Il 12/05/2015 12:26, Fabio Fantoni ha scritto:
Il 12/05/2015 11:23, Fabio Fantoni ha scritto:
Il 11/05/2015 17:04, Fabio Fantoni ha scritto:
Il 21/04/2015 14:53, Stefano Stabellini ha scritto:
On Tue, 21 Apr 2015, Fabio Fantoni wrote:
Il 21/04/2015 12:49, Stefano Stabellini ha scritto:
On Mon, 20 Apr 2015, Fabio Fantoni wrote:
I updated xen and qemu from xen 4.5.0 with its upstream qemu included to
xen
4.5.1-pre with qemu upstream from stable-4.5 (changed Config.mk to use
revision "master").
After few minutes I booted windows 7 64 bit domU qemu crash, tried 2 times
with same result.

In the domU's qemu log:
qemu-system-i386: malloc.c:3096: sYSMALLOc: Assertion `(old_top ==
(((mbinptr) (((char *) &((av)->bins[((1) - 1) * 2])) -
__builtin_offsetof
(struct malloc_chunk, fd)))) && old_size == 0) || ((unsigned long)
(old_size) >= (unsigned long)((((__builtin_offsetof (struct
malloc_chunk,
fd_nextsize))+((2 * (sizeof(size_t))) - 1)) & ~((2 * (sizeof(size_t))) - 1))) && ((old_top)->size & 0x1) && ((unsigned long)old_end & pagemask)
==
0)' failed.
Killing all inferiors
In attachment the full backtrace of qemu crash.

With a fast search after I saw the backtrace I found a probable cause of
regression (I'm not sure):
http://xenbits.xen.org/gitweb/?p=staging/qemu-upstream-4.5-testing.git;a=commit;h=5c3402816aaddb15156c69df73c54abe4e1c76aa
spice: make sure we don't overflow ssd->buf

Added also qemu-devel and spice-devel as cc.

If you need more informations/tests tell me and I'll post them.
   Maybe you could try to revert the offending commit
(5c3402816aaddb15156c69df73c54abe4e1c76aa)? Or even better bisect the
crash?
Thanks for your reply.

I reverted to 4.5.0 on dom0 for now on that system because I'm busy trying to found another problem that cause very bad performance without errors or nothing in logs :( I don't know if if xen related, kernel related or other for
now.

About this regression with spice I'll do further tests in next days (probably starting reverting the spice patch in qemu) but any help is appreciated. Based on data I have for now is possible that the problem is that qemu try to allocate other ram or videoram after domU create but with xen is not possible? In the spice related patch I saw something about dynamic allocation for
example.
It is probably caused by a commit in the range:

1ebb75b1fee779621b63e84fefa7b07354c43a99..0b8fb1ec3d666d1eb8bbff56c76c5e6daa2789e4

there are only 10 commits in that range. By using git bisect you should
be able to narrow it down in just 3 tests.

Sorry for delay, I was busy with many things, today I retried with updated stable-4.5 and also reverting "spice: make sure we don't overflow ssd->buf" (in a second test) but in both case regression remain :(
Tomorrow probably I'll do other tests.

I did another test, reverting this instead:
http://xenbits.xen.org/gitweb/?p=qemu-upstream-4.5-testing.git;a=commit;h=c9ac5f816bf3a8b56f836b078711dcef6e5c90b8 And now seems I'm unable to reproduce the regression, before happen after few seconds up to 1-2 minutes, now I use the same domU 15-20 minutes without problem. Probably is the cause of regression even if seems strange that on unstable with same patch on tests of some days ago didn't happen.

Any ideas?

Thanks for any reply and sorry for my bad english.

Bad news, qemu crash still happen even if this time in qemu log there is another output, see attachment.
After take a look on the other patches I saw:
http://xenbits.xen.org/gitweb/?p=qemu-upstream-4.5-testing.git;a=commitdiff;h=7154fba0e51ec985ef621965d1b7120ad424fcbf With "Conflicts: hw/display/vga.c" in description I'll try to revert it instead.

Or someone can tell me another probable test I can try?

Tried also to revet the patch above with same result, so I retried with qemu from 4.5.0 and seems the crash happen also in this case...I'm going crazy :(

In attachment full gdb log.

