Bug 1257210

Summary: virt-manager segfault at in libspice-client-glib
Product: [Fedora] Fedora Reporter: Alexander Todorov <atodorov>
Component: spice-gtkAssignee: Victor Toso <victortoso>
Status: CLOSED NEXTRELEASE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: high Docs Contact:
Priority: high    
Version: rawhideCC: alon, atodorov, berrange, cfergeau, crobinso, hdegoede, jsullivan3, marcandre.lureau, sandmann, victortoso, virt-maint
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: 0.29-4.fc23 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2015-09-21 10:49:53 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Alexander Todorov 2015-08-26 13:54:16 UTC 
Description of problem:

I'm booting a LiveCD made from a recent Rawhide snapshot. Just before the gnome login screen shows on the screen virt-manager crashes and exits. On the console I see:

segfault at 0 ip 00007f7ba64f0480 sp 00007f7b7ffff9b8 error 4 in libspice-client-glib-2.0.so.8.5.0[7f7ba64db000+10f000]


I get the same error when booting from 
https://kojipkgs.fedoraproject.org/mash/rawhide-20150826/rawhide/x86_64/os/images/boot.iso
on the same host.

Version-Release number of selected component (if applicable):
virt-manager-1.2.1-3.fc24.noarch
spice-glib-0.29-2.fc23.x86_64

My KVM host is Rawhide updated to the latest as of today.

How reproducible:

Always on this particular hardware/versions.
By default the virtual OS type is recognized as Linux/Fedora22
Comment 1 Alexander Todorov 2015-08-26 14:12:46 UTC 
If I change the Display type from Spice to VNC server everything works as expected.
Comment 2 John F Sullivan 2015-08-26 19:08:37 UTC 
I've seen the same behavior booting the Fedora 23 Workstation x86_64 live ISO using an updated Fedora 22 host.

virt-manager-1.2.1-2.fc22.noarch
spice-glib-0.29-1.fc22.x86_64
Comment 3 Cole Robinson 2015-09-01 17:26:24 UTC 
I tried on f23 host, with the f23 alpha live CD as suggested in comment #2, but it didn't reproduce for me with a couple boots. Is this reliably reproducible for you guys?

Can someone convince abrt to file a bug about this, or give a faf report? A backtrace will help
Comment 4 Alexander Todorov 2015-09-02 07:56:20 UTC 
This is what I'm seeing in the system log. I'm not able to get abrt to detect or report anything for now.

сеп 02 03:51:59 hp-bl480c-01.rhts.eng.bos.redhat.com systemd-coredump[15673]: Process 15658 (virt-manager) of user 0 dumped core.
                                                                                 
                                                                                 Stack trace of thread 15658:
                                                                                 #0  0x00007fe72d43e480 spice_audio_get_playback_volume_info_async (libspice-client-glib-2.0
                                                                                 #1  0x00007fe72d4582a9 main_agent_handle_msg (libspice-client-glib-2.0.so.8)
                                                                                 #2  0x00007fe72d458c1b main_handle_agent_data (libspice-client-glib-2.0.so.8)
                                                                                 #3  0x00007fe72d4484de spice_channel_recv_msg (libspice-client-glib-2.0.so.8)
                                                                                 #4  0x00007fe72d448704 spice_channel_iterate_read (libspice-client-glib-2.0.so.8)
                                                                                 #5  0x00007fe72d44a3f0 spice_channel_coroutine (libspice-client-glib-2.0.so.8)
                                                                                 #6  0x00007fe72d474c4b coroutine_trampoline (libspice-client-glib-2.0.so.8)
                                                                                 #7  0x00007fe72d474a73 continuation_trampoline (libspice-client-glib-2.0.so.8)
                                                                                 #8  0x00007fe7537ed650 n/a (libc.so.6)
сеп 02 03:52:05 hp-bl480c-01.rhts.eng.bos.redhat.com NetworkManager[782]: <error> [1441180325.595240] [devices/nm-device.c:2617] activation_source_schedule(): (enp3s0): act
сеп 02 03:52:05 hp-bl480c-01.rhts.eng.bos.redhat.com NetworkManager[782]: <error> [1441180325.596030] [devices/nm-device.c:2617] activation_source_schedule(): (enp10s4f0): 
сеп 02 03:52:05 hp-bl480c-01.rhts.eng.bos.redhat.com NetworkManager[782]: <error> [1441180325.596233] [devices/nm-device.c:2617] activation_source_schedule(): (ens2f0): act
сеп 02 03:52:05 hp-bl480c-01.rhts.eng.bos.redhat.com NetworkManager[782]: <error> [1441180325.596400] [devices/nm-device.c:2617] activation_source_schedule(): (enp5s0): act
сеп 02 03:52:05 hp-bl480c-01.rhts.eng.bos.redhat.com NetworkManager[782]: <error> [1441180325.596602] [devices/nm-device.c:2617] activation_source_schedule(): (enp10s4f1): 
сеп 02 03:52:36 hp-bl480c-01.rhts.eng.bos.redhat.com systemd-coredump[15739]: Process 15724 (virt-manager) of user 0 dumped core.
                                                                                 
