** Changed in: qemu Status: New => Fix Committed -- You received this bug notification because you are a member of qemu- devel-ml, which is subscribed to QEMU. https://bugs.launchpad.net/bugs/1570134
Title: While committing snapshot qemu crashes with SIGABRT Status in QEMU: Fix Committed Bug description: Information: OS: Slackware64-Current Compiled with: gcc version 5.3.0 (GCC) / glibc 2.23 Compiled using: CFLAGS="-O2 -fPIC" \ CXXFLAGS="-O2 -fPIC" \ LDFLAGS="-L/usr/lib64" \ ./configure \ --prefix=/usr \ --sysconfdir=/etc \ --localstatedir=/var \ --libdir=/usr/lib64 \ --enable-spice \ --enable-kvm \ --enable-glusterfs \ --enable-libiscsi \ --enable-libusb \ --target-list=x86_64-softmmu,i386-softmmu \ --enable-debug Source: qemu-2.5.1.tar.bz2 Running as: /usr/bin/qemu-system-x86_64 -name test1,debug-threads=on -S -machine pc-1.1,accel=kvm,usb=off -m 4096 -realtime mlock=off -smp 2,sockets=2,cores=1,threads=1 -uuid 4b30ec13-6609-4a56-8731-d400c38189ef -no-user-config -nodefaults -chardev socket,id=charmonitor,path=/var/lib/libvirt/qemu/domain-4-test1/monitor.sock,server,nowait -mon chardev=charmonitor,id=monitor,mode=control -rtc base=localtime,clock=vm,driftfix=slew -global kvm- pit.lost_tick_policy=discard -no-shutdown -boot strict=on -device piix3-usb-uhci,id=usb,bus=pci.0,addr=0x1.0x2 -drive file=/datastore/vm/test1/test1.img,format=qcow2,if=none,id=drive- virtio-disk0 -device virtio-blk-pci,scsi=off,bus=pci.0,addr=0x4,drive =drive-virtio-disk0,id=virtio-disk0,bootindex=2 -drive if=none,id =drive-ide0-1-0,readonly=on -device ide-cd,bus=ide.1,unit=0,drive =drive-ide0-1-0,id=ide0-1-0,bootindex=1 -netdev tap,fd=23,id=hostnet0,vhost=on,vhostfd=25 -device virtio-net pci,netdev=hostnet0,id=net0,mac=52:54:00:66:2e:0f,bus=pci.0,addr=0x3 -vnc 0.0.0.0:0 -device cirrus-vga,id=video0,bus=pci.0,addr=0x2 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x5 -msg timestamp=on File system: zfs v0.6.5.6 While running: virsh blockcommit test1 vda --active --pivot --verbose VM running very heavy IO load GDB reporting: #0 0x00007fd80132c3f8 in raise () at /lib64/libc.so.6 #1 0x00007fd80132dffa in abort () at /lib64/libc.so.6 #2 0x00007fd801324c17 in __assert_fail_base () at /lib64/libc.so.6 #3 0x00007fd801324cc2 in () at /lib64/libc.so.6 #4 0x000055d9918d7572 in bdrv_replace_in_backing_chain (old=0x55d993ed9c10, new=0x55d9931ccc10) at block.c:2096 __PRETTY_FUNCTION__ = "bdrv_replace_in_backing_chain" #5 0x000055d991911869 in mirror_exit (job=0x55d993fef830, opaque=0x55d999bbefe0) at block/mirror.c:376 to_replace = 0x55d993ed9c10 s = 0x55d993fef830 data = 0x55d999bbefe0 replace_aio_context = <optimized out> src = 0x55d993ed9c10 #6 0x000055d9918da1dc in block_job_defer_to_main_loop_bh (opaque=0x55d9940ce850) at blockjob.c:481 data = 0x55d9940ce850 aio_context = 0x55d9931a2610 #7 0x000055d9918d014b in aio_bh_poll (ctx=ctx@entry=0x55d9931a2610) at async.c:92 bh = <optimized out> bhp = <optimized out> next = 0x55d99440f910 ret = 1 #8 0x000055d9918dc8c0 in aio_dispatch (ctx=0x55d9931a2610) at aio-posix.c:305 node = <optimized out> progress = false #9 0x000055d9918d000e in aio_ctx_dispatch (source=<optimized out>, callback=<optimized