[Spice-devel] [Qemu-devel] qemu 2.2 crash on linux hvm domU (full backtrace included)

Don Slutz dslutz at verizon.com
Wed Nov 19 06:56:49 PST 2014


I think I know what is happening here.  But you are pointing at the 
wrong change.

commit 9b23cfb76b3a5e9eb5cc899eaf2f46bc46d33ba4

Is what I am guessing at this time is the issue.  I think that 
xen_enabled() is
returning false in pc_machine_initfn.  Where as in pc_init1 is is 
returning true.

I am thinking that:


diff --git a/hw/i386/pc_piix.c b/hw/i386/pc_piix.c
index 7bb97a4..3268c29 100644
--- a/hw/i386/pc_piix.c
+++ b/hw/i386/pc_piix.c
@@ -914,7 +914,7 @@ static QEMUMachine xenfv_machine = {
      .desc = "Xen Fully-virtualized PC",
      .init = pc_xen_hvm_init,
      .max_cpus = HVM_MAX_VCPUS,
-    .default_machine_opts = "accel=xen",
+    .default_machine_opts = "accel=xen,vmport=off",
      .hot_add_cpu = pc_hot_add_cpu,
  };
  #endif

Will fix your issue. I have not tested this yet.

     -Don Slutz


On 11/19/14 09:04, Fabio Fantoni wrote:
> Il 14/11/2014 12:25, Fabio Fantoni ha scritto:
>> dom0 xen-unstable from staging git with "x86/hvm: Extend HVM cpuid 
>> leaf with vcpu id" and "x86/hvm: Add per-vcpu evtchn upcalls" 
>> patches, and qemu 2.2 from spice git (spice/next commit 
>> e779fa0a715530311e6f59fc8adb0f6eca914a89):
>> https://github.com/Fantu/Xen/commits/rebase/m2r-staging
>
> I tried with qemu  tag v2.2.0-rc2 and crash still happen, here the 
> full backtrace of latest test:
>> Program received signal SIGSEGV, Segmentation fault.
>> 0x0000555555689b07 in vmport_ioport_read (opaque=0x5555564443a0, addr=0,
>>     size=4) at /mnt/vm/xen/Xen/tools/qemu-xen-dir/hw/misc/vmport.c:73
>> 73          eax = env->regs[R_EAX];
>> (gdb) bt full
>> #0  0x0000555555689b07 in vmport_ioport_read (opaque=0x5555564443a0, 
>> addr=0,
>>     size=4) at /mnt/vm/xen/Xen/tools/qemu-xen-dir/hw/misc/vmport.c:73
>>         s = 0x5555564443a0
>>         cs = 0x0
>>         cpu = 0x0
>>         __func__ = "vmport_ioport_read"
>>         env = 0x8250
>>         command = 0 '\000'
>>         eax = 0
>> #1  0x0000555555655fc4 in memory_region_read_accessor 
>> (mr=0x555556444428,
>>     addr=0, value=0x7fffffffd8d0, size=4, shift=0, mask=4294967295)
>>     at /mnt/vm/xen/Xen/tools/qemu-xen-dir/memory.c:410
>>         tmp = 0
>> #2  0x00005555556562b7 in access_with_adjusted_size (addr=0,
>>     value=0x7fffffffd8d0, size=4, access_size_min=4, access_size_max=4,
>>     access=0x555555655f62 <memory_region_read_accessor>, 
>> mr=0x555556444428)
>>     at /mnt/vm/xen/Xen/tools/qemu-xen-dir/memory.c:480
>>         access_mask = 4294967295
>>         access_size = 4
>>         i = 0
>> #3  0x00005555556590e9 in memory_region_dispatch_read1 
>> (mr=0x555556444428,
>>     addr=0, size=4) at /mnt/vm/xen/Xen/tools/qemu-xen-dir/memory.c:1077
>>         data = 0
>> #4  0x00005555556591b1 in memory_region_dispatch_read 
>> (mr=0x555556444428,
>>     addr=0, pval=0x7fffffffd9a8, size=4)
>> ---Type <return> to continue, or q <return> to quit---
>>     at /mnt/vm/xen/Xen/tools/qemu-xen-dir/memory.c:1099
>> No locals.
>> #5  0x000055555565cbbc in io_mem_read (mr=0x555556444428, addr=0,
>>     pval=0x7fffffffd9a8, size=4)
>>     at /mnt/vm/xen/Xen/tools/qemu-xen-dir/memory.c:1962
>> No locals.
>> #6  0x000055555560a1ca in address_space_rw (as=0x555555eaf920, 
>> addr=22104,
>>     buf=0x7fffffffda50 "\377\377\377\377", len=4, is_write=false)
>>     at /mnt/vm/xen/Xen/tools/qemu-xen-dir/exec.c:2167
>>         l = 4
>>         ptr = 0x555555a92d87 "%s/%d:\n"
>>         val = 7852232130387826944
>>         addr1 = 0
>>         mr = 0x555556444428
>>         error = false
>> #7  0x000055555560a38f in address_space_read (as=0x555555eaf920, 
>> addr=22104,
>>     buf=0x7fffffffda50 "\377\377\377\377", len=4)
>>     at /mnt/vm/xen/Xen/tools/qemu-xen-dir/exec.c:2205
>> No locals.
