From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([2001:4830:134:3::10]:41176) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1ZXoCJ-0007AL-0x for qemu-devel@nongnu.org; Fri, 04 Sep 2015 06:26:20 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1ZXoCD-0002TF-Oc for qemu-devel@nongnu.org; Fri, 04 Sep 2015 06:26:18 -0400 Received: from 5751f4a1.skybroadband.com ([87.81.244.161]:61274 helo=dan.rpsys.net) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1ZXoCD-0002SX-5V for qemu-devel@nongnu.org; Fri, 04 Sep 2015 06:26:13 -0400 Received: from localhost (localhost [127.0.0.1]) by dan.rpsys.net (8.14.4/8.14.4/Debian-4.1ubuntu1) with ESMTP id t84AQA4L020982 for ; Fri, 4 Sep 2015 11:26:10 +0100 Received: from dan.rpsys.net ([127.0.0.1]) by localhost (dan.rpsys.net [127.0.0.1]) (amavisd-new, port 10024) with LMTP id mZ58omEPGh9a for ; Fri, 4 Sep 2015 11:26:10 +0100 (BST) Received: from [192.168.3.10] ([192.168.3.10]) (authenticated bits=0) by dan.rpsys.net (8.14.4/8.14.4/Debian-4.1ubuntu1) with ESMTP id t84APvhm020962 (version=TLSv1/SSLv3 cipher=AES128-GCM-SHA256 bits=128 verify=NOT) for ; Fri, 4 Sep 2015 11:26:08 +0100 Message-ID: <1441362357.24871.155.camel@linuxfoundation.org> From: Richard Purdie Date: Fri, 04 Sep 2015 11:25:57 +0100 Content-Type: text/plain; charset="UTF-8" Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Subject: [Qemu-devel] Segfault using qemu-system-arm in smc91c111 List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: qemu-devel We're seeing repeated segfaults in qemu-system-arm when we heavily use the network. I have a coredump backtrace: Reading symbols from /home/pokybuild/yocto-autobuilder/yocto-worker/nightly-arm-lsb/build/build/tmp/sysroots/x86_64-linux/usr/bin/qemu-system-arm...done. [New LWP 4536] [New LWP 4534] [New LWP 4530] [New LWP 4537] [New LWP 6396] warning: Corrupted shared library list: 0x7f8d5f27e540 != 0x6198225000007f8d [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1". Core was generated by `/home/pokybuild/yocto-autobuilder/yocto-worker/nightly-arm-lsb/build/build/tmp/'. Program terminated with signal SIGSEGV, Segmentation fault. #0 smc91c111_pop_tx_fifo_done (s=0x7f8d6158b560) at /home/pokybuild/yocto-autobuilder/yocto-worker/nightly-arm-lsb/build/build/tmp/work/x86_64-linux/qemu-native/2.4.0-r1/qemu-2.4.0/hw/net/smc91c111.c:179 179 s->tx_fifo_done[i] = s->tx_fifo_done[i + 1]; (gdb) bt #0 smc91c111_pop_tx_fifo_done (s=0x7f8d6158b560) at /home/pokybuild/yocto-autobuilder/yocto-worker/nightly-arm-lsb/build/build/tmp/work/x86_64-linux/qemu-native/2.4.0-r1/qemu-2.4.0/hw/net/smc91c111.c:179 #1 smc91c111_writeb (opaque=0x7f8d6158b560, offset=12, value=) at /home/pokybuild/yocto-autobuilder/yocto-worker/nightly-arm-lsb/build/build/tmp/work/x86_64-linux/qemu-native/2.4.0-r1/qemu-2.4.0/hw/net/smc91c111.c:431 #2 0x00007f8d5ecacd65 in memory_region_oldmmio_write_accessor (mr=, addr=, value=, size=, shift=, mask=, attrs=...) at /home/pokybuild/yocto-autobuilder/yocto-worker/nightly-arm-lsb/build/build/tmp/work/x86_64-linux/qemu-native/2.4.0-r1/qemu-2.4.0/memory.c:434 #3 0x00007f8d5ecac5dd in access_with_adjusted_size (addr=140245200319840, addr@entry=12, value=0xc, value@entry=0x7f8d52ac63e8, size=1, access_size_min=2031671516, access_size_max=32, access=0x7f8d5ecacd30 , mr=0x7f8d6158f8f0, attrs=...) at /home/pokybuild/yocto-autobuilder/yocto-worker/nightly-arm-lsb/build/build/tmp/work/x86_64-linux/qemu-native/2.4.0-r1/qemu-2.4.0/memory.c:506 #4 0x00007f8d5ecae08b in memory_region_dispatch_write (mr=mr@entry=0x7f8d6158f8f0, addr=12, data=2, size=size@entry=1, attrs=attrs@entry=...) at /home/pokybuild/yocto-autobuilder/yocto-worker/nightly-arm-lsb/build/build/tmp/work/x86_64-linux/qemu-native/2.4.0-r1/qemu-2.4.0/memory.c:1171 #5 0x00007f8d5ec7b78f in address_space_rw (as=0x7f8d5f408600 , addr=268501004, attrs=..., buf=buf@entry=0x7f8d52ac64b0 "\002", len=1, is_write=is_write@entry=true) at /home/pokybuild/yocto-autobuilder/yocto-worker/nightly-arm-lsb/build/build/tmp/work/x86_64-linux/qemu-native/2.4.0-r1/qemu-2.4.0/exec.c:2451 #6 0x00007f8d5ec7b9e0 in address_space_write (len=, buf=0x7f8d52ac64b0 "\002", attrs=..., addr=, as=) at /home/pokybuild/yocto-autobuilder/yocto-worker/nightly-arm-lsb/build/build/tmp/work/x86_64-linux/qemu-native/2.4.0-r1/qemu-2.4.0/exec.c:2521 #7 subpage_write (opaque=, addr=, value=, len=, attrs=...) at /home/pokybuild/yocto-autobuilder/yocto-worker/nightly-arm-lsb/build/build/tmp/work/x86_64-linux/qemu-native/2.4.0-r1/qemu-2.4.0/exec.c:2081 #8 0x00007f8d5ecac5dd in access_with_adjusted_size (addr=140245200319840, addr@entry=12, value=0xc, value@entry=0x7f8d52ac6558, size=1, access_size_min=2031671516, access_size_max=32, access=0x7f8d5ecac500 , mr=0x7f8d618d5750, attrs=...) at /home/pokybuild/yocto-autobuilder/yocto-worker/nightly-arm-lsb/build/build/tmp/work/x86_64-linux/qemu-native/2.4.0-r1/qemu-2.4.0/memory.c:506 #9 0x00007f8d5ecae08b in memory_region_dispatch_write (mr=0x7f8d618d5750, addr=12, data=2, size=1, attrs=...) at /home/pokybuild/yocto-autobuilder/yocto-worker/nightly-arm-lsb/build/build/tmp/work/x86_64-linux/qemu-native/2.4.0-r1/qemu-2.4.0/memory.c:1171 #10 0x00007f8d5584b512 in ?? () (gdb) print s->tx_fifo_done $1 = {99614720, 99614720, 99614720, 99614720} (gdb) print s->tx_fifo_done_len $2 = 99614719 so it looks like tx_fifo_done_len has been corrupted, going beyond that is harder for me to figure out. Does anyone happen to know what might be going on here? This is with qemu 2.4.0. Cheers, Richard