Any ideas on how to found the problem please?

Thanks for any reply and sorry for my bad english.
Full backtrace:
#0  0x00007ffff36e8165 in *__GI_raise (sig=<optimized out>) at 
../nptl/sysdeps/unix/sysv/linux/raise.c:64
        pid = <optimized out>
        selftid = <optimized out>
#1  0x00007ffff36eb3e0 in *__GI_abort () at abort.c:92
        act = {__sigaction_handler = {sa_handler = 0x555558ddeba0, sa_sigaction 
= 0x555558ddeba0}, sa_mask = {__val = {140737278660816, 140737014337136, 4, 
140737014337376, 140737277706678, 206158430256, 140737014337416, 
140737014337168, 87, 226653584, 140737351936019, 140737488348083, 
140737278647399, 140737278651152, 3096, 140737277299604}}, sa_flags = 
-474017696, sa_restorer = 0x7ffff36b9c60}
        sigs = {__val = {32, 0 <repeats 15 times>}}
#2  0x00007ffff372bdea in __malloc_assert (assertion=<optimized out>, 
file=<optimized out>, line=<optimized out>, function=<optimized out>) at 
malloc.c:351
No locals.
#3  0x00007ffff372ed13 in sYSMALLOc (av=<optimized out>, nb=<optimized out>) at 
malloc.c:3093
        snd_brk = <optimized out>
        front_misalign = <optimized out>
        remainder = <optimized out>
        tried_mmap = false
        old_size = <optimized out>
        size = <optimized out>
        old_end = 0x555558ddeba0 ""
        correction = <optimized out>
        end_misalign = <optimized out>
        aligned_brk = <optimized out>
        p = <optimized out>
        pagemask = 4095
#4  _int_malloc (av=0x7ffff3a3ce40, bytes=<optimized out>) at malloc.c:4776
        p = <optimized out>
        iters = <optimized out>
        nb = 4196368
        idx = <optimized out>
        bin = <optimized out>
        victim = 0x555558ddeba0
        size = 0
        victim_index = <optimized out>
        remainder = <optimized out>
        remainder_size = <optimized out>
        block = 4
        bit = <optimized out>
        map = 2138988542
        fwd = <optimized out>
        bck = <optimized out>
        errstr = <optimized out>
        __func__ = "_int_malloc"
#5  0x00007ffff3730a70 in *__GI___libc_malloc (bytes=4196352) at malloc.c:3660
        ar_ptr = 0x7ffff3a3ce40
        victim = 0x400800
        __func__ = "__libc_malloc"
#6  0x00007ffff4b1d280 in spice_malloc (n_bytes=4196352) at mem.c:93
        mem = <optimized out>
        __FUNCTION__ = "spice_malloc"
#7  0x00007ffff4b1d6ee in spice_chunks_linearize (chunks=0x7fffdc088fa0) at 
mem.c:226
        data = <optimized out>
        p = <optimized out>
        i = <optimized out>
#8  0x00007ffff4afb4e6 in canvas_bitmap_to_surface 
(canvas=canvas@entry=0x7fffdc0eef70, bitmap=bitmap@entry=0x7fffdc044e88, 
palette=0x0, want_original=1) at ../spice-common/common/canvas_base.c:738
        src = <optimized out>
        image = <optimized out>
        format = <optimized out>
        __FUNCTION__ = "canvas_bitmap_to_surface"
#9  0x00007ffff4afb698 in canvas_get_bits (want_original=<optimized out>, 
bitmap=0x7fffdc044e88, canvas=0x7fffdc0eef70) at 
