Also hit it on the qemu-kvm-1.5.3-86.el7.x86_64 with the same auto test case.
host info:
# uname -r && rpm -q qemu-kvm
3.10.0-229.el7.x86_64
qemu-kvm-1.5.3-86.el7.x86_64
guest info:
# uname -r
3.10.0-229.el7.x86_64
(gdb) bt
#0 0x00007f0b9a6125d7 in raise () from /lib64/libc.so.6
#1 0x00007f0b9a613cc8 in abort () from /lib64/libc.so.6
#2 0x00007f0b9a60b546 in __assert_fail_base () from /lib64/libc.so.6
#3 0x00007f0b9a60b5f2 in __assert_fail () from /lib64/libc.so.6
#4 0x00007f0ba0fdd34d in kvmclock_current_nsec (s=0x7f0ba2622440) at /usr/src/debug/qemu-1.5.3/hw/i386/kvm/clock.c:62
#5 kvmclock_vm_state_change (opaque=0x7f0ba2622440, running=<optimized out>, state=<optimized out>)
at /usr/src/debug/qemu-1.5.3/hw/i386/kvm/clock.c:85
#6 0x00007f0ba0fae48b in vm_state_notify (running=running@entry=1, state=state@entry=RUN_STATE_RUNNING) at vl.c:1662
#7 0x00007f0ba0fae4cb in vm_start () at vl.c:1671
#8 0x00007f0ba0f7e685 in qmp_cont (errp=errp@entry=0x7fff4abe8a80) at qmp.c:179
#9 0x00007f0ba0f79398 in qmp_marshal_input_cont (mon=<optimized out>, qdict=<optimized out>, ret=<optimized out>)
at qmp-marshal.c:1318
#10 0x00007f0ba1006e17 in qmp_call_cmd (cmd=<optimized out>, params=0x7f0ba3d24dc0, mon=0x7f0ba2600d50)
at /usr/src/debug/qemu-1.5.3/monitor.c:4511
#11 handle_qmp_command (parser=<optimized out>, tokens=<optimized out>) at /usr/src/debug/qemu-1.5.3/monitor.c:4577
#12 0x00007f0ba10b4012 in json_message_process_token (lexer=0x7f0ba26082b0, token=0x7f0ba2914690, type=JSON_OPERATOR,
x=37, y=155) at qobject/json-streamer.c:87
#13 0x00007f0ba10c370f in json_lexer_feed_char (lexer=lexer@entry=0x7f0ba26082b0, ch=<optimized out>,
flush=flush@entry=false) at qobject/json-lexer.c:303
#14 0x00007f0ba10c37de in json_lexer_feed (lexer=0x7f0ba26082b0, buffer=<optimized out>, size=<optimized out>)
at qobject/json-lexer.c:356
#15 0x00007f0ba10b41a9 in json_message_parser_feed (parser=<optimized out>, buffer=<optimized out>, size=<optimized out>)
at qobject/json-streamer.c:110
#16 0x00007f0ba1005b63 in monitor_control_read (opaque=<optimized out>, buf=<optimized out>, size=<optimized out>)
at /usr/src/debug/qemu-1.5.3/monitor.c:4598
#17 0x00007f0ba0f73031 in qemu_chr_be_write (len=<optimized out>, buf=0x7fff4abe8c70 "}", s=0x7f0ba25d5f70)
at qemu-char.c:167
#18 tcp_chr_read (chan=<optimized out>, cond=<optimized out>, opaque=0x7f0ba25d5f70) at qemu-char.c:2492
#19 0x00007f0b9f85a9ba in g_main_context_dispatch () from /lib64/libglib-2.0.so.0
#20 0x00007f0ba0f4575a in glib_pollfds_poll () at main-loop.c:187
#21 os_host_main_loop_wait (timeout=<optimized out>) at main-loop.c:232
#22 main_loop_wait (nonblocking=<optimized out>) at main-loop.c:464
#23 0x00007f0ba0e69340 in main_loop () at vl.c:1987
#24 main (argc=<optimized out>, argv=<optimized out>, envp=<optimized out>) at vl.c:4378
(gdb)
