Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.
RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.

Bug 1200654

Summary: [virtio-win][rng][rhel6]win2k12 guest hang if hot-plug/unplug virtio-rng-pci in a loop while it is in use
Product: Red Hat Enterprise Linux 6 Reporter: Mike Cao <bcao>
Component: virtio-winAssignee: Gal Hammer <ghammer>
Status: CLOSED WORKSFORME QA Contact: Virtualization Bugs <virt-bugs>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 6.0CC: ailan, ghammer, lijin, michen, rbalakri, virt-maint
Target Milestone: rc   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: qemu-kvm-0.12.1.2-2.480.el6 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2015-12-15 09:33:40 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1230068    
Bug Blocks:    

Description Mike Cao 2015-03-11 05:24:09 UTC 
Description of problem:


Version-Release number of selected component (if applicable):
2.6.32-540.el6.x86_64
qemu-kvm-rhev-0.12.1.2-2.454.el6.x86_64
virtio-win-1.7.3-1.el7.noarch


How reproducible:
2/2

Steps to Reproduce:
1.Start Guest w/ virtio-rng-pci
ialized
[root@dhcp-9-24 whql_autotest]# /usr/libexec/qemu-kvm -name 101BLN201264LEP -enable-kvm -m 6G -smp 8 -uuid fbc05714-9207-42e5-ac1e-e06c683044a5 -nodefconfig -nodefaults -chardev socket,id=charmonitor,path=/tmp/101BLN201264LEP1,server,nowait -mon chardev=charmonitor,id=monitor2,mode=control -rtc base=localtime,driftfix=slew -boot order=cd,menu=on -device piix3-usb-uhci,id=usb,bus=pci.0,addr=0x1.0x2 -drive file=101BLN201264LEP,if=none,id=drive-ide0-0-0,format=raw,serial=mike_cao,cache=none -device ide-drive,bus=ide.0,unit=0,drive=drive-ide0-0-0,id=ide0-0-0 -drive file=/usr/share/virtio-win/virtio-win.iso,if=none,media=cdrom,id=drive-ide0-1-0,readonly=on,format=raw -device ide-drive,bus=ide.1,unit=0,drive=drive-ide0-1-0,id=ide0-1-0 -drive file=101BLN201264LEP.vfd,if=none,id=drive-fdc0-0-0,format=raw,cache=none -global isa-fdc.driveA=drive-fdc0-0-0 -netdev tap,script=/etc/qemu-ifup,downscript=no,id=hostnet0 -device rtl8139,netdev=hostnet0,id=net0,mac=00:52:5c:18:52:12,bus=pci.0,addr=0x3 -chardev pty,id=charserial0 -device isa-serial,chardev=charserial0,id=isa_serial0 -device usb-tablet,id=input0 -spice port=5910,disable-ticketing -vga qxl -monitor stdio -qmp tcp:0:4445,server,nowait -object rng-random,filename=/dev/urandom,id=rng0 -device virtio-rng-pci,rng=rng0,id=rng0_device,max-bytes=9223372036854775807,period=4294967295 -global qxl-vga.revision=3 -global PIIX4_PM.disable_s3=0 -global PIIX4_PM.disable_s4=0
2. in the guest for /l %i in (1,1,1000) do random_64.exe
3. hot plug/unplug virtio-rng-pci in a loop


Actual results:
Less than 5 mins ,guest will hang 

Expected results:
no hang occurs

Additional info:
Comment 2 Gal Hammer 2015-03-15 12:10:09 UTC 
Mike, isn't this bug is a duplicate of bz#1121540? (or related to bz#1119575?).
Comment 3 Mike Cao 2015-03-16 07:16:27 UTC 
(In reply to Gal Hammer from comment #2)
> Mike, isn't this bug is a duplicate of bz#1121540? (or related to
> bz#1119575?).

Shouldn't be duplicated of  bz#1121540 as it is a linux rng driver bug not related to virtio-win.

May related to bz#1119575 but I tried serveral times can not reproduce the core dump ,and two bugs has different actual results and they are using the RNG driver in different folder（in this bug use driver located in win8\amd64 ,and bz#1119575 in win8\x86)
that's why I report it
Comment 4 Gal Hammer 2015-05-07 11:33:10 UTC 
I tried to reproduce using qemu-kvm-0.12.1.2-2.473.el6. qemu crash when trying to add the virtio-rng-pci device even when the device is not in use.

Program terminated with signal 11, Segmentation fault.
#0  0x00007f3a18792c59 in object_class_dynamic_cast (class=0x7f3a1a3740d0, typename=<value optimized out>)
    at /usr/src/debug/qemu-kvm-0.12.1.2/qom/object.c:496
496         if (type->class->interfaces &&

