kvm crashes with malloc.c assertion failed and other errors

[f3a97]

My Win7 VM running on KVM keeps crashing lately.

I cannot say when it started to do so but I can say that this was not happening at all some weeks ago.

From the qemu-kvm log file related to this VM just after the crash I have found what follows:

2014-05-16 08:37:14.597+0000: starting up
LC_ALL=C PATH=/usr/local/sbin:/usr/local/bin:/usr/bin:/usr/sbin:/sbin:/bin QEMU_AUDIO_DRV=none /usr/bin/kvm -S -M pc-1.0 -cpu core2duo,+lahf_lm,+popcnt,+sse4.2,+sse4.1,+cx16,-monitor,-vme -enable-kvm -m 1024 -smp 1,sockets=1,cores=1,threads=1 -name win7-32 -uuid 9c5a2a97-7657-add4-2c4a-b9f1f8c076bd -nodefconfig -nodefaults -chardev socket,id=charmonitor,path=/var/lib/libvirt/qemu/win7-32.monitor,server,nowait -mon chardev=charmonitor,id=monitor,mode=control -rtc base=localtime -no-shutdown -drive file=/host/Users/ste/Desktop/KVM/win7-32.img,if=none,id=drive-ide0-0-0,format=raw -device ide-drive,bus=ide.0,unit=0,drive=drive-ide0-0-0,id=ide0-0-0,bootindex=1 -drive if=none,media=cdrom,id=drive-ide0-1-0,readonly=on,format=raw -device ide-drive,bus=ide.1,unit=0,drive=drive-ide0-1-0,id=ide0-1-0 -netdev tap,fd=18,id=hostnet0 -device rtl8139,netdev=hostnet0,id=net0,mac=52:54:00:20:0b:dd,bus=pci.0,addr=0x3 -netdev tap,fd=19,id=hostnet1 -device rtl8139,netdev=hostnet1,id=net1,mac=52:54:00:c7:05:c9,bus=pci.0,addr=0x6 -chardev pty,id=charserial0 -device isa-serial,chardev=charserial0,id=serial0 -usb -vnc 127.0.0.1:0 -vga std -device intel-hda,id=sound0,bus=pci.0,addr=0x4 -device hda-duplex,id=sound0-codec0,bus=sound0.0,cad=0 -device virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x5
char device redirected to /dev/pts/2
kvm: malloc.c:2451: sYSMALLOc: Assertion `(old_top == (((mbinptr) (((char *) &((av)->bins[((1) - 1) * 2])) - __builtin_offsetof (struct malloc_chunk, fd)))) && old_size == 0) || ((unsigned long) (old_size) >= (unsigned long)((((__builtin_offsetof (struct malloc_chunk, fd_nextsize))+((2 * (sizeof(size_t))) - 1)) & ~((2 * (sizeof(size_t))) - 1))) && ((old_top)->size & 0x1) && ((unsigned long)old_end & pagemask) == 0)' failed.
2014-05-16 08:38:32.952+0000: shutting down

And also:

*** glibc detected *** /usr/bin/kvm: double free or corruption (fasttop): 0x00007f6530001c40 ***

ProblemType: Bug
DistroRelease: Ubuntu 12.04
Package: qemu-kvm 1.0+noroms-0ubuntu14.14
ProcVersionSignature: Ubuntu 3.2.0-61.93-generic 3.2.55
Uname: Linux 3.2.0-61-generic x86_64
ApportVersion: 2.0.1-0ubuntu17.6
Architecture: amd64
Date: Fri May 16 10:40:47 2014
KvmCmdLine: Error: command ['ps', '-C', 'kvm', '-F'] failed with exit code 1: UID PID PPID C SZ RSS PSR STIME TTY TIME CMD
MachineType: Hewlett-Packard HP ProBook 4520s
MarkForUpload: True
ProcEnviron:
 TERM=xterm
 PATH=(custom, no user)
 LANG=en_US.UTF-8
 SHELL=/bin/bash
ProcKernelCmdLine: BOOT_IMAGE=/boot/vmlinuz-3.2.0-61-generic root=UUID=D2E20BC3E20BAAB5 loop=/hostname/disks/root.disk ro quiet splash vt.handoff=7
SourcePackage: qemu-kvm
UpgradeStatus: No upgrade log present (probably fresh install)
dmi.bios.date: 08/26/2010
dmi.bios.vendor: Hewlett-Packard
dmi.bios.version: 68AZZ Ver. F.0A
dmi.board.name: 1411
dmi.board.vendor: Hewlett-Packard
dmi.board.version: KBC Version 57.30
dmi.chassis.type: 10
dmi.chassis.vendor: Hewlett-Packard
dmi.modalias: dmi:bvnHewlett-Packard:bvr68AZZVer.F.0A:bd08/26/2010:svnHewlett-Packard:pnHPProBook4520s:pvr:rvnHewlett-Packard:rn1411:rvrKBCVersion57.30:cvnHewlett-Packard:ct10:cvr:
dmi.product.name: HP ProBook 4520s
dmi.sys.vendor: Hewlett-Packard

[Serge Hallyn (serge-hallyn)]

Thanks for reporting this bug.