../spice-common/common/canvas_base.c:1067
        palette = <optimized out>
#10 canvas_get_image_internal (canvas=canvas@entry=0x7fffdc0eef70, 
image=0x7fffdc044e70, want_original=<optimized out>, want_original@entry=0, 
real_get=real_get@entry=1) at ../spice-common/common/canvas_base.c:1253
        descriptor = 0x7fffdc044e70
        surface = <optimized out>
        converted = <optimized out>
        wanted_format = 3691966320
        surface_format = <optimized out>
        saved_want_original = <optimized out>
        __FUNCTION__ = "canvas_get_image_internal"
#11 0x00007ffff4afc0da in canvas_get_image (canvas=canvas@entry=0x7fffdc0eef70, 
image=<optimized out>, want_original=want_original@entry=0) at 
../spice-common/common/canvas_base.c:1397
No locals.
#12 0x00007ffff4afe42e in canvas_draw_copy (spice_canvas=0x7fffdc0eef70, 
bbox=0x7fffdc0e9c80, clip=<optimized out>, copy=0x7fffe3bf1320) at 
../spice-common/common/canvas_base.c:2370
        canvas = 0x7fffdc0eef70
        dest_region = {extents = {x1 = 5, y1 = 5, x2 = 161, y2 = 33}, data = 
0x0}
        surface_canvas = <optimized out>
        src_image = <optimized out>
        rop = SPICE_ROP_COPY
        __FUNCTION__ = "canvas_draw_copy"
#13 0x00007ffff4ad120c in red_draw_qxl_drawable 
(worker=worker@entry=0x7fffe3218010, drawable=drawable@entry=0x7fffe33d8a58) at 
red_worker.c:4421
        copy = {src_bitmap = 0x7fffdc044e70, src_area = {left = 5, top = 5, 
right = 161, bottom = 33}, rop_descriptor = 8, scale_mode = 1 '\001', mask = 
{flags = 194 '\302', pos = {x = -1027423550, y = -1027423550}, bitmap = 0x0}}
        img1 = {descriptor = {id = 140736884378864, type = 80 'P', flags = 21 
'\025', width = 32767, height = 4294902015}, u = {bitmap = {format = 112 'p', 
flags = 10 '\n', x = 32767, y = 3865334188, stride = 32767, palette = 
0x7fffe66451c4, palette_id = 138783, data = 0x0}, quic = {data_size = 
4084402800, data = 0x7fffe66451ac}, surface = {surface_id = 4084402800}, lz_rgb 
= {data_size = 4084402800, data = 0x7fffe66451ac}, lz_plt = {flags = 112 'p', 
data_size = 32767, palette = 0x7fffe66451ac, palette_id = 140737058722244, data 
= 0x21e1f}, jpeg = {data_size = 4084402800, data = 0x7fffe66451ac}, lz4 = 
{data_size = 4084402800, data = 0x7fffe66451ac}, zlib_glz = {glz_data_size = 
4084402800, data_size = 32767, data = 0x7fffe66451ac}, jpeg_alpha = {flags = 
112 'p', jpeg_size = 32767, data_size = 3865334188, data = 0x7fffe66451c4}}}
        img2 = {descriptor = {id = 140737058722236, type = 196 '\304', flags = 
81 'Q', width = 32767, height = 3786207248}, u = {bitmap = {format = 53 '5', 
flags = 156 '\234', x = 32767, y = 22176, stride = 0, palette = 0x5555566fc920, 
palette_id = 140737058708356, data = 0x539}, quic = {data_size = 4104887349, 
data = 0x56a0}, surface = {surface_id = 4104887349}, lz_rgb = {data_size = 
4104887349, data = 0x56a0}, lz_plt = {flags = 53 '5', data_size = 32767, 
palette = 0x56a0, palette_id = 93825010747680, data = 0x7fffe6641b84}, jpeg = 
