** Description changed: Download a Fedora 19 ISO from: http://mirrors.kernel.org/fedora-secondary/releases/19/Fedora/ppc64/iso/ Compile qemu from git (I'm using 401c227b0a1134245ec61c6c5a9997cfc963c8e4 from today). Run qemu-system-ppc64 like this: ppc64-softmmu/qemu-system-ppc64 -M pseries -m 4096 -hda /dev/fedora/f20ppc64 -cdrom /tmp/Fedora-19-ppc64-DVD.iso -netdev user,id=usernet,net=169.254.0.0/16 -device virtio-net-pci,netdev=usernet Guest gets to yaboot. If you hit return, qemu segfaults: Program received signal SIGABRT, Aborted. 0x00007ffff041fa19 in __GI_raise (sig=sig@entry=6) - at ../nptl/sysdeps/unix/sysv/linux/raise.c:56 + at ../nptl/sysdeps/unix/sysv/linux/raise.c:56 56 return INLINE_SYSCALL (tgkill, 3, pid, selftid, sig); (gdb) t a a bt Thread 4 (Thread 0x7fff6eef7700 (LWP 7553)): #0 sem_timedwait () - at ../nptl/sysdeps/unix/sysv/linux/x86_64/sem_timedwait.S:101 - #1 0x00005555559a5897 in qemu_sem_timedwait (sem=sem@entry=0x55555631e788, - ms=ms@entry=10000) at util/qemu-thread-posix.c:238 + at ../nptl/sysdeps/unix/sysv/linux/x86_64/sem_timedwait.S:101 + #1 0x00005555559a5897 in qemu_sem_timedwait (sem=sem@entry=0x55555631e788, + ms=ms@entry=10000) at util/qemu-thread-posix.c:238 #2 0x000055555577e54c in worker_thread (opaque=0x55555631e6f0) - at thread-pool.c:97 + at thread-pool.c:97 #3 0x00007ffff625ec53 in start_thread (arg=0x7fff6eef7700) - at pthread_create.c:308 + at pthread_create.c:308 #4 0x00007ffff04df13d in clone () - at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 + at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 3 (Thread 0x7fff6e605700 (LWP 7547)): #0 0x00007ffff041fa19 in __GI_raise (sig=sig@entry=6) - at ../nptl/sysdeps/unix/sysv/linux/raise.c:56 + at ../nptl/sysdeps/unix/sysv/linux/raise.c:56 #1 0x00007ffff0421128 in __GI_abort () at abort.c:90 - #2 0x000055555583ea33 in helper_ldl_mmu (env=0x7ffff7fd7140, addr=1572864, - mmu_idx=1) at /home/rjones/d/qemu/include/exec/softmmu_template.h:153 + #2 0x000055555583ea33 in helper_ldl_mmu (env=0x7ffff7fd7140, addr=1572864, + mmu_idx=1) at /home/rjones/d/qemu/include/exec/softmmu_template.h:153 #3 0x00007fffab0819d8 in code_gen_buffer () - #4 0x00005555557aa7ae in cpu_tb_exec (tb_ptr=<optimized out>, - cpu=0x7ffff7fd7010) at /home/rjones/d/qemu/cpu-exec.c:56 + #4 0x00005555557aa7ae in cpu_tb_exec (tb_ptr=<optimized out>, + cpu=0x7ffff7fd7010) at /home/rjones/d/qemu/cpu-exec.c:56 #5 cpu_ppc_exec (env=env@entry=0x7ffff7fd7140) - at /home/rjones/d/qemu/cpu-exec.c:631 + at /home/rjones/d/qemu/cpu-exec.c:631 #6 0x00005555557abc35 in tcg_cpu_exec (env=0x7ffff7fd7140) - at /home/rjones/d/qemu/cpus.c:1193 + at /home/rjones/d/qemu/cpus.c:1193 #7 tcg_exec_all () at /home/rjones/d/qemu/cpus.c:1226 #8 qemu_tcg_cpu_thread_fn (arg=<optimized out>) - at /home/rjones/d/qemu/cpus.c:885 + at /home/rjones/d/qemu/cpus.c:885 #9 0x00007ffff625ec53 in start_thread (arg=0x7fff6e605700) - at pthread_create.c:308 + at pthread_create.c:308 #10 0x00007ffff04df13d in clone () - at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 + at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 1 (Thread 0x7ffff7fa9a40 (LWP 7542)): - #0 0x00007ffff04d4c2f in __GI_ppoll (fds=0x555556483210, nfds=4, - timeout=<optimized out>, timeout@entry=0x7fffffffd940, - sigmask=sigmask@entry=0x0) at ../sysdeps/unix/sysv/linux/ppoll.c:56 - #1 0x0000555555762db9 in ppoll (__ss=0x0, __timeout=0x7fffffffd940, - __nfds=<optimized out>, __fds=<optimized out>) - at /usr/include/bits/poll2.h:77 - #2 qemu_poll_ns (fds=<optimized out>, nfds=<optimized out>, - timeout=timeout@entry=951497) at qemu-timer.c:276 + #0 0x00007ffff04d4c2f in __GI_ppoll (fds=0x555556483210, nfds=4, + timeout=<optimized out>, timeout@entry=0x7fffffffd940, + sigmask=sigmask@entry=0x0) at ../sysdeps/unix/sysv/linux/ppoll.c:56 + #1 0x0000555555762db9 in ppoll (__ss=0x0, __timeout=0x7fffffffd940, + __nfds=<optimized