Does this happen immediately upon boot, or at random times? Do all fresh win7 installs do this, or only one particular VM?

[f3a97 (f3a97)]

Hi Serge,

I have only one VM on my PC.

I have found that these actions can reliably trigger the crash:

- starting the vm via virsh start
- connecting to it with remmina via RDP
- exiting remmina
- starting virt-manager
- connecting to the console
- CRASH

On 22 May 2014 16:28, Serge Hallyn <email address hidden> wrote:

> Thanks for reporting this bug.
>
> Does this happen immediately upon boot, or at random times? Do all
> fresh win7 installs do this, or only one particular VM?
>
> ** Changed in: qemu-kvm (Ubuntu)
> Importance: Undecided => High
>
> ** Changed in: qemu-kvm (Ubuntu)
> Status: New => Confirmed
>
> ** Changed in: qemu-kvm (Ubuntu)
> Status: Confirmed => Incomplete
>
> --
> You received this bug notification because you are subscribed to the bug
> report.
> https://bugs.launchpad.net/bugs/1320144
>
> Title:
> kvm crashes with malloc.c assertion failed and other errors
>
> Status in “qemu-kvm” package in Ubuntu:
> Incomplete
>
> Bug description:
> My Win7 VM running on KVM keeps crashing lately.
>
> I cannot say when it started to do so but I can say that this was not
> happening at all some weeks ago.
>
> From the qemu-kvm log file related to this VM just after the crash I
> have found what follows:
>
> 2014-05-16 08:37:14.597+0000: starting up
> LC_ALL=C
> PATH=/usr/local/sbin:/usr/local/bin:/usr/bin:/usr/sbin:/sbin:/bin
> QEMU_AUDIO_DRV=none /usr/bin/kvm -S -M pc-1.0 -cpu
> core2duo,+lahf_lm,+popcnt,+sse4.2,+sse4.1,+cx16,-monitor,-vme -enable-kvm
> -m 1024 -smp 1,sockets=1,cores=1,threads=1 -name win7-32 -uuid
> 9c5a2a97-7657-add4-2c4a-b9f1f8c076bd -nodefconfig -nodefaults -chardev
> socket,id=charmonitor,path=/var/lib/libvirt/qemu/win7-32.monitor,server,nowait
> -mon chardev=charmonitor,id=monitor,mode=control -rtc base=localtime
> -no-shutdown -drive
> file=/host/Users/ste/Desktop/KVM/win7-32.img,if=none,id=drive-ide0-0-0,format=raw
> -device
> ide-drive,bus=ide.0,unit=0,drive=drive-ide0-0-0,id=ide0-0-0,bootindex=1
> -drive if=none,media=cdrom,id=drive-ide0-1-0,readonly=on,format=raw -device
> ide-drive,bus=ide.1,unit=0,drive=drive-ide0-1-0,id=ide0-1-0 -netdev
> tap,fd=18,id=hostnet0 -device
> rtl8139,netdev=hostnet0,id=net0,mac=52:54:00:20:0b:dd,bus=pci.0,addr=0x3
> -netdev tap,fd=19,id=hostnet1 -device
> rtl8139,netdev=hostnet1,id=net1,mac=52:54:00:c7:05:c9,bus=pci.0,addr=0x6
> -chardev pty,id=charserial0 -device
> isa-serial,chardev=charserial0,id=serial0 -usb -vnc 127.0.0.1:0 -vga std
> -device intel-hda,id=sound0,bus=pci.0,addr=0x4 -device
> hda-duplex,id=sound0-codec0,bus=sound0.0,cad=0 -device
> virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x5
> char device redirected to /dev/pts/2
> kvm: malloc.c:2451: sYSMALLOc: Assertion `(old_top == (((mbinptr)
> (((char *) &((av)->bins[((1) - 1) * 2])) - __builtin_offsetof (struct
> malloc_chunk, fd)))) && old_size == 0) || ((unsigned long) (old_size) >=
> (unsigned long)((((__builtin_offsetof (struct malloc_chunk,
> fd_nextsize))+((2 * (sizeof(size_t))) - 1)) & ~((2 * (sizeof(size_t))) -
> 1))) && ((old_top)->size & 0x1) && ((unsigned long)old_end & pagemask) ==
> 0)' failed.
> 2014-05-16 08:38:32.952+0000: shutting down
>
>...

