Bug 880887

Summary: qemu-kvm crashed randomly
Product: Red Hat Enterprise Linux 6 Reporter: Chao Yang <chayang>
Component: spice-serverAssignee: Uri Lublin <uril>
Status: CLOSED DUPLICATE QA Contact: Desktop QE <desktop-qa-list>
Severity: high Docs Contact:
Priority: high    
Version: 6.4CC: acathrow, areis, bsarathy, cfergeau, dblechte, dyasny, juzhang, michen, mkenneth, mkrcmari, qzhang, sandmann, shuang, virt-maint
Target Milestone: rc   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2012-12-03 08:56:56 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
qemu-kvm crash log none

Description Chao Yang 2012-11-28 03:28:43 UTC
Created attachment 653228 [details]
qemu-kvm crash log

Description of problem:
Fresh installed a rhel6.4 guest, qemu-kvm crashed on running dmesg in guest after installation finished in my test. This crash only happened once.

Version-Release number of selected component (if applicable):
qemu-kvm-rhev-0.12.1.2-2.337.el6.x86_64
host kernel version: 2.6.32-344.el6.x86_64
guest kernel version: 2.6.32-343.el6.x86_64
spice-server-0.12.0-4.el6.x86_64

How reproducible:
only once so far

Steps to Reproduce:
1. install a 6.4 guest
2. connect to guest by remote-viewer 
3. login after installation
4. run dmesg in guest
  
Actual results:
qemu-kvm Aborted (core dumped)

Expected results:


Additional info:
crash log will be attached.

Comment 3 Chao Yang 2012-11-29 09:32:45 UTC
CLI:
# /usr/libexec/qemu-kvm -M rhel6.4.0 -cpu host -enable-kvm -m 1024 -smp 16,sockets=2,cores=4,threads=2 -name emulex_device_assignment -uuid 8842aa9e-2d20-4540-8557-4d04752a28d7 -rtc base=utc,clock=host,driftfix=slew -device virtio-serial-pci,id=virtio-serial0,max_ports=16,bus=pci.0 -drive file=/home/emulex_device_assignment.qcow2,if=none,id=drive-virtio-disk0,format=qcow2,serial=f82002eb-520c-469b-90c2-663277e90437,cache=none,werror=stop,rerror=stop,aio=native -device virtio-blk-pci,scsi=off,bus=pci.0,addr=0x5,drive=drive-virtio-disk0,id=virtio-disk0,bootindex=1 -drive if=none,media=cdrom,id=drive-ide0-1-0,readonly=on,format=raw,serial= -device ide-drive,bus=ide.1,unit=0,drive=drive-ide0-1-0,id=ide0-1-0 -netdev tap,id=hostnet0,vhost=on -device virtio-net-pci,netdev=hostnet0,id=net0,mac=00:1a:4a:42:0b:38,bus=pci.0 -chardev spicevmc,id=charchannel1,name=vdagent -device virtserialport,bus=virtio-serial0.0,nr=2,chardev=charchannel1,id=channel1,name=com.redhat.spice.0 -spice port=8000,disable-ticketing -k en-us -vga qxl -global qxl-vga.vram_size=67108864 -device pci-assign,host=09:00.0,id=pf1,rombar=0 -device pci-assign,host=09:00.1,id=pf2,rombar=0 -monitor stdio



gdb  /usr/libexec/qemu-kvm core.3524-0-0-6-1354179809-intel-e5530-8-2.englab.nay.redhat.com-qemu-kvm

(gdb) bt
#0  0x00007f170a63b8a5 in raise () from /lib64/libc.so.6
#1  0x00007f170a63d085 in abort () from /lib64/libc.so.6
#2  0x00007f170ae95f75 in spice_logv (log_domain=0x7f170af121b4 "SpiceWorker", log_level=SPICE_LOG_LEVEL_CRITICAL, 
    strloc=0x7f170af1254d "red_worker.c:5473", function=0x7f170af1432e "lz_usr_error", format=0x7f170af1e66a "%s", args=0x7f16ccdf9550)
    at log.c:109
#3  0x00007f170ae960aa in spice_log (log_domain=<value optimized out>, log_level=<value optimized out>, strloc=<value optimized out>, 
    function=<value optimized out>, format=<value optimized out>) at log.c:123
#4  0x00007f170ae5a5e4 in lz_usr_error (usr=0x7f16641d7718, fmt=<value optimized out>) at red_worker.c:5473
#5  0x00007f170ae9adee in lz_encode (lz=0x7f170cafb010, type=LZ_IMAGE_TYPE_A8, width=445, height=288, top_down=1, lines=0x0, num_lines=0, 
    stride=448, io_ptr=0x7f166430ceb0 "QUIC", num_io_bytes=65536) at lz.c:524
#6  0x00007f170ae6add0 in red_lz_compress_image (dcc=0x7f1665101840, dest=0x7f16ccdf9960, src=0x7f16ccdf99a0, o_comp_data=0x7f16ccdf99d0, 
    group_id=<value optimized out>) at red_worker.c:6044
#7  0x00007f170ae6f688 in red_marshall_image (rcc=0x7f1665101840, pipe_item=0x7f16652ca8a0) at red_worker.c:8605
#8  display_channel_send_item (rcc=0x7f1665101840, pipe_item=0x7f16652ca8a0) at red_worker.c:8916
#9  0x00007f170ae4f563 in red_channel_client_send_item (rcc=0x7f1665101840) at red_channel.c:507
#10 red_channel_client_push (rcc=0x7f1665101840) at red_channel.c:1088
#11 0x00007f170ae4fa5f in red_channel_client_event (fd=<value optimized out>, event=<value optimized out>, data=0x7f1665101840)
    at red_channel.c:1207
#12 0x00007f170ae748ee in red_worker_main (arg=<value optimized out>) at red_worker.c:11835
#13 0x00007f170c632851 in start_thread () from /lib64/libpthread.so.0
#14 0x00007f170a6f190d in clone () from /lib64/libc.so.6

Comment 4 Gerd Hoffmann 2012-12-03 07:28:08 UTC
spice worker thread crashing.

LZ_IMAGE_TYPE_A8 hints this might be something in the new xrender support.

Comment 5 Marian Krcmarik 2012-12-03 08:56:56 UTC
Thanks for the report, can you retry with spice-server-0.12.0-6?

*** This bug has been marked as a duplicate of bug 876685 ***

Comment 6 Chao Yang 2012-12-03 10:14:44 UTC
(In reply to comment #5)
> Thanks for the report, can you retry with spice-server-0.12.0-6?
>
Sure when I get this system again. 
> *** This bug has been marked as a duplicate of bug 876685 ***

Comment 7 Chao Yang 2012-12-12 03:07:33 UTC
(In reply to comment #5)
> Thanks for the report, can you retry with spice-server-0.12.0-6?
> 
> *** This bug has been marked as a duplicate of bug 876685 ***

It doesn't happen any more.