Hello,
There seems to be a double-free bug in libvirt; I've checked libvirt
0.9.12 and 1.2.3:
With 0.9.12 xenUnifiedOpen() passes a pointer of "conn" to
xenInotifyOpen(), which passes it to virEventAddHandle(...opaque=conn...).
After successfully defining a new domain inotify picks up the newly
created directory and generates an event, which is processes when virsh
already dropped its last public reference to the domain and subsequently
already freed the connection. Since *conn is not zero-filled, the data
is still valid and usable, but virsh the terminates on double-freeing
some internal data.
I can reproduce by it doing:
virsh undefine $DOM
virsh -c xen:// define $DOM.xml
For 1.2.3 something similar seems to happen with the keep-alive:
$ grep unref ~/BUG/31032_virsh-define-segv.log
virUnrefDomain:276 : unref domain 0x7f4ec4003fe0 ucs32-64-segv 1
virReleaseDomain:246 : unref connection 0x917650 2
virUnrefDomain:276 : unref domain 0x934460 ucs32-64-segv 1
virReleaseDomain:246 : unref connection 0x917650 2
virUnrefConnect:145 : unref connection 0x917650 1
virUnrefDomain:276 : unref domain 0x7f4ec4004060 ucs32-64-segv 1
virReleaseDomain:246 : unref connection 0x917650 1
Notice that there are two lines for "unref connection ... 1"!
My gut feeling is that libvirt should also increment the reference
counter for internal references to delay freeing still used data and add
a second counter to track external references, which is used to start
closing down things.
Comments and ideas welcomed.
We're tracking this as
<https://forge.univention.org/bugzilla/show_bug.cgi?id=31032>
Sincerely
Philipp
--
Philipp Hahn
Open Source Software Engineer
Univention GmbH
be open.
Mary-Somerville-Str. 1
D-28359 Bremen
Tel.: +49 421 22232-0
Fax : +49 421 22232-99
hahn@xxxxxxxxxxxxx
http://www.univention.de/
Geschäftsführer: Peter H. Ganten
HRB 20755 Amtsgericht Bremen
Steuer-Nr.: 71-597-02876
# virsh -c xen:// define ucs32-64-segv.xml
2014-04-02 08:09:42.320+0000: 18209: info : libvirt version: 0.9.12
2014-04-02 08:09:42.320+0000: 18209: debug : virInitialize:414 : register drivers
2014-04-02 08:09:42.320+0000: 18209: debug : virRegisterDriver:775 : driver=0x7f4ed026f460 name=Test
2014-04-02 08:09:42.320+0000: 18209: debug : virRegisterDriver:799 : registering Test as driver 0
2014-04-02 08:09:42.320+0000: 18209: debug : virRegisterNetworkDriver:592 : registering Test as network driver 0
2014-04-02 08:09:42.320+0000: 18209: debug : virRegisterInterfaceDriver:625 : registering Test as interface driver 0
2014-04-02 08:09:42.320+0000: 18209: debug : virRegisterStorageDriver:658 : registering Test as storage driver 0
2014-04-02 08:09:42.320+0000: 18209: debug : virRegisterDeviceMonitor:691 : registering Test as device driver 0
2014-04-02 08:09:42.320+0000: 18209: debug : virRegisterSecretDriver:724 : registering Test as secret driver 0
2014-04-02 08:09:42.320+0000: 18209: debug : virRegisterNWFilterDriver:757 : registering Test as network filter driver 0
2014-04-02 08:09:42.321+0000: 18209: debug : xenHypervisorInit:2105 : Using new hypervisor call: 40001
2014-04-02 08:09:42.321+0000: 18209: debug : xenHypervisorInit:2214 : Using hypervisor call v2, sys ver8 dom ver7
2014-04-02 08:09:42.321+0000: 18209: debug : virRegisterDriver:775 : driver=0x7f4ed02709a0 name=Xen
2014-04-02 08:09:42.321+0000: 18209: debug : virRegisterDriver:799 : registering Xen as driver 1
