Bug 1526370 - [Q35] qemu core dump when boot up 533 disks
Summary: [Q35] qemu core dump when boot up 533 disks
Keywords:
Status: CLOSED WONTFIX
Alias: None
Product: Red Hat Enterprise Linux Advanced Virtualization
Classification: Red Hat
Component: qemu-kvm
Version: 8.0
Hardware: Unspecified
OS: Unspecified
high
high
Target Milestone: rc
: 8.1
Assignee: Michael S. Tsirkin
QA Contact: jingzhao
Jiri Herrmann
URL:
Whiteboard:
: 1535583 (view as bug list)
Depends On:
Blocks: 1535583 1543411 1543414 1558351 1649160
TreeView+ depends on / blocked
 
Reported: 2017-12-15 09:56 UTC by jingzhao
Modified: 2023-09-15 00:05 UTC (History)
16 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
: 1535583 1543411 1543414 (view as bug list)
Environment:
Last Closed: 2021-02-15 07:34:06 UTC
Type: Bug
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)

Description jingzhao 2017-12-15 09:56:25 UTC
Description of problem:
qemu core dump when boot up 533 disks 

Version-Release number of selected component (if applicable):
[root@dell-per515-04 home]# uname -r
3.10.0-820.el7.x86_64
[root@dell-per515-04 home]# rpm -qa |grep qemu-kvm-rhev
qemu-kvm-rhev-2.10.0-11.el7.x86_64
qemu-kvm-rhev-debuginfo-2.10.0-11.el7.x86_64
[root@dell-per515-04 home]# rpm -qa |grep seabios
seabios-bin-1.11.0-1.el7.noarch
seabios-1.11.0-1.el7.x86_64


How reproducible:


Steps to Reproduce:
1. Boot up with qemu command line [1]


