From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([2001:4830:134:3::10]:36169) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1YQull-0002a8-Ge for qemu-devel@nongnu.org; Thu, 26 Feb 2015 04:30:10 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1YQulh-0007VC-E4 for qemu-devel@nongnu.org; Thu, 26 Feb 2015 04:30:09 -0500 Received: from e06smtp17.uk.ibm.com ([195.75.94.113]:60252) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1YQulh-0007Jn-4r for qemu-devel@nongnu.org; Thu, 26 Feb 2015 04:30:05 -0500 Received: from /spool/local by e06smtp17.uk.ibm.com with IBM ESMTP SMTP Gateway: Authorized Use Only! Violators will be prosecuted for from ; Thu, 26 Feb 2015 09:30:01 -0000 Received: from b06cxnps3074.portsmouth.uk.ibm.com (d06relay09.portsmouth.uk.ibm.com [9.149.109.194]) by d06dlp03.portsmouth.uk.ibm.com (Postfix) with ESMTP id 03EFF1B0806B for ; Thu, 26 Feb 2015 09:30:13 +0000 (GMT) Received: from d06av08.portsmouth.uk.ibm.com (d06av08.portsmouth.uk.ibm.com [9.149.37.249]) by b06cxnps3074.portsmouth.uk.ibm.com (8.14.9/8.14.9/NCO v10.0) with ESMTP id t1Q9TwdQ7995816 for ; Thu, 26 Feb 2015 09:29:58 GMT Received: from d06av08.portsmouth.uk.ibm.com (localhost [127.0.0.1]) by d06av08.portsmouth.uk.ibm.com (8.14.4/8.14.4/NCO v10.0 AVout) with ESMTP id t1Q9TvHk028910 for ; Thu, 26 Feb 2015 02:29:58 -0700 Message-ID: <54EEE795.3050501@de.ibm.com> Date: Thu, 26 Feb 2015 10:29:57 +0100 From: Christian Borntraeger MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit Subject: [Qemu-devel] qemu crash in coroutine bdrv_co_do_rw List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: Stefan Hajnoczi , qemu-devel Stefan, is this some know issue? Under heavy load with lots of dataplane devices I sometimes get a segfault in the bdrc_co_do_rw routine: #0 bdrv_co_do_rw (opaque=0x0) at /home/cborntra/REPOS/qemu/block.c:4791 4791 if (!acb->is_write) { (gdb) bt #0 bdrv_co_do_rw (opaque=0x0) at /home/cborntra/REPOS/qemu/block.c:4791 #1 0x00000000801aeb78 in coroutine_trampoline (i0=, i1=-725099072) at /home/cborntra/REPOS/qemu/coroutine-ucontext.c:80 #2 0x000003fffbe1cca2 in __makecontext_ret () from /lib64/libc.so.6 Backtrace stopped: previous frame identical to this frame (corrupt stack?) (gdb) up #1 0x00000000801aeb78 in coroutine_trampoline (i0=, i1=-725099072) at /home/cborntra/REPOS/qemu/coroutine-ucontext.c:80 80 co->entry(co->entry_arg); (gdb) print *co $1 = {entry = 0x801a3c28 , entry_arg = 0x0, caller = 0x3ffe2fff788, pool_next = {sle_next = 0x3ffd2287990}, co_queue_wakeup = {tqh_first = 0x0, tqh_last = 0x3ffd4c7dde0}, co_queue_next = {tqe_next = 0x0, tqe_prev = 0x0}} As you can see enty_arg is 0, causing the problem. Do you have any quick idea before I start debugging? Christian