2014-04-02 08:09:42.321+0000: 18209: debug : virRegisterDriver:775 : driver=0x7f4ed0271240 name=OPENVZ
2014-04-02 08:09:42.321+0000: 18209: debug : virRegisterDriver:799 : registering OPENVZ as driver 2
2014-04-02 08:09:42.321+0000: 18209: debug : virRegisterDriver:775 : driver=0x7f4ed0271760 name=VMWARE
2014-04-02 08:09:42.321+0000: 18209: debug : virRegisterDriver:799 : registering VMWARE as driver 3
2014-04-02 08:09:42.322+0000: 18209: debug : vboxRegister:137 : VBoxCGlueInit failed, using dummy driver
2014-04-02 08:09:42.322+0000: 18209: debug : virRegisterDriver:775 : driver=0x7f4ed0271c80 name=VBOX
2014-04-02 08:09:42.322+0000: 18209: debug : virRegisterDriver:799 : registering VBOX as driver 4
2014-04-02 08:09:42.322+0000: 18209: debug : virRegisterNetworkDriver:592 : registering VBOX as network driver 1
2014-04-02 08:09:42.322+0000: 18209: debug : virRegisterStorageDriver:658 : registering VBOX as storage driver 1
2014-04-02 08:09:42.322+0000: 18209: debug : virRegisterDriver:775 : driver=0x7f4ed026fd40 name=remote
2014-04-02 08:09:42.322+0000: 18209: debug : virRegisterDriver:799 : registering remote as driver 5
2014-04-02 08:09:42.322+0000: 18209: debug : virRegisterNetworkDriver:592 : registering remote as network driver 2
2014-04-02 08:09:42.322+0000: 18209: debug : virRegisterInterfaceDriver:625 : registering remote as interface driver 1
2014-04-02 08:09:42.322+0000: 18209: debug : virRegisterStorageDriver:658 : registering remote as storage driver 2
2014-04-02 08:09:42.322+0000: 18209: debug : virRegisterDeviceMonitor:691 : registering remote as device driver 1
2014-04-02 08:09:42.322+0000: 18209: debug : virRegisterSecretDriver:724 : registering remote as secret driver 1
2014-04-02 08:09:42.322+0000: 18209: debug : virRegisterNWFilterDriver:757 : registering remote as network filter driver 1
2014-04-02 08:09:42.322+0000: 18209: debug : virConnectOpenAuth:1455 : name=xen://, auth=0x7f4ed026f3e0, flags=0
2014-04-02 08:09:42.322+0000: 18209: debug : virConnectGetConfigFile:1008 : Loading config file '/etc/libvirt/libvirt.conf'
2014-04-02 08:09:42.322+0000: 18209: debug : do_open:1182 : name "xen:///" to URI components:
scheme xen
server (null)
user (null)
port 0
path /
2014-04-02 08:09:42.322+0000: 18209: debug : do_open:1226 : trying driver 0 (Test) ...
2014-04-02 08:09:42.322+0000: 18209: debug : do_open:1232 : driver 0 Test returned DECLINED
2014-04-02 08:09:42.322+0000: 18209: debug : do_open:1226 : trying driver 1 (Xen) ...
2014-04-02 08:09:42.322+0000: 18209: debug : virCommandRunAsync:2174 : About to run /usr/sbin/xend status
2014-04-02 08:09:42.323+0000: 18209: debug : virCommandRunAsync:2192 : Command result 0, with PID 18211
2014-04-02 08:09:42.552+0000: 18209: debug : virCommandRun:1994 : Result exit status 0, stdout: '' stderr: '2014-04-02 08:09:42.325+0000: 18211: info : libvirt version: 0.9.12
2014-04-02 08:09:42.325+0000: 18211: debug : virCommandHook:2093 : Hook is done 0
'
2014-04-02 08:09:42.552+0000: 18209: debug : xenUnifiedOpen:339 : Trying hypervisor sub-driver
2014-04-02 08:09:42.552+0000: 18209: debug : xenUnifiedOpen:341 : Activated hypervisor sub-driver
2014-04-02 08:09:42.552+0000: 18209: debug : xenUnifiedOpen:347 : Trying XenD sub-driver
2014-04-02 08:09:42.554+0000: 18209: debug : xenUnifiedOpen:349 : Activated XenD sub-driver