Actual results:
qemu core dump when boot up 533 disks

(gdb) bt
#0  0x00007f37355041d7 in raise () at /lib64/libc.so.6
#1  0x00007f37355058d0 in abort () at /lib64/libc.so.6
#2  0x00007f37354fcfcc in __assert_fail_base () at /lib64/libc.so.6
#3  0x00007f37354fd088 in  () at /lib64/libc.so.6
#4  0x0000561089aa9643 in phys_section_add (map=map@entry=0x561130da2050, section=section@entry=0x7f372907b590)
    at /usr/src/debug/qemu-2.10.0/exec.c:1282
#5  0x0000561089aac1ec in flatview_add_to_dispatch (section=0x7f372907b590, fv=0x5611226ff2c0) at /usr/src/debug/qemu-2.10.0/exec.c:1353
#6  0x0000561089aac1ec in flatview_add_to_dispatch (fv=fv@entry=0x5611226ff2c0, section=section@entry=0x7f372907b670)
    at /usr/src/debug/qemu-2.10.0/exec.c:1387
#7  0x0000561089af2fa3 in generate_memory_topology (mr=mr@entry=0x56108c5d2780) at /usr/src/debug/qemu-2.10.0/memory.c:797
#8  0x0000561089af3620 in memory_region_transaction_commit () at /usr/src/debug/qemu-2.10.0/memory.c:1008
#9  0x0000561089af3620 in memory_region_transaction_commit () at /usr/src/debug/qemu-2.10.0/memory.c:1084
#10 0x0000561089c67108 in mch_update_pam (mch=mch@entry=0x561103efe710) at hw/pci-host/q35.c:356
#11 0x0000561089c67e71 in mch_write_config (d=0x561103efe710, address=<optimized out>, val=286331152, len=<optimized out>)
    at hw/pci-host/q35.c:450
#12 0x0000561089af1ee3 in memory_region_write_accessor (mr=<optimized out>, addr=<optimized out>, value=<optimized out>, size=<optimized out>, shift=<optimized out>, mask=<optimized out>, attrs=...) at /usr/src/debug/qemu-2.10.0/memory.c:560
#13 0x0000561089aefbf9 in access_with_adjusted_size (addr=addr@entry=0, value=value@entry=0x7f372907b838, size=size@entry=4, access_size_min=<optimized out>, access_size_max=<optimized out>, access=access@entry=
    0x561089af1ea0 <memory_region_write_accessor>, mr=mr@entry=0x561103efe400, attrs=attrs@entry=...) at /usr/src/debug/qemu-2.10.0/memory.c:626
#14 0x0000561089af3b75 in memory_region_dispatch_write (mr=mr@entry=0x561103efe400, addr=addr@entry=0, data=286331152, size=size@entry=4, attrs=attrs@entry=...) at /usr/src/debug/qemu-2.10.0/memory.c:1502
#15 0x0000561089aab291 in flatview_write (mr=0x561103efe400, l=4, addr1=0, len=4, buf=0x7f373fa4f000 <Address 0x7f373fa4f000 out of bounds>, attrs=..., addr=3324, fv=0x5611213bf800) at /usr/src/debug/qemu-2.10.0/exec.c:2900
#16 0x0000561089aab291 in flatview_write (fv=0x5611213bf800, addr=<optimized out>, attrs=..., buf=<optimized out>, len=<optimized out>)
    at /usr/src/debug/qemu-2.10.0/exec.c:2957
#17 0x0000561089aae8d5 in address_space_rw (is_write=true, len=4, buf=0x7f373fa4f000 <Address 0x7f373fa4f000 out of bounds>, attrs=..., addr=3324, fv=<optimized out>) at /usr/src/debug/qemu-2.10.0/exec.c:3066
#18 0x0000561089aae8d5 in address_space_rw (as=<optimized out>, addr=addr@entry=3324, attrs=attrs@entry=..., buf=buf@entry=0x7f373fa4f000 <Address 0x7f373fa4f000 out of bounds>, len=len@entry=4, is_write=is_write@entry=true) at /usr/src/debug/qemu-2.10.0/exec.c:3076
#19 0x0000561089b019ba in kvm_cpu_exec (count=1, size=4, direction=<optimized out>, data=<optimized out>, attrs=..., port=3324)
    at /usr/src/debug/qemu-2.10.0/accel/kvm/kvm-all.c:1817
#20 0x0000561089b019ba in kvm_cpu_exec (cpu=cpu@entry=0x561103b5a000) at /usr/src/debug/qemu-2.10.0/accel/kvm/kvm-all.c:2057
#21 0x0000561089ae0b62 in qemu_kvm_cpu_thread_fn (arg=0x561103b5a000) at /usr/src/debug/qemu-2.10.0/cpus.c:1128
#22 0x00007f37358a5dd5 in start_thread () at /lib64/libpthread.so.0
#23 0x00007f37355cc9ad in clone () at /lib64/libc.so.6


Expected results:
guest can boot up successfully

Additional info:
[1] command line:
#!/bin/sh

MACHINE=q35
SMP=4,cores=2,threads=2,sockets=1
MEM=10G
GUEST_IMG=/home/env/rhel75-seabios-bk.qcow2
IMG_FORMAT=qcow2

CLI="/usr/libexec/qemu-kvm -enable-kvm -M $MACHINE -nodefaults -smp $SMP -m $MEM -name vm1 -vga none -drive file=$GUEST_IMG,if=none,id=guest-img,format=$IMG_FORMAT,werror=stop,rerror=stop -device ide-hd,drive=guest-img,bus=ide.0,unit=0,id=os-disk,bootindex=1 -spice port=5931,disable-ticketing -monitor stdio -boot menu=on,reboot-timeout=8,strict=on -serial unix:/tmp/console,server,nowait "

declare -i f=1

for((i=1;i<=7;i++))
do
	 k=`printf "%x\n" $i`

        for ((j=0;j<=7;j++))
        do
	    CLI="$CLI -device pcie-root-port,bus=pcie.0,id=root.$i.$j,slot=$f,chassis=$f,multifunction=on,addr=0x$k.$j"

