Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.
RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.

Bug 1038594

Summary: Win2008 x86_64 BSOD(0x0A) on the starting of OS
Product: Red Hat Enterprise Linux 7 Reporter: Xiaoqing Wei <xwei>
Component: qemu-kvmAssignee: Yvugenfi <yvugenfi>
Status: CLOSED DUPLICATE QA Contact: Virtualization Bugs <virt-bugs>
Severity: urgent Docs Contact:
Priority: urgent    
Version: 7.0CC: acathrow, bcao, dfleytma, ghammer, hhuang, juzhang, mdeng, michen, mmishael, shuang, virt-maint, vrozenfe, xwei, yvugenfi
Target Milestone: rc   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2014-03-18 13:15:26 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1069309    
Attachments:
Description Flags
vfd with drivers
none
mini dump none

Description Xiaoqing Wei 2013-12-05 12:52:50 UTC 
Created attachment 833136 [details]
vfd with drivers

Description of problem:

Win2008 x86_64 BSOD(0x0A) on the starting of OS installation

Version-Release number of selected component (if applicable):
qemu-kvm-1.5.3-21.el7.x86_64
3.10.0-57.el7.x86_64
virtio-win-prewhql-0.1-74.iso

How reproducible:
1/5(met it once, attempt to repro 5 times w/o success)

Steps to Reproduce:
1./root/staf-kvm-devel/autotest/client/tests/virt/qemu/qemu -monitor stdio \
    -S  \
    -name 'virt-tests-vm1'  \
    -sandbox off  \
    -M pc  \
    -nodefaults  \
    -vga std  \
    -chardev socket,id=qmp_id_qmpmonitor1,path=/tmp/monitor-qmpmonitor1-20131205-155536-Zld0H2Lh,server,nowait \
    -mon chardev=qmp_id_qmpmonitor1,mode=control  \
    -chardev socket,id=serial_id_serial0,path=/tmp/serial-serial0-20131205-155536-Zld0H2Lh,server,nowait \
    -device isa-serial,chardev=serial_id_serial0  \
    -chardev socket,id=seabioslog_id_20131205-155536-Zld0H2Lh,path=/tmp/seabios-20131205-155536-Zld0H2Lh,server,nowait \
    -device isa-debugcon,chardev=seabioslog_id_20131205-155536-Zld0H2Lh,iobase=0x402 \
    -device ich9-usb-uhci1,id=usb1,bus=pci.0,addr=03 \
    -device virtio-scsi-pci,id=virtio_scsi_pci0,bus=pci.0,addr=04 \
    -drive id=drive_image1,if=none,cache=none,snapshot=off,aio=native,file=/root/staf-kvm-devel/autotest/client/tests/virt/shared/data/images/win2008-64.qcow2 \
    -device scsi-hd,id=image1,drive=drive_image1 \
    -device e1000,mac=9a:2a:2b:2c:2d:2e,id=idJfsgLv,netdev=iddL9ruf,bus=pci.0,addr=05  \
    -netdev tap,id=iddL9ruf,vhost=on  \
    -m 2048  \
    -smp 2,maxcpus=2,cores=1,threads=1,sockets=2  \
    -cpu 'Opteron_G5',hv_relaxed \
    -drive id=drive_cd1,if=none,snapshot=off,aio=native,media=cdrom,file=/root/staf-kvm-devel/autotest/client/tests/virt/shared/data/isos/ISO/Win2008/64/en_windows_server_2008_datacenter_enterprise_standard_sp2_x64_dvd_342336.iso \
    -device scsi-cd,id=cd1,drive=drive_cd1 \
    -drive id=drive_winutils,if=none,snapshot=off,aio=native,media=cdrom,file=/root/staf-kvm-devel/autotest/client/tests/virt/shared/data/isos/windows/winutils.iso \
    -device scsi-cd,id=winutils,drive=drive_winutils \
    -drive id=drive_virtio,if=none,snapshot=off,aio=native,media=cdrom,file=/root/staf-kvm-devel/autotest/client/tests/virt/shared/data/isos/windows/virtio-win.latest_prewhql.iso \
    -device scsi-cd,id=virtio,drive=drive_virtio \
    -drive id=drive_fl,if=none,cache=none,snapshot=off,readonly=off,aio=native,file=/root/staf-kvm-devel/autotest/client/tests/virt/shared/data/images/win2008-sp2-64/answer.vfd \
    -global isa-fdc.driveA=drive_fl \
    -device usb-tablet,id=usb-tablet1,bus=usb1.0,port=1  \
    -vnc :0  \
    -rtc base=localtime,clock=host,driftfix=slew  \
    -boot order=cdn,once=d,menu=off \
    -enable-kvm

2.
3.