2014-04-02 08:09:42.554+0000: 18209: debug : xenUnifiedOpen:361 : Trying XS sub-driver
2014-04-02 08:09:42.555+0000: 18209: debug : xenUnifiedOpen:363 : Activated XS sub-driver
2014-04-02 08:09:42.559+0000: 18209: debug : virCommandRunAsync:2174 : About to run pm-is-supported --suspend
2014-04-02 08:09:42.560+0000: 18209: debug : virCommandRunAsync:2192 : Command result 0, with PID 18231
2014-04-02 08:09:42.571+0000: 18209: debug : virCommandRun:1994 : Result exit status 0, stdout: '' stderr: '2014-04-02 08:09:42.561+0000: 18231: info : libvirt version: 0.9.12
2014-04-02 08:09:42.561+0000: 18231: debug : virCommandHook:2093 : Hook is done 0
'
2014-04-02 08:09:42.571+0000: 18209: debug : virCommandRunAsync:2174 : About to run pm-is-supported --hibernate
2014-04-02 08:09:42.572+0000: 18209: debug : virCommandRunAsync:2192 : Command result 0, with PID 18237
2014-04-02 08:09:42.583+0000: 18209: debug : virCommandRun:1994 : Result exit status 0, stdout: '' stderr: '2014-04-02 08:09:42.573+0000: 18237: info : libvirt version: 0.9.12
2014-04-02 08:09:42.573+0000: 18237: debug : virCommandHook:2093 : Hook is done 0
'
2014-04-02 08:09:42.583+0000: 18209: debug : virCommandRunAsync:2174 : About to run pm-is-supported --suspend-hybrid
2014-04-02 08:09:42.583+0000: 18209: debug : virCommandRunAsync:2192 : Command result 0, with PID 18243
2014-04-02 08:09:42.594+0000: 18209: debug : virCommandRun:1994 : Result exit status 0, stdout: '' stderr: '2014-04-02 08:09:42.585+0000: 18243: info : libvirt version: 0.9.12
2014-04-02 08:09:42.585+0000: 18243: debug : virCommandHook:2093 : Hook is done 0
'
2014-04-02 08:09:42.595+0000: 18209: debug : xenUnifiedOpen:388 : Trying Xen inotify sub-driver
2014-04-02 08:09:42.595+0000: 18209: debug : xenInotifyOpen:407 : Adding a watch on /var/lib/xend/domains
2014-04-02 08:09:42.595+0000: 18209: debug : xenInotifyOpen:419 : Building initial config cache
2014-04-02 08:09:42.595+0000: 18209: debug : xenInotifyOpen:426 : Registering with event loop
2014-04-02 08:09:42.595+0000: 18209: debug : xenUnifiedOpen:390 : Activated Xen inotify sub-driver
2014-04-02 08:09:42.595+0000: 18209: debug : do_open:1232 : driver 1 Xen returned SUCCESS
2014-04-02 08:09:42.595+0000: 18209: debug : do_open:1254 : network driver 0 Test returned DECLINED
2014-04-02 08:09:42.595+0000: 18209: debug : do_open:1254 : network driver 1 VBOX returned DECLINED
2014-04-02 08:09:42.595+0000: 18209: debug : doRemoteOpen:542 : proceeding with name = xen:///
2014-04-02 08:09:42.595+0000: 18209: debug : doRemoteOpen:552 : Connecting with transport 1
2014-04-02 08:09:42.595+0000: 18209: debug : doRemoteOpen:599 : Proceeding with sockname /var/run/libvirt/libvirt-sock
2014-04-02 08:09:42.595+0000: 18209: debug : virNetSocketNew:119 : localAddr=0x7fffcc11c800 remoteAddr=0x7fffcc11c770 fd=11 errfd=-1 pid=0
2014-04-02 08:09:42.595+0000: 18209: debug : virNetSocketNew:179 : RPC_SOCKET_NEW: sock=0x919a30 refs=1 fd=11 errfd=-1 pid=0 localAddr=127.0.0.1;0, remoteAddr=127.0.0.1;0
2014-04-02 08:09:42.595+0000: 18209: debug : virNetSocketRef:709 : RPC_SOCKET_REF: sock=0x919a30 refs=2
2014-04-02 08:09:42.595+0000: 18209: debug : virKeepAliveNew:244 : client=0x7f4ed02c4010, interval=-1, count=0
2014-04-02 08:09:42.595+0000: 18209: debug : virKeepAliveNew:277 : RPC_KEEPALIVE_NEW: ka=0x931900 client=0x7f4ed02c4010 refs=2
