Ticket #1 (new defect)

Opened 11 years ago

Last modified 10 years ago

Kernel crashes on xen hosts

Reported by: arthur Owned by: somebody
Priority: minor Milestone:
Component: component1 Version:
Keywords: Cc:

Description

[[email protected] arthur]# ./sbk_install.sh Installing Sebek: 0 1:8960:::::::::15:1246 1 2:36864:::::::::: 2 0:8960:::::::::15:958 about to process filter file Sebek Filter - filename=./filter.of after attempt to process filter file general protection fault: 0000 #1 SMP last sysfs file: /block/dm-1/range Modules linked in: sbk(U) hidp rfcomm l2cap bluetooth sunrpc xennet ipv6 ip_conntrack_netbios_ns ipt_LOG xt_limit iptable_nat ip_nat ip_conntrack nfnetlink iptable_filter ip_tables x_tables parport_pc lp parport pcspkr dm_snapshot dm_zero dm_mirror dm_mod xenblk ext3 jbd ehci_hcd ohci_hcd uhci_hcd CPU: 0 EIP: 0061:[<e0b75a1b>] Not tainted VLI EFLAGS: 00010286 (2.6.18-8.1.14.el5xen #1) EIP is at find_system_call+0x13/0x36 [sbk] eax: 00000001 ebx: e0b76e12 ecx: e0b76e33 edx: ff1f56a0 esi: ffffffff edi: def45bac ebp: 00000000 esp: d4096ec0 ds: 007b es: 007b ss: 0069 Process insmod (pid: 1909, ti=d4096000 task=d40c2aa0 task.ti=d4096000) Stack: e0b75ee6 e0b75ef0 e0b12478 00000001 def45b62 e0b79380 d40c8800 d40c8bb0

d40c8b7c c0434df8 d483ff00 c0461f43 e0b79380 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000

Call Trace:

[<e0b75ee6>] get_sct+0x5/0xa [sbk] [<e0b75ef0>] init_monitoring+0x5/0x68 [sbk] [<e0b12478>] sebek_init+0x478/0x493 [sbk] [<c0434df8>] sys_init_module+0x16e7/0x186a [<c0461f43>] do_sync_read+0xb6/0xf1 [<c0404cff>] syscall_call+0x7/0xb =======================

Code: b7 e0 e8 12 a8 8a df b8 02 00 00 00 eb 02 31 c0 83 c4 2c 5b 5e 5f 5d c3 0f 01 0d 94 a9 b7 e0 8b 15 96 a9 b7 e0 81 c2 00 04 00 00 <8b> 02 a3 9a a9 b7 e0 8b 42 04 0f b7 15 9a a9 b7 e0 a3 9e a9 b7 EIP: [<e0b75a1b>] find_system_call+0x13/0x36 [sbk] SS:ESP 0069:d4096ec0

<0>Kernel panic - not syncing: Fatal exception [[email protected] ~]#

Attachments

make-syscall-writable-2.6.21.4.patch Download (361 bytes) - added by jhannah 10 years ago.
A hack of a patch to make sys_call_table writable for newer kernels

Change History

Changed 10 years ago by jhannah

I ran into a similar issue with RHEL5's stock kernel as well as in 2.6.21 which ultimately was caused by the fact that the sys_call_table was made read only in arch/i386/kernel/entry.S. You might want to try the SVN code for Sebek and the attached patch and see if it helps.

More info on the sys_call_table changes is available at  http://kerneltrap.org/node/16734 &  http://kerneltrap.org/node/16668. YMMV but I hope that helps.

Changed 10 years ago by jhannah

A hack of a patch to make sys_call_table writable for newer kernels

Note: See TracTickets for help on using tickets.