                                                                                 Stack trace of thread 15724:
                                                                                 #0  0x00007ff1a34b2480 spice_audio_get_playback_volume_info_async (libspice-client-glib-2.0
                                                                                 #1  0x00007ff1a34cc2a9 main_agent_handle_msg (libspice-client-glib-2.0.so.8)
                                                                                 #2  0x00007ff1a34ccc1b main_handle_agent_data (libspice-client-glib-2.0.so.8)
                                                                                 #3  0x00007ff1a34bc4de spice_channel_recv_msg (libspice-client-glib-2.0.so.8)
                                                                                 #4  0x00007ff1a34bc704 spice_channel_iterate_read (libspice-client-glib-2.0.so.8)
                                                                                 #5  0x00007ff1a34be3f0 spice_channel_coroutine (libspice-client-glib-2.0.so.8)
                                                                                 #6  0x00007ff1a34e8c4b coroutine_trampoline (libspice-client-glib-2.0.so.8)
                                                                                 #7  0x00007ff1a34e8a73 continuation_trampoline (libspice-client-glib-2.0.so.8)
                                                                                 #8  0x00007ff1d9e9f650 n/a (libc.so.6)
сеп 02 03:53:27 hp-bl480c-01.rhts.eng.bos.redhat.com NetworkManager[782]: <error> [1441180407.679805] [devices/nm-device.c:2617] activation_source_schedule(): (enp10s4f1): 
сеп 02 03:53:27 hp-bl480c-01.rhts.eng.bos.redhat.com NetworkManager[782]: <error> [1441180407.679956] [devices/nm-device.c:2617] activation_source_schedule(): (enp3s0): act
сеп 02 03:53:27 hp-bl480c-01.rhts.eng.bos.redhat.com NetworkManager[782]: <error> [1441180407.680041] [devices/nm-device.c:2617] activation_source_schedule(): (enp10s4f0): 
сеп 02 03:53:27 hp-bl480c-01.rhts.eng.bos.redhat.com NetworkManager[782]: <error> [1441180407.680158] [devices/nm-device.c:2617] activation_source_schedule(): (ens2f0): act
сеп 02 03:53:27 hp-bl480c-01.rhts.eng.bos.redhat.com NetworkManager[782]: <error> [1441180407.680225] [devices/nm-device.c:2617] activation_source_schedule(): (enp5s0): act
сеп 02 03:53:49 hp-bl480c-01.rhts.eng.bos.redhat.com audit[15812]: ANOM_ABEND auid=0 uid=0 gid=0 ses=16 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=15812
сеп 02 03:53:49 hp-bl480c-01.rhts.eng.bos.redhat.com kernel: virt-manager[15812]: segfault at 0 ip 00007fd54b4d6480 sp 00007fd5317899b8 error 4 in libspice-client-glib-2.0.
сеп 02 03:53:50 hp-bl480c-01.rhts.eng.bos.redhat.com libvirtd[830]: End of file while reading data: Input/output error
Comment 5 Victor Toso 2015-09-03 12:41:28 UTC 
I'm not able to reproduce it either. Could you please install the debuginfo and run with gdb?
Comment 6 Alexander Todorov 2015-09-04 09:31:03 UTC 
More info with debuginfo installed:

Program received signal SIGSEGV, Segmentation fault.
spice_audio_get_playback_volume_info_async (audio=0x0, cancellable=0x558b1a0cbb10, main_channel=0x558b1a0cb000, callback=0x7fd3d86dc610 <audio_playback_volume_info_cb>, 
    user_data=0x558b1a0cb000) at spice-audio.c:200
200	    SPICE_AUDIO_GET_CLASS(audio)->get_playback_volume_info_async(audio,
(gdb) bt
#0  0x00007fd3d86c5480 in spice_audio_get_playback_volume_info_async (audio=0x0, cancellable=0x558b1a0cbb10, main_channel=0x558b1a0cb000, callback=0x7fd3d86dc610 <audio_playback_volume_info_cb>, user_data=0x558b1a0cb000) at spice-audio.c:200
#1  0x00007fd3d86df2a9 in main_agent_handle_msg (main_channel=0x558b1a0cb000) at channel-main.c:1162
#2  0x00007fd3d86df2a9 in main_agent_handle_msg (channel=channel@entry=0x558b1a0cb000, msg=<optimized out>, payload=<optimized out>) at channel-main.c:1933
#3  0x00007fd3d86dfc1b in main_handle_agent_data (channel=0x558b1a0cb000, in=0x558b1a1448c0) at channel-main.c:2053
#4  0x00007fd3d86cf4de in spice_channel_recv_msg (channel=0x558b1a0cb000, msg_handler=0x7fd3d86db790 <spice_main_handle_msg>, data=0x0) at spice-channel.c:1889
#5  0x00007fd3d86cf704 in spice_channel_iterate_read (channel=0x558b1a0cb000) at spice-channel.c:2126
#6  0x00007fd3d86d13f0 in spice_channel_coroutine (channel=0x558b1a0cb000) at spice-channel.c:2164
#7  0x00007fd3d86d13f0 in spice_channel_coroutine (data=<optimized out>) at spice-channel.c:2449
#8  0x00007fd3d86fbc4b in coroutine_trampoline (cc=0x558b1a0ca6a0) at coroutine_ucontext.c:63
#9  0x00007fd3d86fba73 in continuation_trampoline (i0=<optimized out>, i1=<optimized out>) at continuation.c:55
#10 0x00007fd3faa1b650 in __start_context () at /lib64/libc.so.6
#11 0x0000558b1a0caa68 in  ()
#12 0x0000000000000000 in  ()
(gdb)
Comment 7 Alexander Todorov 2015-09-04 11:43:22 UTC 
More info requested:

pulseaudio-6.99.1-2.fc24.x86_64

/usr/bin/qemu-system-x86_64 -machine accel=kvm -name fedora22-7 -S -machine pc-i440fx-2.4,accel=kvm,usb=off,vmport=off -cpu kvm64,+lahf_lm -m 2048 -realtime mlock=off -smp 1,sockets=1,cores=1,threads=1 -uuid 168885a2-3ddb-47b9-9b16-dc7fc6309a2e -no-user-config -nodefaults -chardev socket,id=charmonitor,path=/var/lib/libvirt/qemu/fedora22-7.monitor,server,nowait -mon chardev=charmonitor,id=monitor,mode=control -rtc base=utc,driftfix=slew -global kvm-pit.lost_tick_policy=discard -no-hpet -no-reboot -global PIIX4_PM.disable_s3=1 -global PIIX4_PM.disable_s4=1 -boot strict=on -device ich9-usb-ehci1,id=usb,bus=pci.0,addr=0x6.0x7 -device ich9-usb-uhci1,masterbus=usb.0,firstport=0,bus=pci.0,multifunction=on,addr=0x6 -device ich9-usb-uhci2,masterbus=usb.0,firstport=2,bus=pci.0,addr=0x6.0x1 -device ich9-usb-uhci3,masterbus=usb.0,firstport=4,bus=pci.0,addr=0x6.0x2 -device virtio-serial-pci,id=virtio-serial0,bus=pci.0,addr=0x5 -drive file=/var/lib/libvirt/images/disk1.img,if=none,id=drive-virtio-disk0,format=raw -device virtio-blk-pci,scsi=off,bus=pci.0,addr=0x7,drive=drive-virtio-disk0,id=virtio-disk0,bootindex=2 -drive file=/home/rawhide-20150826-boot.iso,if=none,id=drive-ide0-0-0,readonly=on,format=raw -device ide-cd,bus=ide.0,unit=0,drive=drive-ide0-0-0,id=ide0-0-0,bootindex=1 -netdev tap,fd=23,id=hostnet0,vhost=on,vhostfd=24 -device virtio-net-pci,netdev=hostnet0,id=net0,mac=52:54:00:fd:29:79,bus=pci.0,addr=0x3 -chardev pty,id=charserial0 -device isa-serial,chardev=charserial0,id=serial0 -chardev socket,id=charchannel0,path=/var/lib/libvirt/qemu/channel/target/fedora22-7.org.qemu.guest_agent.0,server,nowait -device virtserialport,bus=virtio-serial0.0,nr=1,chardev=charchannel0,id=channel0,name=org.qemu.guest_agent.0 -chardev spicevmc,id=charchannel1,name=vdagent -device virtserialport,bus=virtio-serial0.0,nr=2,chardev=charchannel1,id=channel1,name=com.redhat.spice.0 -device usb-tablet,id=input0 -spice port=5900,addr=127.0.0.1,disable-ticketing,image-compression=off,seamless-migration=on -device qxl-vga,id=video0,ram_size=67108864,vram_size=67108864,vgamem_mb=16,bus=pci.0,addr=0x2 -device intel-hda,id=sound0,bus=pci.0,addr=0x4 -device hda-duplex,id=sound0-codec0,bus=sound0.0,cad=0 -chardev spicevmc,id=charredir0,name=usbredir -device usb-redir,chardev=charredir0,id=redir0 -chardev spicevmc,id=charredir1,name=usbredir -device usb-redir,chardev=charredir1,id=redir1 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x8 -msg timestamp=on


