Bug 1048654
| Summary: | qemu-kvm crashed when using '-spice port=3000,disable-ticketing -device qxl,id=qxl-1' | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
| Product: | Red Hat Enterprise Linux 7 | Reporter: | Xiaoqing Wei <xwei> | ||||||||
| Component: | qemu-kvm | Assignee: | Gerd Hoffmann <kraxel> | ||||||||
| Status: | CLOSED DUPLICATE | QA Contact: | Virtualization Bugs <virt-bugs> | ||||||||
| Severity: | high | Docs Contact: | |||||||||
| Priority: | high | ||||||||||
| Version: | 7.0 | CC: | acathrow, hhuang, juzhang, mazhang, michen, shuang, virt-maint | ||||||||
| Target Milestone: | rc | ||||||||||
| Target Release: | --- | ||||||||||
| Hardware: | Unspecified | ||||||||||
| OS: | Unspecified | ||||||||||
| Whiteboard: | |||||||||||
| Fixed In Version: | Doc Type: | Bug Fix | |||||||||
| Doc Text: | Story Points: | --- | |||||||||
| Clone Of: | Environment: | ||||||||||
| Last Closed: | 2014-01-15 15:40:37 UTC | Type: | Bug | ||||||||
| Regression: | --- | Mount Type: | --- | ||||||||
| Documentation: | --- | CRM: | |||||||||
| Verified Versions: | Category: | --- | |||||||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||||||
| Embargoed: | |||||||||||
| Attachments: |
|
||||||||||
|
Description
Xiaoqing Wei
2014-01-06 02:46:27 UTC
Change to use
-spice port=3000,disable-ticketing \
-vga qxl \
and qemu runs well.
Created attachment 845910 [details]
core dump - part 1
cat xaa xab > coredump.tar.xz
tar xJf coredump.tar.xz
Created attachment 845911 [details]
core dump - part 2
Created attachment 845912 [details]
thread apply all bt full
Just have a try "-device qxl" can work with "-vga qxl", will core dumped with "-vga cirrus" and "-vga std".
Host:
qemu-kvm-1.5.3-31.el7.x86_64
kernel-3.10.0-66.el7.x86_64
Result:
Starting program: /usr/libexec/qemu-kvm -monitor stdio -qmp tcp:0:6666,server,nowait -boot menu=on -spice port=5900,disable-ticketing -vga cirrus -device qxl,id=qxl0
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib64/libthread_db.so.1".
QEMU 1.5.3 monitor - type 'help' for more information
(qemu) [New Thread 0x7fffeabb9700 (LWP 8290)]
[New Thread 0x7fffd3fff700 (LWP 8292)]
(qemu)
(qemu)
(qemu) main_channel_link: add main channel client
main_channel_handle_parsed: net test: latency 0.553000 ms, bitrate 532916991 bps (508.229247 Mbps)
(/usr/bin/gdb:8284): Spice-ERROR **: reds.c:1464:reds_send_link_ack: assertion `link->link_mess->channel_type == SPICE_CHANNEL_MAIN' failed
Detaching after fork from child process 8293.
Program received signal SIGABRT, Aborted.
0x00007ffff2cb2979 in raise () from /lib64/libc.so.6
Missing separate debuginfos, use: debuginfo-install alsa-lib-1.0.27.2-1.el7.x86_64 celt051-0.5.1.3-6.el7.x86_64 cyrus-sasl-lib-2.1.26-13.el7.x86_64 cyrus-sasl-md5-2.1.26-13.el7.x86_64 cyrus-sasl-plain-2.1.26-13.el7.x86_64 cyrus-sasl-scram-2.1.26-13.el7.x86_64 dbus-libs-1.6.12-6.el7.x86_64 flac-libs-1.3.0-2.el7.x86_64 glib2-2.36.3-2.el7.x86_64 glibc-2.17-40.el7.x86_64 glusterfs-api-3.4.0.51rhs-1.el7.x86_64 glusterfs-libs-3.4.0.51rhs-1.el7.x86_64 gmp-5.1.1-3.el7.x86_64 gnutls-3.1.16-1.el7.x86_64 gsm-1.0.13-9.el7.x86_64 json-c-0.11-1.el7.x86_64 keyutils-libs-1.5.8-1.el7.x86_64 krb5-libs-1.11.3-37.el7.x86_64 libICE-1.0.8-5.el7.x86_64 libSM-1.2.1-5.el7.x86_64 libX11-1.6.0-1.el7.x86_64 libXau-1.0.8-1.el7.x86_64 libXext-1.3.2-1.el7.x86_64 libXi-1.7.2-1.el7.x86_64 libXtst-1.2.2-1.el7.x86_64 libaio-0.3.109-10.el7.x86_64 libasyncns-0.8-5.el7.x86_64 libattr-2.4.46-10.el7.x86_64 libcap-2.22-6.el7.x86_64 libcom_err-1.42.8-2.el7.x86_64 libdb-5.3.21-14.el7.x86_64 libgcc-4.8.2-7.el7.x86_64 libgcrypt-1.5.3-1.el7.x86_64 libgpg-error-1.12-1.el7.x86_64 libibverbs-1.1.7-3.el7.x86_64 libiscsi-1.9.0-4.el7.x86_64 libjpeg-turbo-1.2.90-3.el7.x86_64 libogg-1.3.0-5.el7.x86_64 libpng-1.5.13-2.el7.x86_64 librdmacm-1.0.17-1.el7.x86_64 libseccomp-2.1.1-0.el7.x86_64 libselinux-2.2.1-2.el7.x86_64 libsndfile-1.0.25-7.el7.x86_64 libtasn1-3.3-1.el7.x86_64 libusbx-1.0.15-2.el7.x86_64 libuuid-2.23.2-7.el7.x86_64 libvorbis-1.3.3-4.el7.x86_64 libxcb-1.9-3.el7.x86_64 nettle-2.6-3.el7.x86_64 nspr-4.10.2-2.el7.x86_64 nss-3.15.3-2.el7.x86_64 nss-softokn-freebl-3.15.3-1.el7.x86_64 nss-util-3.15.3-1.el7.x86_64 openssl-libs-1.0.1e-25.el7.x86_64 p11-kit-0.18.7-2.el7.x86_64 pcre-8.32-8.el7.x86_64 pixman-0.30.0-1.el7.x86_64 pulseaudio-libs-3.0-11.el7.x86_64 tcp_wrappers-libs-7.6-75.el7.x86_64 usbredir-0.6-5.el7.x86_64 xz-libs-5.1.2-5alpha.el7.x86_64 zlib-1.2.7-10.el7.x86_64
(gdb) bt full
#0 0x00007ffff2cb2979 in raise () from /lib64/libc.so.6
No symbol table info available.
