upgrade failed from 2.2.14 to 4.1.0 (Advance Networking with Security Groups)

Hi,
Upgrade fails when doing an upgrade from 2.2.14 to 4.1.0
Upgrade document followed: http://dissociatedpress.net/uploads/Apache_CloudStack-4.1.0-Release_Notes-en-US.pdf

List of the whole upgrade process: http://mail-archives.apache.org/mod_mbox/cloudstack-users/201305.mbox/%3C9917BAFB7830F247A23EF5D917234EF31873DD88%40nlhlmexdb01.ocom.lan%3E

last few lines of management log.

2013-05-01 12:27:53,738 DEBUG [upgrade.dao.Upgrade30xBase] (Timer-1:null) Adding PhysicalNetwork 200 for Zone id 1
2013-05-01 12:27:53,739 WARN [upgrade.dao.Upgrade30xBase] (Timer-1:null) Statement is com.mysql.jdbc.JDBC4PreparedStatement@5f260643: INSERT INTO `cloud`.`physical_network` (id, uuid, data_center_id, vnet, broadcast_domain_range, state, name) VALUES (200,'cb65771b-731f-4a8c-94cf-00138b203252',1,null,'ZONE','Enabled','ZONE01-pNtwk200')
2013-05-01 12:27:53,741 DEBUG [upgrade.dao.Upgrade2214to30] (Timer-1:null) Skip adding public traffic type to zone id=1
2013-05-01 12:27:53,741 DEBUG [upgrade.dao.Upgrade30xBase] (Timer-1:null) Adding PhysicalNetwork traffic types
2013-05-01 12:27:53,742 DEBUG [upgrade.dao.Upgrade30xBase] (Timer-1:null) Adding PhysicalNetwork traffic types
2013-05-01 12:27:53,743 DEBUG [upgrade.dao.Upgrade30xBase] (Timer-1:null) Adding PhysicalNetwork traffic types
2013-05-01 12:27:53,744 DEBUG [upgrade.dao.Upgrade30xBase] (Timer-1:null) Adding PhysicalNetworkServiceProvider VirtualRouter
2013-05-01 12:27:53,749 DEBUG [upgrade.dao.Upgrade30xBase] (Timer-1:null) Adding PhysicalNetworkServiceProvider SecurityGroupProvider to the physical network id=200
2013-05-01 12:27:53,751 DEBUG [upgrade.dao.Upgrade2214to30] (Timer-1:null) Adding PhysicalNetwork to op_dc_vnet_alloc
2013-05-01 12:27:53,752 DEBUG [upgrade.dao.Upgrade2214to30] (Timer-1:null) Adding PhysicalNetwork to VLAN
2013-05-01 12:27:53,753 DEBUG [upgrade.dao.Upgrade2214to30] (Timer-1:null) Adding PhysicalNetwork to user_ip_address
2013-05-01 12:27:53,755 DEBUG [upgrade.dao.Upgrade2214to30] (Timer-1:null) Adding PhysicalNetwork to networks
2013-05-01 12:27:53,756 DEBUG [upgrade.dao.Upgrade2214to30] (Timer-1:null) Encrypting the data...
2013-05-01 12:27:53,756 DEBUG [upgrade.dao.Upgrade2214to30] (Timer-1:null) Encrypting Config values
2013-05-01 12:27:53,877 DEBUG [upgrade.dao.Upgrade2214to30] (Timer-1:null) Done encrypting Config values
