I managed to trigger this on qemu-kvm-common-rhev-2.3.0-1.el7.x86_64
with just 
/usr/libexec/qemu-kvm -m 10000000


+++ This bug was initially created as a clone of Bug #1215372 +++

Version-Release number of selected component:
qemu-system-x86-2.3.0-0.5.rc3.fc22

Additional info:
reporter:       libreport-2.5.1
backtrace_rating: 4
cmdline:        /usr/bin/qemu-system-x86_64 -machine accel=kvm -name boxes-unknown -S -machine pc-i440fx-1.6,accel=kvm,usb=off -cpu Penryn -m 3115 -realtime mlock=off -smp 4,sockets=1,cores=4,threads=1 -uuid 8bd53789-adab-484f-8c53-a6df9d5f1dbf -no-user-config -nodefaults -chardev socket,id=charmonitor,path=/home/guillaume/.config/libvirt/qemu/lib/boxes-unknown.monitor,server,nowait -mon chardev=charmonitor,id=monitor,mode=control -rtc base=utc,driftfix=slew -global kvm-pit.lost_tick_policy=discard -no-shutdown -global PIIX4_PM.disable_s3=1 -global PIIX4_PM.disable_s4=1 -boot strict=on -device ich9-usb-ehci1,id=usb,bus=pci.0,addr=0x5.0x7 -device ich9-usb-uhci1,masterbus=usb.0,firstport=0,bus=pci.0,multifunction=on,addr=0x5 -device ich9-usb-uhci2,masterbus=usb.0,firstport=2,bus=pci.0,addr=0x5.0x1 -device ich9-usb-uhci3,masterbus=usb.0,firstport=4,bus=pci.0,addr=0x5.0x2 -device virtio-serial-pci,id=virtio-serial0,bus=pci.0,addr=0x6 -device usb-ccid,id=ccid0 -drive file=/home/guillaume/.local/share/gnome-boxes/images/boxes-unknown,if=none,id=drive-ide0-0-0,format=qcow2,cache=none -device ide-hd,bus=ide.0,unit=0,drive=drive-ide0-0-0,id=ide0-0-0,bootindex=1 -drive if=none,id=drive-ide0-1-0,readonly=on,format=raw -device ide-cd,bus=ide.1,unit=0,drive=drive-ide0-1-0,id=ide0-1-0 -netdev tap,fd=23,id=hostnet0 -device rtl8139,netdev=hostnet0,id=net0,mac=52:54:00:db:56:54,bus=pci.0,addr=0x3 -chardev spicevmc,id=charsmartcard0,name=smartcard -device ccid-card-passthru,chardev=charsmartcard0,id=smartcard0,bus=ccid0.0 -chardev pty,id=charserial0 -device isa-serial,chardev=charserial0,id=serial0 -chardev spicevmc,id=charchannel0,name=vdagent -device virtserialport,bus=virtio-serial0.0,nr=1,chardev=charchannel0,id=channel0,name=com.redhat.spice.0 -device usb-tablet,id=input0 -spice port=5901,addr=127.0.0.1,disable-ticketing,image-compression=off,seamless-migration=on -device qxl-vga,id=video0,ram_size=67108864,vram_size=67108864,vgamem_mb=16,bus=pci.0,addr=0x2 -device AC97,id=sound0,bus=pci.0,addr=0x4 -chardev spicevmc,id=charredir0,name=usbredir -device usb-redir,chardev=charredir0,id=redir0 -chardev spicevmc,id=charredir1,name=usbredir -device usb-redir,chardev=charredir1,id=redir1 -chardev spicevmc,id=charredir2,name=usbredir -device usb-redir,chardev=charredir2,id=redir2 -chardev spicevmc,id=charredir3,name=usbredir -device usb-redir,chardev=charredir3,id=redir3 -incoming fd:20 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x7 -msg timestamp=on
crash_function: error_propagate
executable:     /usr/bin/qemu-system-x86_64
global_pid:     11226
kernel:         4.0.0-1.fc22.x86_64
runlevel:       N 5
type:           CCpp
uid:            1000
var_log_messages: [System Logs]:\n-- Logs begin at sam 2014-06-07 10:53:48 EDT, end at sam 2015-04-25 19:21:48 EDT. --