{data_size = 4104887349, data = 0x56a0}, lz4 = {data_size = 4104887349, data = 
0x56a0}, zlib_glz = {glz_data_size = 4104887349, data_size = 32767, data = 
0x56a0}, jpeg_alpha = {flags = 53 '5', jpeg_size = 32767, data_size = 22176, 
data = 0x5555566fc920}}}
        surface = 0x7fffe32182f0
        canvas = 0x7fffdc0eef70
        clip = {type = 0 '\000', rects = 0x0}
        __FUNCTION__ = "red_draw_qxl_drawable"
#14 0x00007ffff4adfad5 in red_draw_drawable (drawable=0x7fffe33d8a58, 
worker=0x7fffe3218010) at red_worker.c:4534
No locals.
#15 red_update_area (worker=worker@entry=0x7fffe3218010, 
area=area@entry=0x7fffe3bf1b60, surface_id=surface_id@entry=0) at 
red_worker.c:4787
        container = <optimized out>
        surface = 0x7fffe32182f0
        ring = 0x7fffe3218308
        ring_item = <optimized out>
        rgn = {extents = {x1 = 0, y1 = 0, x2 = 1366, y2 = 768}, data = 0x0}
        last = 0x7fffe33c9cd8
        now = 0x7fffe33d8a58
        __FUNCTION__ = "red_update_area"
#16 0x00007ffff4ae9644 in handle_dev_update_async (opaque=0x7fffe3218010, 
payload=<optimized out>) at red_worker.c:10992
        worker = 0x7fffe3218010
        msg = <optimized out>
        rect = {left = 0, top = 0, right = 1366, bottom = 768}
        qxl_dirty_rects = <optimized out>
        num_dirty_rects = <optimized out>
        surface = <optimized out>
        surface_id = 0
        qxl_area = {top = 0, left = 0, bottom = 768, right = 1366}
        clear_dirty_region = 1
        __FUNCTION__ = "handle_dev_update_async"
        __func__ = "handle_dev_update_async"
#17 0x00007ffff4ac85d4 in dispatcher_handle_single_read 
(dispatcher=0x555556415e28) at dispatcher.c:139
        ret = <optimized out>
        type = <optimized out>
        msg = 0x5555563cd330
        ack = 4294967295
        payload = 0x5555563daf20 "P\177=VUU"
#18 dispatcher_handle_recv_read (dispatcher=0x555556415e28) at dispatcher.c:162
No locals.
#19 0x00007ffff4aebc5c in red_worker_main (arg=<optimized out>) at 
red_worker.c:12175
        events = <optimized out>
        i = <optimized out>
        num_events = 1
        timers_queue_timeout = <optimized out>
        worker = 0x7fffe3218010
        __FUNCTION__ = "red_worker_main"
#20 0x00007ffff3a47b50 in start_thread (arg=<optimized out>) at 
pthread_create.c:304
        __res = <optimized out>
        pd = 0x7fffe3bf2700
        unwind_buf = {cancel_jmp_buf = {{jmp_buf = {140737014343424, 
-7079689987510599981, 140737281073696, 140737014344128, 140737354125376, 3, 
7079698237168975571, 7079663285551136467}, mask_was_saved = 0}}, priv = {pad = 
{0x0, 0x0, 0x0, 0x0}, data = {prev = 0x0, cleanup = 0x0, canceltype = 0}}}
        not_first_call = <optimized out>
        freesize = <optimized out>
        __PRETTY_FUNCTION__ = "start_thread"
#21 0x00007ffff379195d in clone () at 
../sysdeps/unix/sysv/linux/x86_64/clone.S:112
No locals.
#22 0x0000000000000000 in ?? ()
No symbol table info available.