<domain type='kvm' id='1'>
  <name>fedora22-7</name>
  <uuid>168885a2-3ddb-47b9-9b16-dc7fc6309a2e</uuid>
  <memory unit='KiB'>2097152</memory>
  <currentMemory unit='KiB'>2097152</currentMemory>
  <vcpu placement='static'>1</vcpu>
  <resource>
    <partition>/machine</partition>
  </resource>
  <os>
    <type arch='x86_64' machine='pc-i440fx-2.4'>hvm</type>
    <boot dev='cdrom'/>
    <boot dev='hd'/>
  </os>
  <features>
    <acpi/>
    <apic/>
    <pae/>
    <vmport state='off'/>
  </features>
  <cpu mode='custom' match='exact'>
    <model fallback='allow'>cpu64-rhel6</model>
  </cpu>
  <clock offset='utc'>
    <timer name='rtc' tickpolicy='catchup'/>
    <timer name='pit' tickpolicy='delay'/>
    <timer name='hpet' present='no'/>
  </clock>
  <on_poweroff>destroy</on_poweroff>
  <on_reboot>destroy</on_reboot>
  <on_crash>destroy</on_crash>
  <pm>
    <suspend-to-mem enabled='no'/>
    <suspend-to-disk enabled='no'/>
  </pm>
  <devices>
    <emulator>/usr/bin/qemu-kvm</emulator>
    <disk type='file' device='disk'>
      <driver name='qemu' type='raw'/>
      <source file='/var/lib/libvirt/images/disk1.img'/>
      <backingStore/>
      <target dev='vda' bus='virtio'/>
      <alias name='virtio-disk0'/>
      <address type='pci' domain='0x0000' bus='0x00' slot='0x07' function='0x0'/>
    </disk>
    <disk type='file' device='cdrom'>
      <driver name='qemu' type='raw'/>
      <source file='/home/rawhide-20150826-boot.iso'/>
      <backingStore/>
      <target dev='hda' bus='ide'/>
      <readonly/>
      <alias name='ide0-0-0'/>
      <address type='drive' controller='0' bus='0' target='0' unit='0'/>
    </disk>
    <controller type='usb' index='0' model='ich9-ehci1'>
      <alias name='usb'/>
      <address type='pci' domain='0x0000' bus='0x00' slot='0x06' function='0x7'/>
    </controller>
    <controller type='usb' index='0' model='ich9-uhci1'>
      <alias name='usb'/>
      <master startport='0'/>
      <address type='pci' domain='0x0000' bus='0x00' slot='0x06' function='0x0' multifunction='on'/>
    </controller>
    <controller type='usb' index='0' model='ich9-uhci2'>
      <alias name='usb'/>
      <master startport='2'/>
      <address type='pci' domain='0x0000' bus='0x00' slot='0x06' function='0x1'/>
    </controller>
    <controller type='usb' index='0' model='ich9-uhci3'>
      <alias name='usb'/>
      <master startport='4'/>
      <address type='pci' domain='0x0000' bus='0x00' slot='0x06' function='0x2'/>
    </controller>
    <controller type='pci' index='0' model='pci-root'>
      <alias name='pci.0'/>
    </controller>
    <controller type='ide' index='0'>
      <alias name='ide'/>
      <address type='pci' domain='0x0000' bus='0x00' slot='0x01' function='0x1'/>
    </controller>
    <controller type='virtio-serial' index='0'>