#1 0x00007ffff2cb4088 in abort () from /lib64/libc.so.6
No symbol table info available.
#2 0x00007ffff3a6751c in spice_logv (log_domain=0x7ffff3add1c6 "Spice", log_level=SPICE_LOG_LEVEL_ERROR, strloc=0x7ffff3ae8b53 "reds.c:1464",
function=0x7ffff3aea7e0 <__FUNCTION__.30572> "reds_send_link_ack", format=0x7ffff3add19e "assertion `%s' failed", args=args@entry=0x7fffffffddb8) at log.c:109
level = 0x7ffff3aed538 "ERROR"
#3 0x00007ffff3a67668 in spice_log (log_domain=log_domain@entry=0x7ffff3add1c6 "Spice", log_level=log_level@entry=SPICE_LOG_LEVEL_ERROR,
strloc=strloc@entry=0x7ffff3ae8b53 "reds.c:1464", function=function@entry=0x7ffff3aea7e0 <__FUNCTION__.30572> "reds_send_link_ack",
format=format@entry=0x7ffff3add19e "assertion `%s' failed") at log.c:123
args = {{gp_offset = 48, fp_offset = 48, overflow_arg_area = 0x7fffffffde90, reg_save_area = 0x7fffffffddd0}}
#4 0x00007ffff3a50b97 in reds_send_link_ack (link=0x5555565b8260) at reds.c:1464
ack = {error = 0,
pub_key = "\377\177\000\000\000\000\000\000\000\000\000\000[\000\000\000n", '\000' <repeats 19 times>, "w\000\000\000|\000\000\000\377\336\377\377\377\177\000\000\260\265\\VUU\000\000\001\000\000\000\000\000\000\000`\202[VUU\000\000\000hRVUU\000\000\247\352C\362\377\177\000\000\000GKVUU\000\000\260\265\\VUU\000\000\001\000\000\000\000\000\000\000`w\003\363\377\177\000\000\032\000\000\000\000\000\000\000\001\000\000\000\000\000\000\000\000hRVUU\000\000 f\217UUU\000\000\000GKVUU", num_common_caps = 3260612608,
num_channel_caps = 2147481093, caps_offset = 0}
channel = 0x0
ret = 0
header = {magic = 1363428690, major_version = 2, minor_version = 2, size = 178}
channel_caps = <optimized out>
bmBuf = 0x0
bio = <optimized out>
#5 reds_handle_read_link_done (opaque=0x5555565b8260) at reds.c:2726
link = 0x5555565b8260
link_mess = <optimized out>
obj = 0x5555565b8268
num_caps = <optimized out>
caps = <optimized out>
auth_selection = 1
__FUNCTION__ = "reds_handle_read_link_done"
#6 0x00007ffff3a4fe36 in spice_server_add_client (s=<optimized out>, socket=socket@entry=23, skip_auth=skip_auth@entry=0) at reds.c:2997
link = <optimized out>
stream = <optimized out>
__FUNCTION__ = "spice_server_add_client"
#7 0x00007ffff3a4fe9a in reds_accept (fd=<optimized out>, event=<optimized out>, data=<optimized out>) at reds.c:2974
socket = 23
#8 0x00005555556f424e in qemu_iohandler_poll (pollfds=0x555556526800, ret=ret@entry=1) at iohandler.c:143
revents = 1
pioh = 0x55555652cf20
ioh = 0x555556527cf0
#9 0x00005555556f9928 in main_loop_wait (nonblocking=<optimized out>) at main-loop.c:465
ret = 1
timeout = 1000
#10 0x0000555555601050 in main_loop () at vl.c:1984
nonblocking = <optimized out>
last_io = 1
Mixing qxl and non-qxl devices is not supported atm. *** This bug has been marked as a duplicate of bug 987312 *** |