Virtual machine execution tracing

• US 10,318,332 B2
• Filed: 04/14/2017
• Issued: 06/11/2019
• Est. Priority Date: 04/01/2017
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Inventors: Mola, Jordi
• Primary Examiner(s): Kim, Sisley N
• Application Number:
  US15/488,282
• Publication Number:
  US 20180285136A1
• Time in Patent Office: 788 Days
• CPC Class Codes: G06F 11/3636 by tracing the execution of the program
• CPC Class Codes: G06F 2009/45575 Starting, stopping, suspending or resuming virtual machine instances
• CPC Class Codes: G06F 2009/45591 Monitoring or debugging support
• CPC Class Codes: G06F 9/45558 Hypervisor-specific management and integration aspects

Abstract

Embodiments relate to a virtualization layer capturing replayable execution traces of VMs managed by the virtualization layer. Execution tracing can be performed on any unit of execution managed by the virtualization layer, e.g., threads, processes, virtual processors, individual VMs, multiple VMs, etc. Traced execution units may be executing in parallel. Execution tracing involves capturing to a buffer: executed instructions, memory inputted to instructions, memory outputted by instructions, registers touched by instructions, and ordering markers. Trace data can be captured in chunks, where causality is preserved and ordering is preserved between chunks but not necessarily within chunks. The chunks may be delineated by inserting monotonically increasing markers between context switches, thus relatively ordering the chunks. Determinism may be partially provided by identifying non-deterministic events. VM tracing may be transparent to guest software, which need not be instrumented. Alternatively, guests may interface with the virtualization layer to control tracing functionality.

Claims

1. A method performed by a computing device comprising processing hardware and storage hardware, the method comprising:

executing a virtualization layer that manages execution of a plurality of virtual machines on the processing hardware, the plurality of virtual machines comprising a first virtual machine comprising a respective first virtual processor and a respective first guest operating system and a second virtual machine comprising a respective second virtual processor and a respective second guest operating system;

switching, by the virtualization layer, to a first execution context of the first virtual machine, to enable the first guest operating system to issue a plurality of first instructions to the first virtual processor;

based on the plurality of first instructions being executed by the first virtual processor, recording first execution trace data comprising (i) the plurality of first instructions executed by the first virtual processor, (ii) first memory portions selected for tracing on the basis of the first memory portions storing inputs and/or outputs of the plurality of first instructions, and (iii) a plurality of first ordering markers inserted into the first execution trace data by the virtualization layer, each of the plurality of first ordering markers corresponding to a respective determination that a first orderable event has occurred between two or more of the plurality of first instructions;

switching, by the virtualization layer, to a second execution context of the second virtual machine, to enable the second guest operating system to issue a plurality of second instructions to the second virtual processor; and

based on the plurality of second instructions being executed by the second virtual processor, recording second execution trace data comprising (i) the plurality of second instructions executed by the second virtual processor, (ii) second memory portions selected for tracing on the basis of the second memory portions storing inputs and/or outputs of the plurality of second instructions, and (iii) a plurality of second ordering markers inserted into the second execution trace data by the virtualization layer, each of the plurality of second ordering markers corresponding to a respective determination that a second orderable event has occurred between two or more of the plurality of second instructions,

wherein the plurality of first ordering markers and the plurality of second ordering markers also enable a determination of causality between the first orderable event at the first virtual machine and the second orderable event at the second virtual machine.

2. A method according to claim 1, wherein at least one of the first or second orderable events comprises a context switch.

3. A method according to claim 2, wherein the context switch comprises a thread context switch.

4. A method according to claim 1, wherein at least one of the first or second orderable event comprises an element of a memory model implemented by the virtualization layer to record the execution trace data.

5. A method according to claim 1, wherein the virtualization layer comprises an application programming interface (API) comprising a call, the method further comprising invoking the call by the first virtual machine, and based on the first virtual machine invoking of the call, performing the recording of the execution trace data.

6. A method according to claim 5, wherein the invocation of the call turns the recording of the execution trace data on or off, or sets a scope of execution to be traced.

7. A method according to claim 1, further comprising recording the execution trace data to a circular buffer and copying execution trace data from the circular buffer to persistent storage.