		for((z=0;z<=7;z++))
		do
#			qemu-img create -f qcow2 /home/disk/disk.$i.$j.$z  100M		
			if [ "$k.$j" == "1f.3" ]
			then
				continue
			fi
#            		CLI="$CLI -device pcie-root-port,bus=pcie.0,id=root.$i.$j.$z,slot=$(((i-1)*8+j+1)),chassis=$z,multifunction=on,addr=0x$k.$j"
	    		CLI="$CLI -drive file=/home/disk/disk.$i.$j.$z,if=none,id=disk.$i.$j.$z,format=qcow2 "
              		CLI="$CLI -device virtio-blk-pci,scsi=off,drive=disk.$i.$j.$z,id=virtio-blk$i.$j.$z,bus=root.$i.$j,multifunction=on,addr=0x0.$z"
        	done
          f=$f+1
	done
done

$CLI 



host info:

[root@dell-per515-04 home]# free -mg
              total        used        free      shared  buff/cache   available
Mem:             15           1          13           0           0          13
Swap:             7           0           7
[root@dell-per515-04 home]# cat /proc/cpuinfo 
processor	: 0
vendor_id	: AuthenticAMD
cpu family	: 21
model		: 2
model name	: AMD Opteron(tm) Processor 4386
stepping	: 0
microcode	: 0x600084f
cpu MHz		: 3099.930
cache size	: 2048 KB
physical id	: 0
siblings	: 8
core id		: 0
cpu cores	: 4
apicid		: 0
initial apicid	: 0
fpu		: yes
fpu_exception	: yes
cpuid level	: 13
wp		: yes
flags		: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ht syscall nx mmxext fxsr_opt pdpe1gb rdtscp lm constant_tsc art rep_good nopl nonstop_tsc extd_apicid aperfmperf pni pclmulqdq monitor ssse3 fma cx16 sse4_1 sse4_2 popcnt aes xsave avx f16c lahf_lm cmp_legacy svm extapic cr8_legacy abm sse4a misalignsse 3dnowprefetch osvw ibs xop skinit wdt lwp fma4 tce nodeid_msr tbm topoext perfctr_core perfctr_nb cpb hw_pstate vmmcall bmi1 arat npt lbrv svm_lock nrip_save tsc_scale vmcb_clean flushbyasid decodeassists pausefilter pfthreshold
bogomips	: 6199.86
TLB size	: 1536 4K pages
clflush size	: 64
cache_alignment	: 64
address sizes	: 48 bits physical, 48 bits virtual
power management: ts ttp tm 100mhzsteps hwpstate cpb eff_freq_ro

processor	: 1
vendor_id	: AuthenticAMD
cpu family	: 21
model		: 2
model name	: AMD Opteron(tm) Processor 4386
stepping	: 0
microcode	: 0x600084f
cpu MHz		: 3099.930
cache size	: 2048 KB
physical id	: 0
siblings	: 8
core id		: 1
cpu cores	: 4
apicid		: 1
initial apicid	: 1
fpu		: yes
fpu_exception	: yes
cpuid level	: 13
wp		: yes
flags		: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ht syscall nx mmxext fxsr_opt pdpe1gb rdtscp lm constant_tsc art rep_good nopl nonstop_tsc extd_apicid aperfmperf pni pclmulqdq monitor ssse3 fma cx16 sse4_1 sse4_2 popcnt aes xsave avx f16c lahf_lm cmp_legacy svm extapic cr8_legacy abm sse4a misalignsse 3dnowprefetch osvw ibs xop skinit wdt lwp fma4 tce nodeid_msr tbm topoext perfctr_core perfctr_nb cpb hw_pstate vmmcall bmi1 arat npt lbrv svm_lock nrip_save tsc_scale vmcb_clean flushbyasid decodeassists pausefilter pfthreshold
bogomips	: 6199.86
TLB size	: 1536 4K pages
clflush size	: 64
cache_alignment	: 64
address sizes	: 48 bits physical, 48 bits virtual
power management: ts ttp tm 100mhzsteps hwpstate cpb eff_freq_ro