>> #8  0x000055555564fd4b in cpu_inl (addr=22104)
>>     at /mnt/vm/xen/Xen/tools/qemu-xen-dir/ioport.c:117
>>         buf = "\377\377\377\377"
>>         val = 21845
>> #9  0x0000555555670c73 in do_inp (addr=22104, size=4)
>>     at /mnt/vm/xen/Xen/tools/qemu-xen-dir/xen-hvm.c:684
>> ---Type <return> to continue, or q <return> to quit---
>> No locals.
>> #10 0x0000555555670ee0 in cpu_ioreq_pio (req=0x7ffff7ff3020)
>>     at /mnt/vm/xen/Xen/tools/qemu-xen-dir/xen-hvm.c:747
>>         i = 1
>> #11 0x00005555556714b3 in handle_ioreq (state=0x5555563c2510,
>>     req=0x7ffff7ff3020) at 
>> /mnt/vm/xen/Xen/tools/qemu-xen-dir/xen-hvm.c:853
>> No locals.
>> #12 0x0000555555671826 in cpu_handle_ioreq (opaque=0x5555563c2510)
>>     at /mnt/vm/xen/Xen/tools/qemu-xen-dir/xen-hvm.c:931
>>         state = 0x5555563c2510
>>         req = 0x7ffff7ff3020
>> #13 0x000055555596e240 in qemu_iohandler_poll 
>> (pollfds=0x555556389a30, ret=1)
>>     at iohandler.c:143
>>         revents = 1
>>         pioh = 0x5555563f7610
>>         ioh = 0x555556450a40
>> #14 0x000055555596de1c in main_loop_wait (nonblocking=0) at 
>> main-loop.c:495
>>         ret = 1
>>         timeout = 4294967295
>>         timeout_ns = 3965432
>> #15 0x0000555555756d3f in main_loop () at vl.c:1882
>>         nonblocking = false
>>         last_io = 0
>> #16 0x000055555575ea49 in main (argc=62, argv=0x7fffffffe048,
>>     envp=0x7fffffffe240) at vl.c:4400
>> ---Type <return> to continue, or q <return> to quit---
>>         i = 128
>>         snapshot = 0
>>         linux_boot = 0
>>         initrd_filename = 0x0
>>         kernel_filename = 0x0
>>         kernel_cmdline = 0x555555a48f86 ""
>>         boot_order = 0x555556387460 "dc"
>>         ds = 0x5555564b2040
>>         cyls = 0
>>         heads = 0
>>         secs = 0
>>         translation = 0
>>         hda_opts = 0x0
>>         opts = 0x5555563873b0
>>         machine_opts = 0x555556389010
>>         icount_opts = 0x0
>>         olist = 0x555555e57e80
>>         optind = 62
>>         optarg = 0x7fffffffe914 
>> "file=/mnt/vm/disks/FEDORA19.disk1.xm,if=ide,index=0,media=disk,format=raw,cache=writeback"
>>         loadvm = 0x0
>>         machine_class = 0x55555637d5c0
>>         cpu_model = 0x0
>>         vga_model = 0x0
>>         qtest_chrdev = 0x0
>> ---Type <return> to continue, or q <return> to quit---
>>         qtest_log = 0x0
>>         pid_file = 0x0
>>         incoming = 0x0
>>         show_vnc_port = 0
>>         defconfig = true
>>         userconfig = true
>>         log_mask = 0x0
>>         log_file = 0x0
>>         mem_trace = {malloc = 0x55555575a402 <malloc_and_trace>,
>>           realloc = 0x55555575a45a <realloc_and_trace>,
>>           free = 0x55555575a4c1 <free_and_trace>, calloc = 0, 
>> try_malloc = 0,
>>           try_realloc = 0}
>>         trace_events = 0x0
>>         trace_file = 0x0
>>         default_ram_size = 134217728
>>         maxram_size = 2130706432
>>         ram_slots = 0
>>         vmstate_dump_file = 0x0
>>         main_loop_err = 0x0
>>         __func__ = "main"
>
> I take a fast look in source based on calltrace and I saw this commit:
> http://git.qemu.org/?p=qemu.git;a=commit;h=37f9e258b64b3cf97c7c78df60660100c9eb5a21 
>
> xen-hvm.c: Add support for Xen access to vmport
> Can be the cause of regression and I must try another test reverting 
> this commit or is not related?
>
> Thanks for any reply anddo sorry for my bad english.
>
>>
>> Qemu crash on fedora 20 lxde (with software updates of some days ago) 
>> boot with this backtrace:
>>> Program received signal SIGSEGV, Segmentation fault.
>>> 0x0000555555689607 in vmport_ioport_read (opaque=0x555556440a20, 
>>> addr=0, size=4) at 
>>> /mnt/vm/xen/Xen/tools/qemu-xen-dir/hw/misc/vmport.c:73
>>> 73          eax = env->regs[R_EAX];
>>> (gdb) bt full
>>> #0  0x0000555555689607 in vmport_ioport_read (opaque=0x555556440a20, 
>>> addr=0, size=4) at 
>>> /mnt/vm/xen/Xen/tools/qemu-xen-dir/hw/misc/vmport.c:73
>>>         s = 0x555556440a20
>>>         cs = 0x0
>>>         cpu = 0x0
>>>         __func__ = "vmport_ioport_read"
>>>         env = 0x8250
>>>         command = 0 '\000'
>>>         eax = 0
>>> #1  0x0000555555655b9c in memory_region_read_accessor 
>>> (mr=0x555556440aa8, addr=0, value=0x7fffffffd8c0, size=4, shift=0, 
>>> mask=4294967295)
>>>     at /mnt/vm/xen/Xen/tools/qemu-xen-dir/memory.c:410
>>>         tmp = 0
>>> #2  0x0000555555655e8f in access_with_adjusted_size (addr=0, 
>>> value=0x7fffffffd8c0, size=4, access_size_min=4, access_size_max=4,
>>>     access=0x555555655b3a <memory_region_read_accessor>, 
>>> mr=0x555556440aa8) at /mnt/vm/xen/Xen/tools/qemu-xen-dir/memory.c:480
>>>         access_mask = 4294967295
>>>         access_size = 4
>>>         i = 0
>>> #3  0x0000555555658cc1 in memory_region_dispatch_read1 
>>> (mr=0x555556440aa8, addr=0, size=4) at 
>>> /mnt/vm/xen/Xen/tools/qemu-xen-dir/memory.c:1077
>>>         data = 0
>>> #4  0x0000555555658d89 in memory_region_dispatch_read 
>>> (mr=0x555556440aa8, addr=0, pval=0x7fffffffd998, size=4) at 
>>> /mnt/vm/xen/Xen/tools/qemu-xen-dir/memory.c:1099
>>> No locals.
