diff options
Diffstat (limited to 'gitlab/issues/target_riscv/host_missing/accel_missing')
85 files changed, 4159 insertions, 0 deletions
diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/1030.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/1030.toml new file mode 100644 index 00000000..a4e0c7c9 --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/1030.toml @@ -0,0 +1,15 @@ +id = 1030 +title = "Property 'rv32-riscv-cpu.x-v' not found" +state = "closed" +created_at = "2022-05-18T17:43:44.271Z" +closed_at = "2022-07-05T08:12:00.083Z" +labels = ["target: riscv"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/1030" +host-os = "n/a" +host-arch = "n/a" +qemu-version = "n/a" +guest-os = "n/a" +guest-arch = "n/a" +description = "n/a" +reproduce = "n/a" +additional = "n/a" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/1050.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/1050.toml new file mode 100644 index 00000000..13979100 --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/1050.toml @@ -0,0 +1,80 @@ +id = 1050 +title = "[BUG] heap-buffer-overflow in sifive_plic_create" +state = "closed" +created_at = "2022-05-31T09:30:39.047Z" +closed_at = "2022-06-10T12:53:23.950Z" +labels = ["target: riscv"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/1050" +host-os = "n/a" +host-arch = "n/a" +qemu-version = "n/a" +guest-os = "n/a" +guest-arch = "n/a" +description = """I run check-qtest-riscv64 in ubuntu20.04, and got a heap-buffer-overflow report with address sanitizer +HEAD: 7077fcb9b68f058809c9dd9fd1dacae1881e886c""" +reproduce = """run +`G_TEST_DBUS_DAEMON=/root/o/sources/qemu/tests/dbus-vmstate-daemon.sh QTEST_QEMU_IMG=./qemu-img MALLOC_PERTURB_=58 QTEST_QEMU_STORAGE_DAEMON_BINARY=./storage-daemon/qemu-storage-daemon QTEST_QEMU_BINARY=./qemu-system-riscv64 /root/o/sources/qemu/build/tests/qtest/test-hmp --tap -k`""" +additional = """I think is because on some conditions when after `j++(hw/intc/sifive_plic.c:458)`, it accesses `plic->addr_config[j](hw/intc/sifive_plic.c:463)` and results in heap-overflow. +I tried to modify `hw/intc/sifive_plic.c:463` to else-if, then the report gone. +Could you please have a check. +``` +==63425==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x602000031624 at pc 0x561afe157d54 bp 0x7ffcd8aef510 sp 0x7ffcd8aef500 +READ of size 4 at 0x602000031624 thread T0 + #0 0x561afe157d53 in sifive_plic_create ../hw/intc/sifive_plic.c:463 + #1 0x561afdc0ac7f in sifive_e_soc_realize ../hw/riscv/sifive_e.c:207 + #2 0x561afe6698fb in device_set_realized ../hw/core/qdev.c:531 + #3 0x561afe679b90 in property_set_bool ../qom/object.c:2273 + #4 0x561afe681c7f in object_property_set ../qom/object.c:1408 + #5 0x561afe68b763 in object_property_set_qobject ../qom/qom-qobject.c:28 + #6 0x561afe682535 in object_property_set_bool ../qom/object.c:1477 + #7 0x561afdc0a601 in sifive_e_machine_init ../hw/riscv/sifive_e.c:91 + #8 0x561afd34d608 in machine_run_board_init ../hw/core/machine.c:1427 + #9 0x561afda49697 in qemu_init_board ../softmmu/vl.c:2610 + #10 0x561afda49697 in qmp_x_exit_preconfig ../softmmu/vl.c:2706 + #11 0x561afda49697 in qmp_x_exit_preconfig ../softmmu/vl.c:2699 + #12 0x561afda504ee in qemu_init ../softmmu/vl.c:3737 + #13 0x561afd1cf4ae in qemu_main ../softmmu/main.c:35 + #14 0x561afd1cf4ae in main ../softmmu/main.c:45 + #15 0x7f9d13bf3082 in __libc_start_main ../csu/libc-start.c:308 + #16 0x561afd1de78d in _start (/root/o/sources/qemu/build/qemu-system-riscv64+0x271378d) + +0x602000031624 is