processor	: 2
vendor_id	: AuthenticAMD
cpu family	: 21
model		: 2
model name	: AMD Opteron(tm) Processor 4386
stepping	: 0
microcode	: 0x600084f
cpu MHz		: 3099.930
cache size	: 2048 KB
physical id	: 0
siblings	: 8
core id		: 2
cpu cores	: 4
apicid		: 2
initial apicid	: 2
fpu		: yes
fpu_exception	: yes
cpuid level	: 13
wp		: yes
flags		: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ht syscall nx mmxext fxsr_opt pdpe1gb rdtscp lm constant_tsc art rep_good nopl nonstop_tsc extd_apicid aperfmperf pni pclmulqdq monitor ssse3 fma cx16 sse4_1 sse4_2 popcnt aes xsave avx f16c lahf_lm cmp_legacy svm extapic cr8_legacy abm sse4a misalignsse 3dnowprefetch osvw ibs xop skinit wdt lwp fma4 tce nodeid_msr tbm topoext perfctr_core perfctr_nb cpb hw_pstate vmmcall bmi1 arat npt lbrv svm_lock nrip_save tsc_scale vmcb_clean flushbyasid decodeassists pausefilter pfthreshold
bogomips	: 6199.86
TLB size	: 1536 4K pages
clflush size	: 64
cache_alignment	: 64
address sizes	: 48 bits physical, 48 bits virtual
power management: ts ttp tm 100mhzsteps hwpstate cpb eff_freq_ro

processor	: 3
vendor_id	: AuthenticAMD
cpu family	: 21
model		: 2
model name	: AMD Opteron(tm) Processor 4386
stepping	: 0
microcode	: 0x600084f
cpu MHz		: 3099.930
cache size	: 2048 KB
physical id	: 0
siblings	: 8
core id		: 3
cpu cores	: 4
apicid		: 3
initial apicid	: 3
fpu		: yes
fpu_exception	: yes
cpuid level	: 13
wp		: yes
flags		: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ht syscall nx mmxext fxsr_opt pdpe1gb rdtscp lm constant_tsc art rep_good nopl nonstop_tsc extd_apicid aperfmperf pni pclmulqdq monitor ssse3 fma cx16 sse4_1 sse4_2 popcnt aes xsave avx f16c lahf_lm cmp_legacy svm extapic cr8_legacy abm sse4a misalignsse 3dnowprefetch osvw ibs xop skinit wdt lwp fma4 tce nodeid_msr tbm topoext perfctr_core perfctr_nb cpb hw_pstate vmmcall bmi1 arat npt lbrv svm_lock nrip_save tsc_scale vmcb_clean flushbyasid decodeassists pausefilter pfthreshold
bogomips	: 6199.86
TLB size	: 1536 4K pages
clflush size	: 64
cache_alignment	: 64
address sizes	: 48 bits physical, 48 bits virtual
power management: ts ttp tm 100mhzsteps hwpstate cpb eff_freq_ro

processor	: 4
vendor_id	: AuthenticAMD
cpu family	: 21
model		: 2
model name	: AMD Opteron(tm) Processor 4386
stepping	: 0
microcode	: 0x600084f
cpu MHz		: 3099.930
cache size	: 2048 KB
physical id	: 0
siblings	: 8
core id		: 4
cpu cores	: 4
apicid		: 4
initial apicid	: 4
fpu		: yes
fpu_exception	: yes
cpuid level	: 13
wp		: yes
flags		: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ht syscall nx mmxext fxsr_opt pdpe1gb rdtscp lm constant_tsc art rep_good nopl nonstop_tsc extd_apicid aperfmperf pni pclmulqdq monitor ssse3 fma cx16 sse4_1 sse4_2 popcnt aes xsave avx f16c lahf_lm cmp_legacy svm extapic cr8_legacy abm sse4a misalignsse 3dnowprefetch osvw ibs xop skinit wdt lwp fma4 tce nodeid_msr tbm topoext perfctr_core perfctr_nb cpb hw_pstate vmmcall bmi1 arat npt lbrv svm_lock nrip_save tsc_scale vmcb_clean flushbyasid decodeassists pausefilter pfthreshold
bogomips	: 6199.86
TLB size	: 1536 4K pages
clflush size	: 64
cache_alignment	: 64
address sizes	: 48 bits physical, 48 bits virtual
power management: ts ttp tm 100mhzsteps hwpstate cpb eff_freq_ro