2014-04-02 08:09:42.595+0000: 18209: debug : virNetClientNew:332 : RPC_CLIENT_NEW: client=0x7f4ed02c4010 refs=3 sock=0x919a30
2014-04-02 08:09:42.595+0000: 18209: debug : doRemoteOpen:684 : Trying authentication
2014-04-02 08:09:42.595+0000: 18209: debug : virNetMessageNew:48 : msg=0x7f4ecace6010 tracked=0
2014-04-02 08:09:42.595+0000: 18209: debug : virNetMessageEncodePayload:351 : Encode length as 28
2014-04-02 08:09:42.595+0000: 18209: debug : virNetClientSendInternal:1683 : RPC_CLIENT_MSG_TX_QUEUE: client=0x7f4ed02c4010 len=28 prog=536903814 vers=1 proc=66 type=0 status=0 serial=0
2014-04-02 08:09:42.595+0000: 18209: debug : virNetClientIO:1541 : Outgoing message prog=536903814 version=1 serial=0 proc=66 type=0 length=28 dispatch=(nil)
2014-04-02 08:09:42.595+0000: 18209: debug : virNetClientIO:1599 : We have the buck 0x930fe0 0x930fe0
2014-04-02 08:09:42.597+0000: 18209: debug : virNetMessageDecodeLength:149 : Got length, now need 36 total (32 more)
2014-04-02 08:09:42.597+0000: 18209: debug : virNetClientCallDispatch:934 : RPC_CLIENT_MSG_RX: client=0x7f4ed02c4010 len=36 prog=536903814 vers=1 proc=66 type=1 status=0 serial=0
2014-04-02 08:09:42.597+0000: 18209: debug : virKeepAliveCheckMessage:424 : ka=0x931900, client=0x7f4ed02c4010, msg=0x7f4ed02c4068
2014-04-02 08:09:42.597+0000: 18209: debug : virNetClientIOEventLoopPassTheBuck:1254 : Giving up the buck 0x930fe0
2014-04-02 08:09:42.597+0000: 18209: debug : virNetClientIOEventLoopPassTheBuck:1268 : No thread to pass the buck to
2014-04-02 08:09:42.597+0000: 18209: debug : virNetClientIO:1628 : All done with our call (nil) 0x930fe0 2
2014-04-02 08:09:42.597+0000: 18209: debug : virNetMessageFree:75 : msg=0x7f4ecace6010 nfds=0 cb=(nil)
2014-04-02 08:09:42.598+0000: 18209: debug : virNetMessageNew:48 : msg=0x932140 tracked=0
2014-04-02 08:09:42.598+0000: 18209: debug : virNetMessageEncodePayload:351 : Encode length as 32
2014-04-02 08:09:42.598+0000: 18209: debug : virNetClientSendInternal:1683 : RPC_CLIENT_MSG_TX_QUEUE: client=0x7f4ed02c4010 len=32 prog=536903814 vers=1 proc=60 type=0 status=0 serial=1
2014-04-02 08:09:42.598+0000: 18209: debug : virNetClientIO:1541 : Outgoing message prog=536903814 version=1 serial=1 proc=60 type=0 length=32 dispatch=(nil)
2014-04-02 08:09:42.598+0000: 18209: debug : virNetClientIO:1599 : We have the buck 0x931530 0x931530
2014-04-02 08:09:42.599+0000: 18209: debug : virNetMessageDecodeLength:149 : Got length, now need 32 total (28 more)
2014-04-02 08:09:42.599+0000: 18209: debug : virNetClientCallDispatch:934 : RPC_CLIENT_MSG_RX: client=0x7f4ed02c4010 len=32 prog=536903814 vers=1 proc=60 type=1 status=0 serial=1
2014-04-02 08:09:42.599+0000: 18209: debug : virKeepAliveCheckMessage:424 : ka=0x931900, client=0x7f4ed02c4010, msg=0x7f4ed02c4068
2014-04-02 08:09:42.599+0000: 18209: debug : virNetClientIOEventLoopPassTheBuck:1254 : Giving up the buck 0x931530
2014-04-02 08:09:42.599+0000: 18209: debug : virNetClientIOEventLoopPassTheBuck:1268 : No thread to pass the buck to
2014-04-02 08:09:42.599+0000: 18209: debug : virNetClientIO:1628 : All done with our call (nil) 0x931530 2
2014-04-02 08:09:42.599+0000: 18209: debug : virNetMessageFree:75 : msg=0x932140 nfds=0 cb=(nil)
2014-04-02 08:09:42.599+0000: 18209: debug : doRemoteOpen:710 : Trying to open URI xen:///
2014-04-02 08:09:42.599+0000: 18209: debug : virNetMessageNew:48 : msg=0x932140 tracked=0