Actual results:
guest bsod 0x0a

Expected results:
guest install finished, w/o any error

Additional info:
kvm_stat -1
kvm_ack_irq                    0         0
kvm_age_page                   0         0
kvm_apic                       0         0
kvm_apic_accept_irq            0         0
kvm_apic_ipi                   0         0
kvm_async_pf_completed         0         0
kvm_async_pf_doublefault         0         0
kvm_async_pf_not_present         0         0
kvm_async_pf_ready             0         0
kvm_cpuid                      0         0
kvm_cr                         0         0
kvm_emulate_insn          121588    116767
kvm_entry                 148629    142638
kvm_eoi                        0         0
kvm_exit                  148509    142638
kvm_exit(CLGI)                 2         0
kvm_exit(CPUID)                2         0
kvm_exit(CR0_SEL_WRITE)         2         0
kvm_exit(EXCP_BASE)            0         0
kvm_exit(FERR_FREEZE)          1         0
kvm_exit(GDTR_READ)            1         0
kvm_exit(GDTR_WRITE)           1         0
kvm_exit(HLT)                  2         0
kvm_exit(ICEBP)                2         0
kvm_exit(IDTR_READ)            2         0
kvm_exit(IDTR_WRITE)           2         0
kvm_exit(INIT)                 2         0
kvm_exit(INTR)              1550      1154
kvm_exit(INVD)                 2         0
kvm_exit(INVLPG)               2         0
kvm_exit(INVLPGA)              2         0
kvm_exit(IOIO)            121008    116767
kvm_exit(IRET)                 1         0
kvm_exit(LDTR_READ)            1         0
kvm_exit(LDTR_WRITE)           1         0
kvm_exit(MONITOR)              2         0
kvm_exit(MSR)                  1         0
kvm_exit(MWAIT)                1         0
kvm_exit(MWAIT_COND)           2         0
kvm_exit(NMI)                  2         0
kvm_exit(NPF)                  1         0
kvm_exit(PAUSE)            24977     24670
kvm_exit(POPF)                 1         0
kvm_exit(PUSHF)                2         0
kvm_exit(RDPMC)                1         0
kvm_exit(RDTSC)                2         0
kvm_exit(RDTSCP)               2         0
kvm_exit(READ_CR0)             2         0
kvm_exit(READ_CR3)             2         0
kvm_exit(READ_CR4)             0         0
kvm_exit(READ_CR8)             2         0
kvm_exit(READ_DR0)             2         0
kvm_exit(READ_DR1)             1         0
kvm_exit(READ_DR2)             2         0
kvm_exit(READ_DR3)             2         0
kvm_exit(READ_DR4)             2         0
kvm_exit(READ_DR5)             2         0
kvm_exit(READ_DR6)             2         0
kvm_exit(READ_DR7)             2         0
kvm_exit(RSM)                  1         0
kvm_exit(SHUTDOWN)             2         0
kvm_exit(SKINIT)               2         0
kvm_exit(SMI)                  2         0
kvm_exit(STGI)                 2         0
kvm_exit(SWINT)                2         0
kvm_exit(TASK_SWITCH)          2         0
kvm_exit(TR_READ)              1         0
kvm_exit(TR_WRITE)             1         0
kvm_exit(VINTR)                2         0
kvm_exit(VMLOAD)               1         0
kvm_exit(VMMCALL)              2         0
kvm_exit(VMRUN)                1         0
kvm_exit(VMSAVE)               2         0
kvm_exit(WBINVD)               2         0
kvm_exit(WRITE_CR0)            1         0
kvm_exit(WRITE_CR3)            2         0
kvm_exit(WRITE_CR4)            2         0
kvm_exit(WRITE_CR8)            2         0
kvm_exit(WRITE_DR0)            2         0
kvm_exit(WRITE_DR1)            1         0
kvm_exit(WRITE_DR2)            2         0
kvm_exit(WRITE_DR3)          115         0
kvm_exit(WRITE_DR4)            2         0
kvm_exit(WRITE_DR5)            1         0
kvm_exit(WRITE_DR6)            2         0
kvm_exit(WRITE_DR7)            2         0
kvm_fpu                        0         0
kvm_hv_hypercall               0         0
kvm_hypercall                  0         0
kvm_inj_exception              0         0
kvm_inj_virq                   0         0
kvm_invlpga                    0         0
kvm_ioapic_set_irq           524       512
kvm_mmio                       0         0
kvm_msi_set_irq                0         0
kvm_msr                        0         0
kvm_nested_intercepts          0         0
kvm_nested_intr_vmexit         0         0
kvm_nested_vmexit              0         0
kvm_nested_vmexit_inject         0         0
kvm_nested_vmrun               0         0
kvm_page_fault                 0         0
kvm_pic_set_irq              525       512
kvm_pio                   121992    116767
kvm_pv_eoi                     0         0
kvm_set_irq                  524       512
kvm_skinit                     0         0
kvm_track_tsc                  0         0
kvm_try_async_get_page         0         0
kvm_update_master_clock         0         0
kvm_userspace_exit        121492    116767
kvm_write_tsc_offset           0         0
vcpu_match_mmio                0         0

