Try with hard disk image snapshot=on. Here is how I run qemu: QEMU_AUDIO_DRV=spice TMPDIR=/home/rick/qemu/hds /usr/local/bin/qemu-system-x86_64 -cpu host -enable-kvm \ -m 1536 -name Win7Pro64 -localtime -no-fd-bootchk -smp cores=4 \ -pidfile /home/rick/qemu/hds/win7pro64.pid \ -drive file=/home/rick/qemu/hds/win7pro64.qed,if=virtio,index=0,snapshot=on \ -vga qxl \ -net nic,model=virtio -net user \ -device virtio-serial-pci,id=virtio-serial0,max_ports=16,bus=pci.0,addr=0x5 \ -chardev spicevmc,name=vdagent,id=vdagent \ -device virtserialport,nr=1,bus=virtio-serial0.0,chardev=vdagent,name=com.redhat.spice.0 \ -spice port=1247,disable-ticketing \ -monitor telnet:localhost:12471,server,nowait \ -drive if=none,id=cd,file=/dev/sg1 \ -device virtio-scsi-pci,id=scsi \ -device scsi-generic,drive=cd \ -balloon virtio \ -soundhw hda \ -device usb-ehci Let me know if you still can't reproduce, then I'll run with spice debug level 5. Thanks, -Rick <div class="gmail_quote">On Apr 25, 2014 5:34 AM, "Marc-André Lureau" <<a href="mailto:mlureau@redhat.com">mlureau@redhat.com</a>> wrote: <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"> Hi I haven't been able to reproduce this crash, after multiple reboots. What qemu command line do you use? Could you also provide with the SPICE_DEBUG_LEVEL=5 log? Here is what I used: SPICE_DEBUG_LEVEL=5 leg ./x86_64-softmmu/qemu-system-x86_64 -enable-kvm -snapshot ~/VirtualMachines/win7-x64.img -m 1024 -chardev spicevmc,id=charchannel0,name=vdagent -device virtio-serial-pci,id=virtio-serial0,bus=pci.0,addr=0x5 -device virtserialport,bus=virtio-serial0.0,nr=2,chardev=charchannel0,id=channel0,name=com.redhat.spice.0 -spice port=5912,disable-ticketing -vga qxl thanks ----- Original Message ----- > Qemu 2.0 crashes on (at least windows) guest machine reboot with > spice-0.12.4, with the following backtrace: > > Program received signal SIGSEGV, Segmentation fault. > 0x00007ffff211eae5 in spice_char_device_write_to_device (dev=0x55555725bf30) > at char_device.c:443 > 443 sif = SPICE_CONTAINEROF(dev->sin->base.sif, > SpiceCharDeviceInterface, base); > (gdb) bt > #0 0x00007ffff211eae5 in spice_char_device_write_to_device > (dev=0x55555725bf30) at char_device.c:443 > #1 0x00007ffff211fd81 in spice_char_device_start (dev=0x55555725bf30) at > char_device.c:798 > #2 0x00007ffff2171f95 in spice_server_vm_start (s=0x5555561d4360) at > reds.c:4520 > #3 0x00005555556a1119 in qdev_reset_one (dev=<optimized out>, > opaque=<optimized out>) at hw/core/qdev.c:240 > #4 0x00005555556a0958 in qbus_walk_children (bus=0x555556757610, > pre_devfn=0x0, pre_busfn=0x0, post_devfn=0x5555556a1100 <qdev_reset_one>, > post_busfn=0x55555569f060 <qbus_reset_one>, opaque=0x0) at > hw/core/qdev.c:369 > #5 0x00005555556a0878 in qdev_walk_children (dev=0x55555677c020, > pre_devfn=0x0, pre_busfn=0x0, post_devfn=0x5555556a1100 <qdev_reset_one>, > post_busfn=0x55555569f060 <qbus_reset_one>, opaque=0x0) at > hw/core/qdev.c:403 > #6 0x00005555556a0958 in qbus_walk_children (bus=0x555556745930, > pre_devfn=0x0, pre_busfn=0x0, post_devfn=0x5555556a1100 <qdev_reset_one>, > post_busfn=0x55555569f060 <qbus_reset_one>, opaque=0x0) at > hw/core/qdev.c:369 > #7 0x00005555557d717a in qemu_devices_reset () at vl.c:1867 > #8 qemu_system_reset (report=report@entry=true) at vl.c:1880 > #9 0x00005555555f9e2f in main_loop_should_exit () at vl.c:2015 > #10 main_loop () at vl.c:2055 > #11 main (argc=<optimized out>, argv=<optimized out>, envp=<optimized out>) > at vl.c:4507 > > > Having essentially zero knowledge of qemu or spice at a source level, I threw > together a quick patch that at least prevents the crash for me...which is > attached here. > > Thanks, > -Rick > _______________________________________________ > Spice-devel mailing list > <a href="mailto:Spice-devel@lists.freedesktop.org">Spice-devel@lists.freedesktop.org</a> > <a href="http://lists.freedesktop.org/mailman/listinfo/spice-devel" target="_blank">http://lists.freedesktop.org/mailman/listinfo/spice-devel</a> > </blockquote></div>