2014-04-02 08:09:42.599+0000: 18209: debug : virNetMessageEncodePayload:351 : Encode length as 48
2014-04-02 08:09:42.599+0000: 18209: debug : virNetClientSendInternal:1683 : RPC_CLIENT_MSG_TX_QUEUE: client=0x7f4ed02c4010 len=48 prog=536903814 vers=1 proc=1 type=0 status=0 serial=2
2014-04-02 08:09:42.599+0000: 18209: debug : virNetClientIO:1541 : Outgoing message prog=536903814 version=1 serial=2 proc=1 type=0 length=48 dispatch=(nil)
2014-04-02 08:09:42.599+0000: 18209: debug : virNetClientIO:1599 : We have the buck 0x931230 0x931230
2014-04-02 08:09:42.835+0000: 18209: debug : virNetMessageDecodeLength:149 : Got length, now need 28 total (24 more)
2014-04-02 08:09:42.835+0000: 18209: debug : virNetClientCallDispatch:934 : RPC_CLIENT_MSG_RX: client=0x7f4ed02c4010 len=28 prog=536903814 vers=1 proc=1 type=1 status=0 serial=2
2014-04-02 08:09:42.835+0000: 18209: debug : virKeepAliveCheckMessage:424 : ka=0x931900, client=0x7f4ed02c4010, msg=0x7f4ed02c4068
2014-04-02 08:09:42.835+0000: 18209: debug : virNetClientIOEventLoopPassTheBuck:1254 : Giving up the buck 0x931230
2014-04-02 08:09:42.835+0000: 18209: debug : virNetClientIOEventLoopPassTheBuck:1268 : No thread to pass the buck to
2014-04-02 08:09:42.835+0000: 18209: debug : virNetClientIO:1628 : All done with our call (nil) 0x931230 2
2014-04-02 08:09:42.835+0000: 18209: debug : virNetMessageFree:75 : msg=0x932140 nfds=0 cb=(nil)
2014-04-02 08:09:42.835+0000: 18209: debug : do_open:1254 : network driver 2 remote returned SUCCESS
2014-04-02 08:09:42.835+0000: 18209: debug : do_open:1269 : interface driver 0 Test returned DECLINED
2014-04-02 08:09:42.835+0000: 18209: debug : do_open:1269 : interface driver 1 remote returned SUCCESS
2014-04-02 08:09:42.835+0000: 18209: debug : do_open:1285 : storage driver 0 Test returned DECLINED
2014-04-02 08:09:42.835+0000: 18209: debug : do_open:1285 : storage driver 1 VBOX returned DECLINED
2014-04-02 08:09:42.836+0000: 18209: debug : do_open:1285 : storage driver 2 remote returned SUCCESS
2014-04-02 08:09:42.836+0000: 18209: debug : do_open:1301 : node driver 0 Test returned DECLINED
2014-04-02 08:09:42.836+0000: 18209: debug : do_open:1301 : node driver 1 remote returned SUCCESS
2014-04-02 08:09:42.836+0000: 18209: debug : do_open:1317 : secret driver 0 Test returned DECLINED
2014-04-02 08:09:42.836+0000: 18209: debug : do_open:1317 : secret driver 1 remote returned SUCCESS
2014-04-02 08:09:42.836+0000: 18209: debug : do_open:1333 : nwfilter driver 0 Test returned DECLINED
2014-04-02 08:09:42.836+0000: 18209: debug : do_open:1333 : nwfilter driver 1 remote returned SUCCESS
2014-04-02 08:09:42.837+0000: 18209: debug : virDomainDefineXML:7907 : conn=0x917650, xml=<domain type='xen'>
<name>ucs32-64-segv</name>
<uuid>3c772604-4082-93ce-8d3a-85990574170c</uuid>
<memory unit='KiB'>1048576</memory>
<currentMemory unit='KiB'>1048576</currentMemory>
<vcpu placement='static'>1</vcpu>
<bootloader>/usr/bin/pygrub</bootloader>
<bootloader_args>-q</bootloader_args>
<os>
<type>linux</type>
</os>
<clock offset='utc' adjustment='reset'/>
<on_poweroff>destroy</on_poweroff>
<on_reboot>restart</on_reboot>
<on_crash>destroy</on_crash>
<devices>
<emulator>/usr/lib/xen/bin/qemu-dm</emulator>
<disk type='file' device='cdrom'>
<driver name='file'/>
<source file='/var/lib/libvirt/images/UCS_3.2-1-amd64.iso'/>