located 8 bytes to the right of 12-byte region [0x602000031610,0x60200003161c) +allocated by thread T0 here: + #0 0x7f9d15026808 in __interceptor_malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cc:144 + #1 0x7f9d14a84e98 in g_malloc (/lib/x86_64-linux-gnu/libglib-2.0.so.0+0x57e98) + +SUMMARY: AddressSanitizer: heap-buffer-overflow ../hw/intc/sifive_plic.c:463 in sifive_plic_create +Shadow bytes around the buggy address: + 0x0c047fffe270: fa fa 05 fa fa fa 07 fa fa fa 00 01 fa fa 07 fa + 0x0c047fffe280: fa fa 05 fa fa fa 07 fa fa fa fd fa fa fa 02 fa + 0x0c047fffe290: fa fa 00 01 fa fa fd fd fa fa fd fa fa fa fd fd + 0x0c047fffe2a0: fa fa 00 02 fa fa 00 02 fa fa 05 fa fa fa 07 fa + 0x0c047fffe2b0: fa fa 00 01 fa fa 07 fa fa fa 05 fa fa fa 07 fa +=>0x0c047fffe2c0: fa fa 00 04[fa]fa 04 fa fa fa 00 00 fa fa 00 00 + 0x0c047fffe2d0: fa fa 00 00 fa fa fd fd fa fa 00 03 fa fa fd fd + 0x0c047fffe2e0: fa fa 00 03 fa fa fd fd fa fa 00 03 fa fa fd fd + 0x0c047fffe2f0: fa fa 00 03 fa fa fd fd fa fa 00 03 fa fa fd fd + 0x0c047fffe300: fa fa 00 03 fa fa fd fd fa fa 00 03 fa fa fd fa + 0x0c047fffe310: fa fa fd fd fa fa 00 03 fa fa fd fd fa fa 00 03 +Shadow byte legend (one shadow byte represents 8 application bytes): + Addressable: 00 + Partially addressable: 01 02 03 04 05 06 07 + Heap left redzone: fa + Freed heap region: fd + Stack left redzone: f1 + Stack mid redzone: f2 + Stack right redzone: f3 + Stack after return: f5 + Stack use after scope: f8 + Global redzone: f9 + Global init order: f6 + Poisoned by user: f7 + Container overflow: fc + Array cookie: ac + Intra object redzone: bb + ASan internal: fe + Left alloca redzone: ca + Right alloca redzone: cb + Shadow gap: cc +==63425==ABORTING +```""" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/1093.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/1093.toml new file mode 100644 index 00000000..b3cf84d2 --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/1093.toml @@ -0,0 +1,41 @@ +id = 1093 +title = "RISC-V: signal frame is misaligned in signal handlers" +state = "closed" +created_at = "2022-06-29T20:45:51.271Z" +closed_at = "2022-08-02T13:35:56.948Z" +labels = ["Closed::Fixed", "linux-user", "target: riscv"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/1093" +host-os = "Linux" +host-arch = "x86_64" +qemu-version = "7.0.0" +guest-os = "n/a" +guest-arch = "RISC-V 64" +description = """`qemu-user` misaligns the signal frame (to 4 bytes rather than 16 bytes) on RISC-V 64, e.g causing pointer misalignment diagnostics to be triggered by UBSan.""" +reproduce = """1. Create a C file with the following contents: +```c +#include <signal.h> +#include <stdio.h> + +void handler(int sig, siginfo_t *info, void *context) { +\tprintf("signal occurred, info: %p, context: %p\\n", info, context); +} + +int main() { +\tstruct sigaction act; +\tact.sa_flags = SA_SIGINFO; +\tact.sa_sigaction = handler; +\tsigaction(SIGINT, &act, NULL); + +\t// Deliberately misalign the stack +\tasm volatile ("addi sp, sp, -4"); + +\twhile(1); +\t// Unreachable +} +``` +2. Compile with an appropriate RISC-V toolchain and run with `qemu-riscv64 ./a.out`. +3. Send a `SIGINT` (e.g by hitting Ctrl-C), and observe that the signal frame will be misaligned: +``` +signal occurred, info: 0x400080025c, context: 0x40008002dc +```""" +additional = """This issue is alluded to in the source code, see https://gitlab.com/qemu-project/qemu/-/blob/master/linux-user/riscv/signal.c#L68-69. It should be sufficient to change that constant to 15.""" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/1160.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/1160.toml new file mode 100644 index 00000000..63008014 --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/1160.toml @@ -0,0 +1,15 @@ +id = 1160 +title = "hw/riscv reset vector improvement" +state = "closed" +created_at = "2022-08-15T18:04:14.331Z" +closed_at = "2022-08-18T22:24:06.832Z" +labels = ["target: riscv", "workflow::Triaged"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/1160" +host-os = "n/a" +host-arch = "n/a" +qemu-version = "n/a" +guest-os = "n/a" +guest-arch = "n/a" +description = "n/a" +reproduce = "n/a" +additional = "n/a" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/1173.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/1173.toml new file mode 100644 index 00000000..d00bea08 --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/1173.toml @@ -0,0 +1,15 @@ +id = 1173 +title = "is that `fsgnjn.s` will affect other bits except sign bit." +state = "closed" +created_at = "2022-08-25T00:06:03.816Z" +closed_at = "2022-08-25T02:06:46.834Z" +labels = ["Closed::Invalid", "target: riscv"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/1173" +host-os = "n/a" +host-arch = "n/a" +qemu-version = "n/a" +guest-os = "n/a" +guest-arch = "n/a" +description = "n/a" +reproduce = "n/a" +additional = "n/a" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/1178.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/1178.toml new file mode 100644 index 00000000..e22db9f2 --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/1178.toml @@ -0,0 +1,15 @@ +id = 1178 +title = "is that riscv64 `feq.s` only should consider the lowest 32-bits." +state = "closed" +created_at = "2022-08-26T02:42:05.728Z" +closed_at = "2022-08-26T14:49:18.093Z" +labels = ["Closed::Invalid", "target: riscv"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/1178" +host-os = "n/a" +host-arch = "n/a" +qemu-version = "n/a" +guest-os = "n/a" +guest-arch = "n/a" +description = "n/a" +reproduce = "n/a" +additional = "n/a" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/1241.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/1241.toml new file mode 100644 index 00000000..cc77cd5f --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/1241.toml @@ -0,0 +1,21 @@ +id = 1241 +title = "About showing the information of the csr" +state = "closed" +created_at = "2022-10-07T08:00:12.538Z" +closed_at = "2022-10-27T01:48:44.028Z" +labels = ["target: riscv"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/1241" +host-os = "Ubuntu" +host-arch = "x86_64" +qemu-version = "QEMU emulator version 7.1.50 (v7.1.0-748-gf1d33f55c4-dirty)" +guest-os = "xv6-riscv(Windows 10 21H1, Fedora 34, etc.)" +guest-arch = "riscv64(x86, ARM, s390x, etc.)" +description = """cannot print the inforamtion after pulling the newest version of qemu +E.g info r csr +only fcsr frm fflags are shown. However , it should print out all the csrs such as mideleg mhartid etc in preivous version +info r mip +(GDB) Invalid register `mip'""" +reproduce = """1.running riscv64-unknown-elf-gdb kernel +2.target remote to the port i set in the xv6 makefile +3.type info r mip it shows the the probklem i mentioned above. I could use the print CSR in previous version of QEMU.""" +additional = """""" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/1259.