Re: init receiving SIGILL on XEN3_DOM0/amd64

[James Laird <abrasive%axdf.net@localhost>]

On Sun, May 18, 2008 at 02:51:29PM +0100, Andrew Doran wrote:
> On Sun, May 18, 2008 at 09:32:32PM +1000, James Laird wrote:
> 
> > pid 1 (init): ILL at rip 7f7ffde03670 addr 7f7fffffffd8
> > rip 0x7f7ffde03670  rsp 0x7f7fffffde98  rfl 0x202
> 
> The address for %rip looks really suspicious. It might be worthwhile dumping
> init's vm_map to see what lies at that address. I can't remember exactly how
> to do that from ddb, some variant of 'ps' should give you the vmspace, and
> there is a 'show map' command I think.

Spot on.
The first dump is from ddb; the second is from pmap -d on the same system with 
a non-xen kernel.

---snip---
db> ps /a
 PID          COMMAND      STRUCT PROC *            UAREA *     VMSPACE/VM_MAP
>1               init   ffffa00005479cd0   ffffa000086cfd80   ffffa0000547ed70
 0             system   ffffffff80775480   ffffa00008740d80   ffffffff80824c60
db> showmap /f ffffa0000547ed70
No such command
db> show map /f ffffa0000547ed70
MAP 0xffffa0000547ed70: [0x0->0x7f8000000000]
        #ent=9, sz=34693120, ref=1, version=13, flags=0x41
        pmap=0xffffa0000547fee0(resident=16, wired=0)
 - 0xffffa000086eef30: 0x400000->0x406000: obj=0xffffa000086e8528/0x0, amap=0x0/
0
        submap=F, cow=T, nc=T, prot(max)=5/7, inh=1, wc=0, adv=0
 - 0xffffa000086eee10: 0x506000->0x507000: obj=0x0/0x0, amap=0xffffa000086eff50/
0
        submap=F, cow=T, nc=F, prot(max)=3/7, inh=1, wc=0, adv=0
 - 0xffffa000086eed80: 0x7f7ffde00000->0x7f7ffde0d000: obj=0xffffa000086e8318/0x
0, amap=0x0/0
        submap=F, cow=T, nc=T, prot(max)=5/7, inh=1, wc=0, adv=0
 - 0xffffa000086eecf0: 0x7f7ffde0d000->0x7f7ffdf0d000: obj=0x0/0x0, amap=0x0/0
        submap=F, cow=T, nc=T, prot(max)=0/7, inh=1, wc=0, adv=0
 - 0xffffa000086eec60: 0x7f7ffdf0d000->0x7f7ffdf0e000: obj=0x0/0x0, amap=0xffffa
000086eff00/0
        submap=F, cow=T, nc=F, prot(max)=3/7, inh=1, wc=0, adv=0
 - 0xffffa000086eebd0: 0x7f7ffdf0e000->0x7f7ffdf0f000: obj=0x0/0x0, amap=0x0/0
        submap=F, cow=T, nc=T, prot(max)=3/7, inh=1, wc=0, adv=0
 - 0xffffa000086eeb40: 0x7f7ffe000000->0x7f7fffe00000: obj=0x0/0x0, amap=0x0/0
        submap=F, cow=T, nc=T, prot(max)=0/7, inh=1, wc=0, adv=0
 - 0xffffa000086eea20: 0x7f7fffe00000->0x7f7fffff0000: obj=0x0/0x0, amap=0x0/0
        submap=F, cow=T, nc=T, prot(max)=3/7, inh=1, wc=0, adv=0
 - 0xffffa000086eeab0: 0x7f7fffff0000->0x7f8000000000: obj=0x0/0x0, amap=0xffffa
000086efeb0/0
        submap=F, cow=T, nc=F, prot(max)=3/7, inh=1, wc=0, adv=0
db>