Truncated backtrace:
Thread no. 1 (8 frames)
 #2 error_propagate at util/error.c:173
 #3 qemu_ram_alloc_internal at /usr/src/debug/qemu-2.3.0-rc3/exec.c:1544
 #4 qemu_ram_alloc at /usr/src/debug/qemu-2.3.0-rc3/exec.c:1558
 #5 memory_region_init_ram at /usr/src/debug/qemu-2.3.0-rc3/memory.c:1138
 #6 allocate_system_memory_nonnuma at /usr/src/debug/qemu-2.3.0-rc3/numa.c:341
 #7 memory_region_allocate_system_memory at /usr/src/debug/qemu-2.3.0-rc3/numa.c:354
 #8 pc_memory_init at /usr/src/debug/qemu-2.3.0-rc3/hw/i386/pc.c:1248
 #9 pc_init1 at /usr/src/debug/qemu-2.3.0-rc3/hw/i386/pc_piix.c:183

--- Additional comment from Guillaume Poirier-Morency on 2015-04-25 19:28:35 EDT ---



--- Additional comment from Guillaume Poirier-Morency on 2015-04-25 19:28:36 EDT ---



--- Additional comment from Guillaume Poirier-Morency on 2015-04-25 19:28:38 EDT ---



--- Additional comment from Guillaume Poirier-Morency on 2015-04-25 19:28:39 EDT ---



--- Additional comment from Guillaume Poirier-Morency on 2015-04-25 19:28:40 EDT ---



--- Additional comment from Guillaume Poirier-Morency on 2015-04-25 19:28:41 EDT ---



--- Additional comment from Guillaume Poirier-Morency on 2015-04-25 19:28:45 EDT ---



--- Additional comment from Guillaume Poirier-Morency on 2015-04-25 19:28:46 EDT ---



--- Additional comment from Guillaume Poirier-Morency on 2015-04-25 19:28:48 EDT ---



--- Additional comment from Guillaume Poirier-Morency on 2015-04-25 19:28:49 EDT ---



--- Additional comment from Guillaume Poirier-Morency on 2015-04-25 19:28:53 EDT ---



--- Additional comment from Bastien Nocera on 2015-04-30 10:23:20 EDT ---

Another user experienced a similar problem:

Tried to add an ISO image from a remote SMB server in Boxes.

reporter:       libreport-2.5.1
backtrace_rating: 4
cmdline:        /usr/bin/qemu-system-x86_64 -machine accel=kvm -name fedora21 -S -machine pc-i440fx-2.3,accel=kvm,usb=off -cpu SandyBridge -m 1024 -realtime mlock=off -smp 4,sockets=1,cores=2,threads=2 -uuid 4f17c4f6-ff62-4cf9-8319-a2e104e3b78e -no-user-config -nodefaults -chardev socket,id=charmonitor,path=/home/hadess/.config/libvirt/qemu/lib/fedora21.monitor,server,nowait -mon chardev=charmonitor,id=monitor,mode=control -rtc base=utc,driftfix=slew -global kvm-pit.lost_tick_policy=discard -no-hpet -no-reboot -global PIIX4_PM.disable_s3=1 -global PIIX4_PM.disable_s4=1 -boot strict=on -device ich9-usb-ehci1,id=usb,bus=pci.0,addr=0x6.0x7 -device ich9-usb-uhci1,masterbus=usb.0,firstport=0,bus=pci.0,multifunction=on,addr=0x6 -device ich9-usb-uhci2,masterbus=usb.0,firstport=2,bus=pci.0,addr=0x6.0x1 -device ich9-usb-uhci3,masterbus=usb.0,firstport=4,bus=pci.0,addr=0x6.0x2 -device virtio-serial-pci,id=virtio-serial0,bus=pci.0,addr=0x5 -device usb-ccid,id=ccid0 -drive file=/home/hadess/.local/share/gnome-boxes/images/fedora21,if=none,id=drive-virtio-disk0,format=qcow2,cache=none -device virtio-blk-pci,scsi=off,bus=pci.0,addr=0x7,drive=drive-virtio-disk0,id=virtio-disk0,bootindex=2 -drive file=/run/user/1000/gvfs/smb-share:server=diskstation.local,,share=bastien/ISOs/Fedora-Live-Workstation-x86_64-21-5.iso,if=none,id=drive-ide0-1-0,readonly=on,format=raw -device ide-cd,bus=ide.1,unit=0,drive=drive-ide0-1-0,id=ide0-1-0,bootindex=1 -netdev tap,fd=21,id=hostnet0 -device virtio-net-pci,netdev=hostnet0,id=net0,mac=52:54:00:05:24:b3,bus=pci.0,addr=0x3 -chardev spicevmc,id=charsmartcard0,name=smartcard -device ccid-card-passthru,chardev=charsmartcard0,id=smartcard0,bus=ccid0.0 -chardev pty,id=charserial0 -device isa-serial,chardev=charserial0,id=serial0 -chardev spicevmc,id=charchannel0,name=vdagent -device virtserialport,bus=virtio-serial0.0,nr=1,chardev=charchannel0,id=channel0,name=com.redhat.spice.0 -device usb-tablet,id=input0 -device usb-mouse,id=input1 -device usb-kbd,id=input2 -spice port=5900,addr=127.0.0.1,disable-ticketing,image-compression=off,seamless-migration=on -device qxl-vga,id=video0,ram_size=67108864,vram_size=67108864,vgamem_mb=16,bus=pci.0,addr=0x2 -device AC97,id=sound0,bus=pci.0,addr=0x4 -chardev spicevmc,id=charredir0,name=usbredir -device usb-redir,chardev=charredir0,id=redir0 -chardev spicevmc,id=charredir1,name=usbredir -device usb-redir,chardev=charredir1,id=redir1 -chardev spicevmc,id=charredir2,name=usbredir -device usb-redir,chardev=charredir2,id=redir2 -chardev spicevmc,id=charredir3,name=usbredir -device usb-redir,chardev=charredir3,id=redir3 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x8 -msg timestamp=on
crash_function: error_propagate
executable:     /usr/bin/qemu-system-x86_64
global_pid:     18509
kernel:         4.0.0-0.rc5.git4.1.fc22.x86_64
package:        qemu-system-x86-2.3.0-0.3.rc2.fc22
reason:         qemu-system-x86_64 killed by SIGABRT
runlevel:       N 5
type:           CCpp
uid:            1000

