Bug 1094778

Summary: [abrt] qemu-system-x86: memory_region_sync_dirty_bitmap(): qemu-system-x86_64 killed by SIGSEGV
Product: [Fedora] Fedora Reporter: naoto azuma <az_naox>
Component: qemuAssignee: Fedora Virtualization Maintainers <virt-maint>
Status: CLOSED INSUFFICIENT_DATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 20CC: amit.shah, az_naox, berrange, cfergeau, crobinso, dwmw2, itamar, pbonzini, rjones, scottt.tw, virt-maint
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Unspecified   
URL: https://retrace.fedoraproject.org/faf/reports/bthash/290d196e212158525ae0177fe56e6b3f7f7fbc40
Whiteboard: abrt_hash:fc2ecc4e324d5acaee467053edd5fad6df99001c
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2014-09-08 12:55:58 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
File: backtrace
none
File: cgroup
none
File: core_backtrace
none
File: dso_list
none
File: environ
none
File: limits
none
File: maps
none
File: open_fds
none
File: proc_pid_status
none
File: var_log_messages
none
File: exploitable none

Description naoto azuma 2014-05-06 13:17:50 UTC 
Version-Release number of selected component:
qemu-system-x86-1.6.2-4.fc20

Additional info:
reporter:       libreport-2.2.2
backtrace_rating: 4
cmdline:        /usr/bin/qemu-system-x86_64 -machine accel=kvm -name win8 -S -machine pc-i440fx-1.6,accel=kvm,usb=off -m 4096 -realtime mlock=off -smp 2,sockets=2,cores=1,threads=1 -uuid 1c3c5b0d-ebc6-4e9e-b5a7-dcbf26232cde -no-user-config -nodefaults -chardev socket,id=charmonitor,path=/var/lib/libvirt/qemu/win8.monitor,server,nowait -mon chardev=charmonitor,id=monitor,mode=control -rtc base=localtime,driftfix=slew -global kvm-pit.lost_tick_policy=discard -no-hpet -no-shutdown -device ich9-usb-ehci1,id=usb,bus=pci.0,addr=0x5.0x7 -device ich9-usb-uhci1,masterbus=usb.0,firstport=0,bus=pci.0,multifunction=on,addr=0x5 -device ich9-usb-uhci2,masterbus=usb.0,firstport=2,bus=pci.0,addr=0x5.0x1 -device ich9-usb-uhci3,masterbus=usb.0,firstport=4,bus=pci.0,addr=0x5.0x2 -device virtio-serial-pci,id=virtio-serial0,bus=pci.0,addr=0x6 -drive file=/home/azuma/vm/win8.img,if=none,id=drive-ide0-0-0,format=raw -device ide-hd,bus=ide.0,unit=0,drive=drive-ide0-0-0,id=ide0-0-0,bootindex=1 -netdev tap,fd=25,id=hostnet0 -device rtl8139,netdev=hostnet0,id=net0,mac=52:54:00:ed:79:41,bus=pci.0,addr=0x3 -chardev pty,id=charserial0 -device isa-serial,chardev=charserial0,id=serial0 -chardev spicevmc,id=charchannel0,name=vdagent -device virtserialport,bus=virtio-serial0.0,nr=1,chardev=charchannel0,id=channel0,name=com.redhat.spice.0 -device usb-tablet,id=input0 -spice port=5901,addr=127.0.0.1,disable-ticketing,seamless-migration=on -device qxl-vga,id=video0,ram_size=67108864,vram_size=67108864,bus=pci.0,addr=0x2 -device intel-hda,id=sound0,bus=pci.0,addr=0x4 -device hda-duplex,id=sound0-codec0,bus=sound0.0,cad=0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x7
crash_function: memory_region_sync_dirty_bitmap
executable:     /usr/bin/qemu-system-x86_64
kernel:         3.14.2-200.fc20.x86_64
runlevel:       N 5
type:           CCpp
uid:            107

Truncated backtrace:
Thread no. 1 (10 frames)
 #0 memory_region_sync_dirty_bitmap at /usr/src/debug/qemu-1.6.2/memory.c:1212
 #1 vga_sync_dirty_bitmap at /usr/src/debug/qemu-1.6.2/hw/display/vga.c:1622
 #2 vga_draw_graphic at /usr/src/debug/qemu-1.6.2/hw/display/vga.c:1657
 #3 vga_update_display at /usr/src/debug/qemu-1.6.2/hw/display/vga.c:1918
 #4 qemu_spice_display_refresh at ui/spice-display.c:417
 #5 dpy_refresh at ui/console.c:1436
 #6 gui_update at ui/console.c:192
 #7 qemu_run_timers at qemu-timer.c:394
 #9 qemu_run_all_timers at qemu-timer.c:453
 #10 main_loop_wait at main-loop.c:471
Comment 1 naoto azuma 2014-05-06 13:17:58 UTC 
Created attachment 892864 [details]
File: backtrace
Comment 2 naoto azuma 2014-05-06 13:18:02 UTC 
Created attachment 892865 [details]
File: cgroup
Comment 3 naoto azuma 2014-05-06 13:18:05 UTC 
Created attachment 892866 [details]
File: core_backtrace
Comment 4 naoto azuma 2014-05-06 13:18:08 UTC 
Created attachment 892867 [details]
File: dso_list
Comment 5 naoto azuma 2014-05-06 13:18:10 UTC 
Created attachment 892868 [details]
File: environ
Comment 6 naoto azuma 2014-05-06 13:18:15 UTC 
Created attachment 892869 [details]
File: limits
Comment 7 naoto azuma 2014-05-06 13:18:18 UTC 
Created attachment 892870 [details]
File: maps
Comment 8 naoto azuma 2014-05-06 13:18:21 UTC 
Created attachment 892871 [details]
File: open_fds
Comment 9 naoto azuma 2014-05-06 13:18:23 UTC 
Created attachment 892872 [details]
File: proc_pid_status
Comment 10 naoto azuma 2014-05-06 13:18:27 UTC 
Created attachment 892873 [details]
File: var_log_messages
Comment 11 naoto azuma 2014-05-06 13:18:30 UTC 
Created attachment 892874 [details]
File: exploitable
Comment 12 Cole Robinson 2014-05-11 22:50:54 UTC 
Can you describe what you were doing when this crashed?