2013-05-01 12:27:53,877 DEBUG [upgrade.dao.Upgrade2214to30] (Timer-1:null) Encrypting host details
2013-05-01 12:27:53,879 DEBUG [upgrade.dao.Upgrade2214to30] (Timer-1:null) Done encrypting host details
2013-05-01 12:27:53,879 DEBUG [upgrade.dao.Upgrade2214to30] (Timer-1:null) Encrypting vm_instance vnc_password
2013-05-01 12:27:53,888 DEBUG [upgrade.dao.Upgrade2214to30] (Timer-1:null) Done encrypting vm_instance vnc_password
2013-05-01 12:27:53,888 DEBUG [upgrade.dao.Upgrade2214to30] (Timer-1:null) Encrypting user keys
2013-05-01 12:27:53,891 DEBUG [upgrade.dao.Upgrade2214to30] (Timer-1:null) Done encrypting user keys
2013-05-01 12:27:53,891 DEBUG [upgrade.dao.Upgrade2214to30] (Timer-1:null) Encrypting vpn_users password
2013-05-01 12:27:53,892 DEBUG [upgrade.dao.Upgrade2214to30] (Timer-1:null) Done encrypting vpn_users password
2013-05-01 12:27:53,892 DEBUG [upgrade.dao.Upgrade2214to30] (Timer-1:null) Done encrypting the data
2013-05-01 12:27:53,892 DEBUG [upgrade.dao.Upgrade2214to30] (Timer-1:null) Dropping public_ip_address keys from `cloud`.`secondary_storage_vm` and console_proxy tables...
2013-05-01 12:27:54,004 DEBUG [upgrade.dao.DbUpgradeUtils] (Timer-1:null) Key public_ip_address is dropped successfully from the table secondary_storage_vm
2013-05-01 12:27:54,045 DEBUG [upgrade.dao.DbUpgradeUtils] (Timer-1:null) Key public_ip_address is dropped successfully from the table console_proxy
2013-05-01 12:27:54,045 DEBUG [upgrade.dao.Upgrade2214to30] (Timer-1:null) Updating System Vm template IDs
2013-05-01 12:27:54,047 DEBUG [upgrade.dao.Upgrade2214to30] (Timer-1:null) Updating XenSever System Vms
2013-05-01 12:27:54,048 WARN [upgrade.dao.Upgrade2214to30] (Timer-1:null) 3.0.0 XenServer SystemVm template not found. XenServer hypervisor is not used, so not failing upgrade
2013-05-01 12:27:54,048 DEBUG [upgrade.dao.Upgrade2214to30] (Timer-1:null) Updating KVM System Vms
2013-05-01 12:27:54,049 DEBUG [db.Transaction.Transaction] (Timer-1:null) Rolling back the transaction: Time = 9161 Name = Upgrade; called by -Transaction.rollback:890-Transaction.removeUpTo:833-Transaction.close:657-DatabaseUpgradeChecker.upgrade:263-DatabaseUpgradeChecker.check:358-ComponentContext.initComponentsLifeCycle:90-CloudStartupServlet$1.run:50-TimerThread.mainLoop:534-TimerThread.run:484
2013-05-01 12:27:54,052 ERROR [utils.component.ComponentContext] (Timer-1:null) System integrity check failed. Refuse to startup

