[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Xen-devel] [Qemu-devel] Qemu 2.0 regression with xen: qemu crash on any domUs S.O. start



Il 03/04/2014 12:13, Fabio Fantoni ha scritto:
Il 03/04/2014 10:45, Ian Campbell ha scritto:
On Thu, 2014-04-03 at 10:15 +0200, Fabio Fantoni wrote:
Seems that do segfault when I connect to vnc or spice, in the test of
this backtrace after connect to vnc, spice and other things of my
patches are disabled, so do not think it is a problem caused by my patches.
The last spice patch of yours I saw was incorrectly accessing the wrong
half of various unions which is liable to cause all sorts of corruption
or strange behaviour. Please can you reproduce this issue without any
patches applied.

Ian.


After saw the full backtrace I saw on qemu git recent patches with fix on input, than I tried to update qemu to latest commit (82c6f513735297ad76acaaf2e87f0c5a0b3647a7) and now the segfault seems solve, I did some fast test with vnc and spice on same pv domUs without qemu crashes.
About libxl patch of spice support for pv domUs I'll improve it following your reply and also try to find more details about pointer not visible but working with spice on pv domUs.
Thanks to all for your help.


Today I did some tests also with hvm and spice and I found another segfault with different backtrace to solve:
(gdb) c
Continuing.

Program received signal SIGSEGV, Segmentation fault.
0x0000555555855d30 in interface_client_monitors_config (sin=0x5555563b0260,
ÂÂÂ mc=0x0) at ui/spice-display.c:557
557ÂÂÂÂÂÂÂÂ if (mc->num_of_monitors > 0) {