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/1259.toml new file mode 100644 index 00000000..ccd326c2 --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/1259.toml @@ -0,0 +1,15 @@ +id = 1259 +title = "RISC-V csr" +state = "closed" +created_at = "2022-10-16T04:00:40.140Z" +closed_at = "2022-10-27T01:39:25.444Z" +labels = ["target: riscv"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/1259" +host-os = "n/a" +host-arch = "n/a" +qemu-version = "n/a" +guest-os = "n/a" +guest-arch = "n/a" +description = "n/a" +reproduce = "n/a" +additional = "n/a" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/1260.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/1260.toml new file mode 100644 index 00000000..ddc3e63e --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/1260.toml @@ -0,0 +1,15 @@ +id = 1260 +title = "RISC-V sstatus register is missing in qemu console / gdb" +state = "closed" +created_at = "2022-10-16T04:28:06.956Z" +closed_at = "2022-10-27T01:37:18.408Z" +labels = ["GDB", "target: riscv"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/1260" +host-os = "n/a" +host-arch = "n/a" +qemu-version = "n/a" +guest-os = "n/a" +guest-arch = "n/a" +description = "n/a" +reproduce = "n/a" +additional = "n/a" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/1281.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/1281.toml new file mode 100644 index 00000000..98f7d396 --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/1281.toml @@ -0,0 +1,15 @@ +id = 1281 +title = "xv6 kernel problem in single step mode" +state = "closed" +created_at = "2022-10-27T17:53:39.811Z" +closed_at = "2022-12-03T04:52:51.753Z" +labels = ["target: riscv"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/1281" +host-os = "n/a" +host-arch = "n/a" +qemu-version = "n/a" +guest-os = "n/a" +guest-arch = "n/a" +description = "n/a" +reproduce = "n/a" +additional = "n/a" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/1320.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/1320.toml new file mode 100644 index 00000000..0588376d --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/1320.toml @@ -0,0 +1,22 @@ +id = 1320 +title = "qemu-system-riscv64: Unable to load the RISC-V firmware \"opensbi-riscv64-virt-fw_jump.bin\"" +state = "closed" +created_at = "2022-11-18T02:50:37.789Z" +closed_at = "2023-01-23T01:32:58.759Z" +labels = ["target: riscv"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/1320" +host-os = "Ubuntu20.04" +host-arch = "x86_64" +qemu-version = "QEMU emulator version 4.2.1 (Debian 1:4.2-3ubuntu6.23)" +guest-os = "ubuntu-focal" +guest-arch = "riscv64" +description = """qemu-system-riscv64: Unable to load the RISC-V firmware "opensbi-riscv64-virt-fw_jump.bin"""" +reproduce = """1. wget https://cdn.kernel.org/pub/linux/kernel/v5.x/linux-5.15.79.tar.xz +2. sudo apt-get install crossbuild-essential-riscv64 +3. make ARCH=riscv defconfig && make ARCH=riscv menuconfig +4. make -j4 ARCH=riscv CROSS_COMPILE=riscv64-linux-gnu- +5. trucate -s 128G rootfs.img && mkfs.ext4 rootfs.img +6. sudo mount -o loop ./rootfs.img /mnt +7. debootstrap --arch=riscv64 focal /mnt +8. qemu-system-riscv64 -machine virt -bios default -m 512M -kernel ./linux-5.15.79/arch/riscv/boot/Image -drive file=./rootfs.img,format=raw""" +additional = "n/a" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/1331.