Bug 1309227
Summary: | lspci core dump in guest when there have 7 layers switches | ||
---|---|---|---|
Product: | Red Hat Enterprise Linux 7 | Reporter: | jingzhao <jinzhao> |
Component: | qemu-kvm-rhev | Assignee: | Marcel Apfelbaum <marcel> |
Status: | CLOSED WONTFIX | QA Contact: | jingzhao <jinzhao> |
Severity: | low | Docs Contact: | |
Priority: | low | ||
Version: | 7.2 | CC: | chayang, juzhang, knoel, marcel, virt-maint, xfu |
Target Milestone: | rc | ||
Target Release: | --- | ||
Hardware: | Unspecified | ||
OS: | Unspecified | ||
Whiteboard: | |||
Fixed In Version: | Doc Type: | If docs needed, set a value | |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2018-04-26 13:19:57 UTC | Type: | Bug |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: |
Description
jingzhao
2016-02-17 09:39:17 UTC
Didn't hit this issue when set 7 layers switches qemu-img-rhev-2.6.0-14.el7.x86_64 kernel-3.10.0-470.el7.x86_64 1. Hit the issue with above environment [root@localhost home]# sh attachment1 [details]-switch-layer.sh 7 [root@localhost home]# cat attachment1 [details]-switch-layer.sh #!/bin/sh MACHINE=q35 SMP=4,cores=2,threads=2,sockets=1 MEM=2G GUEST_IMG=/home/q35.qcow2 IMG_FORMAT=qcow2 CLI="/usr/libexec/qemu-kvm -enable-kvm -M $MACHINE -cpu SandyBridge -smp $SMP -m $MEM -name vm1 -drive file=$GUEST_IMG,if=none,id=guest-img,format=$IMG_FORMAT,werror=stop,rerror=stop -device ide-hd,drive=guest-img,bus=ide.0,unit=0,id=os-disk,bootindex=0 -spice port=5931,disable-ticketing -vga qxl -monitor stdio -serial unix:/tmp/console,server,nowait -qmp tcp:0:6666,server,nowait -chardev file,path=/home/seabios.log,id=seabios -device isa-debugcon,chardev=seabios,iobase=0x402 -boot menu=on,reboot-timeout=8,strict=on -device ioh3420,bus=pcie.0,id=root.0,slot=3 -device x3130-upstream,bus=root.0,id=upstream -device xio3130-downstream,bus=upstream,id=downstream0,chassis=1" while [ ${i:=0} -lt ${1:-0} ] do dstreamId=$((i+1)) ustreamId=$((i+1)) chassisId=$((dstreamId+1)) blkDiskId=$((i)) CLI="$CLI -device x3130-upstream,bus=downstream$i,id=upstream$ustreamId" CLI="$CLI -device xio3130-downstream,bus=upstream$ustreamId,id=downstream$dstreamId,chassis=$chassisId" i=$((i+1)) done $CLI 2. Also hit the issue with following steps 1) Boot guest with 6 switches [root@localhost home]# sh attachment1 [details]-switch-layer.sh 6 2) hot plug disk to the switch {"execute":"device_add","arguments":{"driver":"virtio-scsi-pci","id":"scsi3","bus":"downstream5","disable-legacy":true,"disable-modern":false}} {"return": {}} {"execute":"__com.redhat_drive_add", "arguments": {"file":"/home/block2.raw","format":"raw","id":"drive_datadisk3"}} {"return": {}} {"execute":"device_add","arguments":{"driver":"scsi-hd","drive":"drive_datadisk3","id":"device_datadisk3","bus":"scsi3.0"}} {"return": {}} Also reproduce the issue on qemu-kvm-rhev-2.9.0-14. Detailed info: qemu-kvm-rhev-2.9.0-14.el7.x86_64 kernel-3.10.0-690.el7.x86_64 OVMF-20170228-5.gitc325e41585e3.el7.noarch [root@ibm-x3850x5-08 tmp]# sh switch-layer.sh 5 [root@ibm-x3850x5-08 tmp]# cat switch-layer.sh #!