      <alias name='virtio-serial0'/>
      <address type='pci' domain='0x0000' bus='0x00' slot='0x05' function='0x0'/>
    </controller>
    <interface type='network'>
      <mac address='52:54:00:fd:29:79'/>
      <source network='default' bridge='virbr0'/>
      <target dev='vnet0'/>
      <model type='virtio'/>
      <alias name='net0'/>
      <address type='pci' domain='0x0000' bus='0x00' slot='0x03' function='0x0'/>
    </interface>
    <serial type='pty'>
      <source path='/dev/pts/2'/>
      <target port='0'/>
      <alias name='serial0'/>
    </serial>
    <console type='pty' tty='/dev/pts/2'>
      <source path='/dev/pts/2'/>
      <target type='serial' port='0'/>
      <alias name='serial0'/>
    </console>
    <channel type='unix'>
      <source mode='bind' path='/var/lib/libvirt/qemu/channel/target/fedora22-7.org.qemu.guest_agent.0'/>
      <target type='virtio' name='org.qemu.guest_agent.0' state='disconnected'/>
      <alias name='channel0'/>
      <address type='virtio-serial' controller='0' bus='0' port='1'/>
    </channel>
    <channel type='spicevmc'>
      <target type='virtio' name='com.redhat.spice.0' state='connected'/>
      <alias name='channel1'/>
      <address type='virtio-serial' controller='0' bus='0' port='2'/>
    </channel>
    <input type='tablet' bus='usb'>
      <alias name='input0'/>
    </input>
    <input type='mouse' bus='ps2'/>
    <input type='keyboard' bus='ps2'/>
    <graphics type='spice' port='5900' autoport='yes' listen='127.0.0.1'>
      <listen type='address' address='127.0.0.1'/>
      <image compression='off'/>
    </graphics>
    <sound model='ich6'>
      <alias name='sound0'/>
      <address type='pci' domain='0x0000' bus='0x00' slot='0x04' function='0x0'/>
    </sound>
    <video>
      <model type='qxl' ram='65536' vram='65536' vgamem='16384' heads='1'/>
      <alias name='video0'/>
      <address type='pci' domain='0x0000' bus='0x00' slot='0x02' function='0x0'/>
    </video>
    <redirdev bus='usb' type='spicevmc'>
      <alias name='redir0'/>
    </redirdev>
    <redirdev bus='usb' type='spicevmc'>
      <alias name='redir1'/>
    </redirdev>
    <memballoon model='virtio'>
      <alias name='balloon0'/>
      <address type='pci' domain='0x0000' bus='0x00' slot='0x08' function='0x0'/>
    </memballoon>
  </devices>
  <seclabel type='dynamic' model='selinux' relabel='yes'>
    <label>system_u:system_r:svirt_t:s0:c559,c963</label>
    <imagelabel>system_u:object_r:svirt_image_t:s0:c559,c963</imagelabel>
  </seclabel>
</domain>
Comment 8 Alexander Todorov 2015-09-04 11:48:08 UTC 
With remote-viewer:


# remote-viewer --spice-debug spice://localhost:5900

(remote-viewer:12811): GLib-GObject-WARNING **: The property GtkImageMenuItem:use-stock is deprecated and shouldn't be used anymore. It will be removed in a future version.