top -Hp `pidof qemu` -n 1
top - 20:49:36 up  6:51,  2 users,  load average: 1.47, 1.23, 0.65
Threads:   4 total,   2 running,   2 sleeping,   0 stopped,   0 zombie
%Cpu(s):  5.9 us,  2.5 sy,  0.0 ni, 90.4 id,  1.1 wa,  0.0 hi,  0.1 si,  0.0 st
KiB Mem:   7016336 total,  6696632 used,   319704 free,     4304 buffers
KiB Swap:  8142844 total,        0 used,  8142844 free,  4326200 cached

  PID USER      PR  NI    VIRT    RES    SHR S %CPU %MEM     TIME+ COMMAND                                                                                                              
15395 root      20   0 2867340 1.992g   6400 R 99.7 29.8   7:49.21 qemu                                                                                                                 
15394 root      20   0 2867340 1.992g   6400 R 93.0 29.8   7:25.27 qemu                                                                                                                 
15382 root      20   0 2867340 1.992g   6400 S  6.6 29.8   1:05.60 qemu                                                                                                                 
15397 root      20   0 2867340 1.992g   6400 S  0.0 29.8   0:00.40 qemu                                                                                                                 



(qemu) info registers [constantly]
RAX=fffff8000aa40001 RBX=0000000000000000 RCX=fffffa60032d8740 RDX=000000000000b000
RSI=fffff8000aa7f640 RDI=0000000000000001 RBP=000000000000000f RSP=fffffa60032d86c0
R8 =0000000000000000 R9 =0000000000000000 R10=fffffa60032d84a8 R11=fffffa60032d7648
R12=000000000000000a R13=0000000000000001 R14=0000000040000082 R15=fffff8000a8c8194
RIP=fffff8000a81c525 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 00000000 00209b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0053 00000000fffa0000 00003c00 0040f300 DPL=3 DS   [-WA]
GS =002b fffff8000a9cb500 ffffffff 00c0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 0000ffff 00000000
TR =0040 fffff8000c30b070 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffff8000c30a000 0000006f
IDT=     fffff8000c30a070 00000fff
CR0=80050031 CR2=0000000000000010 CR3=0000000073515000 CR4=000006f8
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=027f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
Comment 2 Xiaoqing Wei 2013-12-06 03:22:34 UTC 
Created attachment 833403 [details]
mini dump

repro this, on the first boot after os installation.