>>> #5  0x000055555565c794 in io_mem_read (mr=0x555556440aa8, addr=0, 
>>> pval=0x7fffffffd998, size=4) at 
>>> /mnt/vm/xen/Xen/tools/qemu-xen-dir/memory.c:1962
>>> No locals.
>>> #6  0x0000555555609fae in address_space_rw (as=0x555555eae840, 
>>> addr=22104, buf=0x7fffffffda40 "\377\377\377\377", len=4, 
>>> is_write=false)
>>>     at /mnt/vm/xen/Xen/tools/qemu-xen-dir/exec.c:2169
>>>         l = 4
>>>         ptr = 0x0
>>>         val = 7964229952888770560
>>>         addr1 = 0
>>>         mr = 0x555556440aa8
>>>         error = false
>>> #7  0x000055555560a173 in address_space_read (as=0x555555eae840, 
>>> addr=22104, buf=0x7fffffffda40 "\377\377\377\377", len=4) at 
>>> /mnt/vm/xen/Xen/tools/qemu-xen-dir/exec.c:2207
>>> No locals.
>>> #8  0x000055555564fac7 in cpu_inl (addr=22104) at 
>>> /mnt/vm/xen/Xen/tools/qemu-xen-dir/ioport.c:117
>>>         buf = "\377\377\377\377"
>>>         val = 21845
>>> #9  0x000055555567084b in do_inp (addr=22104, size=4) at 
>>> /mnt/vm/xen/Xen/tools/qemu-xen-dir/xen-hvm.c:684
>>> No locals.
>>> #10 0x0000555555670ab8 in cpu_ioreq_pio (req=0x7ffff7ff3000) at 
>>> /mnt/vm/xen/Xen/tools/qemu-xen-dir/xen-hvm.c:747
>>>         i = 0
>>> #11 0x000055555567108b in handle_ioreq (state=0x5555563c1590, 
>>> req=0x7ffff7ff3000) at /mnt/vm/xen/Xen/tools/qemu-xen-dir/xen-hvm.c:853
>>> ---Type <return> to continue, or q <return> to quit---
>>> No locals.
>>> #12 0x00005555556713fe in cpu_handle_ioreq (opaque=0x5555563c1590) 
>>> at /mnt/vm/xen/Xen/tools/qemu-xen-dir/xen-hvm.c:931
>>>         state = 0x5555563c1590
>>>         req = 0x7ffff7ff3000
>>> #13 0x000055555596d874 in qemu_iohandler_poll 
>>> (pollfds=0x555556388a30, ret=1) at iohandler.c:143
>>>         revents = 1
>>>         pioh = 0x5555563f3c90
>>>         ioh = 0x555556515f80
>>> #14 0x000055555596d450 in main_loop_wait (nonblocking=0) at 
>>> main-loop.c:495
>>>         ret = 1
>>>         timeout = 4294967295
>>>         timeout_ns = 3418165
>>> #15 0x00005555557567b7 in main_loop () at vl.c:1882
>>>         nonblocking = false
>>>         last_io = 1
>>> #16 0x000055555575e4c1 in main (argc=62, argv=0x7fffffffe038, 
>>> envp=0x7fffffffe230) at vl.c:4400
>>>         i = 128
>>>         snapshot = 0
>>>         linux_boot = 0
>>>         initrd_filename = 0x0
>>>         kernel_filename = 0x0
>>>         kernel_cmdline = 0x555555a485c6 ""
>>>         boot_order = 0x5555563864e0 "dc"
>>>         ds = 0x5555564c71b0
>>>         cyls = 0
>>>         heads = 0
>>>         secs = 0
>>>         translation = 0
>>>         hda_opts = 0x0
>>>         opts = 0x555556386430
>>>         machine_opts = 0x555556388090
>>>         icount_opts = 0x0
>>>         olist = 0x555555e56da0
>>>         optind = 62
>>>         optarg = 0x7fffffffe914 
>>> "file=/mnt/vm/disks/FEDORA19.disk1.xm,if=ide,index=0,media=disk,format=raw,cache=writeback"
>>>         loadvm = 0x0
>>>         machine_class = 0x55555637c5c0
>>>         cpu_model = 0x0
>>>         vga_model = 0x0
>>>         qtest_chrdev = 0x0
>>> ---Type <return> to continue, or q <return> to quit---
>>>         qtest_log = 0x0
>>>         pid_file = 0x0
>>>         incoming = 0x0
>>>         show_vnc_port = 0
>>>         defconfig = true
>>>         userconfig = true
>>>         log_mask = 0x0
>>>         log_file = 0x0
>>>         mem_trace = {malloc = 0x555555759e7a <malloc_and_trace>, 
>>> realloc = 0x555555759ed2 <realloc_and_trace>, free = 0x555555759f39 
>>> <free_and_trace>, calloc = 0,
>>>           try_malloc = 0, try_realloc = 0}
>>>         trace_events = 0x0
>>>         trace_file = 0x0
>>>         default_ram_size = 134217728
>>>         maxram_size = 2013265920