(remote-viewer:12811): GLib-GObject-WARNING **: The property GtkSettings:gtk-menu-images is deprecated and shouldn't be used anymore. It will be removed in a future version.

(remote-viewer:12811): GLib-GObject-WARNING **: The property GtkToolButton:stock-id is deprecated and shouldn't be used anymore. It will be removed in a future version.
(remote-viewer:12811): GSpice-DEBUG: spice-session.c:252 New session (compiled from package spice-gtk 0.29)
(remote-viewer:12811): GSpice-DEBUG: spice-session.c:256 Supported channels: main, display, inputs, cursor, playback, record, smartcard, usbredir, webdav
(remote-viewer:12811): GSpice-DEBUG: spice-session.c:1680 no migration in progress
(remote-viewer:12811): GSpice-DEBUG: spice-channel.c:136 main-1:0: spice_channel_constructed
(remote-viewer:12811): GSpice-DEBUG: spice-session.c:2183 main-1:0: new main channel, switching
(remote-viewer:12811): GSpice-DEBUG: spice-gtk-session.c:1028 Changing main channel from (nil) to 0x55a475bbe000
(remote-viewer:12811): GSpice-DEBUG: usb-device-manager.c:888 device added 0x55a475bddf50
(remote-viewer:12811): GSpice-DEBUG: spice-channel.c:2476 main-1:0: Open coroutine starting 0x55a475bbe000
(remote-viewer:12811): GSpice-DEBUG: spice-channel.c:2317 main-1:0: Started background coroutine 0x55a475bbd670
(remote-viewer:12811): GSpice-DEBUG: spice-session.c:2131 main-1:0: Using plain text, port 5900
(remote-viewer:12811): GSpice-DEBUG: spice-session.c:2062 open host localhost:5900
(remote-viewer:12811): GSpice-DEBUG: spice-session.c:1984 main-1:0: connecting 0x7fa25e048a60...
(remote-viewer:12811): GSpice-DEBUG: spice-session.c:1968 main-1:0: connect ready
(remote-viewer:12811): GSpice-DEBUG: spice-channel.c:1194 main-1:0: channel type 1 id 0 num common caps 1 num caps 1
(remote-viewer:12811): GSpice-DEBUG: spice-channel.c:1216 main-1:0: Peer version: 2:2
(remote-viewer:12811): GSpice-DEBUG: spice-channel.c:1732 main-1:0: spice_channel_recv_link_msg: 2 caps
(remote-viewer:12811): GSpice-DEBUG: spice-channel.c:1742 main-1:0: got common caps 0:0xB
(remote-viewer:12811): GSpice-DEBUG: spice-channel.c:1748 main-1:0: got channel caps 0:0x9
(remote-viewer:12811): GSpice-DEBUG: spice-channel.c:2714 test cap 0 in 0xB: yes
(remote-viewer:12811): GSpice-DEBUG: spice-channel.c:2714 test cap 2 in 0xB: no
(remote-viewer:12811): GSpice-DEBUG: spice-channel.c:2714 test cap 1 in 0xB: yes
(remote-viewer:12811): GSpice-DEBUG: spice-channel.c:2714 test cap 3 in 0xB: yes
(remote-viewer:12811): GSpice-DEBUG: spice-channel.c:1780 main-1:0: use mini header: 1
(remote-viewer:12811): GSpice-DEBUG: spice-channel.c:1131 main-1:0: channel up, state 3
(remote-viewer:12811): GSpice-DEBUG: spice-session.c:2275 set mm time: 516925939
(remote-viewer:12811): GSpice-DEBUG: spice-session.c:2278 spice_session_set_mm_time: mm-time-reset, old 516926341, new 516925939
(remote-viewer:12811): GSpice-DEBUG: channel-main.c:1455 agent connected: yes
(remote-viewer:12811): GSpice-DEBUG: channel-main.c:1556 server name: fedora22-7
(remote-viewer:12811): GSpice-DEBUG: channel-main.c:1567 server uuid: 168885a2-3ddb-47b9-9b16-dc7fc6309a2e
(remote-viewer:12811): GSpice-DEBUG: channel-main.c:1917 main_agent_handle_msg: cap: 0 (mouse state)
(remote-viewer:12811): GSpice-DEBUG: channel-main.c:1917 main_agent_handle_msg: cap: 1 (monitors config)
(remote-viewer:12811): GSpice-DEBUG: channel-main.c:1917 main_agent_handle_msg: cap: 2 (reply)
(remote-viewer:12811): GSpice-DEBUG: channel-main.c:1917 main_agent_handle_msg: cap: 5 (clipboard)
(remote-viewer:12811): GSpice-DEBUG: channel-main.c:1917 main_agent_handle_msg: cap: 6 (clipboard selection)
(remote-viewer:12811): GSpice-DEBUG: channel-main.c:1917 main_agent_handle_msg: cap: 7 (sparse monitors)
(remote-viewer:12811): GSpice-DEBUG: channel-main.c:1917 main_agent_handle_msg: cap: 8 (line-end lf)
(remote-viewer:12811): GSpice-DEBUG: channel-main.c:1917 main_agent_handle_msg: cap: 10 (max-clipboard)
(remote-viewer:12811): GSpice-DEBUG: channel-main.c:1917 main_agent_handle_msg: cap: 11 (volume-sync)
(remote-viewer:12811): GSpice-DEBUG: spice-channel.c:136 usbredir-9:1: spice_channel_constructed
(remote-viewer:12811): GSpice-DEBUG: spice-channel.c:136 usbredir-9:0: spice_channel_constructed
(remote-viewer:12811): GSpice-DEBUG: spice-channel.c:136 record-6:0: spice_channel_constructed
(remote-viewer:12811): GSpice-DEBUG: spice-channel.c:136 playback-5:0: spice_channel_constructed