Also hit it on the qemu-kvm-1.5.3-86.el7.x86_64 with the same auto test case. host info: # uname -r && rpm -q qemu-kvm 3.10.0-229.el7.x86_64 qemu-kvm-1.5.3-86.el7.x86_64 guest info: # uname -r 3.10.0-229.el7.x86_64 (gdb) bt #0 0x00007f0b9a6125d7 in raise () from /lib64/libc.so.6 #1 0x00007f0b9a613cc8 in abort () from /lib64/libc.so.6 #2 0x00007f0b9a60b546 in __assert_fail_base () from /lib64/libc.so.6 #3 0x00007f0b9a60b5f2 in __assert_fail () from /lib64/libc.so.6 #4 0x00007f0ba0fdd34d in kvmclock_current_nsec (s=0x7f0ba2622440) at /usr/src/debug/qemu-1.5.3/hw/i386/kvm/clock.c:62 #5 kvmclock_vm_state_change (opaque=0x7f0ba2622440, running=<optimized out>, state=<optimized out>) at /usr/src/debug/qemu-1.5.3/hw/i386/kvm/clock.c:85 #6 0x00007f0ba0fae48b in vm_state_notify (running=running@entry=1, state=state@entry=RUN_STATE_RUNNING) at vl.c:1662 #7 0x00007f0ba0fae4cb in vm_start () at vl.c:1671 #8 0x00007f0ba0f7e685 in qmp_cont (errp=errp@entry=0x7fff4abe8a80) at qmp.c:179 #9 0x00007f0ba0f79398 in qmp_marshal_input_cont (mon=<optimized out>, qdict=<optimized out>, ret=<optimized out>) at qmp-marshal.c:1318 #10 0x00007f0ba1006e17 in qmp_call_cmd (cmd=<optimized out>, params=0x7f0ba3d24dc0, mon=0x7f0ba2600d50) at /usr/src/debug/qemu-1.5.3/monitor.c:4511 #11 handle_qmp_command (parser=<optimized out>, tokens=<optimized out>) at /usr/src/debug/qemu-1.5.3/monitor.c:4577 #12 0x00007f0ba10b4012 in json_message_process_token (lexer=0x7f0ba26082b0, token=0x7f0ba2914690, type=JSON_OPERATOR, x=37, y=155) at qobject/json-streamer.c:87 #13 0x00007f0ba10c370f in json_lexer_feed_char (lexer=lexer@entry=0x7f0ba26082b0, ch=<optimized out>, flush=flush@entry=false) at qobject/json-lexer.c:303 #14 0x00007f0ba10c37de in json_lexer_feed (lexer=0x7f0ba26082b0, buffer=<optimized out>, size=<optimized out>) at qobject/json-lexer.c:356 #15 0x00007f0ba10b41a9 in json_message_parser_feed (parser=<optimized out>, buffer=<optimized out>, size=<optimized out>) at qobject/json-streamer.c:110 #16 0x00007f0ba1005b63 in monitor_control_read (opaque=<optimized out>, buf=<optimized out>, size=<optimized out>) at /usr/src/debug/qemu-1.5.3/monitor.c:4598 #17 0x00007f0ba0f73031 in qemu_chr_be_write (len=<optimized out>, buf=0x7fff4abe8c70 "}", s=0x7f0ba25d5f70) at qemu-char.c:167 #18 tcp_chr_read (chan=<optimized out>, cond=<optimized out>, opaque=0x7f0ba25d5f70) at qemu-char.c:2492 #19 0x00007f0b9f85a9ba in g_main_context_dispatch () from /lib64/libglib-2.0.so.0 #20 0x00007f0ba0f4575a in glib_pollfds_poll () at main-loop.c:187 #21 os_host_main_loop_wait (timeout=<optimized out>) at main-loop.c:232 #22 main_loop_wait (nonblocking=<optimized out>) at main-loop.c:464 #23 0x00007f0ba0e69340 in main_loop () at vl.c:1987 #24 main (argc=<optimized out>, argv=<optimized out>, envp=<optimized out>) at vl.c:4378 (gdb)