[Qemu-devel] [Bug 1839428] Re: qemu core dumped when repeat "system_reset" multiple times during guest boot

[Philippe Mathieu-Daudé]

This issue is very hard to reproduce.

It sometimes crashes, so I could mark few commits 'bad' while bisecting,
but since it is not reliable, I'm not sure a commit is 'good' when there
is no crash.

For now after hours of testing I could reduce Xujun Ma's range to
qemu-v3.1.0..1d31f1872b:

commit 1d31f1872b337e4acac5bf6b3c2a45b66e43b494 (refs/bisect/bad)
Merge: 20b084c4b1 88c869198a
Author: Peter Maydell <address@hidden>
Date:   Mon Mar 4 11:04:31 2019 +0000

    Merge remote-tracking branch 'remotes/mst/tags/for_upstream' into staging
    
    pci, pc, virtio: fixes, cleanups, tests
    
    Lots of work on tests: BiosTablesTest UEFI app,
    vhost-user testing for non-Linux hosts.
    Misc cleanups and fixes all over the place
    
    Signed-off-by: Michael S. Tsirkin <address@hidden>
    
    * remotes/mst/tags/for_upstream: (26 commits)
      pci: Sanity test minimum downstream LNKSTA
      hw/smbios: fix offset of type 3 sku field
      pci: Move NVIDIA vendor id to the rest of ids
      virtio-balloon: Safely handle BALLOON_PAGE_SIZE < host page size
      virtio-balloon: Use ram_block_discard_range() instead of raw madvise()
      virtio-balloon: Rework ballon_page() interface
      virtio-balloon: Corrections to address verification
      virtio-balloon: Remove unnecessary MADV_WILLNEED on deflate
      i386/kvm: ignore masked irqs when update msi routes
      contrib/vhost-user-blk: fix the compilation issue
      Revert "contrib/vhost-user-blk: fix the compilation issue"
      pc-dimm: use same mechanism for [get|set]_addr
      tests/data: introduce "uefi-boot-images" with the "bios-tables-test" ISOs
      tests/uefi-test-tools: add build scripts
      tests: introduce "uefi-test-tools" with the BiosTablesTest UEFI app
      roms: build the EfiRom utility from the roms/edk2 submodule
      roms: add the edk2 project as a git submodule
      vhost-user-test: create a temporary directory per TestServer
      vhost-user-test: small changes to init_hugepagefs
      vhost-user-test: create a main loop per TestServer
      ...

-- 
You received this bug notification because you are a member of qemu-
devel-ml, which is subscribed to QEMU.
https://bugs.launchpad.net/bugs/1839428

Title:
   qemu core dumped when repeat "system_reset" multiple times during
  guest boot

Status in QEMU:
  Confirmed

Bug description:
  commit 864ab314f1d924129d06ac7b571f105a2b76a4b2 (HEAD, tag: v4.1.0-rc4, 
origin/master, origin/HEAD, master)
  Test arch:x86 and power

  Steps:
  1.Boot up guest with command
  power cmdline:
  /usr/libexec/backup/qemu-kvm \
   -smp 8 \
   -m 4096 \
   -nodefaults \
   -device 
virtio-blk-pci,id=image1,drive=drive_image1,bootindex=1,bus=pci.0,addr=0x7 \
   -drive 
file=rhel77-ppc64le-virtio.qcow2,if=none,id=drive_image1,format=qcow2,cache=none
 \
   -chardev stdio,mux=on,id=serial_id_serial0,server,nowait,signal=off \
   -device spapr-vty,id=serial111,chardev=serial_id_serial0 \
   -mon chardev=serial_id_serial0,mode=readline \
  x86 cmdline:
  /usr/libexec/qemu-kvm \
   -m 4096 -smp 8 \
   -boot menu=on \
   -device virtio-blk-pci,id=image1,drive=drive_image1\
   -drive 
file=rhel77-64-virtio.qcow2,if=none,id=drive_image1,format=qcow2,cache=none \
   -vga std \
   -vnc :9 \
   -nographic \
   -device virtio-net-pci,netdev=net0,id=nic0,mac=52:54:00:c4:e7:84 \
   -netdev 
tap,id=net0,script=/etc/qemu-ifup,downscript=/etc/qemu-ifdown,vhost=on \

  2.when guest start to boot up kernel(when no output infomation),run
  hmp command "system_reset"

  
  Result:

  Sometimes,qemu core dumped with error as following:
  system_reset
  (qemu) qemu-system-ppc64: /root/qemu/hw/virtio/virtio.c:225: 
vring_get_region_caches: Assertion `caches != NULL' failed.
  b.sh: line 11: 73679 Aborted                 (core dumped) 
/usr/local/bin/qemu-system-ppc64 -enable-kvm -smp 8 -m 4096 -nodefaults -device 
virtio-blk-pci,id=image1,drive=drive_image1,bootindex=1,bus=pci.0,addr=0x7 
-drive 
file=rhel77-ppc64le-virtio.qcow2,if=none,id=drive_image1,format=qcow2,cache=none
 -chardev stdio,mux=on,id=serial_id_serial0,server,nowait,signal=off -device 
spapr-vty,id=serial111,chardev=serial_id_serial0 -mon 
chardev=serial_id_serial0,mode=readline

To manage notifications about this bug go to:
https://bugs.launchpad.net/qemu/+bug/1839428/+subscriptions