--- Additional comment from Robert Graham on 2015-05-30 15:20:55 EDT ---

Another user experienced a similar problem:

Tried to create a new VM via Gnome Boxes app.

Step 1) Click on New
Step 2) Click on Enter URL and insert http://mirror.acsnet.com/centos/6.6/isos/x86_64/CentOS-6.6-x86_64-bin-DVD1.iso into the field.

Boxes will download the ISO image and attempt to start qemu. At this point qemu crashes and core dumps.

reporter:       libreport-2.5.1
backtrace_rating: 4
cmdline:        /usr/bin/qemu-system-x86_64 -machine accel=kvm -name boxes-unknown -S -machine pc-i440fx-2.3,accel=kvm,usb=off -cpu Westmere -m 2048 -realtime mlock=off -smp 4,sockets=1,cores=2,threads=2 -uuid 6c3e7512-84df-4cdd-97a7-831e19313d42 -no-user-config -nodefaults -chardev socket,id=charmonitor,path=/home/rgraham/.config/libvirt/qemu/lib/boxes-unknown.monitor,server,nowait -mon chardev=charmonitor,id=monitor,mode=control -rtc base=utc,driftfix=slew -global kvm-pit.lost_tick_policy=discard -no-hpet -no-reboot -global PIIX4_PM.disable_s3=1 -global PIIX4_PM.disable_s4=1 -boot strict=on -device ich9-usb-ehci1,id=usb,bus=pci.0,addr=0x6.0x7 -device ich9-usb-uhci1,masterbus=usb.0,firstport=0,bus=pci.0,multifunction=on,addr=0x6 -device ich9-usb-uhci2,masterbus=usb.0,firstport=2,bus=pci.0,addr=0x6.0x1 -device ich9-usb-uhci3,masterbus=usb.0,firstport=4,bus=pci.0,addr=0x6.0x2 -device virtio-serial-pci,id=virtio-serial0,bus=pci.0,addr=0x5 -device usb-ccid,id=ccid0 -drive file=/home/rgraham/.local/share/gnome-boxes/images/boxes-unknown,if=none,id=drive-ide0-0-0,format=qcow2,cache=writeback -device ide-hd,bus=ide.0,unit=0,drive=drive-ide0-0-0,id=ide0-0-0,bootindex=2 -drive file=/home/rgraham/Downloads/CentOS-6.6-x86_64-bin-DVD1.iso,if=none,id=drive-ide0-1-0,readonly=on,format=raw -device ide-cd,bus=ide.1,unit=0,drive=drive-ide0-1-0,id=ide0-1-0,bootindex=1 -netdev tap,fd=22,id=hostnet0 -device rtl8139,netdev=hostnet0,id=net0,mac=52:54:00:04:e7:54,bus=pci.0,addr=0x3 -chardev spicevmc,id=charsmartcard0,name=smartcard -device ccid-card-passthru,chardev=charsmartcard0,id=smartcard0,bus=ccid0.0 -chardev pty,id=charserial0 -device isa-serial,chardev=charserial0,id=serial0 -chardev spicevmc,id=charchannel0,name=vdagent -device virtserialport,bus=virtio-serial0.0,nr=1,chardev=charchannel0,id=channel0,name=com.redhat.spice.0 -device usb-tablet,id=input0 -device usb-mouse,id=input1 -device usb-kbd,id=input2 -spice port=5900,addr=127.0.0.1,disable-ticketing,image-compression=off,seamless-migration=on -device qxl-vga,id=video0,ram_size=67108864,vram_size=67108864,vgamem_mb=16,bus=pci.0,addr=0x2 -device AC97,id=sound0,bus=pci.0,addr=0x4 -chardev spicevmc,id=charredir0,name=usbredir -device usb-redir,chardev=charredir0,id=redir0 -chardev spicevmc,id=charredir1,name=usbredir -device usb-redir,chardev=charredir1,id=redir1 -chardev spicevmc,id=charredir2,name=usbredir -device usb-redir,chardev=charredir2,id=redir2 -chardev spicevmc,id=charredir3,name=usbredir -device usb-redir,chardev=charredir3,id=redir3 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x7 -msg timestamp=on
crash_function: error_propagate
executable:     /usr/bin/qemu-system-x86_64
global_pid:     28859
kernel:         4.0.4-301.fc22.x86_64
package:        qemu-system-x86-2.3.0-4.fc22
reason:         qemu-system-x86_64 killed by SIGABRT
runlevel:       N 5
type:           CCpp
uid:            1000