<target dev='xvdb' bus='xen'/>
<readonly/>
</disk>
<disk type='file' device='disk'>
<driver name='tap2' type='aio'/>
<source file='/var/lib/libvirt/images/ucs32-64-segv-0.raw'/>
<target dev='xvda' bus='xen'/>
</disk>
<interface type='bridge'>
<mac address='00:16:3e:06:2e:e0'/>
<source bridge='br0'/>
<script path='vif-bridge'/>
<model type='netfront'/>
</interface>
<console type='pty'>
<target type='xen' port='0'/>
</console>
<input type='mouse' bus='xen'/>
<graphics type='vnc' port='-1' autoport='yes' listen='0.0.0.0' keymap='de'>
<listen type='address' address='0.0.0.0'/>
</graphics>
</devices>
</domain>
2014-04-02 08:09:42.838+0000: 18209: debug : xenFormatSxpr:2235 : Formatting domain sexpr
2014-04-02 08:09:42.838+0000: 18209: debug : xenFormatSxpr:2597 : Formatted sexpr:
(vm (name 'ucs32-64-segv')(memory 1024)(maxmem 1024)(vcpus 1)(uuid '3c772604-4082-93ce-8d3a-85990574170c')(bootloader '/usr/bin/pygrub')(bootloader_args '-q')(on_poweroff 'destroy')(on_reboot 'restart')(on_crash 'destroy')(image (linux (localtime 0)))(localtime 0)(device (vbd (dev 'xvdb:cdrom')(uname 'file:/var/lib/libvirt/images/UCS_3.2-1-amd64.iso')(mode 'r')))(device (tap2 (dev 'xvda')(uname 'tap2:aio:/var/lib/libvirt/images/ucs32-64-segv-0.raw')(mode 'w')))(device (vif (mac '00:16:3e:06:2e:e0')(bridge 'br0')(script 'vif-bridge')(model 'netfront')))(device (vkbd))(device (vfb (type vnc)(vncunused 1)(vnclisten '0.0.0.0')(keymap 'de'))))
2014-04-02 08:09:42.838+0000: 18209: debug : xend_op_ext:506 : xend op: op=new&config=%28vm%20%28name%20%27ucs32%2d64%2dsegv%27%29%28memory%201024%29%28maxmem%201024%29%28vcpus%201%29%28uuid%20%273c772604%2d4082%2d93ce%2d8d3a%2d85990574170c%27%29%28bootloader%20%27%2fusr%2fbin%2fpygrub%27%29%28bootloader%5fargs%20%27%2dq%27%29%28on%5fpoweroff%20%27destroy%27%29%28on%5freboot%20%27restart%27%29%28on%5fcrash%20%27destroy%27%29%28image%20%28linux%20%28localtime%200%29%29%29%28localtime%200%29%28device%20%28vbd%20%28dev%20%27xvdb%3acdrom%27%29%28uname%20%27file%3a%2fvar%2flib%2flibvirt%2fimages%2fUCS%5f3%2e2%2d1%2damd64%2eiso%27%29%28mode%20%27r%27%29%29%29%28device%20%28tap2%20%28dev%20%27xvda%27%29%28uname%20%27tap2%3aaio%3a%2fvar%2flib%2flibvirt%2fimages%2fucs32%2d64%2dsegv%2d0%2eraw%27%29%28mode%20%27w%27%29%29%29%28device%20%28vif%20%28mac%20%2700%3a16%3a3e%3a06%3a2e%3ae0%27%29%28bridge%20%27br0%27%29%28script%20%27vif%2dbridge%27%29%28model%20%27netfront%27%29%29%29%28device%20%28vkbd%29%29%28device%20%28vfb%20%28type%20vnc%29%28vncunused%201%29%28vnclisten%20%270%2e0%2e0%2e0%27%29%28keymap%20%27de%27%29%29%29%29
2014-04-02 08:09:42.850+0000: 18210: debug : xenInotifyEvent:255 : got inotify event
2014-04-02 08:09:42.850+0000: 18210: debug : xenInotifyXendDomainsDirLookup:101 : Looking for dom with uuid: 3c772604-4082-93ce-8d3a-85990574170c
2014-04-02 08:09:42.860+0000: 18209: debug : virDomainLookupByName:2178 : conn=0x917650, name=ucs32-64-segv
2014-04-02 08:09:42.868+0000: 18210: debug : virDomainFree:2345 : dom=0x7f4ec4003fe0, (VM: name=ucs32-64-segv, uuid=3c772604-4082-93ce-8d3a-85990574170c)
2014-04-02 08:09:42.868+0000: 18210: debug : virUnrefDomain:276 : unref domain 0x7f4ec4003fe0 ucs32-64-segv 1
2014-04-02 08:09:42.868+0000: 18210: debug : virReleaseDomain:238 : release domain 0x7f4ec4003fe0 ucs32-64-segv 3c772604-4082-93ce-8d3a-85990574170c
