[Qemu-devel] [Question] QEMU 2.3 Assertion with `existing->mr->subpage || existing->mr == &io_mem_unassigned' failed

[Gonglei (Arei)]

Hi,

Recently, our test team found several Qemu crash problems with the next 
assertion messages:

[2015-09-11 13:42:44] domain is rebooting 
qemu-kvm: /home/abuild/rpmbuild/BUILD/qemu-kvm-2.3.0/exec.c:1188: 
register_subpage: Assertion `existing->mr->subpage || existing->mr == 
&io_mem_unassigned' failed. 
[2015-09-11 13:42:58]: shutting down

Or
qemu-kvm: /home/abuild/rpmbuild/BUILD/qemu-kvm-2.3.0/include/qemu/int128.h:22: 
int128_get64: Assertion `!a.hi' failed.

Environments:
1. Host OS: RedHat -7.1
2. Guest OS: Suse11-sp3
3. Qem: Qemu-2.3.0 release
4. Qemu commad line (which start from Libvirt 1.2.17 version) :
/usr/bin/qemu-kvm -name vm6 -S -machine pc-i440fx-2.3,accel=kvm,usb=off -m 1024 
-realtime mlock=off -smp 4,sockets=4,cores=1,threads=1 -object 
memory-backend-file,id=ram-node0,prealloc=yes,mem-path=/dev/hugepages/libvirt/qemu,share=yes,size=1073741824
 -numa node,nodeid=0,cpus=0-3,memdev=ram-node0 -uuid 
5566d996-fad5-4b4b-89d2-249e3de1e006 -no-user-config -nodefaults -chardev 
socket,id=charmonitor,path=/var/lib/libvirt/qemu/vm6.monitor,server,nowait -mon 
chardev=charmonitor,id=monitor,mode=control -rtc 
base=utc,clock=vm,driftfix=slew -no-hpet -global 
kvm-pit.lost_tick_policy=discard -no-shutdown -boot strict=on -device 
piix3-usb-uhci,id=usb,bus=pci.0,addr=0x1.0x2 -device 
virtio-scsi-pci,id=scsi0,bus=pci.0,addr=0x6 -device 
virtio-serial-pci,id=virtio-serial0,bus=pci.0,addr=0x7 -drive 
file=/data/zj/stbtest/image/suse11_sp3_64_6.img,if=none,id=drive-scsi0-0-0-0,format=raw,cache=none,aio=native
 -device 
scsi-hd,bus=scsi0.0,channel=0,scsi-id=0,lun=0,drive=drive-scsi0-0-0-0,id=scsi0-0-0-0,bootindex=1
 -drive if=none,id=drive-ide0-0-1,readonly=on,format=raw,cache=none,aio=native 
-device ide-cd,bus=ide.0,unit=1,drive=drive-ide0-0-1,id=ide0-0-1 -netdev 
tap,fds=40:41:42:43,id=hostnet0,vhost=on,vhostfds=44:45:46:47 -device 
virtio-net-pci,mq=on,vectors=10,netdev=hostnet0,id=net0,mac=52:58:00:00:01:06,bus=pci.0,addr=0x3
 -chardev socket,id=charnet1,path=/var/run/vhost-user/port61 -netdev 
type=vhost-user,id=hostnet1,chardev=charnet1 -device 
virtio-net-pci,vringbuf=2048,netdev=hostnet1,id=net1,mac=52:58:00:00:00:61,bus=pci.0,addr=0x4
 -chardev socket,id=charnet2,path=/var/run/vhost-user/port62 -netdev 
type=vhost-user,id=hostnet2,chardev=charnet2 -device 
virtio-net-pci,vringbuf=2048,netdev=hostnet2,id=net2,mac=52:58:00:00:00:62,bus=pci.0,addr=0x5
 -chardev 
socket,id=charchannel0,path=/var/run/libvirt/qemu/vm6.extend,server,nowait 
-device 
virtserialport,bus=virtio-serial0.0,nr=1,chardev=charchannel0,id=channel0,name=org.qemu.guest_agent.1
 -chardev 
socket,id=charchannel1,path=/var/run/libvirt/qemu/vm6.agent,server,nowait 
-device 
virtserialport,bus=virtio-serial0.0,nr=2,chardev=charchannel1,id=channel1,name=org.qemu.guest_agent.0
 -chardev 
socket,id=charchannel2,path=/var/run/libvirt/qemu/vm6.hostd,server,nowait 
-device 
virtserialport,bus=virtio-serial0.0,nr=3,chardev=charchannel2,id=channel2,name=org.qemu.guest_agent.2
 -chardev 
socket,id=charchannel3,path=/var/run/libvirt/qemu/vm6.upgraded,server,nowait 
-device 
virtserialport,bus=virtio-serial0.0,nr=4,chardev=charchannel3,id=channel3,name=org.qemu.guest_agent.3
 -device usb-tablet,id=input0 -vnc 0.0.0.0:6 -device 
cirrus-vga,id=video0,bus=pci.0,addr=0x2 -msg timestamp=on

Testing case Steps (very simply):
*) Reboot Virtual Machine repeatedly inside VM, suddenly Qemu process crashed.

Does anyone know this problem? Thanks!
If you need some other information, please let me know. 

Regards,
-Gonglei