--- Additional comment from Cole Robinson on 2015-06-05 17:06:42 EDT ---

Anyone that hit this, can you post /var/log/libvirt/qemu/$vmname.log ?
If using gnome-boxes, that will be ~/.cache/libvirt/qemu/log/$vmname.log

--- Additional comment from Robert Graham on 2015-06-06 10:33:06 EDT ---

I updated to the newest gnome-boxes package on 5/30/15 and have not experienced qemu crashing since.

Previous package release:
gnome-boxes-3.16.2-1.fc22.x86_64

Current package release:
gnome-boxes-3.16.2-2.fc22.x86_64

--- Additional comment from Robert Graham on 2015-06-07 12:41:07 EDT ---



--- Additional comment from Cole Robinson on 2015-06-08 17:04:32 EDT ---

Hmm, that log file doesn't seem to contain bits about the VM when it crashed. Annoyingly it's filled with tons of

((null):7924): Spice-Warning **: red_channel.c:546:red_channel_client_send_ping: getsockopt failed, Operation not supported

Probably a side effect of running as non-root. But it doesn't seem to the be the root issue. So if anyone else hits this crash again, please attach the qemu log file as well

--- Additional comment from Dr. David Alan Gilbert on 2015-06-16 07:25:54 EDT ---

I think my reading of the original backtrace makes me think it's an out-of-ram failure.

 #2 error_propagate at util/error.c:173
 #3 qemu_ram_alloc_internal at /usr/src/debug/qemu-2.3.0-rc3/exec.c:1544
that's checking for errors just after 'ram_block_add'

and looking inside ram_block_add the only place the error gets set is by phys_mem_alloc failing.

 #4 qemu_ram_alloc at /usr/src/debug/qemu-2.3.0-rc3/exec.c:1558
 #5 memory_region_init_ram at /usr/src/debug/qemu-2.3.0-rc3/memory.c:1138
 #6 allocate_system_memory_nonnuma at /usr/src/debug/qemu-2.3.0-rc3/numa.c:341

In here we have:
        memory_region_init_ram(mr, owner, name, ram_size, &error_abort);
and commit 49946538 started passing error_abort to that.


 #7 memory_region_allocate_system_memory at /usr/src/debug/qemu-2.3.0-rc3/numa.c:354
 #8 pc_memory_init at /usr/src/debug/qemu-2.3.0-rc3/hw/i386/pc.c:1248
 #9 pc_init1 at /usr/src/debug/qemu-2.3.0-rc3/hw/i386/pc_piix.c:183

Dave