/bin/sh MACHINE=q35 SMP=4,cores=2,threads=2,sockets=1 MEM=2G GUEST_IMG=/home/jinchen/demo/test.qcow2-ovmf IMG_FORMAT=qcow2 CLI="/usr/libexec/qemu-kvm -enable-kvm -M $MACHINE -cpu SandyBridge -smp $SMP -m $MEM -name vm1 -drive file=$GUEST_IMG,if=none,id=guest-img,format=$IMG_FORMAT,werror=stop,rerror=stop -device ide-hd,drive=guest-img,bus=ide.0,unit=0,id=os-disk,bootindex=0 -spice port=5931,disable-ticketing -vga qxl -monitor stdio -serial unix:/tmp/console,server,nowait -qmp tcp:0:6666,server,nowait -drive file=/usr/share/OVMF/OVMF_CODE.secboot.fd,if=pflash,format=raw,unit=0,readonly=on -drive file=/usr/share/OVMF/OVMF_VARS.fd,if=pflash,format=raw,unit=1 -boot menu=on,reboot-timeout=8,strict=on -device ioh3420,bus=pcie.0,id=root.0,slot=3 -device x3130-upstream,bus=root.0,id=upstream -device xio3130-downstream,bus=upstream,id=downstream0,chassis=1" while [ ${i:=0} -lt ${1:-0} ] do dstreamId=$((i+1)) ustreamId=$((i+1)) chassisId=$((dstreamId+1)) blkDiskId=$((i)) CLI="$CLI -device x3130-upstream,bus=downstream$i,id=upstream$ustreamId" CLI="$CLI -device xio3130-downstream,bus=upstream$ustreamId,id=downstream$dstreamId,chassis=$chassisId" i=$((i+1)) done CLI="$CLI -device usb-ehci,bus=downstream$i,id=ehci" $CLI Actual results: lspci core dumped in guest when there have 6 layers switches Hit the same issue on qemu-kvm-rhev-2.10.0-3.el7.x86_64 with 6 swith-layers [root@localhost ~]# lspci -vvv -t -[0000:00]-+-00.0 Intel Corporation 82G33/G31/P35/P31 Express DRAM Controller +-01.0 Red Hat, Inc. QXL paravirtual graphic card +-02.0 Intel Corporation 82540EM Gigabit Ethernet Controller +-03.0-[01-0f]----00.0-[02-0f]----00.0-[03-0f]----00.0-[04-0f]----00.0-[05-0f]----00.0-[06-0f]----00.0-[07-0f]----00.0-[08-0f]----00.0-[09-0f]----00.0-[0a-0f]----00.0-[0b-0f]----00.0-[0c-0f]----00.0-[0d-0f]----00.0-[0e-0f]----00.0-[0f]----00.0 Red Hat, Inc Virtio block device +-1f.0 Intel Corporation 82801IB (ICH9) LPC Interface Controller +-1f.2 Intel Corporation 82801IR/IO/IH (ICH9R/DO/DH) 6 port SATA Controller [AHCI mode] \-1f.3 Intel Corporation 82801I (ICH9 Family) SMBus Controller *** stack smashing detected ***: lspci terminated ======= Backtrace: ========= /lib64/libc.so.6(__fortify_fail+0x37)[0x7f1349c36d87] /lib64/libc.so.6(__fortify_fail+0x0)[0x7f1349c36d50] lspci[0x40ad9e] lspci[0x401bf6] /lib64/libc.so.6(__libc_start_main+0xf5)[0x7f1349b48c05] lspci[0x401c2f] ======= Memory map: ======== 00400000-00411000 r-xp 00000000 fd:00 957529 /usr/sbin/lspci 00610000-00611000 r--p 00010000 fd:00 957529 /usr/sbin/lspci 00611000-00612000 rw-p 00011000 fd:00 957529 /usr/sbin/lspci 00a19000-00bae000 rw-p 00000000 00:00 0 [heap] 7f134909f000-7f13490b6000 r-xp 00000000 fd:00 215388 /usr/lib64/libpthread-2.17.so 7f13490b6000-7f13492b5000 ---p 00017000 fd:00 215388 /usr/lib64/libpthread-2.17.so 7f13492b5000-7f13492b6000 r--p 00016000 fd:00 215388 /usr/lib64/libpthread-2.17.so 7f13492b6000-7f13492b7000 rw-p 00017000 fd:00 215388 /usr/lib64/libpthread-2.17.so 7f13492b7000-7f13492bb000 rw-p 00000000 00:00 0 7f13492bb000-7f13492d0000 r-xp 00000000 fd:00 84 /usr/lib64/libgcc_s-4.8.5-20150702.so.1 7f13492d0000-7f13494cf000 ---p 00015000 fd:00 84 /usr/lib64/libgcc_s-4.8.5-20150702.so.1 7f13494cf000-7f13494d0000 r--p 00014000 fd:00 84 /usr/lib64/libgcc_s-4.8.5-20150702.so.1 7f13494d0000-7f13494d1000 rw-p 00015000 fd:00 84 /usr/lib64/libgcc_s-4.8.5-20150702.so.1 7f13494d1000-7f13494e6000 r-xp 00000000 fd:00 223049 /usr/lib64/libz.so.1.2.7 7f13494e6000-7f13496e5000 ---p 00015000 fd:00 223049 /usr/lib64/libz.so.1.2.7 7f13496e5000-7f13496e6000 r--p 00014000 fd:00 223049 /usr/lib64/libz.so.1.2.7 7f13496e6000-7f13496e7000 rw-p 00015000 fd:00 223049 /usr/lib64/libz.so.1.2.7 7f13496e7000-7f134970c000 r-xp 00000000 fd:00 223076 /usr/lib64/liblzma.so.5.2.2 7f134970c000-7f134990b000 ---p 00025000 fd:00 223076 /usr/lib64/liblzma.so.5.2.2 7f134990b000-7f134990c000 r--p 00024000 fd:00 223076 /usr/lib64/liblzma.so.5.2.2 7f134990c000-7f134990d000 rw-p 00025000 fd:00 223076 /usr/lib64/liblzma.so.5.2.2 7f134990d000-7f1349923000 r-xp 00000000 fd:00 215390 /usr/lib64/libresolv-2.17.so 7f1349923000-7f1349b23000 ---p 00016000 fd:00 215390 /usr/lib64/libresolv-2.17.so 7f1349b23000-7f1349b24000 r--p 00016000 fd:00 215390 /usr/lib64/libresolv-2.17.so 7f1349b24000-7f1349b25000 rw-p 00017000 fd:00 215390 /usr/lib64/libresolv-2.17.so 7f1349b25000-7f1349b27000 rw-p 00000000 00:00 0 7f1349b27000-7f1349cdf000 r-xp 00000000 fd:00 215362 /usr/lib64/libc-2.17.so 7f1349cdf000-7f1349edf000 ---p 001b8000 fd:00 215362 /usr/lib64/libc-2.17.so 7f1349edf000-7f1349ee3000 r--p 001b8000 fd:00 215362 /usr/lib64/libc-2.17.so 7f1349ee3000-7f1349ee5000 rw-p 001bc000 fd:00 215362 /usr/lib64/libc-2.17.so 7f1349ee5000-7f1349eea000 rw-p 00000000 00:00 0 7f1349eea000-7f1349eff000 r-xp 00000000 fd:00 316564 /usr/lib64/libkmod.so.2.2.10 7f1349eff000-7f134a0fe000 ---p 00015000 fd:00 316564 /usr/lib64/libkmod.so.2.2.10 7f134a0fe000-7f134a0ff000 r--p 00014000 fd:00 316564 /usr/lib64/libkmod.so.2.2.10 7f134a0ff000-7f134a100000 rw-p 00015000 fd:00 316564 /usr/lib64/libkmod.so.2.2.10 7f134a100000-7f134a10c000 r-xp 00000000 fd:00 322329 /usr/lib64/libpci.so.3.5.1 7f134a10c000-7f134a30b000 ---p 0000c000 fd:00 322329 /usr/lib64/libpci.so.3.5.1 7f134a30b000-7f134a30c000 r--p 0000b000 fd:00 322329 /usr/lib64/libpci.so.3.5.1 7f134a30c000-7f134a30d000 rw-p 0000c000 fd:00 322329 /usr/lib64/libpci.so.3.5.1 7f134a30d000-7f134a32e000 r-xp 00000000 fd:00 208315 /usr/lib64/ld-2.17.so 7f134a515000-7f134a51b000 rw-p 00000000 00:00 0 7f134a52b000-7f134a52e000 rw-p 00000000 00:00 0 7f134a52e000-7f134a52f000 r--p 00021000 fd:00 208315 /usr/lib64/ld-2.17.so 7f134a52f000-7f134a530000 rw-p 00022000 fd:00 208315 /usr/lib64/ld-2.17.so 7f134a530000-7f134a531000 rw-p 00000000 00:00 0 7fffebedf000-7fffebf00000 rw-p 00000000 00:00 0 [stack] 7fffebf5a000-7fffebf5c000 r-xp 00000000 00:00 0 [vdso] ffffffffff600000-ffffffffff601000 r-xp 00000000 00:00 0 [vsyscall] Aborted (core dumped) Thanks Jing |