Microsoft (R) Windows Debugger Version 6.10.0003.233 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Minidump\Mini120613-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 6002 (Service Pack 2) MP (2 procs) Free x64
Product: Server, suite: TerminalServer DataCenter SingleUserTS
Built by: 6002.18005.amd64fre.lh_sp2rtm.090410-1830
Machine Name:
Kernel base = 0xfffff800`0160f000 PsLoadedModuleList = 0xfffff800`017d3dd0
Debug session time: Fri Dec  6 10:41:48.468 2013 (GMT-8)
System Uptime: 0 days 0:00:13.421
Loading Kernel Symbols
...............................................................
........................................
Loading User Symbols
Loading unloaded module list
....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {9, c, 0, fffff800016a6ee1}

Probably caused by : win32k.sys ( win32k!GetWindowsDirectoryDevicePath+36 )

Followup: MachineOwner
---------

0: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 0000000000000009, memory referenced
Arg2: 000000000000000c, IRQL
Arg3: 0000000000000000, bitfield :
	bit 0 : value 0 = read operation, 1 = write operation
	bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: fffff800016a6ee1, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS: GetPointerFromAddress: unable to read from fffff80001836080
 0000000000000009 

CURRENT_IRQL:  c

FAULTING_IP: 
nt!KiUnwaitThread+2d
fffff800`016a6ee1 488b4108        mov     rax,qword ptr [rcx+8]

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  DRIVER_FAULT_SERVER_MINIDUMP

BUGCHECK_STR:  0xA

PROCESS_NAME:  wininit.exe

TRAP_FRAME:  fffffa6001d5f930 -- (.trap 0xfffffa6001d5f930)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=fffffa6001d5fae8 rbx=00000000ffffffff rcx=0000000000000001
rdx=0000000000000100 rsi=0000000000000000 rdi=0000000000000000
rip=fffff800016a6ee1 rsp=fffffa6001d5fac0 rbp=0000000000000000
 r8=0000000000000000  r9=fffffa8002288bb8 r10=00000000000001c8
r11=0000000000000002 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei ng nz na pe nc
nt!KiUnwaitThread+0x2d:
fffff800`016a6ee1 488b4108        mov     rax,qword ptr [rcx+8] ds:8540:00000000`00000009=????????????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff800016691ee to fffff80001669450

STACK_TEXT:  
fffffa60`01d5f7e8 fffff800`016691ee : 00000000`0000000a 00000000`00000009 00000000`0000000c 00000000`00000000 : nt!KeBugCheckEx
fffffa60`01d5f7f0 fffff800`016680cb : 00000000`00000000 fffffa80`01e38830 fffffa60`01d5f900 fffffa80`02288bb8 : nt!KiBugCheckDispatch+0x6e
fffffa60`01d5f930 fffff800`016a6ee1 : fffffa60`01d50100 00000000`00000000 0000002e`c0000001 fffff880`00005d50 : nt!KiPageFault+0x20b
fffffa60`01d5fac0 fffff800`016193a9 : fffffa80`01e38830 fffffa80`01e388a8 fffffa60`01d5fb68 fffffa80`022443d0 : nt!KiUnwaitThread+0x2d
fffffa60`01d5faf0 fffff800`0168abae : fffff880`0522daf0 fffffa80`02288bb0 00000000`00000000 fffff880`05228598 : nt! ?? ::FNODOBFM::`string'+0x277dd
fffffa60`01d5fbb0 fffff800`0162d79d : fffff900`00000c78 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiDeliverApc+0x19e
fffffa60`01d5fc50 fffff800`01743ed0 : fffffa80`00000000 fffff800`018921fa fffffa60`01d5fe70 00000000`00000002 : nt!KiCheckForKernelApcDelivery+0x25
fffffa60`01d5fc80 fffff960`00040a3e : fffffa80`00000000 00000000`00000000 fffffa80`022443d0 fffffa60`00000000 : nt!ExAllocatePoolWithTag+0x730
fffffa60`01d5fd50 fffff960`00040876 : fffffa80`022443d0 00000000`00000000 fffff900`c069d9e0 00000000`00000098 : win32k!GetWindowsDirectoryDevicePath+0x36
fffffa60`01d5fda0 fffff960`0004068f : fffffa80`02286c70 fffffa80`02286c70 00000000`00000000 fffff900`c00c8a50 : win32k!ConvertHandleAndVerifyLoc+0xd6
fffffa60`01d600c0 fffff960`00066ea5 : fffffa80`02286c70 00000000`00000000 fffff900`c00c8a50 fffff900`c00c8a50 : win32k!xxxSafeLoadKeyboardLayoutEx+0x2f
fffffa60`01d60140 fffff960`00067c5f : fffffa60`01d605e8 fffff800`01672715 00000000`00380036 fffff880`05182780 : win32k!xxxCreateWindowStation+0x905
fffffa60`01d60500 fffff800`01668ef3 : 00000000`02000000 fffff800`018dfb36 00000000`00000004 00000000`00000000 : win32k!NtUserCreateWindowStation+0x4b3
fffffa60`01d60bb0 00000000`76ec1a6a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceCopyEnd+0x13
00000000`0028f4c8 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x76ec1a6a