processor	: 5
vendor_id	: AuthenticAMD
cpu family	: 21
model		: 2
model name	: AMD Opteron(tm) Processor 4386
stepping	: 0
microcode	: 0x600084f
cpu MHz		: 3099.930
cache size	: 2048 KB
physical id	: 0
siblings	: 8
core id		: 5
cpu cores	: 4
apicid		: 5
initial apicid	: 5
fpu		: yes
fpu_exception	: yes
cpuid level	: 13
wp		: yes
flags		: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ht syscall nx mmxext fxsr_opt pdpe1gb rdtscp lm constant_tsc art rep_good nopl nonstop_tsc extd_apicid aperfmperf pni pclmulqdq monitor ssse3 fma cx16 sse4_1 sse4_2 popcnt aes xsave avx f16c lahf_lm cmp_legacy svm extapic cr8_legacy abm sse4a misalignsse 3dnowprefetch osvw ibs xop skinit wdt lwp fma4 tce nodeid_msr tbm topoext perfctr_core perfctr_nb cpb hw_pstate vmmcall bmi1 arat npt lbrv svm_lock nrip_save tsc_scale vmcb_clean flushbyasid decodeassists pausefilter pfthreshold
bogomips	: 6199.86
TLB size	: 1536 4K pages
clflush size	: 64
cache_alignment	: 64
address sizes	: 48 bits physical, 48 bits virtual
power management: ts ttp tm 100mhzsteps hwpstate cpb eff_freq_ro

processor	: 6
vendor_id	: AuthenticAMD
cpu family	: 21
model		: 2
model name	: AMD Opteron(tm) Processor 4386
stepping	: 0
microcode	: 0x600084f
cpu MHz		: 3099.930
cache size	: 2048 KB
physical id	: 0
siblings	: 8
core id		: 6
cpu cores	: 4
apicid		: 6
initial apicid	: 6
fpu		: yes
fpu_exception	: yes
cpuid level	: 13
wp		: yes
flags		: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ht syscall nx mmxext fxsr_opt pdpe1gb rdtscp lm constant_tsc art rep_good nopl nonstop_tsc extd_apicid aperfmperf pni pclmulqdq monitor ssse3 fma cx16 sse4_1 sse4_2 popcnt aes xsave avx f16c lahf_lm cmp_legacy svm extapic cr8_legacy abm sse4a misalignsse 3dnowprefetch osvw ibs xop skinit wdt lwp fma4 tce nodeid_msr tbm topoext perfctr_core perfctr_nb cpb hw_pstate vmmcall bmi1 arat npt lbrv svm_lock nrip_save tsc_scale vmcb_clean flushbyasid decodeassists pausefilter pfthreshold
bogomips	: 6199.86
TLB size	: 1536 4K pages
clflush size	: 64
cache_alignment	: 64
address sizes	: 48 bits physical, 48 bits virtual
power management: ts ttp tm 100mhzsteps hwpstate cpb eff_freq_ro