---snip---
# pmap -d 1
MAP 0xffff80004ccc9dc0: [0x0->0x7f8000000000]
        #ent=21, sz=39145472, ref=1, version=95, flags=0x41
        pmap=0xffff80004cccae00(resident=<unknown>)
 - 0xffff80004ccdfea0: 0x400000->0x406000: obj=0xffff80004ccd8460/0x0, 
amap=0x0/0
        submap=F, cow=T, nc=T, prot(max)=5/7, inh=1, wc=0, adv=0
 - 0xffff80004ccdfd80: 0x506000->0x517000: obj=0x0/0x0, 
amap=0xffff80004e701c20/0
        submap=F, cow=T, nc=F, prot(max)=3/7, inh=1, wc=0, adv=0
 - 0xffff80004ccdf360: 0x7f7ffd700000->0x7f7ffd7eb000: 
obj=0xffff80004e3a48c8/0x0, amap=0x0/0
        submap=F, cow=T, nc=T, prot(max)=5/7, inh=1, wc=0, adv=0
 - 0xffff80004ccdf480: 0x7f7ffd7eb000->0x7f7ffd8eb000: 
obj=0xffff80004e3a48c8/0xeb000, amap=0x0/0
        submap=F, cow=T, nc=T, prot(max)=0/7, inh=1, wc=0, adv=0
 - 0xffff80004ccdf510: 0x7f7ffd8eb000->0x7f7ffd8f6000: 
obj=0xffff80004e3a48c8/0xeb000, amap=0xffff80004e3a0af8/0
        submap=F, cow=T, nc=T, prot(max)=3/7, inh=1, wc=0, adv=0
 - 0xffff80004ccdf3f0: 0x7f7ffd8f6000->0x7f7ffd907000: obj=0x0/0x0, 
amap=0xffff80004e7018c0/0
        submap=F, cow=T, nc=F, prot(max)=3/7, inh=1, wc=0, adv=0
 - 0xffff80004ccdf5a0: 0x7f7ffda00000->0x7f7ffda06000: 
obj=0xffff80004e3a4af8/0x0, amap=0x0/0
        submap=F, cow=T, nc=T, prot(max)=5/7, inh=1, wc=0, adv=0
 - 0xffff80004ccdf6c0: 0x7f7ffda06000->0x7f7ffdb06000: 
obj=0xffff80004e3a4af8/0x6000, amap=0x0/0
        submap=F, cow=T, nc=T, prot(max)=0/7, inh=1, wc=0, adv=0
 - 0xffff80004ccdf750: 0x7f7ffdb06000->0x7f7ffdb07000: 
obj=0xffff80004e3a4af8/0x6000, amap=0xffff80004e3a0dc8/0
        submap=F, cow=T, nc=T, prot(max)=3/7, inh=1, wc=0, adv=0
 - 0xffff80004ccdf630: 0x7f7ffdb07000->0x7f7ffdb0a000: obj=0x0/0x0, amap=0x0/0
        submap=F, cow=T, nc=T, prot(max)=3/7, inh=1, wc=0, adv=0
 - 0xffff80004ccdf7e0: 0x7f7ffdc00000->0x7f7ffdc11000: 
obj=0xffff80004e3a4d28/0x0, amap=0x0/0
        submap=F, cow=T, nc=T, prot(max)=5/7, inh=1, wc=0, adv=0
 - 0xffff80004ccdf900: 0x7f7ffdc11000->0x7f7ffdd11000: 
obj=0xffff80004e3a4d28/0x11000, amap=0x0/0
        submap=F, cow=T, nc=T, prot(max)=0/7, inh=1, wc=0, adv=0
 - 0xffff80004ccdfe10: 0x7f7ffdd11000->0x7f7ffdd13000: 
obj=0xffff80004e3a4d28/0x11000, amap=0xffff80004e3a0e10/0
        submap=F, cow=T, nc=T, prot(max)=3/7, inh=1, wc=0, adv=0
 - 0xffff80004ccdf870: 0x7f7ffdd13000->0x7f7ffdd15000: obj=0x0/0x0, amap=0x0/0
        submap=F, cow=T, nc=T, prot(max)=3/7, inh=1, wc=0, adv=0
 - 0xffff80004ccdfcf0: 0x7f7ffde00000->0x7f7ffde0d000: 
obj=0xffff80004ccd8230/0x0, amap=0x0/0
        submap=F, cow=T, nc=T, prot(max)=5/7, inh=1, wc=0, adv=0
 - 0xffff80004ccdfc60: 0x7f7ffde0d000->0x7f7ffdf0d000: obj=0x0/0x0, amap=0x0/0
        submap=F, cow=T, nc=T, prot(max)=0/7, inh=1, wc=0, adv=0
 - 0xffff80004ccdfb40: 0x7f7ffdf0d000->0x7f7ffdf0f000: obj=0x0/0x0, 
amap=0xffff80004e3a0ee8/0
        submap=F, cow=T, nc=T, prot(max)=3/7, inh=1, wc=0, adv=0
 - 0xffff80004ccdfbd0: 0x7f7ffdff7000->0x7f7ffe000000: obj=0x0/0x0, 
amap=0xffff80004e3a06c0/0
        submap=F, cow=T, nc=T, prot(max)=3/7, inh=1, wc=0, adv=0
 - 0xffff80004ccdfab0: 0x7f7ffe000000->0x7f7fffe00000: obj=0x0/0x0, amap=0x0/0
        submap=F, cow=T, nc=T, prot(max)=0/7, inh=1, wc=0, adv=0
 - 0xffff80004ccdf990: 0x7f7fffe00000->0x7f7fffff0000: obj=0x0/0x0, amap=0x0/0
        submap=F, cow=T, nc=T, prot(max)=3/7, inh=1, wc=0, adv=0
 - 0xffff80004ccdfa20: 0x7f7fffff0000->0x7f8000000000: obj=0x0/0x0, 
amap=0xffff80004e701ab8/0
        submap=F, cow=T, nc=F, prot(max)=3/7, inh=1, wc=0, adv=0