Registers:
rax            0x0      0
rbx            0x7ffff3a3ce98   140737280986776
rcx            0xffffffffffffffff       -1
rdx            0x6      6
rsi            0x1067   4199
rdi            0x1053   4179
rbp            0x7ffff3a3ce40   0x7ffff3a3ce40
rsp            0x7fffe3bf0e38   0x7fffe3bf0e38
r8             0x7fffe3bf2700   140737014343424
r9             0x656e6769736e7528       7308892947874739496
r10            0x8      8
r11            0x206    518
r12            0x555558ddeba0   93825051519904
r13            0x0      0
r14            0x7f7e5ffe       2138988542
r15            0x4      4
rip            0x7ffff36e8165   0x7ffff36e8165 <*__GI_raise+53>
eflags         0x206    [ PF IF ]
cs             0x33     51
ss             0x2b     43
ds             0x0      0
es             0x0      0
fs             0x0      0
gs             0x0      0


Current instructions:
=> 0x7ffff36e8165 <*__GI_raise+53>:     cmp    $0xfffffffffffff000,%rax
   0x7ffff36e816b <*__GI_raise+59>:     ja     0x7ffff36e8182 <*__GI_raise+82>
   0x7ffff36e816d <*__GI_raise+61>:     repz retq 
   0x7ffff36e816f <*__GI_raise+63>:     nop
   0x7ffff36e8170 <*__GI_raise+64>:     test   %eax,%eax
   0x7ffff36e8172 <*__GI_raise+66>:     jg     0x7ffff36e8155 <*__GI_raise+37>
   0x7ffff36e8174 <*__GI_raise+68>:     test   $0x7fffffff,%eax
   0x7ffff36e8179 <*__GI_raise+73>:     jne    0x7ffff36e8192 <*__GI_raise+98>
   0x7ffff36e817b <*__GI_raise+75>:     mov    %esi,%eax
   0x7ffff36e817d <*__GI_raise+77>:     nopl   (%rax)
   0x7ffff36e8180 <*__GI_raise+80>:     jmp    0x7ffff36e8155 <*__GI_raise+37>
   0x7ffff36e8182 <*__GI_raise+82>:     mov    0x352c8f(%rip),%rdx        # 
0x7ffff3a3ae18
   0x7ffff36e8189 <*__GI_raise+89>:     neg    %eax
   0x7ffff36e818b <*__GI_raise+91>:     mov    %eax,%fs:(%rdx)
   0x7ffff36e818e <*__GI_raise+94>:     or     $0xffffffff,%eax
   0x7ffff36e8191 <*__GI_raise+97>:     retq   


Threads backtrace:

Thread 9 (Thread 0x7fffdbfff700 (LWP 4313)):
#0  sem_timedwait () at 
../nptl/sysdeps/unix/sysv/linux/x86_64/sem_timedwait.S:106
#1  0x00005555559b38cc in qemu_sem_timedwait (sem=0x5555563dcea8, ms=10000) at 
util/qemu-thread-posix.c:257
#2  0x0000555555849892 in worker_thread (opaque=0x5555563dce10) at 
thread-pool.c:97
#3  0x00007ffff3a47b50 in start_thread (arg=<optimized out>) at 
pthread_create.c:304
#4  0x00007ffff379195d in clone () at 
../sysdeps/unix/sysv/linux/x86_64/clone.S:112
#5  0x0000000000000000 in ?? ()

Thread 8 (Thread 0x7fffe0acb700 (LWP 4312)):
#0  sem_timedwait () at 
../nptl/sysdeps/unix/sysv/linux/x86_64/sem_timedwait.S:106
#1  0x00005555559b38cc in qemu_sem_timedwait (sem=0x5555563dcea8, ms=10000) at 
util/qemu-thread-posix.c:257
#2  0x0000555555849892 in worker_thread (opaque=0x5555563dce10) at 
thread-pool.c:97
#3  0x00007ffff3a47b50 in start_thread (arg=<optimized out>) at 
pthread_create.c:304
#4  0x00007ffff379195d in clone () at 
../sysdeps/unix/sysv/linux/x86_64/clone.S:112
#5  0x0000000000000000 in ?? ()

Thread 7 (Thread 0x7fffe3017700 (LWP 4200)):
#0  pthread_cond_wait@@GLIBC_2.3.2 () at 
../nptl/sysdeps/unix/sysv/linux/x86_64/pthread_cond_wait.S:162
#1  0x00005555559b360a in qemu_cond_wait (cond=0x5555564202a0, 
mutex=0x5555564202d0) at util/qemu-thread-posix.c:135
#2  0x00005555558731d6 in vnc_worker_thread_loop (queue=0x5555564202a0) at 
ui/vnc-jobs.c:222
#3  0x0000555555873739 in vnc_worker_thread (arg=0x5555564202a0) at 
ui/vnc-jobs.c:323
#4  0x00007ffff3a47b50 in start_thread (arg=<optimized out>) at 
pthread_create.c:304
#5  0x00007ffff379195d in clone () at 
../sysdeps/unix/sysv/linux/x86_64/clone.S:112
#6  0x0000000000000000 in ?? ()