processor	: 7
vendor_id	: AuthenticAMD
cpu family	: 21
model		: 2
model name	: AMD Opteron(tm) Processor 4386
stepping	: 0
microcode	: 0x600084f
cpu MHz		: 3099.930
cache size	: 2048 KB
physical id	: 0
siblings	: 8
core id		: 7
cpu cores	: 4
apicid		: 7
initial apicid	: 7
fpu		: yes
fpu_exception	: yes
cpuid level	: 13
wp		: yes
flags		: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ht syscall nx mmxext fxsr_opt pdpe1gb rdtscp lm constant_tsc art rep_good nopl nonstop_tsc extd_apicid aperfmperf pni pclmulqdq monitor ssse3 fma cx16 sse4_1 sse4_2 popcnt aes xsave avx f16c lahf_lm cmp_legacy svm extapic cr8_legacy abm sse4a misalignsse 3dnowprefetch osvw ibs xop skinit wdt lwp fma4 tce nodeid_msr tbm topoext perfctr_core perfctr_nb cpb hw_pstate vmmcall bmi1 arat npt lbrv svm_lock nrip_save tsc_scale vmcb_clean flushbyasid decodeassists pausefilter pfthreshold
bogomips	: 6199.86
TLB size	: 1536 4K pages
clflush size	: 64
cache_alignment	: 64
address sizes	: 48 bits physical, 48 bits virtual
power management: ts ttp tm 100mhzsteps hwpstate cpb eff_freq_ro

Comment 2 Paolo Bonzini 2017-12-15 14:05:16 UTC
It's exhausting the limit on the MemoryRegionSections. We probably should document the limit and replace the crash with a less dramatic failure mode.

Comment 3 Marcel Apfelbaum 2017-12-19 10:23:22 UTC
(In reply to Paolo Bonzini from comment #2)
> It's exhausting the limit on the MemoryRegionSections. We probably should
> document the limit and replace the crash with a less dramatic failure mode.

Hi Paolo,
I am not sure how could we limit the max PCI devices based on maximum MemoryRegionSections. Replacing the crash with an error message is a start.

Thanks,
Marcel

Comment 18 Paolo Bonzini 2018-08-24 12:51:44 UTC
*** Bug 1535583 has been marked as a duplicate of this bug. ***

Comment 20 Yiqian Wei 2019-01-22 07:09:16 UTC
I can reproduce this bug with fast-train.

host version:
qemu-kvm-3.1.0-4.module+el8+2681+819ab34d.x86_64
kernel-4.18.0-60.el8.x86_64
seabios-1.11.1-3.module+el8+2603+0a5231c4.x86_64
Guest:rhel8

Actual results:
qemu core dump when boot up 533 disks

(gdb) bt
#0  0x00007f0632dab93f in raise () at /lib64/libc.so.6
#1  0x00007f0632d95c95 in abort () at /lib64/libc.so.6
#2  0x00007f0632d95b69 in _nl_load_domain.cold.0 () at /lib64/libc.so.6
#3  0x00007f0632da3df6 in .annobin_assert.c_end () at /lib64/libc.so.6
#4  0x000056549e2a53e7 in  ()
#5  0x000056549e2a86b6 in flatview_add_to_dispatch ()
#6  0x000056549e2fb296 in generate_memory_topology ()
#7  0x000056549e2fc829 in memory_region_transaction_commit ()
#8  0x000056549e48c818 in mch_write_config ()
#9  0x000056549e2fae33 in memory_region_write_accessor ()
#10 0x000056549e2f8fe6 in access_with_adjusted_size ()
#11 0x000056549e2fcdb0 in memory_region_dispatch_write ()
#12 0x000056549e2a6ea3 in flatview_write_continue ()
#13 0x000056549e2a70c9 in flatview_write ()
#14 0x000056549e2ab1c3 in address_space_write ()
#15 0x000056549e30ea50 in kvm_cpu_exec ()
#16 0x000056549e2e8066 in qemu_kvm_cpu_thread_fn ()
#17 0x000056549e5f1644 in qemu_thread_start ()
#18 0x00007f06331402de in start_thread () at /lib64/libpthread.so.0
#19 0x00007f0632e70a63 in clone () at /lib64/libc.so.6

Comment 21 Yiqian Wei 2019-01-22 09:07:32 UTC
Sorry,Please ignore the test results of comment #20.

Corrected test results are as follows:

qemu core dump when boot up 553 disks

Comment 23 Michael S. Tsirkin 2019-07-01 14:32:52 UTC
No fix upstream yet. This would need some kind of extension to the memory API of qemu.
Yes it's a crash but not one guests can trigger.
So not high priority imho.
Will start a discussion upstream.