>>>         ram_slots = 0
>>>         vmstate_dump_file = 0x0
>>>         main_loop_err = 0x0
>>>         __func__ = "main"
>>
>>
>>> xl -vvv create /etc/xen/FEDORA19.cfg
>>> Parsing config from /etc/xen/FEDORA19.cfg
>>> libxl: debug: libxl_create.c:1529:do_domain_create: ao 0xac2660: 
>>> create: how=(nil) callback=(nil) poller=0xac2af0
>>> libxl: debug: libxl_device.c:269:libxl__device_disk_set_backend: 
>>> Disk vdev=hda spec.backend=unknown
>>> libxl: debug: libxl_device.c:215:disk_try_backend: Disk vdev=hda, 
>>> backend phy unsuitable as phys path not a block device
>>> libxl: debug: libxl_device.c:298:libxl__device_disk_set_backend: 
>>> Disk vdev=hda, using backend qdisk
>>> libxl: debug: libxl_create.c:935:initiate_domain_create: running 
>>> bootloader
>>> libxl: debug: libxl_bootloader.c:323:libxl__bootloader_run: not a PV 
>>> domain, skipping bootloader
>>> libxl: debug: libxl_event.c:618:libxl__ev_xswatch_deregister: watch 
>>> w=0xac32f8: deregister unregistered
>>> xc: detail: elf_parse_binary: phdr: paddr=0x100000 memsz=0x26b324
>>> xc: detail: elf_parse_binary: memory: 0x100000 -> 0x36b324
>>> xc: detail: VIRTUAL MEMORY ARRANGEMENT:
>>> xc: detail:   Loader:   0000000000100000->000000000036b324
>>> xc: detail:   Modules:  0000000000000000->0000000000000000
>>> xc: detail:   TOTAL:    0000000000000000->0000000078000000
>>> xc: detail:   ENTRY:    0000000000100000
>>> xc: detail: PHYSICAL MEMORY ALLOCATION:
>>> xc: detail:   4KB PAGES: 0x0000000000000200
>>> xc: detail:   2MB PAGES: 0x00000000000003bf
>>> xc: detail:   1GB PAGES: 0x0000000000000000
>>> xc: detail: elf_load_binary: phdr 0 at 0x7f1f9729f000 -> 0x7f1f975012b0
>>> libxl: debug: libxl_device.c:269:libxl__device_disk_set_backend: 
>>> Disk vdev=hda spec.backend=qdisk
>>> libxl: debug: libxl_event.c:618:libxl__ev_xswatch_deregister: watch 
>>> w=0xac4ad0: deregister unregistered
>>> libxl: debug: libxl_dm.c:1415:libxl__spawn_local_dm: Spawning 
>>> device-model /usr/lib/xen/bin/qemu-gdb with arguments:
>>> libxl: debug: libxl_dm.c:1417:libxl__spawn_local_dm: 
>>> /usr/lib/xen/bin/qemu-gdb
>>> libxl: debug: libxl_dm.c:1417:libxl__spawn_local_dm: -xen-domid
>>> libxl: debug: libxl_dm.c:1417:libxl__spawn_local_dm:   9
>>> libxl: debug: libxl_dm.c:1417:libxl__spawn_local_dm: -chardev
>>> libxl: debug: libxl_dm.c:1417:libxl__spawn_local_dm: 
>>> socket,id=libxl-cmd,path=/var/run/xen/qmp-libxl-9,server,nowait
>>> libxl: debug: libxl_dm.c:1417:libxl__spawn_local_dm:   -mon
>>> libxl: debug: libxl_dm.c:1417:libxl__spawn_local_dm: 
>>> chardev=libxl-cmd,mode=control
>>> libxl: debug: libxl_dm.c:1417:libxl__spawn_local_dm: -nodefaults
>>> libxl: debug: libxl_dm.c:1417:libxl__spawn_local_dm:   -name
>>> libxl: debug: libxl_dm.c:1417:libxl__spawn_local_dm:   FEDORA
>>> libxl: debug: libxl_dm.c:1417:libxl__spawn_local_dm:   -k
>>> libxl: debug: libxl_dm.c:1417:libxl__spawn_local_dm:   it
>>> libxl: debug: libxl_dm.c:1417:libxl__spawn_local_dm:   -spice
>>> libxl: debug: libxl_dm.c:1417:libxl__spawn_local_dm: 
>>> port=6005,tls-port=0,addr=0.0.0.0,disable-ticketing,agent-mouse=on,disable-copy-paste
>>> libxl: debug: libxl_dm.c:1417:libxl__spawn_local_dm:   -device
>>> libxl: debug: libxl_dm.c:1417:libxl__spawn_local_dm: virtio-serial
>>> libxl: debug: libxl_dm.c:1417:libxl__spawn_local_dm: -chardev
>>> libxl: debug: libxl_dm.c:1417:libxl__spawn_local_dm: 
>>> spicevmc,id=vdagent,name=vdagent
>>> libxl: debug: libxl_dm.c:1417:libxl__spawn_local_dm:   -device
>>> libxl: debug: libxl_dm.c:1417:libxl__spawn_local_dm: 
>>> virtserialport,chardev=vdagent,name=com.redhat.spice.0
>>> libxl: debug: libxl_dm.c:1417:libxl__spawn_local_dm:   -device
