Guest

Preview Tool

Cisco Bug: CSCuw48499 - QEMU coredump: qemu_thread_create: Resource temporarily unavailable

Last Modified

Sep 28, 2018

Products (1)

  • Cisco ASA 5500-X Series Firewalls

Known Affected Releases

9.5(1.53)

Description (partial)

Symptom:
With 9.5.2 ASA image loaded on ASA 5506, 5508, or 5516 with Firepower SFR enabled - several hours after SFR is in Up/Up state QEMU coredumps and restarts SFR with following:

qemu: qemu_thread_create: Resource temporarily unavailable

On ASA console following is seen:
Also, on console:
ciscoasa# /asa/scripts/run_qemu_kvm.sh: line 111:  3729 Aborted                 (core dumped) /usr/bin/qemu-system-x86_64 -nographic -m $SYS_RAM -smp $NUM_CORES -hda $DISK_IMAGE $HDD_PARAM $ISO_IMAGE -enable-kvm -net nic,macaddr=$CP_MAC_ADDRESS,model=$DRIVER,vlan=1,name=cp,addr=$CP_BUS_ADDR -net tap,ifname=tap3,vlan=1,script=no,downscript=no -net nic,macaddr=$MGMT_MAC,model=$DRIVER,vlan=2,name=mgmt,addr=$MGT_BUS_ADDR -net tap,ifname=tap4,vlan=2,script=no,downscript=no -net nic,model=e1000,name=data,addr=$DATA_BUS_ADDR -serial pipe:$LOG_PIPE -serial unix:$CONSOLE_SOCKET,server,nowait -fdb $META_INFO -monitor /dev/null $IPS_NO_REBOOT $ASA_SHMEM_CMD $ASA_SHMEM_CHAR_DEV $CPP_KVM_SHMEM_CMD $QEMU_MEM_PATH > $LOG_PIPE 2>&1

Recently we have also seen re-images of SFR fail with the following error:
DB error - will retry: Cannot connect to DB 
If the entire console log is viewed with "show module sfr log console", you will see the "qemu: qemu_thread_create: Resource temporarily unavailable" error multiple times prior to the DB error.
So for any SFR re-image issue, make sure they are running an ASA version that includes the fix for this bug.

Conditions:
No particular trigger. Just load 9.5.2 on ASA 5506, 5508, or 5516 with Firepower SFR enabled.
Recently seen in multiple cases for re-image of SFR 6.1.

Related Community Discussions

ASA5506X with FirePower - re-image 6.1.0 failing
I have an ASA5506X which was running 5.4.  I want to upgrade to 6.1.0. That was done from Defence Center. The step until the final 6.1.0 upgrade went well.  After the last reboot, the module was "dead". So I reimage/recover the image per Ciscos guide. (http://www.cisco.com/c/en/us/td/docs/security/asa/asa93/configuration/firewall/asa-firewall-cli/modules-sfr.html) The recovery boot and 6.1.0 download/unpack/install seems to be OK. After (quite) some time, installation prompts to reboot to complete. ...
Latest activity: Oct 14, 2016
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.