Thread 6 (Thread 0x7fffe3bf2700 (LWP 4199)):
#0  0x00007ffff36e8165 in *__GI_raise (sig=<optimized out>) at 
../nptl/sysdeps/unix/sysv/linux/raise.c:64
#1  0x00007ffff36eb3e0 in *__GI_abort () at abort.c:92
#2  0x00007ffff372bdea in __malloc_assert (assertion=<optimized out>, 
file=<optimized out>, line=<optimized out>, function=<optimized out>) at 
malloc.c:351
#3  0x00007ffff372ed13 in sYSMALLOc (av=<optimized out>, nb=<optimized out>) at 
malloc.c:3093
#4  _int_malloc (av=0x7ffff3a3ce40, bytes=<optimized out>) at malloc.c:4776
#5  0x00007ffff3730a70 in *__GI___libc_malloc (bytes=4196352) at malloc.c:3660
#6  0x00007ffff4b1d280 in spice_malloc (n_bytes=4196352) at mem.c:93
#7  0x00007ffff4b1d6ee in spice_chunks_linearize (chunks=0x7fffdc088fa0) at 
mem.c:226
#8  0x00007ffff4afb4e6 in canvas_bitmap_to_surface 
(canvas=canvas@entry=0x7fffdc0eef70, bitmap=bitmap@entry=0x7fffdc044e88, 
palette=0x0, want_original=1) at ../spice-common/common/canvas_base.c:738
#9  0x00007ffff4afb698 in canvas_get_bits (want_original=<optimized out>, 
bitmap=0x7fffdc044e88, canvas=0x7fffdc0eef70) at 
../spice-common/common/canvas_base.c:1067
#10 canvas_get_image_internal (canvas=canvas@entry=0x7fffdc0eef70, 
image=0x7fffdc044e70, want_original=<optimized out>, want_original@entry=0, 
real_get=real_get@entry=1) at ../spice-common/common/canvas_base.c:1253
#11 0x00007ffff4afc0da in canvas_get_image (canvas=canvas@entry=0x7fffdc0eef70, 
image=<optimized out>, want_original=want_original@entry=0) at 
../spice-common/common/canvas_base.c:1397
#12 0x00007ffff4afe42e in canvas_draw_copy (spice_canvas=0x7fffdc0eef70, 
bbox=0x7fffdc0e9c80, clip=<optimized out>, copy=0x7fffe3bf1320) at 
../spice-common/common/canvas_base.c:2370
#13 0x00007ffff4ad120c in red_draw_qxl_drawable 
(worker=worker@entry=0x7fffe3218010, drawable=drawable@entry=0x7fffe33d8a58) at 
red_worker.c:4421
#14 0x00007ffff4adfad5 in red_draw_drawable (drawable=0x7fffe33d8a58, 
worker=0x7fffe3218010) at red_worker.c:4534
#15 red_update_area (worker=worker@entry=0x7fffe3218010, 
area=area@entry=0x7fffe3bf1b60, surface_id=surface_id@entry=0) at 
red_worker.c:4787
#16 0x00007ffff4ae9644 in handle_dev_update_async (opaque=0x7fffe3218010, 
payload=<optimized out>) at red_worker.c:10992
#17 0x00007ffff4ac85d4 in dispatcher_handle_single_read 
(dispatcher=0x555556415e28) at dispatcher.c:139
#18 dispatcher_handle_recv_read (dispatcher=0x555556415e28) at dispatcher.c:162
#19 0x00007ffff4aebc5c in red_worker_main (arg=<optimized out>) at 
red_worker.c:12175
#20 0x00007ffff3a47b50 in start_thread (arg=<optimized out>) at 
pthread_create.c:304
#21 0x00007ffff379195d in clone () at 
../sysdeps/unix/sysv/linux/x86_64/clone.S:112
#22 0x0000000000000000 in ?? ()

Thread 5 (Thread 0x7fffe9621700 (LWP 4198)):
#0  sem_timedwait () at 
../nptl/sysdeps/unix/sysv/linux/x86_64/sem_timedwait.S:106
#1  0x00005555559b38cc in qemu_sem_timedwait (sem=0x5555563dcea8, ms=10000) at 
util/qemu-thread-posix.c:257
#2  0x0000555555849892 in worker_thread (opaque=0x5555563dce10) at 
thread-pool.c:97
#3  0x00007ffff3a47b50 in start_thread (arg=<optimized out>) at 
pthread_create.c:304
#4  0x00007ffff379195d in clone () at 
../sysdeps/unix/sysv/linux/x86_64/clone.S:112
#5  0x0000000000000000 in ?? ()