out>, __fds=<optimized out>) + at /usr/include/bits/poll2.h:77 + #2 qemu_poll_ns (fds=<optimized out>, nfds=<optimized out>, + timeout=timeout@entry=951497) at qemu-timer.c:276 #3 0x000055555572b58c in os_host_main_loop_wait (timeout=951497) - at main-loop.c:228 + at main-loop.c:228 #4 main_loop_wait (nonblocking=<optimized out>) at main-loop.c:484 #5 0x00005555555ef9d8 in main_loop () at vl.c:2090 #6 main (argc=<optimized out>, argv=<optimized out>, envp=<optimized out>) - at vl.c:4435 - - NB: This does NOT happen if you specify -cpu POWER7 on the command line. + at vl.c:4435
-- You received this bug notification because you are a member of qemu- devel-ml, which is subscribed to QEMU. https://bugs.launchpad.net/bugs/1218098 Title: qemu-system-ppc64 segfaults in helper_ldl_mmu Status in QEMU: New Bug description: Download a Fedora 19 ISO from: http://mirrors.kernel.org/fedora-secondary/releases/19/Fedora/ppc64/iso/ Compile qemu from git (I'm using 401c227b0a1134245ec61c6c5a9997cfc963c8e4 from today). Run qemu-system-ppc64 like this: ppc64-softmmu/qemu-system-ppc64 -M pseries -m 4096 -hda /dev/fedora/f20ppc64 -cdrom /tmp/Fedora-19-ppc64-DVD.iso -netdev user,id=usernet,net=169.254.0.0/16 -device virtio-net- pci,netdev=usernet Guest gets to yaboot. If you hit return, qemu segfaults: Program received signal SIGABRT, Aborted. 0x00007ffff041fa19 in __GI_raise (sig=sig@entry=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:56 56 return INLINE_SYSCALL (tgkill, 3, pid, selftid, sig); (gdb) t a a bt Thread 4 (Thread 0x7fff6eef7700 (LWP 7553)): #0 sem_timedwait () at ../nptl/sysdeps/unix/sysv/linux/x86_64/sem_timedwait.S:101 #1 0x00005555559a5897 in qemu_sem_timedwait (sem=sem@entry=0x55555631e788, ms=ms@entry=10000) at util/qemu-thread-posix.c:238 #2 0x000055555577e54c in worker_thread (opaque=0x55555631e6f0) at thread-pool.c:97 #3 0x00007ffff625ec53 in start_thread (arg=0x7fff6eef7700) at pthread_create.c:308 #4 0x00007ffff04df13d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 3 (Thread 0x7fff6e605700 (LWP 7547)): #0 0x00007ffff041fa19 in __GI_raise (sig=sig@entry=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:56 #1 0x00007ffff0421128 in __GI_abort () at abort.c:90 #2 0x000055555583ea33 in helper_ldl_mmu (env=0x7ffff7fd7140, addr=1572864, mmu_idx=1) at /home/rjones/d/qemu/include/exec/softmmu_template.h:153 #3 0x00007fffab0819d8 in code_gen_buffer () #4 0x00005555557aa7ae in cpu_tb_exec (tb_ptr=<optimized out>, cpu=0x7ffff7fd7010) at /home/rjones/d/qemu/cpu-exec.c:56 #5 cpu_ppc_exec (env=env@entry=0x7ffff7fd7140) at /home/rjones/d/qemu/cpu-exec.c:631 #6 0x00005555557abc35 in tcg_cpu_exec (env=0x7ffff7fd7140) at /home/rjones/d/qemu/cpus.c:1193 #7 tcg_exec_all () at /home/rjones/d/qemu/cpus.c:1226 #8 qemu_tcg_cpu_thread_fn (arg=<optimized out>) at /home/rjones/d/qemu/cpus.c:885 #9 0x00007ffff625ec53 in start_thread (arg=0x7fff6e605700) at pthread_create.c:308 #10 0x00007ffff04df13d in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:113 Thread 1 (Thread 0x7ffff7fa9a40 (LWP 7542)): #0 0x00007ffff04d4c2f in __GI_ppoll (fds=0x555556483210, nfds=4, timeout=<optimized out>, timeout@entry=0x7fffffffd940, sigmask=sigmask@entry=0x0) at ../sysdeps/unix/sysv/linux/ppoll.c:56 #1 0x0000555555762db9 in ppoll (__ss=0x0, __timeout=0x7fffffffd940, __nfds=<optimized out>, __fds=<optimized out>) at /usr/include/bits/poll2.h:77 #2 qemu_poll_ns (fds=<optimized out>, nfds=<optimized out>, timeout=timeout@entry=951497) at qemu-timer.c:276 #3 0x000055555572b58c in os_host_main_loop_wait (timeout=951497) at main-loop.c:228 #4 main_loop_wait (nonblocking=<optimized out>) at main-loop.c:484 #5 0x00005555555ef9d8 in main_loop () at vl.c:2090 #6 main (argc=<optimized out>, argv=<optimized out>, envp=<optimized out>) at vl.c:4435 To manage notifications about this bug go to: https://bugs.launchpad.net/qemu/+bug/1218098/+subscriptions
