Hi! I have researched the promised third bug in your implementation. It reproduces if you start qemu with -S switch, and then immediately exit it without actually running the OS. In KVM vGIC initialization is lazy and performed when first vCPU is booted up for the first time. Consequently, if you never do it but attempt to quit qemu, KVM will go through the complete shutdown process and call vits_destroy(), which will crash in list_for_each_safe() because its->device_list was never initialized. For a quick fix i have added this: --- cut --- if (!its->device_list.next) return; --- cut --- Kind regards, Pavel Fedin Expert Engineer Samsung Electronics Research center Russia -- To unsubscribe from this list: send the line "unsubscribe kvm" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html