2014-04-02 08:09:42.868+0000: 18210: debug : virReleaseDomain:246 : unref connection 0x917650 2
2014-04-02 08:09:42.868+0000: 18210: debug : xenInotifyXendDomainsDirLookup:101 : Looking for dom with uuid: 3c772604-4082-93ce-8d3a-85990574170c
2014-04-02 08:09:42.873+0000: 18209: debug : virDomainGetName:3465 : domain=0x934460
Domain ucs32-64-segv defined from /var/lib/libvirt/images/ucs32-64-segv.xml
2014-04-02 08:09:42.873+0000: 18209: debug : virDomainFree:2345 : dom=0x934460, (VM: name=ucs32-64-segv, uuid=3c772604-4082-93ce-8d3a-85990574170c)
2014-04-02 08:09:42.873+0000: 18209: debug : virUnrefDomain:276 : unref domain 0x934460 ucs32-64-segv 1
2014-04-02 08:09:42.873+0000: 18209: debug : virReleaseDomain:238 : release domain 0x934460 ucs32-64-segv 3c772604-4082-93ce-8d3a-85990574170c
2014-04-02 08:09:42.873+0000: 18209: debug : virReleaseDomain:246 : unref connection 0x917650 2
2014-04-02 08:09:42.873+0000: 18209: debug : virConnectClose:1496 : conn=0x917650
2014-04-02 08:09:42.873+0000: 18209: debug : virUnrefConnect:145 : unref connection 0x917650 1
2014-04-02 08:09:42.873+0000: 18209: debug : virReleaseConnect:94 : release connection 0x917650
2014-04-02 08:09:42.873+0000: 18209: debug : virNetMessageNew:48 : msg=0x932140 tracked=0
2014-04-02 08:09:42.873+0000: 18209: debug : virNetMessageEncodePayload:351 : Encode length as 28
2014-04-02 08:09:42.873+0000: 18209: debug : virNetClientSendInternal:1683 : RPC_CLIENT_MSG_TX_QUEUE: client=0x7f4ed02c4010 len=28 prog=536903814 vers=1 proc=2 type=0 status=0 serial=3
2014-04-02 08:09:42.873+0000: 18209: debug : virNetClientIO:1541 : Outgoing message prog=536903814 version=1 serial=3 proc=2 type=0 length=28 dispatch=(nil)
2014-04-02 08:09:42.873+0000: 18209: debug : virNetClientIO:1599 : We have the buck 0x917930 0x917930
2014-04-02 08:09:42.877+0000: 18210: debug : virDomainFree:2345 : dom=0x7f4ec4004060, (VM: name=ucs32-64-segv, uuid=3c772604-4082-93ce-8d3a-85990574170c)
2014-04-02 08:09:42.877+0000: 18210: debug : virUnrefDomain:276 : unref domain 0x7f4ec4004060 ucs32-64-segv 1
2014-04-02 08:09:42.878+0000: 18210: debug : virReleaseDomain:238 : release domain 0x7f4ec4004060 ucs32-64-segv 3c772604-4082-93ce-8d3a-85990574170c
2014-04-02 08:09:42.878+0000: 18210: debug : virReleaseDomain:246 : unref connection 0x917650 1
2014-04-02 08:09:42.878+0000: 18210: debug : virReleaseConnect:94 : release connection 0x917650
2014-04-02 08:09:42.878+0000: 18210: debug : virNetMessageNew:48 : msg=0x7f4ec40015a0 tracked=0
2014-04-02 08:09:42.878+0000: 18210: debug : virNetMessageEncodePayload:351 : Encode length as 28
2014-04-02 08:09:42.878+0000: 18210: debug : virNetClientSendInternal:1683 : RPC_CLIENT_MSG_TX_QUEUE: client=0x7f4ed02c4010 len=28 prog=536903814 vers=1 proc=2 type=0 status=0 serial=4
2014-04-02 08:09:42.878+0000: 18210: debug : virNetClientIO:1541 : Outgoing message prog=536903814 version=1 serial=4 proc=2 type=0 length=28 dispatch=0x917930
2014-04-02 08:09:42.878+0000: 18210: debug : virNetClientIO:1558 : Going to sleep 0x917930 0x7f4ec4000b40
2014-04-02 08:09:42.878+0000: 18209: debug : virNetClientIOEventLoop:1377 : Woken up from poll by other thread
2014-04-02 08:09:42.887+0000: 18209: debug : virNetMessageDecodeLength:149 : Got length, now need 28 total (24 more)
2014-04-02 08:09:42.887+0000: 18209: debug : virNetClientCallDispatch:934 : RPC_CLIENT_MSG_RX: client=0x7f4ed02c4010 len=28 prog=536903814 vers=1 proc=2 type=1 status=0 serial=3