STACK_COMMAND:  kb

FOLLOWUP_IP: 
win32k!GetWindowsDirectoryDevicePath+36
fffff960`00040a3e 448bc6          mov     r8d,esi

SYMBOL_STACK_INDEX:  8

SYMBOL_NAME:  win32k!GetWindowsDirectoryDevicePath+36

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: win32k

IMAGE_NAME:  win32k.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  49e02681

FAILURE_BUCKET_ID:  X64_0xA_win32k!GetWindowsDirectoryDevicePath+36

BUCKET_ID:  X64_0xA_win32k!GetWindowsDirectoryDevicePath+36

Followup: MachineOwner
---------
Comment 3 Yvugenfi@redhat.com 2014-01-14 13:35:38 UTC 
Is it something that you continue to reproduce?

Can you reproduce this bug without virtio storage?

Best regards,
Yan.
Comment 4 Xiaoqing Wei 2014-01-15 07:34:30 UTC 
(In reply to Yan Vugenfirer from comment #3)
> Is it something that you continue to reproduce?
> 

It was stable reproducible when I filled this bug,


> Can you reproduce this bug without virtio storage?

didn't tried, I will have a try w/o virtio,
which device you prefer ?
ide+e1000 or ahci+e1000 ?


Kind Regards,
Xiaoqing.
Comment 5 Yvugenfi@redhat.com 2014-01-15 13:23:02 UTC 
(In reply to Xiaoqing Wei from comment #4)
> (In reply to Yan Vugenfirer from comment #3)
> > Is it something that you continue to reproduce?
> > 
> 
> It was stable reproducible when I filled this bug,
> 
> 
> > Can you reproduce this bug without virtio storage?
> 
> didn't tried, I will have a try w/o virtio,
> which device you prefer ?
> ide+e1000 or ahci+e1000 ?
> 
> 
> Kind Regards,
> Xiaoqing.

ide+e1000

Thanks,
Yan.
Comment 6 Xiaoqing Wei 2014-01-16 03:52:45 UTC 
(In reply to Yan Vugenfirer from comment #5)

> ide+e1000
> 
> Thanks,
> Yan.