Thread 4 (Thread 0x7fffe9f23700 (LWP 4197)):
#0  do_sigwait (set=0x7fffe9f22c50, sig=0x7fffe9f22c40) at 
../nptl/sysdeps/unix/sysv/linux/../../../../../sysdeps/unix/sysv/linux/sigwait.c:65
#1  0x00007ffff3a4fe67 in __sigwait (set=<optimized out>, sig=<optimized out>) 
at 
../nptl/sysdeps/unix/sysv/linux/../../../../../sysdeps/unix/sysv/linux/sigwait.c:100
#2  0x0000555555893e0a in qemu_dummy_cpu_thread_fn (arg=0x55555636fa30) at 
/mnt/raid-vm/RW/source/xen/Xen-stable/tools/qemu-xen-dir/cpus.c:911
#3  0x00007ffff3a47b50 in start_thread (arg=<optimized out>) at 
pthread_create.c:304
#4  0x00007ffff379195d in clone () at 
../sysdeps/unix/sysv/linux/x86_64/clone.S:112
#5  0x0000000000000000 in ?? ()

Thread 3 (Thread 0x7fffea724700 (LWP 4196)):
#0  do_sigwait (set=0x7fffea723c50, sig=0x7fffea723c40) at 
../nptl/sysdeps/unix/sysv/linux/../../../../../sysdeps/unix/sysv/linux/sigwait.c:65
#1  0x00007ffff3a4fe67 in __sigwait (set=<optimized out>, sig=<optimized out>) 
at 
../nptl/sysdeps/unix/sysv/linux/../../../../../sysdeps/unix/sysv/linux/sigwait.c:100
#2  0x0000555555893e0a in qemu_dummy_cpu_thread_fn (arg=0x55555635ecf0) at 
/mnt/raid-vm/RW/source/xen/Xen-stable/tools/qemu-xen-dir/cpus.c:911
#3  0x00007ffff3a47b50 in start_thread (arg=<optimized out>) at 
pthread_create.c:304
#4  0x00007ffff379195d in clone () at 
../sysdeps/unix/sysv/linux/x86_64/clone.S:112
#5  0x0000000000000000 in ?? ()

Thread 2 (Thread 0x7ffff7ff1700 (LWP 4184)):
#0  0x00007ffff3a4f1fd in read () at ../sysdeps/unix/syscall-template.S:82
#1  0x00007ffff5229626 in read_all (fd=26, data=0x7fffdc096cc0, 
data@entry=0x20, len=len@entry=16, nonblocking=nonblocking@entry=0) at xs.c:378
#2  0x00007ffff5229743 in read_message (h=h@entry=0x55555632ee90, 
nonblocking=nonblocking@entry=0) at xs.c:1150
#3  0x00007ffff522a05e in read_thread (arg=0x55555632ee90) at xs.c:1222
#4  0x00007ffff3a47b50 in start_thread (arg=<optimized out>) at 
pthread_create.c:304
#5  0x00007ffff379195d in clone () at 
../sysdeps/unix/sysv/linux/x86_64/clone.S:112
#6  0x0000000000000000 in ?? ()

Thread 1 (Thread 0x7ffff7ef6900 (LWP 4179)):
#0  0x00007ffff3786de1 in ppoll (fds=<optimized out>, nfds=<optimized out>, 
timeout=<optimized out>, sigmask=<optimized out>) at 
../sysdeps/unix/sysv/linux/ppoll.c:58
#1  0x0000555555822f96 in qemu_poll_ns (fds=0x5555566fbe00, nfds=19, 
timeout=63041) at qemu-timer.c:316
#2  0x00005555557d74b0 in os_host_main_loop_wait (timeout=63041) at 
main-loop.c:229
#3  0x00005555557d7599 in main_loop_wait (nonblocking=0) at main-loop.c:484
#4  0x00005555558830a4 in main_loop () at vl.c:2056
#5  0x000055555588ab5f in main (argc=68, argv=0x7fffffffdf98, 
envp=0x7fffffffe1c0) at vl.c:4535

Reply via email to