Re: [Qemu-devel] [Bug 1570134] Re: While committing snapshot qemu crashes with SIGABRT

[Fam Zheng]

On Fri, 04/22 18:55, Matthew Schumacher wrote:
> Running master as of this morning 4/22 and I'm not getting any more
> crashes, and I'm flat beating on it.  RC3 still crashes on me, so
> whatever the fix is, came after rc3.

Matthew, It was bcd82a9..ab27c3b from last Friday (yes, after -rc3).

Thank you so much for your reporting and testing.

Fam

> 
> -- 
> You received this bug notification because you are a member of qemu-
> devel-ml, which is subscribed to QEMU.
> https://bugs.launchpad.net/bugs/1570134
> 
> Title:
>   While committing snapshot qemu crashes with SIGABRT
> 
> Status in QEMU:
>   New
> 
> Bug description:
>   Information:
> 
>   OS: Slackware64-Current
>   Compiled with: gcc version 5.3.0 (GCC)  / glibc 2.23
>   Compiled using: 
> 
>   CFLAGS="-O2 -fPIC" \
>   CXXFLAGS="-O2 -fPIC" \
>   LDFLAGS="-L/usr/lib64" \
>   ./configure \
>     --prefix=/usr \
>     --sysconfdir=/etc \
>     --localstatedir=/var \
>     --libdir=/usr/lib64 \
>     --enable-spice \
>     --enable-kvm \
>     --enable-glusterfs \
>     --enable-libiscsi \
>     --enable-libusb \
>     --target-list=x86_64-softmmu,i386-softmmu \
>     --enable-debug
> 
>   Source: qemu-2.5.1.tar.bz2
> 
>   Running as:
> 
>   /usr/bin/qemu-system-x86_64 -name test1,debug-threads=on -S -machine
>   pc-1.1,accel=kvm,usb=off -m 4096 -realtime mlock=off -smp
>   2,sockets=2,cores=1,threads=1 -uuid
>   4b30ec13-6609-4a56-8731-d400c38189ef -no-user-config -nodefaults
>   -chardev
>   
> socket,id=charmonitor,path=/var/lib/libvirt/qemu/domain-4-test1/monitor.sock,server,nowait
>   -mon chardev=charmonitor,id=monitor,mode=control -rtc
>   base=localtime,clock=vm,driftfix=slew -global kvm-
>   pit.lost_tick_policy=discard -no-shutdown -boot strict=on -device
>   piix3-usb-uhci,id=usb,bus=pci.0,addr=0x1.0x2 -drive
>   file=/datastore/vm/test1/test1.img,format=qcow2,if=none,id=drive-
>   virtio-disk0 -device virtio-blk-pci,scsi=off,bus=pci.0,addr=0x4,drive
>   =drive-virtio-disk0,id=virtio-disk0,bootindex=2 -drive if=none,id
>   =drive-ide0-1-0,readonly=on -device ide-cd,bus=ide.1,unit=0,drive
>   =drive-ide0-1-0,id=ide0-1-0,bootindex=1 -netdev
>   tap,fd=23,id=hostnet0,vhost=on,vhostfd=25 -device virtio-net
>   pci,netdev=hostnet0,id=net0,mac=52:54:00:66:2e:0f,bus=pci.0,addr=0x3
>   -vnc 0.0.0.0:0 -device cirrus-vga,id=video0,bus=pci.0,addr=0x2 -device
>   virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x5 -msg timestamp=on
> 
>   File system:  zfs v0.6.5.6
> 
>   While running: 
>   virsh blockcommit test1 vda --active --pivot --verbose
> 
>   VM running very heavy IO load
> 
>   GDB reporting:
> 
>   #0  0x00007fd80132c3f8 in raise () at /lib64/libc.so.6
>   #1  0x00007fd80132dffa in abort () at /lib64/libc.so.6
>   #2  0x00007fd801324c17 in __assert_fail_base () at /lib64/libc.so.6
>   #3  0x00007fd801324cc2 in  () at /lib64/libc.so.6
>   #4  0x000055d9918d7572 in bdrv_replace_in_backing_chain 
> (old=0x55d993ed9c10, new=0x55d9931ccc10) at block.c:2096
>           __PRETTY_FUNCTION__ = "bdrv_replace_in_backing_chain"
>   #5  0x000055d991911869 in mirror_exit (job=0x55d993fef830, 
> opaque=0x55d999bbefe0) at block/mirror.c:376
>           to_replace = 0x55d993ed9c10
>           s = 0x55d993fef830
>           data = 0x55d999bbefe0
>           replace_aio_context = <optimized out>
>           src = 0x55d993ed9c10
>   #6  0x000055d9918da1dc in block_job_defer_to_main_loop_bh 
> (opaque=0x55d9940ce850) at blockjob.c:481
>           data = 0x55d9940ce850
>           aio_context = 0x55d9931a2610
>   #7  0x000055d9918d014b in aio_bh_poll (address@hidden) at async.c:92
>           bh = <optimized out>
>           bhp = <optimized out>
>           next = 0x55d99440f910
>           ret = 1
>   #8  0x000055d9918dc8c0 in aio_dispatch (ctx=0x55d9931a2610) at 
> aio-posix.c:305
>           node = <optimized out>
>           progress = false
>   #9  0x000055d9918d000e in aio_ctx_dispatch (source=<optimized out>, 
> callback=<optimized out>, user_data=<optimized out>) at async.c:231
>           ctx = <optimized out>
>   #10 0x00007fd8037cf787 in g_main_context_dispatch () at 
> /usr/lib64/libglib-2.0.so.0