/root/staf-kvm-devel/autotest-devel/client/tests/virt/qemu/qemu -monitor stdio  \
    -S  \
    -name 'virt-tests-vm1'  \
    -sandbox off  \
    -M pc  \
    -nodefaults  \
    -vga std  \
    -chardev socket,id=qmp_id_qmpmonitor1,path=/tmp/monitor-qmpmonitor1-20140116-112740-kTemQsTl,server,nowait \
    -mon chardev=qmp_id_qmpmonitor1,mode=control  \
    -chardev socket,id=serial_id_serial0,path=/tmp/serial-serial0-20140116-112740-kTemQsTl,server,nowait \
    -device isa-serial,chardev=serial_id_serial0  \
    -chardev socket,id=seabioslog_id_20140116-112740-kTemQsTl,path=/tmp/seabios-20140116-112740-kTemQsTl,server,nowait \
    -device isa-debugcon,chardev=seabioslog_id_20140116-112740-kTemQsTl,iobase=0x402 \
    -device ich9-usb-uhci1,id=usb1,bus=pci.0,addr=03 \
    -drive id=drive_image1,if=none,cache=unsafe,snapshot=off,aio=native,file=/root/staf-kvm-devel/autotest-devel/client/tests/virt/shared/data/images/win2008-64.qcow2 \
    -device ide-hd,id=image1,drive=drive_image1,bus=ide.0,unit=0 \
    -device e1000,mac=9a:9d:9e:9f:a0:a1,id=idjHWehh,netdev=idut0ynR,bus=pci.0,addr=04  \
    -netdev tap,id=idut0ynR  \
    -m 2048  \
    -smp 2,maxcpus=2,cores=1,threads=1,sockets=2  \
    -drive id=drive_cd1,if=none,snapshot=off,aio=native,media=cdrom,file=/root/staf-kvm-devel/autotest-devel/client/tests/virt/shared/data/isos/windows/winutils.iso \
    -device ide-cd,id=cd1,drive=drive_cd1,bus=ide.0,unit=1 \
    -device usb-tablet,id=usb-tablet1,bus=usb1.0,port=1  \
    -vnc :0  \
    -rtc base=localtime,clock=host,driftfix=slew  \
    -boot order=cdn,once=c,menu=off \
    -enable-kvm \
    -cpu 'Opteron_G5',-kvm_pv_unhalt



reproduced w/ ide+e1000 on origin host,

kernel-3.10.0-67.el7.x86_64
qemu-kvm-1.5.3-36.el7.x86_64

100% reproducible.
And I verified this img working on RHEL6 host(exported via NFS from the RHEL7 host)

/root/staf-kvm-devel/autotest-devel/client/tests/virt/qemu/qemu \
    -S  \
    -name 'virt-tests-vm1' \
    -M rhel6.5.0  \
    -nodefaults  \
    -vga std \
    -device AC97,bus=pci.0,addr=03  \
    -chardev socket,id=qmp_id_qmpmonitor1,path=/tmp/monitor-qmpmonitor1-20140116-114546-hyIG9olt,server,nowait \
    -mon chardev=qmp_id_qmpmonitor1,mode=control  \
    -chardev socket,id=serial_id_serial0,path=/tmp/serial-serial0-20140116-114546-hyIG9olt,server,nowait \
    -device isa-serial,chardev=serial_id_serial0  \
    -chardev socket,id=seabioslog_id_20140116-114546-hyIG9olt,path=/tmp/seabios-20140116-114546-hyIG9olt,server,nowait \
    -device isa-debugcon,chardev=seabioslog_id_20140116-114546-hyIG9olt,iobase=0x402 \
    -device ich9-usb-uhci1,id=usb1,bus=pci.0,addr=04 \
    -device virtio-scsi-pci,id=virtio_scsi_pci0,bus=pci.0,addr=05 \
    -drive id=drive_image1,if=none,cache=unsafe,snapshot=off,aio=native,file=/media/kvm_autotest_root/images/win2008-64-virtio.qcow2 \
    -device scsi-hd,id=image1,drive=drive_image1 \
    -device virtio-net-pci,mac=9a:ca:cb:cc:cd:ce,id=idQ3crrP,netdev=idTZzT5k,bus=pci.0,addr=06  \
    -netdev tap,id=idTZzT5k,vhost=on,vhostfd=23,fd=22  \
    -m 2048  \
    -smp 2,maxcpus=2,cores=1,threads=1,sockets=2  \
    -cpu 'Penryn',hv_relaxed \
    -drive id=drive_cd1,if=none,snapshot=off,aio=native,media=cdrom,file=/root/staf-kvm-devel/autotest-devel/client/tests/virt/shared/data/isos/windows/winutils.iso \
    -device scsi-cd,id=cd1,drive=drive_cd1 \
    -device usb-tablet,id=usb-tablet1,bus=usb1.0,port=1  \
    -vnc :0  \
    -rtc base=localtime,clock=host,driftfix=slew  \
    -boot order=cdn,once=c,menu=off \
    -enable-kvm


So, raise the severity and urgency.

Regards,
Xiaoqing.
Comment 8 Yvugenfi@redhat.com 2014-03-18 13:15:26 UTC 

*** This bug has been marked as a duplicate of bug 1056982 ***