>>> libxl: debug: libxl_dm.c:1417:libxl__spawn_local_dm: 
>>> qxl-vga,vram_size_mb=64,ram_size_mb=64
>>> libxl: debug: libxl_dm.c:1417:libxl__spawn_local_dm:   -boot
>>> libxl: debug: libxl_dm.c:1417:libxl__spawn_local_dm: order=dc
>>> libxl: debug: libxl_dm.c:1417:libxl__spawn_local_dm:   -device
>>> libxl: debug: libxl_dm.c:1417:libxl__spawn_local_dm: 
>>> ich9-usb-ehci1,id=usb,addr=0x1d.0x7,multifunction=on
>>> libxl: debug: libxl_dm.c:1417:libxl__spawn_local_dm:   -device
>>> libxl: debug: libxl_dm.c:1417:libxl__spawn_local_dm: 
>>> ich9-usb-uhci1,masterbus=usb.0,firstport=0,addr=0x1d.0,multifunction=on
>>> libxl: debug: libxl_dm.c:1417:libxl__spawn_local_dm:   -device
>>> libxl: debug: libxl_dm.c:1417:libxl__spawn_local_dm: 
>>> ich9-usb-uhci2,masterbus=usb.0,firstport=2,addr=0x1d.0x1,multifunction=on
>>> libxl: debug: libxl_dm.c:1417:libxl__spawn_local_dm:   -device
>>> libxl: debug: libxl_dm.c:1417:libxl__spawn_local_dm: 
>>> ich9-usb-uhci3,masterbus=usb.0,firstport=4,addr=0x1d.0x2,multifunction=on
>>> libxl: debug: libxl_dm.c:1417:libxl__spawn_local_dm: -chardev
>>> libxl: debug: libxl_dm.c:1417:libxl__spawn_local_dm: 
>>> spicevmc,name=usbredir,id=usbrc1
>>> libxl: debug: libxl_dm.c:1417:libxl__spawn_local_dm:   -device
>>> libxl: debug: libxl_dm.c:1417:libxl__spawn_local_dm: 
>>> usb-redir,chardev=usbrc1,id=usbrc1
>>> libxl: debug: libxl_dm.c:1417:libxl__spawn_local_dm: -chardev
>>> libxl: debug: libxl_dm.c:1417:libxl__spawn_local_dm: 
>>> spicevmc,name=usbredir,id=usbrc2
>>> libxl: debug: libxl_dm.c:1417:libxl__spawn_local_dm:   -device
>>> libxl: debug: libxl_dm.c:1417:libxl__spawn_local_dm: 
>>> usb-redir,chardev=usbrc2,id=usbrc2
>>> libxl: debug: libxl_dm.c:1417:libxl__spawn_local_dm: -chardev
>>> libxl: debug: libxl_dm.c:1417:libxl__spawn_local_dm: 
>>> spicevmc,name=usbredir,id=usbrc3
>>> libxl: debug: libxl_dm.c:1417:libxl__spawn_local_dm:   -device
>>> libxl: debug: libxl_dm.c:1417:libxl__spawn_local_dm: 
>>> usb-redir,chardev=usbrc3,id=usbrc3
>>> libxl: debug: libxl_dm.c:1417:libxl__spawn_local_dm: -chardev
>>> libxl: debug: libxl_dm.c:1417:libxl__spawn_local_dm: 
>>> spicevmc,name=usbredir,id=usbrc4
>>> libxl: debug: libxl_dm.c:1417:libxl__spawn_local_dm:   -device
>>> libxl: debug: libxl_dm.c:1417:libxl__spawn_local_dm: 
>>> usb-redir,chardev=usbrc4,id=usbrc4
>>> libxl: debug: libxl_dm.c:1417:libxl__spawn_local_dm: -soundhw
>>> libxl: debug: libxl_dm.c:1417:libxl__spawn_local_dm:   hda
>>> libxl: debug: libxl_dm.c:1417:libxl__spawn_local_dm:   -smp
>>> libxl: debug: libxl_dm.c:1417:libxl__spawn_local_dm: 2,maxcpus=2
>>> libxl: debug: libxl_dm.c:1417:libxl__spawn_local_dm:   -device
>>> libxl: debug: libxl_dm.c:1417:libxl__spawn_local_dm: 
>>> rtl8139,id=nic0,netdev=net0,mac=00:16:3e:18:e1:35
>>> libxl: debug: libxl_dm.c:1417:libxl__spawn_local_dm:   -netdev
>>> libxl: debug: libxl_dm.c:1417:libxl__spawn_local_dm: 
>>> type=tap,id=net0,ifname=vif9.0-emu,script=no,downscript=no
>>> libxl: debug: libxl_dm.c:1417:libxl__spawn_local_dm: -machine
>>> libxl: debug: libxl_dm.c:1417:libxl__spawn_local_dm:   xenfv
>>> libxl: debug: libxl_dm.c:1417:libxl__spawn_local_dm:   -m
>>> libxl: debug: libxl_dm.c:1417:libxl__spawn_local_dm:   1920
>>> libxl: debug: libxl_dm.c:1417:libxl__spawn_local_dm:   -drive
>>> libxl: debug: libxl_dm.c:1417:libxl__spawn_local_dm: 
>>> file=/mnt/vm/disks/FEDORA19.disk1.xm,if=ide,index=0,media=disk,format=raw,cache=writeback
>>> libxl: debug: libxl_event.c:570:libxl__ev_xswatch_register: watch 
>>> w=0xac3558 wpath=/local/domain/0/device-model/9/state token=3/0: 
>>> register slotnum=3
>>> libxl: debug: libxl_create.c:1545:do_domain_create: ao 0xac2660: 