(remote-viewer:12811): GSpice-WARNING **: PulseAudio context failed Connection refused

(remote-viewer:12811): GSpice-WARNING **: pa_context_connect() failed: Connection refused
(remote-viewer:12811): GSpice-DEBUG: spice-pulse.c:133 spice_pulse_dispose
(remote-viewer:12811): GSpice-DEBUG: spice-channel.c:136 cursor-4:0: spice_channel_constructed
(remote-viewer:12811): GSpice-DEBUG: spice-channel.c:136 display-2:0: spice_channel_constructed
(remote-viewer:12811): GSpice-DEBUG: spice-channel.c:136 inputs-3:0: spice_channel_constructed
(remote-viewer:12811): GSpice-DEBUG: spice-gtk-session.c:192 inputs-3:0: client_modifiers:0x0, guest_modifiers:0x0

(remote-viewer:12811): GSpice-WARNING **: PulseAudio context failed Connection refused

(remote-viewer:12811): GSpice-WARNING **: pa_context_connect() failed: Connection refused
(remote-viewer:12811): GSpice-DEBUG: spice-pulse.c:133 spice_pulse_dispose
Segmentation fault (core dumped)


from gdb:

Program received signal SIGSEGV, Segmentation fault.
spice_audio_get_playback_volume_info_async (audio=0x0, cancellable=0x55555599bd10, main_channel=0x5555557dfc00, callback=0x7ffff42d7610 <audio_playback_volume_info_cb>, 
    user_data=0x5555557dfc00) at spice-audio.c:200
200	    SPICE_AUDIO_GET_CLASS(audio)->get_playback_volume_info_async(audio,
(gdb) bt
#0  0x00007ffff42c0480 in spice_audio_get_playback_volume_info_async (audio=0x0, cancellable=0x55555599bd10, main_channel=0x5555557dfc00, callback=0x7ffff42d7610 <audio_playback_volume_info_cb>, user_data=0x5555557dfc00) at spice-audio.c:200
#1  0x00007ffff42da2a9 in main_agent_handle_msg (main_channel=0x5555557dfc00) at channel-main.c:1162
#2  0x00007ffff42da2a9 in main_agent_handle_msg (channel=channel@entry=0x5555557dfc00, msg=<optimized out>, payload=<optimized out>) at channel-main.c:1933
#3  0x00007ffff42dac1b in main_handle_agent_data (channel=0x5555557dfc00, in=0x555555a86700) at channel-main.c:2053
#4  0x00007ffff42ca4de in spice_channel_recv_msg (channel=0x5555557dfc00, msg_handler=0x7ffff42d6790 <spice_main_handle_msg>, data=0x0) at spice-channel.c:1889
#5  0x00007ffff42ca704 in spice_channel_iterate_read (channel=0x5555557dfc00) at spice-channel.c:2126
#6  0x00007ffff42cc3f0 in spice_channel_coroutine (channel=0x5555557dfc00) at spice-channel.c:2164
#7  0x00007ffff42cc3f0 in spice_channel_coroutine (data=<optimized out>) at spice-channel.c:2449
#8  0x00007ffff42f6c4b in coroutine_trampoline (cc=0x5555557df2a0) at coroutine_ucontext.c:63
#9  0x00007ffff42f6a73 in continuation_trampoline (i0=<optimized out>, i1=<optimized out>) at continuation.c:55
#10 0x00007ffff37c3650 in __start_context () at /lib64/libc.so.6
#11 0x00005555557df668 in  ()
#12 0x0000000000000000 in  ()
(gdb)
Comment 9 John F Sullivan 2015-09-05 16:24:26 UTC 
This problem (or at least one that has very similar symptoms) was readily reproducible in my environment.  I upgraded the BIOS on my Asus Z97-Deluxe from 2401 to 2501, and the problem no longer reproduces.
Comment 10 Victor Toso 2015-09-07 08:44:19 UTC 
Thanks all for the input. This is a bug in spice-gtk and a patch was sent to the mailing list to fix it

http://lists.freedesktop.org/archives/spice-devel/2015-September/021829.html
Comment 11 Alexander Todorov 2015-09-07 09:16:38 UTC 
(In reply to Victor Toso from comment #10)
> Thanks all for the input. This is a bug in spice-gtk and a patch was sent to
> the mailing list to fix it
> 
> http://lists.freedesktop.org/archives/spice-devel/2015-September/021829.html

Which version contains the fix ?
Comment 12 Victor Toso 2015-09-07 12:05:58 UTC 
(In reply to Alexander Todorov from comment #11)
> (In reply to Victor Toso from comment #10)
> > Thanks all for the input. This is a bug in spice-gtk and a patch was sent to
> > the mailing list to fix it
> > 
> > http://lists.freedesktop.org/archives/spice-devel/2015-September/021829.html
> 
> Which version contains the fix ?

So far the patch is in the mailing list but not yet upstream. Once it is upstream we can include that in rawhide package.

You can check if this works for you in the following scratch-build:
http://koji.fedoraproject.org/koji/taskinfo?taskID=10985463
Comment 13 Alexander Todorov 2015-09-08 09:15:34 UTC 
The scratch build works for me, thanks.
Comment 14 Fedora Update System 2015-09-08 14:30:27 UTC 
spice-gtk-0.29-3.fc23 has been submitted as an update to Fedora 23. https://bodhi.fedoraproject.org/updates/FEDORA-2015-15365
Comment 15 Fedora Update System 2015-09-08 17:51:11 UTC 
spice-gtk-0.29-3.fc23 has been pushed to the Fedora 23 testing repository. If problems still persist, please make note of it in this bug report.\nIf you want to test the update, you can install it with \n su -c 'yum --enablerepo=updates-testing update spice-gtk'. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2015-15365
Comment 16 Fedora Update System 2015-09-12 16:56:29 UTC 
spice-gtk-0.29-4.fc23 has been submitted as an update to Fedora 23. https://bodhi.fedoraproject.org/updates/FEDORA-2015-15685
Comment 17 Fedora Update System 2015-09-12 21:24:46 UTC 
spice-gtk-0.29-4.fc23 has been pushed to the Fedora 23 testing repository. If problems still persist, please make note of it in this bug report.\nIf you want to test the update, you can install it with \n su -c 'yum --enablerepo=updates-testing update spice-gtk'. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2015-15685
Comment 18 Fedora Update System 2015-09-21 10:49:43 UTC 
spice-gtk-0.29-4.fc23 has been pushed to the Fedora 23 stable repository. If problems still persist, please make note of it in this bug report.