8. A computer system comprising:

one or more processors; and

one or more computer-readable media having stored thereon computer-executable instructions that are executable by the one or more processors to cause the computer to perform the following;

execute a virtualization layer that manages execution of a plurality of virtual machines on the processing hardware, the plurality of virtual machines comprising a first virtual machine comprising a respective first virtual processor and a respective first guest operating system and a second virtual machine comprising a respective second virtual processor and a respective second guest operating system;

switch, by the virtualization layer, to a first execution context of the first virtual machine, to enable the first guest operating system to issue a plurality of first instructions to the first virtual processor;

based on the plurality of first instructions being executed by the first virtual processor, record first execution trace data comprising (i) the plurality of first instructions executed by the first virtual processor, (ii) first memory portions selected for tracing on the basis of the first memory portions storing inputs and/or outputs of the plurality of first instructions, and (iii) a plurality of first ordering markers inserted into the first execution trace data by the virtualization layer, each of the plurality of first ordering markers corresponding to a respective determination that a first orderable event has occurred between two or more of the plurality of first instructions;

switch, by the virtualization layer, to a second execution context of the second virtual machine, to enable the second guest operating system to issue a plurality of second instructions to the second virtual processor; and

based on the plurality of second instructions being executed by the second virtual processor, record second execution trace data comprising (i) the plurality of second instructions executed by the second virtual processor, (ii) second memory portions selected for tracing on the basis of the second memory portions storing inputs and/or outputs of the plurality of second instructions, and (iii) a plurality of second ordering markers inserted into the second execution trace data by the virtualization layer, each of the plurality of second ordering markers corresponding to a respective determination that a second orderable event has occurred between two or more of the plurality of second instructions,

wherein the plurality of first ordering markers and the plurality of second ordering markers also enable a determination of causality between the first orderable event at the first virtual machine and the second orderable event at the second virtual machine.

9. A computer system according to claim 8, wherein at least one of the first or second orderable events comprises a context switch.

10. A computer system according to claim 9, wherein the context switch comprises a thread context switch.

11. A computer system according to claim 8, wherein at least one of the first or second orderable event comprises an element of a memory model implemented by the virtualization layer to record the execution trace data.

12. A computer system according to claim 8, wherein the virtualization layer comprises an application programming interface (API) comprising a call, the computer-executable instructions also being executable by the one or more processors to invoke the call by the first virtual machine, and based on the first virtual machine invoking of the call, perform the recording of the execution trace data.

13. A computer system according to claim 12, wherein the invocation of the call turns the recording of the execution trace data on or off, or sets a scope of execution to be traced.

14. A computer system according to claim 8, the computer-executable instructions also being executable by the one or more processors to record the execution trace data to a circular buffer and copy execution trace data from the circular buffer to persistent storage.

15. A computer program product comprising one or more hardware storage devices having stored thereon computer-executable instructions that are executable by one or more processors to cause a computer to perform the following:

execute a virtualization layer that manages execution of a plurality of virtual machines on the processing hardware, the plurality of virtual machines comprising a first virtual machine comprising a respective first virtual processor and a respective first guest operating system and a second virtual machine comprising a respective second virtual processor and a respective second guest operating system;

switch, by the virtualization layer, to a first execution context of the first virtual machine, to enable the first guest operating system to issue a plurality of first instructions to the first virtual processor;

based on the plurality of first instructions being executed by the first virtual processor, record first execution trace data comprising (i) the plurality of first instructions executed by the first virtual processor, (ii) first memory portions selected for tracing on the basis of the first memory portions storing inputs and/or outputs of the plurality of first instructions, and (iii) a plurality of first ordering markers inserted into the first execution trace data by the virtualization layer, each of the plurality of first ordering markers corresponding to a respective determination that a first orderable event has occurred between two or more of the plurality of first instructions;

switch, by the virtualization layer, to a second execution context of the second virtual machine, to enable the second guest operating system to issue a plurality of second instructions to the second virtual processor; and

based on the plurality of second instructions being executed by the second virtual processor, record second execution trace data comprising (i) the plurality of second instructions executed by the second virtual processor, (ii) second memory portions selected for tracing on the basis of the second memory portions storing inputs and/or outputs of the plurality of second instructions, and (iii) a plurality of second ordering markers inserted into the second execution trace data by the virtualization layer, each of the plurality of second ordering markers corresponding to a respective determination that a second orderable event has occurred between two or more of the plurality of second instructions,

wherein the plurality of first ordering markers and the plurality of second ordering markers also enable a determination of causality between the first orderable event at the first virtual machine and the second orderable event at the second virtual machine.

16. A computer program product according to claim 15, wherein at least one of the first or second orderable events comprises a context switch.

17. A computer program product according to claim 15, wherein at least one of the first or second orderable event comprises an element of a memory model implemented by the virtualization layer to record the execution trace data.

18. A computer program product according to claim 15, wherein the virtualization layer comprises an application programming interface (API) comprising a call, the computer-executable instructions also being executable by the one or more processors to invoke the call by the first virtual machine, and based on the first virtual machine invoking of the call, perform the recording of the execution trace data.

19. A computer program product according to claim 18, wherein the invocation of the call turns the recording of the execution trace data on or off, or sets a scope of execution to be traced.

20. A computer program product according to claim 15, the computer-executable instructions also being executable by the one or more processors to record the execution trace data to a circular buffer and copy execution trace data from the circular buffer to persistent storage.