>>> inprogress: poller=0xac2af0, flags=i
>>> libxl: debug: libxl_event.c:514:watchfd_callback: watch w=0xac3558 
>>> wpath=/local/domain/0/device-model/9/state token=3/0: event 
>>> epath=/local/domain/0/device-model/9/state
>>> libxl: debug: libxl_event.c:514:watchfd_callback: watch w=0xac3558 
>>> wpath=/local/domain/0/device-model/9/state token=3/0: event 
>>> epath=/local/domain/0/device-model/9/state
>>> libxl: debug: libxl_event.c:606:libxl__ev_xswatch_deregister: watch 
>>> w=0xac3558 wpath=/local/domain/0/device-model/9/state token=3/0: 
>>> deregister slotnum=3
>>> libxl: debug: libxl_event.c:618:libxl__ev_xswatch_deregister: watch 
>>> w=0xac3558: deregister unregistered
>>> libxl: debug: libxl_qmp.c:691:libxl__qmp_initialize: connected to 
>>> /var/run/xen/qmp-libxl-9
>>> libxl: debug: libxl_qmp.c:296:qmp_handle_response: message type: qmp
>>> libxl: debug: libxl_qmp.c:541:qmp_send_prepare: next qmp command: '{
>>>     "execute": "qmp_capabilities",
>>>     "id": 1
>>> }
>>> '
>>> libxl: debug: libxl_qmp.c:296:qmp_handle_response: message type: return
>>> libxl: debug: libxl_qmp.c:541:qmp_send_prepare: next qmp command: '{
>>>     "execute": "query-chardev",
>>>     "id": 2
>>> }
>>> '
>>> libxl: debug: libxl_qmp.c:296:qmp_handle_response: message type: return
>>> libxl: debug: libxl_qmp.c:541:qmp_send_prepare: next qmp command: '{
>>>     "execute": "query-vnc",
>>>     "id": 3
>>> }
>>> '
>>> libxl: debug: libxl_qmp.c:296:qmp_handle_response: message type: return
>>> libxl: debug: libxl_event.c:570:libxl__ev_xswatch_register: watch 
>>> w=0xac8368 wpath=/local/domain/0/backend/vif/9/0/state token=3/1: 
>>> register slotnum=3
>>> libxl: debug: libxl_event.c:514:watchfd_callback: watch w=0xac8368 
>>> wpath=/local/domain/0/backend/vif/9/0/state token=3/1: event 
>>> epath=/local/domain/0/backend/vif/9/0/state
>>> libxl: debug: libxl_event.c:810:devstate_watch_callback: backend 
>>> /local/domain/0/backend/vif/9/0/state wanted state 2 still waiting 
>>> state 1
>>> libxl: debug: libxl_event.c:514:watchfd_callback: watch w=0xac8368 
>>> wpath=/local/domain/0/backend/vif/9/0/state token=3/1: event 
>>> epath=/local/domain/0/backend/vif/9/0/state
>>> libxl: debug: libxl_event.c:806:devstate_watch_callback: backend 
>>> /local/domain/0/backend/vif/9/0/state wanted state 2 ok
>>> libxl: debug: libxl_event.c:606:libxl__ev_xswatch_deregister: watch 
>>> w=0xac8368 wpath=/local/domain/0/backend/vif/9/0/state token=3/1: 
>>> deregister slotnum=3
>>> libxl: debug: libxl_event.c:618:libxl__ev_xswatch_deregister: watch 
>>> w=0xac8368: deregister unregistered
>>> libxl: debug: libxl_device.c:1028:device_hotplug: calling hotplug 
>>> script: /etc/xen/scripts/vif-bridge online
>>> libxl: debug: libxl_aoutils.c:513:libxl__async_exec_start: forking 
>>> to execute: /etc/xen/scripts/vif-bridge online
>>> libxl: debug: libxl_event.c:618:libxl__ev_xswatch_deregister: watch 
>>> w=0xac83f0: deregister unregistered
>>> libxl: debug: libxl_device.c:1028:device_hotplug: calling hotplug 
>>> script: /etc/xen/scripts/vif-bridge add
>>> libxl: debug: libxl_aoutils.c:513:libxl__async_exec_start: forking 
>>> to execute: /etc/xen/scripts/vif-bridge add
>>> libxl: debug: libxl_event.c:618:libxl__ev_xswatch_deregister: watch 
>>> w=0xac83f0: deregister unregistered
>>> libxl: debug: libxl_event.c:618:libxl__ev_xswatch_deregister: watch 
>>> w=0xac83f0: deregister unregistered
>>> libxl: debug: libxl_event.c:1909:libxl__ao_progress_report: ao 
>>> 0xac2660: progress report: ignored
>>> libxl: debug: libxl_event.c:1739:libxl__ao_complete: ao 0xac2660: 
>>> complete, rc=0
>>> libxl: debug: libxl_event.c:1711:libxl__ao__destroy: ao 0xac2660: 
