1 files changed, 40 insertions, 0 deletions

diff --git a/gitlab/issues/target_missing/host_riscv/accel_TCG/1921.toml b/gitlab/issues/target_missing/host_riscv/accel_TCG/1921.toml
new file mode 100644
index 00000000..3da2924d
--- /dev/null
+++ b/gitlab/issues/target_missing/host_riscv/accel_TCG/1921.toml
@@ -0,0 +1,40 @@
+id = 1921
+title = "qemu-system-x86_64 segfaults in iotlb_to_section() on riscv64"
+state = "closed"
+created_at = "2023-10-03T19:28:07.377Z"
+closed_at = "2024-01-20T17:10:11.570Z"
+labels = ["accel: TCG", "host: riscv"]
+url = "https://gitlab.com/qemu-project/qemu/-/issues/1921"
+host-os = "Arch Linux RISC-V"
+host-arch = "riscv64"
+qemu-version = "8.1.1"
+guest-os = "Arch Linux"
+guest-arch = "x86_64"
+description = """QEMU segfaults when booting up the Arch Linux x86_64 installation ISO. The ISO could be downloaded from https://geo.mirror.pkgbuild.com/iso/2023.09.01/archlinux-2023.09.01-x86_64.iso or any other Arch Linux mirrors.
+
+The crash often happens after "Probing EDD...". It's more reliably reproducible with higher `-smp` numbers, and may hang with "rcu_preempt detected stalls" without the -smp option."""
+reproduce = "n/a"
+additional = """I have reproduced the same issues with different RISC-V hardware, including SG2042 and TH1520.
+
+Errors:
+```
+qemu-system-x86_64: ../qemu-8.1.1/softmmu/physmem.c:2419: iotlb_to_section: Assertion `section_index < d->map.sections_nb' failed.
+```
+
+Backtrace:
+```
+#0  0x0000003fa74f0ece in __pthread_kill_implementation (threadid=<optimized out>, signo=signo@entry=6, no_tid=no_tid@entry=0) at pthread_kill.c:44
+#1  0x0000003fa74f0f0e in __pthread_kill_internal (signo=6, threadid=<optimized out>) at pthread_kill.c:78
+#2  0x0000003fa74ba912 in __GI_raise (sig=sig@entry=6) at ../sysdeps/posix/raise.c:26
+#3  0x0000003fa74aa164 in __GI_abort () at abort.c:79
+#4  0x0000003fa74b54a4 in __assert_fail_base
+    (fmt=0x3fa7594c10 "%s%s%s:%u: %s%sAssertion `%s' failed.\\n%n", assertion=assertion@entry=0x2ae1de0458 "section_index < d->map.sections_nb", file=file@entry=0x2ae1ddf980 "../qemu-8.1.1/softmmu/physmem.c", line=line@entry=2419, function=function@entry=0x2ae1f05f20 <__PRETTY_FUNCTION__.11> "iotlb_to_section") at assert.c:92
+#5  0x0000003fa74b54f8 in __assert_fail (assertion=0x2ae1de0458 "section_index < d->map.sections_nb", file=0x2ae1ddf980 "../qemu-8.1.1/softmmu/physmem.c", line=2419, function=0x2ae1f05f20 <__PRETTY_FUNCTION__.11> "iotlb_to_section") at assert.c:101
+#6  0x0000002ae1b69788 in iotlb_to_section () at ../qemu-8.1.1/softmmu/physmem.c:2419
+#7  0x0000002ae1b9d774 in io_writex () at ../qemu-8.1.1/accel/tcg/cputlb.c:1432
+#8  0x0000002ae1b9d924 in do_st_mmio_leN () at ../qemu-8.1.1/accel/tcg/cputlb.c:2755
+#9  0x0000002ae1ba127c in do_st_4 () at ../qemu-8.1.1/accel/tcg/cputlb.c:2921
+#10 do_st4_mmu () at ../qemu-8.1.1/accel/tcg/cputlb.c:3006
+#11 0x0000003f600dd7ec in code_gen_buffer ()
+#12 0x5f085e2755518600 in  ()
+```"""