2014-04-02 08:09:42.887+0000: 18209: debug : virKeepAliveCheckMessage:424 : ka=0x931900, client=0x7f4ed02c4010, msg=0x7f4ed02c4068
2014-04-02 08:09:42.887+0000: 18209: debug : virNetClientIOEventLoopPassTheBuck:1254 : Giving up the buck 0x917930
2014-04-02 08:09:42.887+0000: 18209: debug : virNetClientIOEventLoopPassTheBuck:1260 : Passing the buck to 0x7f4ec4000b40
2014-04-02 08:09:42.887+0000: 18209: debug : virNetClientIO:1628 : All done with our call 0x7f4ec4000b40 0x917930 2
2014-04-02 08:09:42.887+0000: 18209: debug : virNetMessageFree:75 : msg=0x932140 nfds=0 cb=(nil)
2014-04-02 08:09:42.887+0000: 18209: debug : virNetClientClose:521 : client=0x7f4ed02c4010
2014-04-02 08:09:42.887+0000: 18209: debug : virNetClientFree:454 : RPC_CLIENT_FREE: client=0x7f4ed02c4010 refs=3
2014-04-02 08:09:42.887+0000: 18210: debug : virNetClientIO:1567 : Wokeup from sleep 0x7f4ec4000b40 0x7f4ec4000b40
2014-04-02 08:09:42.887+0000: 18210: debug : virNetClientIO:1599 : We have the buck 0x7f4ec4000b40 0x7f4ec4000b40
2014-04-02 08:09:42.887+0000: 18210: debug : virNetClientIOEventLoop:1377 : Woken up from poll by other thread
2014-04-02 08:09:42.887+0000: 18210: error : virNetClientIOEventLoop:1448 : internal error received hangup / error event on socket
2014-04-02 08:09:42.887+0000: 18210: debug : virNetClientIOEventLoopPassTheBuck:1254 : Giving up the buck 0x7f4ec4000b40
2014-04-02 08:09:42.887+0000: 18210: debug : virNetClientIOEventLoopPassTheBuck:1268 : No thread to pass the buck to
2014-04-02 08:09:42.887+0000: 18210: debug : virNetClientCloseLocked:489 : client=0x7f4ed02c4010, sock=0x919a30
2014-04-02 08:09:42.887+0000: 18210: debug : virNetSocketFree:722 : RPC_SOCKET_FREE: sock=0x919a30 refs=2
2014-04-02 08:09:42.887+0000: 18210: debug : virKeepAliveStopInternal:382 : RPC_KEEPALIVE_STOP: ka=0x931900 client=0x7f4ed02c4010 all=1
2014-04-02 08:09:42.887+0000: 18210: debug : virKeepAliveFree:304 : RPC_KEEPALIVE_FREE: ka=0x931900 client=0x7f4ed02c4010 refs=2
2014-04-02 08:09:42.887+0000: 18210: debug : virNetClientIO:1628 : All done with our call (nil) 0x7f4ec4000b40 -1
2014-04-02 08:09:42.887+0000: 18210: debug : virNetMessageFree:75 : msg=0x7f4ec40015a0 nfds=0 cb=(nil)
2014-04-02 08:09:42.888+0000: 18210: debug : virNetClientClose:521 : client=(nil)
*** glibc detected *** virsh: double free or corruption (!prev): 0x00000000009313c0 ***
======= Backtrace: =========
/lib/libc.so.6(+0x71e16)[0x7f4ecccb8e16]
/lib/libc.so.6(cfree+0x6c)[0x7f4ecccbdb8c]
/usr/lib/libvirt.so.0(virFree+0x39)[0x7f4ecfe30199]
/usr/lib/libvirt.so.0(+0x1216ff)[0x7f4ecfef76ff]
/usr/lib/libvirt.so.0(+0xe0a05)[0x7f4ecfeb6a05]
/usr/lib/libvirt.so.0(+0xe0bf8)[0x7f4ecfeb6bf8]
/usr/lib/libvirt.so.0(virUnrefDomain+0xc8)[0x7f4ecfeb6ed8]
/usr/lib/libvirt.so.0(virDomainFree+0xbb)[0x7f4ecfee2feb]
/usr/lib/libvirt.so.0(+0x17010c)[0x7f4ecff4610c]
/usr/lib/libvirt.so.0(+0x1709bc)[0x7f4ecff469bc]
/usr/lib/libvirt.so.0(+0x170d00)[0x7f4ecff46d00]
/usr/lib/libvirt.so.0(+0x51e15)[0x7f4ecfe27e15]
/usr/lib/libvirt.so.0(virEventRunDefaultImpl+0x45)[0x7f4ecfe26a45]
virsh[0x41eb52]
/usr/lib/libvirt.so.0(+0x64ba6)[0x7f4ecfe3aba6]
/lib/libpthread.so.0(+0x68ca)[0x7f4ecd94b8ca]
/lib/libc.so.6(clone+0x6d)[0x7f4eccd16b6d]
--
libvir-list mailing list
libvir-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/libvir-list