last lines of catalina.out log
INFO [utils.component.ComponentContext] (Timer-1 Running SystemIntegrityChecker encryptionSecretKeyChecker
WARN [utils.crypt.EncryptionSecretKeyChecker] (Timer-1 Encryption already enabled, is check() called twice?
INFO [utils.component.ComponentContext] (Timer-1 Running SystemIntegrityChecker databaseIntegrityChecker
INFO [cloud.upgrade.DatabaseIntegrityChecker] (Timer-1 Grabbing lock to check for database integrity.
INFO [cloud.upgrade.DatabaseIntegrityChecker] (Timer-1 Performing database integrity check
INFO [utils.component.ComponentContext] (Timer-1 Running SystemIntegrityChecker managementServerNode
INFO [utils.component.ComponentContext] (Timer-1 Running SystemIntegrityChecker databaseUpgradeChecker
INFO [cloud.upgrade.DatabaseUpgradeChecker] (Timer-1 Grabbing lock to check for database upgrade.
INFO [cloud.upgrade.DatabaseUpgradeChecker] (Timer-1 DB version = 2.2.14.20120210102939 Code Version = 4.1.0-SNAPSHOT
INFO [cloud.upgrade.DatabaseUpgradeChecker] (Timer-1 Database upgrade must be performed from 2.2.14.20120210102939 to 4.1.0-SNAPSHOT
May 1, 2013 12:27:45 PM org.springframework.web.context.ContextLoader initWebApplicationContext
INFO: Root WebApplicationContext: initialization completed in 10762 ms
May 1, 2013 12:27:45 PM org.springframework.beans.factory.annotation.AutowiredAnnotationBeanPostProcessor <init>
INFO: JSR-330 'javax.inject.Inject' annotation found and supported for autowiring
INFO [utils.component.ComponentContext] (main Configuring com.cloud.bridge.persist.dao.CloudStackAccountDaoImpl_EnhancerByCloudStack_61c90143
INFO [utils.component.ComponentContext] (main Configuring com.cloud.bridge.persist.dao.OfferingDaoImpl_EnhancerByCloudStack_f6d3709d
INFO [utils.component.ComponentContext] (main Configuring com.cloud.bridge.persist.dao.SMetaDaoImpl_EnhancerByCloudStack_137a6095
INFO [utils.component.ComponentContext] (main Configuring com.cloud.bridge.persist.dao.MultipartMetaDaoImpl_EnhancerByCloudStack_fae2e354
INFO [utils.component.ComponentContext] (main Configuring com.cloud.bridge.persist.dao.UserCredentialsDaoImpl_EnhancerByCloudStack_b47c2bb4
INFO [utils.component.ComponentContext] (main Configuring com.cloud.bridge.persist.dao.CloudStackConfigurationDaoImpl_EnhancerByCloudStack_22ae7372
INFO [utils.component.ComponentContext] (main Configuring com.cloud.bridge.persist.dao.BucketPolicyDaoImpl_EnhancerByCloudStack_7a48dd37
INFO [utils.component.ComponentContext] (main Configuring com.cloud.bridge.persist.dao.SObjectItemDaoImpl_EnhancerByCloudStack_5e5b9500
INFO [utils.component.ComponentContext] (main Configuring com.cloud.bridge.persist.dao.MHostMountDaoImpl_EnhancerByCloudStack_b35ec90f
INFO [utils.component.ComponentContext] (main Configuring com.cloud.bridge.persist.dao.MHostDaoImpl_EnhancerByCloudStack_2546eb50
INFO [utils.component.ComponentContext] (main Configuring com.cloud.bridge.persist.dao.MultiPartUploadsDaoImpl_EnhancerByCloudStack_e0bb907d
INFO [utils.component.ComponentContext] (main Configuring com.cloud.bridge.persist.dao.SBucketDaoImpl_EnhancerByCloudStack_b1f7cd48
INFO [utils.component.ComponentContext] (main Configuring com.cloud.bridge.persist.dao.SAclDaoImpl_EnhancerByCloudStack_24e6a5c4
INFO [utils.component.ComponentContext] (main Configuring com.cloud.bridge.persist.dao.MultiPartPartsDaoImpl_EnhancerByCloudStack_acb5baff
INFO [utils.component.ComponentContext] (main Configuring com.cloud.bridge.persist.dao.CloudStackSvcOfferingDaoImpl_EnhancerByCloudStack_ac0ba762
INFO [utils.component.ComponentContext] (main Configuring com.cloud.bridge.persist.dao.SHostDaoImpl_EnhancerByCloudStack_4dd9619a
INFO [utils.component.ComponentContext] (main Configuring com.cloud.bridge.persist.dao.CloudStackUserDaoImpl_EnhancerByCloudStack_300256e5
INFO [utils.component.ComponentContext] (main Configuring com.cloud.bridge.persist.dao.SObjectDaoImpl_EnhancerByCloudStack_34b3d18b
INFO [utils.component.ComponentContext] (main Configuring com.cloud.bridge.service.core.ec2.EC2Engine_EnhancerByCloudStack_8740b63b
INFO [utils.component.ComponentContext] (main Configuring com.cloud.bridge.service.controller.s3.ServiceProvider_EnhancerByCloudStack_b27150b0
Log4j configuration from : /usr/share/cloudstack-management/conf/log4j-cloud.xml
WARN [upgrade.dao.Upgrade30xBase] (Timer-1 Statement is com.mysql.jdbc.JDBC4PreparedStatement@5f260643: INSERT INTO `cloud`.`physical_network` (id, uuid, data_center_id, vnet, broadcast_domain_range, state, name) VALUES (200,'cb65771b-731f-4a8c-94cf-00138b203252',1,null,'ZONE','Enabled','ZONE01-pNtwk200')
WARN [upgrade.dao.Upgrade2214to30] (Timer-1 3.0.0 XenServer SystemVm template not found. XenServer hypervisor is not used, so not failing upgrade
ERROR [utils.component.ComponentContext] (Timer-1 System integrity check failed. Refuse to startup