Comment 25 Yiqian Wei 2019-07-26 02:46:08 UTC
only update test result:

for rhel6.10 guest,can boot up 112 disk with "virtio-blk-pci-transitional" device

for rhel7.7 guest, can boot up 552 disk

for rhel8.1.0 guest, can boot up 156 disk

host version:
qemu-kvm-4.0.0-6.module+el8.1.0+3736+a2aefea3.x86_64
kernel-4.18.0-119.el8.x86_64
seabios-1.12.0-3.module+el8.1.0+3627+66216cf4.x86_64

Guest:
rhel6.10 (kernel-2.6.32-754.18.1.el6.x86_64)
rhel7.7 (kernel-3.10.0-1061.el7.x86_64)
rhel8.1.0 (kernel-4.18.0-119.el8.x86_64)

Comment 26 Ademar Reis 2020-02-05 22:46:01 UTC
QEMU has been recently split into sub-components and as a one-time operation to avoid breakage of tools, we are setting the QEMU sub-component of this BZ to "General". Please review and change the sub-component if necessary the next time you review this BZ. Thanks

Comment 29 Yiqian Wei 2021-01-25 09:42:55 UTC
reproduce this bug with rhel8.4.0 guest on rhel8.4.0-av host.

host version:
kernel-4.18.0-276.el8.x86_64
qemu-kvm-5.2.0-3.module+el8.4.0+9499+42e58f08.x86_64
seabios-1.14.0-1.module+el8.4.0+8855+a9e237a9.x86_64
guest:rhel8.4.0

Actual results:
qemu core dump when boot up 554 disks.

[root@dell-per430-27 ~]# sh max.sh 
QEMU 5.2.0 monitor - type 'help' for more information
(qemu) qemu-kvm: ../softmmu/physmem.c:1087: phys_section_add: Assertion `map->sections_nb < TARGET_PAGE_SIZE' failed.

(gdb) bt
#0  0x00007ffff45d5ed0 in __condvar_dec_grefs (cond=cond@entry=0x5555566cf070, g=g@entry=0, private=private@entry=0) at pthread_cond_wait.c:153
#1  0x00007ffff45d6326 in __pthread_cond_wait_common (abstime=0x0, mutex=0x555556480360 <qemu_global_mutex>, cond=0x5555566cf070) at pthread_cond_wait.c:559
#2  0x00007ffff45d6326 in __pthread_cond_wait (cond=0x5555566cf070, mutex=mutex@entry=0x555556480360 <qemu_global_mutex>) at pthread_cond_wait.c:655
#3  0x0000555555c1a97d in qemu_cond_wait_impl (cond=<optimized out>, mutex=0x555556480360 <qemu_global_mutex>, file=0x555555cf8dbf "../softmmu/cpus.c", line=411)
    at ../util/qemu-thread-posix.c:174
#4  0x0000555555a718ff in qemu_wait_io_event (cpu=cpu@entry=0x5555566a6f70) at ../softmmu/cpus.c:411
#5  0x0000555555ac7a48 in kvm_vcpu_thread_fn (arg=0x5555566a6f70) at ../accel/kvm/kvm-cpus.c:54
#6  0x0000555555c1a5c4 in qemu_thread_start (args=0x5555566cf0b0) at ../util/qemu-thread-posix.c:521
#7  0x00007ffff45d014a in start_thread (arg=<optimized out>) at pthread_create.c:479
#8  0x00007ffff42ffdb3 in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
(gdb)

Comment 31 RHEL Program Management 2021-02-15 07:34:06 UTC
After evaluating this issue, there are no plans to address it further or fix it in an upcoming release.  Therefore, it is being closed.  If plans change such that this issue will be fixed in an upcoming release, then the bug can be reopened.

Comment 32 Red Hat Bugzilla 2023-09-15 00:05:46 UTC
The needinfo request[s] on this closed bug have been removed as they have been unresolved for 500 days


Note You need to log in before you can comment on or make changes to this bug.