus is 00) > (d7) Allocated Xen hypercall page at 9f7ff000 > (d7) Detected Xen v4.6.6-9.el7 > (d7) xen: copy BIOS tables... > (d7) Copying SMBIOS entry point from 0x00010020 to 0x000f6600 > (d7) Copying MPTABLE from 0xfc001160/fc001170 to 0x000f6500 > (d7) Copying PIR from 0x00010040 to 0x000f6480 > (d7) Copying ACPI RSDP from 0x000100c0 to 0x000f6450 > (d7) Using pmtimer, ioport 0xb008 > (d7) Scan for VGA option rom > (d7) Running option rom at c000:0003 > (d7) pmm call arg1=0 > (d7) Turning on vga text mode console > (d7) SeaBIOS (version ?-20150729_130325-) > (d7) Machine UUID a83aa702-f987-40f0-842e-469ae25100e9 > (d7) UHCI init on dev 00:01.2 (io=c200) > (d7) Found 0 lpt ports > (d7) Found 1 serial ports > (d7) ATA controller 1 at 1f0/3f4/0 (irq 14 dev 9) > (d7) ATA controller 2 at 170/374/0 (irq 15 dev 9) > (d7) ata0-0: QEMU HARDDISK ATA-7 Hard-Disk (51200 MiBytes) > (d7) Searching bootorder for: /pci at i0cf8/*@1,1/drive at 0/disk at 0 > (d7) PS2 keyboard initialized > (d7) All threads complete. > (d7) Scan for option roms > (d7) Running option rom at c980:0003 > (d7) pmm call arg1=1 > (d7) pmm call arg1=0 > (d7) pmm call arg1=1 > (d7) pmm call arg1=0 > (d7) Searching bootorder for: /pci at i0cf8/*@4 > (d7) > (d7) Press F12 for boot menu. > (d7) > (d7) Searching bootorder for: HALT > (d7) drive 0x000f6400: PCHS=16383/16/63 translation=lba > LCHS=1024/255/63 s=104857600 > (d7) > (d7) Space available for UMB: ca800-ef000, f5e20-f6400 > (d7) Returned 258048 bytes of ZoneHigh > (d7) e820 map has 6 items: > (d7) 0: 0000000000000000 - 000000000009fc00 = 1 RAM > (d7) 1: 000000000009fc00 - 00000000000a0000 = 2 RESERVED > (d7) 2: 00000000000f0000 - 0000000000100000 = 2 RESERVED > (d7) 3: 0000000000100000 - 000000009f7ff000 = 1 RAM > (d7) 4: 000000009f7ff000 - 000000009f800000 = 2 RESERVED > (d7) 5: 00000000fc000000 - 0000000100000000 = 2 RESERVED > (d7) enter handle_19: > (d7) NULL > (d7) Booting from Hard Disk... > (d7) Booting from 0000:7c00 > (XEN) d8v0: unhandled page fault (ec=0000) > (XEN) Pagetable walk from 0000000000000028: > (XEN) L4[0x000] = 0000000000000000 ffffffffffffffff > (XEN) domain_crash_sync called from entry.S: fault at ffff82d08022a472 > create_bounce_frame+0x12b/0x13a > (XEN) Domain 8 (vcpu#0) crashed on cpu#6: > (XEN) ----[ Xen-4.6.6-9.el7 x86_64 debug=n Not tainted ]---- > (XEN) CPU: 6 > (XEN) RIP: e033:[<ffffffff8103f261>] > (XEN) RFLAGS: 0000000000000292 EM: 1 CONTEXT: pv guest (d8v0) > (XEN) rax: 0000000000000000 rbx: ffffffff81e05720 rcx: 0000000000000000 > (XEN) rdx: 0000000000000030 rsi: ffffffff82203efc rdi: ffffffff8241d460 > (XEN) rbp: ffffffff82203ec8 rsp: ffffffff82203e10 r8: 0000000000000000 > (XEN) r9: ffffffff82203f00 r10: 00000000ffffffff r11: ffffffff82203f04 > (XEN) r12: ffffffff82203e78 r13: ffffffff82203e7c r14: ffffffff82203e80 > (XEN) r15: ffffffff82203e84 cr0: 000000008005003b cr4: 00000000003526e0 > (XEN) cr3: 0000000426314000 cr2: 0000000000000028 > (XEN) ds: 0000 es: 0000 fs: 0000 gs: 0000 ss: e02b cs: e033 > (XEN) Guest stack trace from rsp=ffffffff82203e10: > (XEN) 0000000000000000 ffffffff82203f04 0000000000000000 > ffffffff8103f261 > (XEN) 000000010000e030 0000000000010092 ffffffff82203e58 > 000000000000e02b > (XEN) 0000000000000000 ffffffff8241d460 0000000000000000 > 0000000000000000 > (XEN) 0000000000000000 0000000000000000 0000000000000000 > 0000000000000000 > (XEN) 0000000000000000 0000000000000000 ffffffff8241d460 > ffffffff82203f04 > (XEN) ffffffff82203f00 ffffffff82203efc ffffffff82203ef8 > ffffffff82203f40 > (XEN) ffffffff8103fce6 ffffffff82203f14 ffffffff82203f10 > ffffffff82203f0c > (XEN) ffffffff82203f08 0000000000003027 0000000000000000 > 0000000080000008 > (XEN) 0000000000000000 0000000000000000 0000000000000000 > 0000000000000000 > (XEN) 0000000000000000 0000000000000000 ffffffff82203ff8 > ffffffff8246c490 > (XEN) 0000000000000000 0000000000000000 0000000000000000 > 0000000000000000 > (XEN) 0000000000000000 0000000000000000 0000000000000000 > 0000000000000000 > (XEN) 0000000000000000 0000000000000000 0000000000000000 > 0000000000000000 > (XEN) 0000000000000000 0000000000000000 0000000000000000 > 0000000000000000 > (XEN) 0000000000000000 0000000000000000 0000000000000000 > 0000000000000000 > (XEN) 0000000000000000 0000000000000000 0f00000060c0c748 > ccccccccccccc305 > (XEN) cccccccccccccccc cccccccccccccccc cccccccccccccccc > cccccccccccccccc > (XEN) cccccccccccccccc cccccccccccccccc cccccccccccccccc > cccccccccccccccc > (XEN) cccccccccccccccc cccccccccccccccc cccccccccccccccc > cccccccccccccccc > (XEN) cccccccccccccccc cccccccccccccccc cccccccccccccccc > cccccccccccccccc > > Submitted to ELRepo as http://elrepo.org/bugs/view.php?id=820