out>, user_data=<optimized out>) at async.c:231 ctx = <optimized out> #10 0x00007fd8037cf787 in g_main_context_dispatch () at /usr/lib64/libglib-2.0.so.0 #11 0x000055d9918db03b in main_loop_wait () at main-loop.c:211 context = 0x55d9931a3200 pfds = <optimized out> ret = 0 spin_counter = 1 ret = 0 timeout = 4294967295 timeout_ns = <optimized out> #12 0x000055d9918db03b in main_loop_wait (timeout=<optimized out>) at main-loop.c:256 ret = 0 spin_counter = 1 ret = 0 timeout = 4294967295 timeout_ns = <optimized out> #13 0x000055d9918db03b in main_loop_wait (nonblocking=<optimized out>) at main-loop.c:504 ret = 0 timeout = 4294967295 timeout_ns = <optimized out> #14 0x000055d991679cc4 in main () at vl.c:1923 nonblocking = <optimized out> last_io = 2 i = <optimized out> snapshot = <optimized out> linux_boot = <optimized out> initrd_filename = <optimized out> kernel_filename = <optimized out> kernel_cmdline = <optimized out> boot_order = <optimized out> boot_once = <optimized out> ds = <optimized out> cyls = <optimized out> heads = <optimized out> secs = <optimized out> translation = <optimized out> hda_opts = <optimized out> opts = <optimized out> machine_opts = <optimized out> icount_opts = <optimized out> olist = <optimized out> optind = 49 optarg = 0x7fffc6d27f43 "timestamp=on" loadvm = <optimized out> machine_class = 0x55d993194d10 cpu_model = <optimized out> vga_model = 0x0 qtest_chrdev = <optimized out> qtest_log = <optimized out> pid_file = <optimized out> incoming = <optimized out> defconfig = <optimized out> userconfig = false log_mask = <optimized out> log_file = <optimized out> trace_events = <optimized out> trace_file = <optimized out> maxram_size = <optimized out> ram_slots = <optimized out> vmstate_dump_file = <optimized out> main_loop_err = 0x0 err = 0x0 __func__ = "main" #15 0x000055d991679cc4 in main (argc=<optimized out>, argv=<optimized out>, envp=<optimized out>) at vl.c:4699 i = <optimized out> snapshot = <optimized out> linux_boot = <optimized out> initrd_filename = <optimized out> kernel_filename = <optimized out> kernel_cmdline = <optimized out> boot_order = <optimized out> boot_once = <optimized out> ds = <optimized out> cyls = <optimized out> heads = <optimized out> secs = <optimized out> translation = <optimized out> hda_opts = <optimized out> opts = <optimized out> machine_opts = <optimized out> icount_opts = <optimized out> olist = <optimized out> optind = 49 optarg = 0x7fffc6d27f43 "timestamp=on" loadvm = <optimized out> machine_class = 0x55d993194d10 cpu_model = <optimized out> vga_model = 0x0 qtest_chrdev = <optimized out> qtest_log = <optimized out> pid_file = <optimized out> incoming = <optimized out> defconfig = <optimized out> userconfig = false log_mask = <optimized out> log_file = <optimized out> trace_events = <optimized out> trace_file = <optimized out> maxram_size = <optimized out> ram_slots = <optimized out> vmstate_dump_file = <optimized out> main_loop_err = 0x0 err = 0x0 __func__ = "main" I can reproduce this at will, and can provide more information per a dev's request. To manage notifications about this bug go to: https://bugs.launchpad.net/qemu/+bug/1570134/+subscriptions