(gdb) bt
#0  0x00007f3a18792c59 in object_class_dynamic_cast (class=0x7f3a1a3740d0, typename=<value optimized out>)
    at /usr/src/debug/qemu-kvm-0.12.1.2/qom/object.c:496
#1  0x00007f3a18792cf8 in object_dynamic_cast (obj=0x7f3a1a3740d0, typename=<value optimized out>) at /usr/src/debug/qemu-kvm-0.12.1.2/qom/object.c:428
#2  0x00007f3a18794458 in object_resolve_path_type (path=<value optimized out>, typename=0x7f3a18885ff4 "rng-backend", ambiguous=0x0)
    at /usr/src/debug/qemu-kvm-0.12.1.2/qom/object.c:1199
#3  0x00007f3a186dac42 in virtio_rng_init_pci (pci_dev=<value optimized out>) at /usr/src/debug/qemu-kvm-0.12.1.2/hw/virtio-pci.c:963
#4  0x00007f3a186d1366 in pci_qdev_init (qdev=0x7f3a1bf9cc50, base=0x7f3a18bd8668) at /usr/src/debug/qemu-kvm-0.12.1.2/hw/pci.c:1659
#5  0x00007f3a1875cb88 in qdev_init (dev=0x7f3a1bf9cc50) at /usr/src/debug/qemu-kvm-0.12.1.2/hw/qdev.c:285
#6  0x00007f3a1875cf9f in qdev_device_add (opts=0x7f3a1b175fb0) at /usr/src/debug/qemu-kvm-0.12.1.2/hw/qdev.c:260
#7  0x00007f3a1875d59b in do_device_add (mon=<value optimized out>, qdict=<value optimized out>, ret_data=<value optimized out>)
    at /usr/src/debug/qemu-kvm-0.12.1.2/hw/qdev.c:894
#8  0x00007f3a186c94c0 in monitor_call_handler (mon=<value optimized out>, cmd=0x7f3a18bd0908, params=<value optimized out>)
    at /usr/src/debug/qemu-kvm-0.12.1.2/monitor.c:4377
#9  0x00007f3a186ce94f in handle_user_command (mon=0x7f3a1a5638d0, cmdline=<value optimized out>) at /usr/src/debug/qemu-kvm-0.12.1.2/monitor.c:4414
#10 0x00007f3a186cea87 in monitor_command_cb (mon=0x7f3a1a5638d0, cmdline=<value optimized out>, opaque=<value optimized out>)
    at /usr/src/debug/qemu-kvm-0.12.1.2/monitor.c:5052
#11 0x00007f3a1873c56d in readline_handle_byte (rs=0x7f3a1cd8ee40, ch=<value optimized out>) at /usr/src/debug/qemu-kvm-0.12.1.2/readline.c:369
#12 0x00007f3a186cecb5 in monitor_read (opaque=<value optimized out>, buf=0x7ffd69bfbc40 "\r\276\277i\375\177", size=1)
    at /usr/src/debug/qemu-kvm-0.12.1.2/monitor.c:5038
#13 0x00007f3a187536af in qemu_chr_be_write (chan=<value optimized out>, cond=<value optimized out>, opaque=0x7f3a1a374e20)
    at /usr/src/debug/qemu-kvm-0.12.1.2/qemu-char.c:192
#14 fd_chr_read (chan=<value optimized out>, cond=<value optimized out>, opaque=0x7f3a1a374e20) at /usr/src/debug/qemu-kvm-0.12.1.2/qemu-char.c:797
#15 0x00007f3a17b14642 in g_main_dispatch (context=0x7f3a1a374d30) at gmain.c:2441
#16 g_main_context_dispatch (context=0x7f3a1a374d30) at gmain.c:3014
#17 0x00007f3a186c1910 in glib_pollfds_poll (timeout=1000) at /usr/src/debug/qemu-kvm-0.12.1.2/vl.c:4053
#18 main_loop_wait (timeout=1000) at /usr/src/debug/qemu-kvm-0.12.1.2/vl.c:4079
#19 0x00007f3a186e51ba in kvm_main_loop () at /usr/src/debug/qemu-kvm-0.12.1.2/qemu-kvm.c:2258
#20 0x00007f3a186c6317 in main_loop (argc=<value optimized out>, argv=<value optimized out>, envp=<value optimized out>)
    at /usr/src/debug/qemu-kvm-0.12.1.2/vl.c:4273
#21 main (argc=<value optimized out>, argv=<value optimized out>, envp=<value optimized out>) at /usr/src/debug/qemu-kvm-0.12.1.2/vl.c:6731

Amos?
Comment 5 Gal Hammer 2015-06-14 08:25:49 UTC 
I'm unable to reproduce using qemu-kvm-0.12.1.2-2.478.el6 (https://brewweb.devel.redhat.com/taskinfo?taskID=9335072) which include the fix for bz#1230068.

Mike? Can you please confirm? Thanks.
Comment 6 Mike Cao 2015-06-23 10:33:50 UTC 
(In reply to Gal Hammer from comment #5)
> I'm unable to reproduce using qemu-kvm-0.12.1.2-2.478.el6
> (https://brewweb.devel.redhat.com/taskinfo?taskID=9335072) which include the
> fix for bz#1230068.
> 
> Mike? Can you please confirm? Thanks.

Looks the build is delete ,Can you rebuild one ?
Comment 7 Gal Hammer 2015-06-23 12:51:24 UTC 
(In reply to Mike Cao from comment #6)
> (In reply to Gal Hammer from comment #5)
> > I'm unable to reproduce using qemu-kvm-0.12.1.2-2.478.el6
> > (https://brewweb.devel.redhat.com/taskinfo?taskID=9335072) which include the
> > fix for bz#1230068.
> > 
> > Mike? Can you please confirm? Thanks.
> 
> Looks the build is delete ,Can you rebuild one ?

Sure: https://brewweb.devel.redhat.com/taskinfo?taskID=9406912
Comment 10 Gal Hammer 2015-12-15 09:33:40 UTC 
I was unable to reproduce with lasted version of qemu.