>>> destroy
>>> xc: debug: hypercall buffer: total allocations:704 total releases:704
>>> xc: debug: hypercall buffer: current allocations:0 maximum 
>>> allocations:4
>>> xc: debug: hypercall buffer: cache current size:4
>>> xc: debug: hypercall buffer: cache hits:692 misses:4 toobig:8
>>> xc: debug: hypercall buffer: total allocations:0 total releases:0
>>> xc: debug: hypercall buffer: current allocations:0 maximum 
>>> allocations:0
>>> xc: debug: hypercall buffer: cache current size:0
>>> xc: debug: hypercall buffer: cache hits:0 misses:0 toobig:0
>>
>> xl dmesg
>>> (d9) HVM Loader
>>> (d9) Detected Xen v4.5.0-rc
>>> (d9) Xenbus rings @0xfeffc000, event channel 1
>>> (d9) System requested SeaBIOS
>>> (d9) CPU speed is 2660 MHz
>>> (d9) Relocating guest memory for lowmem MMIO space disabled
>>> (XEN) irq.c:279: Dom9 PCI link 0 changed 0 -> 5
>>> (d9) PCI-ISA link 0 routed to IRQ5
>>> (XEN) irq.c:279: Dom9 PCI link 1 changed 0 -> 10
>>> (d9) PCI-ISA link 1 routed to IRQ10
>>> (XEN) irq.c:279: Dom9 PCI link 2 changed 0 -> 11
>>> (d9) PCI-ISA link 2 routed to IRQ11
>>> (XEN) irq.c:279: Dom9 PCI link 3 changed 0 -> 5
>>> (d9) PCI-ISA link 3 routed to IRQ5
>>> (d9) pci dev 01:3 INTA->IRQ10
>>> (d9) pci dev 02:0 INTA->IRQ11
>>> (d9) pci dev 03:0 INTA->IRQ5
>>> (d9) pci dev 04:0 INTA->IRQ5
>>> (d9) pci dev 05:0 INTA->IRQ10
>>> (d9) pci dev 06:0 INTA->IRQ11
>>> (d9) pci dev 1d:0 INTA->IRQ10
>>> (d9) pci dev 1d:1 INTB->IRQ11
>>> (d9) pci dev 1d:2 INTC->IRQ5
>>> (d9) pci dev 1d:7 INTD->IRQ5
>>> (d9) No RAM in high memory; setting high_mem resource base to 100000000
>>> (d9) pci dev 05:0 bar 10 size 004000000: 0f0000000
>>> (d9) pci dev 05:0 bar 14 size 004000000: 0f4000000
>>> (d9) pci dev 02:0 bar 14 size 001000000: 0f8000008
>>> (d9) pci dev 06:0 bar 30 size 000040000: 0f9000000
>>> (d9) pci dev 05:0 bar 30 size 000010000: 0f9040000
>>> (d9) pci dev 03:0 bar 10 size 000004000: 0f9050000
>>> (d9) pci dev 05:0 bar 18 size 000002000: 0f9054000
>>> (d9) pci dev 04:0 bar 14 size 000001000: 0f9056000
>>> (d9) pci dev 1d:7 bar 10 size 000001000: 0f9057000
>>> (d9) pci dev 02:0 bar 10 size 000000100: 00000c001
>>> (d9) pci dev 06:0 bar 10 size 000000100: 00000c101
>>> (d9) pci dev 06:0 bar 14 size 000000100: 0f9058000
>>> (d9) pci dev 04:0 bar 10 size 000000020: 00000c201
>>> (d9) pci dev 05:0 bar 1c size 000000020: 00000c221
>>> (d9) pci dev 1d:0 bar 20 size 000000020: 00000c241
>>> (d9) pci dev 1d:1 bar 20 size 000000020: 00000c261
>>> (d9) pci dev 1d:2 bar 20 size 000000020: 00000c281
>>> (d9) pci dev 01:1 bar 20 size 000000010: 00000c2a1
>>> (d9) Multiprocessor initialisation:
>>> (d9)  - CPU0 ... 36-bit phys ... fixed MTRRs ... var MTRRs [1/8] ... 
>>> done.
>>> (d9)  - CPU1 ... 36-bit phys ... fixed MTRRs ... var MTRRs [1/8] ... 
>>> done.
>>> (d9) Testing HVM environment:
>>> (d9)  - REP INSB across page boundaries ... passed
>>> (d9)  - GS base MSRs and SWAPGS ... passed
>>> (d9) Passed 2 of 2 tests
>>> (d9) Writing SMBIOS tables ...
>>> (d9) Loading SeaBIOS ...
>>> (d9) Creating MP tables ...
>>> (d9) Loading ACPI ...
>>> (d9) S3 disabled
>>> (d9) S4 disabled
>>> (d9) vm86 TSS at fc00a100
>>> (d9) BIOS map:
>>> (d9)  10000-100d3: Scratch space
>>> (d9)  c0000-fffff: Main BIOS
>>> (d9) E820 table:
>>> (d9)  [00]: 00000000:00000000 - 00000000:000a0000: RAM
>>> (d9)  HOLE: 00000000:000a0000 - 00000000:000c0000
>>> (d9)  [01]: 00000000:000c0000 - 00000000:00100000: RESERVED
>>> (d9)  [02]: 00000000:00100000 - 00000000:78000000: RAM
>>> (d9)  HOLE: 00000000:78000000 - 00000000:fc000000
>>> (d9)  [03]: 00000000:fc000000 - 00000001:00000000: RESERVED
>>> (d9) Invoking SeaBIOS ...