[Launchpad Janitor (janitor)]

[Expired for qemu-kvm (Ubuntu) because there has been no activity for 60 days.]

[f3a97 (f3a97)]

Hi,

FYI, I upgraded to Ubuntu 14.04 and the bug vanished!

Thanks

On 13 August 2014 06:17, Launchpad Bug Tracker <email address hidden>
wrote:

> [Expired for qemu-kvm (Ubuntu) because there has been no activity for 60
> days.]
>
> ** Changed in: qemu-kvm (Ubuntu)
> Status: Incomplete => Expired
>
> --
> You received this bug notification because you are subscribed to the bug
> report.
> https://bugs.launchpad.net/bugs/1320144
>
> Title:
> kvm crashes with malloc.c assertion failed and other errors
>
> Status in “qemu-kvm” package in Ubuntu:
> Expired
>
> Bug description:
> My Win7 VM running on KVM keeps crashing lately.
>
> I cannot say when it started to do so but I can say that this was not
> happening at all some weeks ago.
>
> From the qemu-kvm log file related to this VM just after the crash I
> have found what follows:
>
> 2014-05-16 08:37:14.597+0000: starting up
> LC_ALL=C
> PATH=/usr/local/sbin:/usr/local/bin:/usr/bin:/usr/sbin:/sbin:/bin
> QEMU_AUDIO_DRV=none /usr/bin/kvm -S -M pc-1.0 -cpu
> core2duo,+lahf_lm,+popcnt,+sse4.2,+sse4.1,+cx16,-monitor,-vme -enable-kvm
> -m 1024 -smp 1,sockets=1,cores=1,threads=1 -name win7-32 -uuid
> 9c5a2a97-7657-add4-2c4a-b9f1f8c076bd -nodefconfig -nodefaults -chardev
> socket,id=charmonitor,path=/var/lib/libvirt/qemu/win7-32.monitor,server,nowait
> -mon chardev=charmonitor,id=monitor,mode=control -rtc base=localtime
> -no-shutdown -drive
> file=/host/Users/ste/Desktop/KVM/win7-32.img,if=none,id=drive-ide0-0-0,format=raw
> -device
> ide-drive,bus=ide.0,unit=0,drive=drive-ide0-0-0,id=ide0-0-0,bootindex=1
> -drive if=none,media=cdrom,id=drive-ide0-1-0,readonly=on,format=raw -device
> ide-drive,bus=ide.1,unit=0,drive=drive-ide0-1-0,id=ide0-1-0 -netdev
> tap,fd=18,id=hostnet0 -device
> rtl8139,netdev=hostnet0,id=net0,mac=52:54:00:20:0b:dd,bus=pci.0,addr=0x3
> -netdev tap,fd=19,id=hostnet1 -device
> rtl8139,netdev=hostnet1,id=net1,mac=52:54:00:c7:05:c9,bus=pci.0,addr=0x6
> -chardev pty,id=charserial0 -device
> isa-serial,chardev=charserial0,id=serial0 -usb -vnc 127.0.0.1:0 -vga std
> -device intel-hda,id=sound0,bus=pci.0,addr=0x4 -device
> hda-duplex,id=sound0-codec0,bus=sound0.0,cad=0 -device
> virtio-balloon-pci,id=balloon0,bus=pci.0,addr=0x5
> char device redirected to /dev/pts/2
> kvm: malloc.c:2451: sYSMALLOc: Assertion `(old_top == (((mbinptr)
> (((char *) &((av)->bins[((1) - 1) * 2])) - __builtin_offsetof (struct
> malloc_chunk, fd)))) && old_size == 0) || ((unsigned long) (old_size) >=
> (unsigned long)((((__builtin_offsetof (struct malloc_chunk,
> fd_nextsize))+((2 * (sizeof(size_t))) - 1)) & ~((2 * (sizeof(size_t))) -
> 1))) && ((old_top)->size & 0x1) && ((unsigned long)old_end & pagemask) ==
> 0)' failed.
> 2014-05-16 08:38:32.952+0000: shutting down
>
> And also:
>
> *** glibc detected *** /usr/bin/kvm: double free or corruption
> (fasttop): 0x00007f6530001c40 ***
>
> ProblemType: Bug
> DistroRelease: Ubuntu 12.04
> Package: qemu-kvm 1.0+noroms-0ubuntu14.14
> ProcVersionSignature: Ubuntu 3.2.0-61.93-generic 3.2.55
> Uname: Linux 3.2.0-61-generic x86_64
> ApportVersion: 2.0.1-0ubuntu17.6
> Architecture: amd64
> Date: Fri May 16 10:4...