(gdb) bt full
#0Â 0x0000555555855d30 in interface_client_monitors_config (
ÂÂÂ sin=0x5555563b0260, mc=0x0) at ui/spice-display.c:557
ÂÂÂÂÂÂÂ ssd = 0x5555563b0210
ÂÂÂÂÂÂÂ info = {xoff = 0, yoff = 0, width = 0, height = 0}
ÂÂÂÂÂÂÂ rc = 32767
ÂÂÂÂÂÂÂ __func__ = "interface_client_monitors_config"
#1Â 0x00007ffff4af5113 in ?? ()
ÂÂ from /usr/lib/x86_64-linux-gnu/libspice-server.so.1
No symbol table info available.
#2Â 0x00007ffff4ad87f5 in ?? ()
ÂÂ from /usr/lib/x86_64-linux-gnu/libspice-server.so.1
No symbol table info available.
#3Â 0x00007ffff4b1af76 in ?? ()
ÂÂ from /usr/lib/x86_64-linux-gnu/libspice-server.so.1
No symbol table info available.
#4Â 0x00007ffff4ae989a in ?? ()
ÂÂ from /usr/lib/x86_64-linux-gnu/libspice-server.so.1
No symbol table info available.
#5Â 0x00007ffff4aee470 in ?? ()
ÂÂ from /usr/lib/x86_64-linux-gnu/libspice-server.so.1
No symbol table info available.
#6Â 0x00007ffff4af0d8c in ?? ()
ÂÂ from /usr/lib/x86_64-linux-gnu/libspice-server.so.1
No symbol table info available.
#7Â 0x0000555555851f82 in watch_read (opaque=0x55555666a8d0)
---Type <return> to continue, or q <return> to quit---
ÂÂÂ at ui/spice-core.c:101
ÂÂÂÂÂÂÂ watch = 0x55555666a8d0
#8Â 0x00005555557ce1f8 in qemu_iohandler_poll (pollfds=0x5555562e8e00, ret=2)
ÂÂÂ at iohandler.c:143
ÂÂÂÂÂÂÂ revents = 1
ÂÂÂÂÂÂÂ pioh = 0x55555634e080
ÂÂÂÂÂÂÂ ioh = 0x55555666adb0
#9Â 0x00005555557cf2a4 in main_loop_wait (nonblocking=0) at main-loop.c:485
ÂÂÂÂÂÂÂ ret = 2
ÂÂÂÂÂÂÂ timeout = 4294967295
ÂÂÂÂÂÂÂ timeout_ns = 25664603
#10 0x000055555587acd8 in main_loop () at vl.c:2051
ÂÂÂÂÂÂÂ nonblocking = false
ÂÂÂÂÂÂÂ last_io = 3
#11 0x00005555558826b2 in main (argc=36, argv=0x7fffffffe368,
ÂÂÂ envp=0x7fffffffe490) at vl.c:4507
ÂÂÂÂÂÂÂ i = 64
ÂÂÂÂÂÂÂ snapshot = 0
ÂÂÂÂÂÂÂ linux_boot = 0
ÂÂÂÂÂÂÂ icount_option = 0x0
ÂÂÂÂÂÂÂ initrd_filename = 0x0
ÂÂÂÂÂÂÂ kernel_filename = 0x0
ÂÂÂÂÂÂÂ kernel_cmdline = 0x555555a1b5c4 ""
ÂÂÂÂÂÂÂ boot_order = 0x5555562e7ee0 "dc"
ÂÂÂÂÂÂÂ ds = 0x5555563d8fd0
---Type <return> to continue, or q <return> to quit---
ÂÂÂÂÂÂÂ cyls = 0
ÂÂÂÂÂÂÂ heads = 0
ÂÂÂÂÂÂÂ secs = 0
ÂÂÂÂÂÂÂ translation = 0
ÂÂÂÂÂÂÂ hda_opts = 0x0
ÂÂÂÂÂÂÂ opts = 0x5555562e7e30
ÂÂÂÂÂÂÂ machine_opts = 0x5555562e84b0
ÂÂÂÂÂÂÂ olist = 0x555555e00e00
ÂÂÂÂÂÂÂ optind = 36
ÂÂÂÂÂÂÂ optarg = 0x7fffffffe923 "if=ide,index=1,media=cdrom,cache=writeback,id=ide-832"
ÂÂÂÂÂÂÂ loadvm = 0x0
ÂÂÂÂÂÂÂ machine_class = 0x5555562e02a0
ÂÂÂÂÂÂÂ machine = 0x555555e067e0
ÂÂÂÂÂÂÂ cpu_model = 0x0
ÂÂÂÂÂÂÂ vga_model = 0x0
ÂÂÂÂÂÂÂ qtest_chrdev = 0x0
ÂÂÂÂÂÂÂ qtest_log = 0x0
ÂÂÂÂÂÂÂ pid_file = 0x0
ÂÂÂÂÂÂÂ incoming = 0x0
ÂÂÂÂÂÂÂ show_vnc_port = 0
ÂÂÂÂÂÂÂ defconfig = true
ÂÂÂÂÂÂÂ userconfig = true
ÂÂÂÂÂÂÂ log_mask = 0x0
ÂÂÂÂÂÂÂ log_file = 0x0
---Type <return> to continue, or q <return> to quit---
ÂÂÂÂÂÂÂ mem_trace = {malloc = 0x55555587e56a <malloc_and_trace>,
ÂÂÂÂÂÂÂÂÂ realloc = 0x55555587e5c2 <realloc_and_trace>,
ÂÂÂÂÂÂÂÂÂ free = 0x55555587e629 <free_and_trace>, calloc = 0, try_malloc = 0,
ÂÂÂÂÂÂÂÂÂ try_realloc = 0}
ÂÂÂÂÂÂÂ trace_events = 0x0
ÂÂÂÂÂÂÂ trace_file = 0x0
ÂÂÂÂÂÂÂ __func__ = "main"
ÂÂÂÂÂÂÂ args = {machine = 0x555555e067e0, ram_size = 2130706432,
ÂÂÂÂÂÂÂÂÂ boot_order = 0x5555562e7ee0 "dc", kernel_filename = 0x0,
ÂÂÂÂÂÂÂÂÂ kernel_cmdline = 0x555555a1b5c4 "", initrd_filename = 0x0,
ÂÂÂÂÂÂÂÂÂ cpu_model = 0x0}
(gdb)

qemu from source git/master commit 82c6f513735297ad76acaaf2e87f0c5a0b3647a7
spice server packages is version 0.12.4-0nocelt2 recompiled from debian unstable source.

If you need more informations/tests tell me and I'll post them.

Thanks for any reply.
_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxx
http://lists.xen.org/xen-devel

 


Rackspace

Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.