>>> (d9) SeaBIOS (version 
>>> debian/1.7.5-1-0-g506b58d-20140603_102943-testVS01OU)
>>> (d9)
>>> (d9) Found Xen hypervisor signature at 40000000
>>> (d9) Running on QEMU (i440fx)
>>> (d9) xen: copy e820...
>>> (d9) Relocating init from 0x000df619 to 0x77fae600 (size 71995)
>>> (d9) CPU Mhz=2660
>>> (d9) Found 13 PCI devices (max PCI bus is 00)
>>> (d9) Allocated Xen hypercall page at 77fff000
>>> (d9) Detected Xen v4.5.0-rc
>>> (d9) xen: copy BIOS tables...
>>> (d9) Copying SMBIOS entry point from 0x00010010 to 0x000f0f40
>>> (d9) Copying MPTABLE from 0xfc001160/fc001170 to 0x000f0e40
>>> (d9) Copying PIR from 0x00010030 to 0x000f0dc0
>>> (d9) Copying ACPI RSDP from 0x000100b0 to 0x000f0d90
>>> (d9) Using pmtimer, ioport 0xb008
>>> (d9) Scan for VGA option rom
>>> (d9) Running option rom at c000:0003
>>> (XEN) stdvga.c:147:d9v0 entering stdvga and caching modes
>>> (d9) pmm call arg1=0
>>> (d9) Turning on vga text mode console
>>> (d9) SeaBIOS (version 
>>> debian/1.7.5-1-0-g506b58d-20140603_102943-testVS01OU)
>>> (d9) Machine UUID 2eca57e6-bff7-404e-bbda-1926d614cd28
>>> (d9) EHCI init on dev 00:1d.7 (regs=0xf9057020)
>>> (d9) Found 0 lpt ports
>>> (d9) Found 0 serial ports
>>> (d9) ATA controller 1 at 1f0/3f4/0 (irq 14 dev 9)
>>> (d9) ATA controller 2 at 170/374/0 (irq 15 dev 9)
>>> (d9) ata0-0: QEMU HARDDISK ATA-7 Hard-Disk (10000 MiBytes)
>>> (d9) Searching bootorder for: /pci at i0cf8/*@1,1/drive at 0/disk at 0
>>> (d9) UHCI init on dev 00:1d.0 (io=c240)
>>> (d9) UHCI init on dev 00:1d.1 (io=c260)
>>> (d9) UHCI init on dev 00:1d.2 (io=c280)
>>> (d9) PS2 keyboard initialized
>>> (d9) All threads complete.
>>> (d9) Scan for option roms
>>> (d9) Running option rom at c980:0003
>>> (d9) pmm call arg1=1
>>> (d9) pmm call arg1=0
>>> (d9) pmm call arg1=1
>>> (d9) pmm call arg1=0
>>> (d9) Searching bootorder for: /pci at i0cf8/*@6
>>> (d9)
>>> (d9) Press F12 for boot menu.
>>> (d9)
>>> (d9) Searching bootorder for: HALT
>>> (d9) drive 0x000f0d40: PCHS=16383/16/63 translation=lba 
>>> LCHS=1024/255/63 s=20480000
>>> (d9) Space available for UMB: ca800-ef000, f0000-f0d40
>>> (d9) Returned 258048 bytes of ZoneHigh
>>> (d9) e820 map has 6 items:
>>> (d9)   0: 0000000000000000 - 000000000009fc00 = 1 RAM
>>> (d9)   1: 000000000009fc00 - 00000000000a0000 = 2 RESERVED
>>> (d9)   2: 00000000000f0000 - 0000000000100000 = 2 RESERVED
>>> (d9)   3: 0000000000100000 - 0000000077fff000 = 1 RAM
>>> (d9)   4: 0000000077fff000 - 0000000078000000 = 2 RESERVED
>>> (d9)   5: 00000000fc000000 - 0000000100000000 = 2 RESERVED
>>> (d9) enter handle_19:
>>> (d9)   NULL
>>> (d9) Booting from Hard Disk...
>>> (d9) Booting from 0000:7c00
>>> (XEN) irq.c:389: Dom9 callback via changed to Direct Vector 0xf3
>>> (XEN) irq.c:279: Dom9 PCI link 0 changed 5 -> 0
>>> (XEN) irq.c:279: Dom9 PCI link 1 changed 10 -> 0
>>> (XEN) irq.c:279: Dom9 PCI link 2 changed 11 -> 0
>>> (XEN) irq.c:279: Dom9 PCI link 3 changed 5 -> 0
>>
>> domU's xl cfg:
>>> name='FEDORA'
>>> builder="hvm"
>>> device_model_override="/usr/lib/xen/bin/qemu-gdb"
>>> memory=2048
>>> vcpus=2
>>> acpi_s3=0
>>> acpi_s4=0
>>> vif=['bridge=xenbr0']
>>> disk=['/mnt/vm/disks/FEDORA19.disk1.xm,raw,hda,rw']
>>> boot='dc'
>>> device_model_version='qemu-xen'
>>> vnc=0
>>> keymap="it"
>>> vga="qxl"
>>> spice=1
>>> spicehost='0.0.0.0'
>>> spiceport=6005
>>> spicedisable_ticketing=1
>>> spicevdagent=1
>>> spice_clipboard_sharing=0
>>> spiceusbredirection=4
>>> soundhw="hda"
>>
>> I tested also with stdvga instead of qxl vga but qemu crash always on 
>> fedora boot with same error.
>>
>> If you need more informations/tests tell me and I'll post them.
>>
>> Thanks for any reply and sorry for my bad english.
>>
>
>



More information about the Spice-devel mailing list