>   #11 0x000055d9918db03b in main_loop_wait () at main-loop.c:211
>           context = 0x55d9931a3200
>           pfds = <optimized out>
>           ret = 0
>           spin_counter = 1
>           ret = 0
>           timeout = 4294967295
>           timeout_ns = <optimized out>
>   #12 0x000055d9918db03b in main_loop_wait (timeout=<optimized out>) at 
> main-loop.c:256
>           ret = 0
>           spin_counter = 1
>           ret = 0
>           timeout = 4294967295
>           timeout_ns = <optimized out>
>   #13 0x000055d9918db03b in main_loop_wait (nonblocking=<optimized out>) at 
> main-loop.c:504
>           ret = 0
>           timeout = 4294967295
>           timeout_ns = <optimized out>
>   #14 0x000055d991679cc4 in main () at vl.c:1923
>           nonblocking = <optimized out>
>           last_io = 2
>           i = <optimized out>
>           snapshot = <optimized out>
>           linux_boot = <optimized out>
>           initrd_filename = <optimized out>
>           kernel_filename = <optimized out>
>           kernel_cmdline = <optimized out>
>           boot_order = <optimized out>
>           boot_once = <optimized out>
>           ds = <optimized out>
>           cyls = <optimized out>
>           heads = <optimized out>
>           secs = <optimized out>
>           translation = <optimized out>
>           hda_opts = <optimized out>
>           opts = <optimized out>
>           machine_opts = <optimized out>
>           icount_opts = <optimized out>
>           olist = <optimized out>
>           optind = 49
>           optarg = 0x7fffc6d27f43 "timestamp=on"
>           loadvm = <optimized out>
>           machine_class = 0x55d993194d10
>           cpu_model = <optimized out>
>           vga_model = 0x0
>           qtest_chrdev = <optimized out>
>           qtest_log = <optimized out>
>           pid_file = <optimized out>
>           incoming = <optimized out>
>           defconfig = <optimized out>
>           userconfig = false
>           log_mask = <optimized out>
>           log_file = <optimized out>
>           trace_events = <optimized out>
>           trace_file = <optimized out>
>           maxram_size = <optimized out>
>           ram_slots = <optimized out>
>           vmstate_dump_file = <optimized out>
>           main_loop_err = 0x0
>           err = 0x0
>           __func__ = "main"
>   #15 0x000055d991679cc4 in main (argc=<optimized out>, argv=<optimized out>, 
> envp=<optimized out>) at vl.c:4699
>           i = <optimized out>
>           snapshot = <optimized out>
>           linux_boot = <optimized out>
>           initrd_filename = <optimized out>
>           kernel_filename = <optimized out>
>           kernel_cmdline = <optimized out>
>           boot_order = <optimized out>
>           boot_once = <optimized out>
>           ds = <optimized out>
>           cyls = <optimized out>
>           heads = <optimized out>
>           secs = <optimized out>
>           translation = <optimized out>
>           hda_opts = <optimized out>
>           opts = <optimized out>
>           machine_opts = <optimized out>
>           icount_opts = <optimized out>
>           olist = <optimized out>
>           optind = 49
>           optarg = 0x7fffc6d27f43 "timestamp=on"
>           loadvm = <optimized out>
>           machine_class = 0x55d993194d10
>           cpu_model = <optimized out>
>           vga_model = 0x0
>           qtest_chrdev = <optimized out>
>           qtest_log = <optimized out>
>           pid_file = <optimized out>
>           incoming = <optimized out>
>           defconfig = <optimized out>
>           userconfig = false
>           log_mask = <optimized out>
>           log_file = <optimized out>
>           trace_events = <optimized out>
>           trace_file = <optimized out>
>           maxram_size = <optimized out>
>           ram_slots = <optimized out>
>           vmstate_dump_file = <optimized out>
>           main_loop_err = 0x0
>           err = 0x0
>           __func__ = "main"
> 
> 
>   I can reproduce this at will, and can provide more information per a
>   dev's request.
> 
> To manage notifications about this bug go to:
> https://bugs.launchpad.net/qemu/+bug/1570134/+subscriptions
>