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/1331.toml new file mode 100644 index 00000000..cb3f8e3a --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/1331.toml @@ -0,0 +1,15 @@ +id = 1331 +title = "risc-v sstatus bug" +state = "closed" +created_at = "2022-11-22T11:42:41.233Z" +closed_at = "2022-11-22T23:07:34.030Z" +labels = ["target: riscv"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/1331" +host-os = "n/a" +host-arch = "n/a" +qemu-version = "n/a" +guest-os = "n/a" +guest-arch = "n/a" +description = "n/a" +reproduce = "n/a" +additional = "n/a" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/1332.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/1332.toml new file mode 100644 index 00000000..c9bdf670 --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/1332.toml @@ -0,0 +1,15 @@ +id = 1332 +title = "qemu.log missing sstatus register on RISC-V" +state = "closed" +created_at = "2022-11-22T11:49:05.291Z" +closed_at = "2022-12-03T04:52:13.142Z" +labels = ["target: riscv", "workflow::Triaged"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/1332" +host-os = "n/a" +host-arch = "n/a" +qemu-version = "n/a" +guest-os = "n/a" +guest-arch = "n/a" +description = "n/a" +reproduce = "n/a" +additional = "n/a" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/1343.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/1343.toml new file mode 100644 index 00000000..8687979e --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/1343.toml @@ -0,0 +1,44 @@ +id = 1343 +title = "qemu-system-riscv64: It cannot initialize ramfb video adapter" +state = "closed" +created_at = "2022-11-28T12:54:15.566Z" +closed_at = "2025-03-25T20:03:29.030Z" +labels = ["kind::Feature Request", "target: riscv"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/1343" +host-os = "Ubuntu 22.04.1" +host-arch = "x86_64" +qemu-version = "QEMU emulator version 6.2.0 (Debian 1:6.2+dfsg-2ubuntu6.5)" +guest-os = "Bare metal" +guest-arch = "riscv64" +description = """It looks like ramfb video adapter doesn't work in riscv64 architecture. But it works fine in aarch64 architecture.""" +reproduce = """1. Launch the [attached kernel](/uploads/43282fa1bd6959472af4f99646b447b9/kernel) with command: +``` +qemu-system-riscv64 -machine virt -kernel kernel -device ramfb -bios none -serial stdio +``` +2. You will get the messages in console: +``` +guest fw_cfg dma-interface enabled +setup ramfb successfull +``` +3. Video adapter will not initialize. QEMU window will continue display this message: +``` +Guest has not initialized the display (yet). +```""" +additional = """There is a useful project for aarch64 architecture - https://github.com/luickk/qemu-ramfb-aarch64-driver. This is a Bare metal driver for ramfb adapter. It works fine. I adapted it for riscv64 architecture - https://github.com/CityAceE/qemu-ramfb-riscv64-driver. I've successfully went through all problems. Driver compiles now and launches. But unfortunately ramfb doesn't initialize. I parallel traced aarch64 and riscv64. They works equal until initialization. Aarch64 changes revolution just after qemu_cfg_write_entry call, but nothing happened after qemu_cfg_write_entry call in riscv64 emulation. I spent a lot of time trying to resolve this problem, but it looks like a problem in qemu-system-riscv64. + +**UPDATE** + +Tested with Windows builds of QEMU: + +v 6.1 - The same situation as Ubuntu build 6.2. + +v 7.1.92 - Stopped with message: +``` +c:\\Program Files\\qemu\\qemu-system-riscv64.exe: -device ramfb: ramfb device requires fw_cfg with DMA +``` + +P.S. v 7.1.92 - qemu-system-aarch64.exe with [aarch64 kernel build](/uploads/0df1d440163913c25a1505032672e1c5/kernel) works fine. + +**UPDATE2** + +[QEMU emulator version 7.0.0 (v7.0.0-11902-g1d935f4a02-dirty)](https://qemu.weilnetz.de/w64/2022/qemu-w64-setup-20220419.exe) is the last Windows build which opens my riscv64 kernel without message about requirement of fw_cfg with DMA. Next build "QEMU emulator version 7.0.90 (v7.1.0-rc0-11915-g5f9b281b8a-dirty)" already has this issue.""" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/1395.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/1395.toml new file mode 100644 index 00000000..81fd83f8 --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/1395.toml @@ -0,0 +1,164 @@ +id = 1395 +title = "qemu-system-riscv32 cpu_transaction_failed cause Infinite loop when write mstatus ~\"target: riscv\"" +state = "closed" +created_at = "2022-12-25T13:26:24.584Z" +closed_at = "2023-01-23T16:39:56.032Z" +labels = ["target: riscv"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/1395" +host-os = "- OS/kernel version:" +host-arch = "## Description of problem" +qemu-version = "n/a" +guest-os = "- OS/kernel version:" +guest-arch = "## Description of problem" +description = """I wanna run FreeRTOS riscv, and use the FreeRTOS/Demo/RISC-V-Qemu-virt_GCC/Makefile to build elf.\\ +When qemu execute to write mstatus as 0x1888(enable Interrupt, MIE:1, MIP:1, MPP:3), there is no response.\\ +https://github.com/FreeRTOS/FreeRTOS-Kernel/blob/main/portable/GCC/RISC-V/portASM.S\\ +line 274: csrrw x0, mstatus, x5 /* Interrupts enabled from here! */\\ +opcode is hex 30029073\\n +I use pstack to trace qemu thread, there is only one thread is active, and cpu loading is 100%.\\ +then I use gdb attatch <pid> to trace the active thread, and it has a loop\\ +cpu_loop_exit call siglongjmp and back to sigsetjmp in cpu_exec (cpu=cpu@entry=0x55e2294e4070) at ../accel/tcg/cpu-exec.c:936""" +reproduce = """1.download FreeRTOS and build FreeRTOS/Demo/RISC-V-Qemu-virt_GCC\\ +2.run qemu with gdb\\ +3.hang when writing mstatus""" +additional = """I find that my issue occur when mtvec is zero and timer interrupt occur when writing mstatus(riscv_cpu_do_interrupt)\\ +Although it should jump to 0x0 rather then hanging in while loop.\\ +expected flow :cpu_handle_interrupt->check_for_breakpoints->break\\ +actually flow: cpu_handle_interrupt->check_for_breakpoints->infinite loop\\ +Qemu build command: +``` +./configure --target-list=riscv32-softmmu && make +``` + +pstack for qemu (only need to debug Thread 3) +``` +Thread 3 (Thread 0x7f83af6d3640 (LWP 5093) "qemu-system-ris"): +#0 0x000055cb31b1769f in riscv_cpu_exec_interrupt () +#1 0x0000000000000000 in () +Thread 2 (Thread 0x7f83b0119640 (LWP 5092) "qemu-system-ris"): +#0 0x00007f83b0400a3d in syscall () at /lib/x86_64-linux-gnu/libc.so.6 +#1 0x000055cb31e0bd52 in qemu_event_wait () +#2 0x0000000000000000 in () +Thread 1 (Thread 0x7f83b011ac00 (LWP 5090) "qemu-system-ris"): +#0 0x00007f83b03fae7e in ppoll () at /lib/x86_64-linux-gnu/libc.so.6 +#1 0x00007f83b0752500 in () at /lib/x86_64-linux-gnu/libglib-2.0.so.0 +#2 0x000055cb33241b30 in () +#3 0x0000000000000005 in () +#4 0x0000000000000000 in () +``` +backtrace for the infinite loop +``` +(gdb) bt +#0 cpu_loop_exit (cpu=0x55e2294e4070) at ../accel/tcg/cpu-exec-common.c:65 +#1 0x000055e2274efde4 in cpu_loop_exit_restore (cpu=cpu@entry=0x55e2294e4070, pc=pc@entry=0) + at ../accel/tcg/cpu-exec-common.c:76 +#2 0x000055e22737fff1 in riscv_cpu_do_transaction_failed + (cs=0x55e2294e4070, physaddr=<optimized out>, addr=0, size=<optimized out>, access_type=MMU_INST_FETCH, mmu_idx=<optimized out>, attrs=..., response=2, retaddr=0) + at ../target/riscv/cpu_helper.c:1165 +#3 0x000055e2274fa4a7 in cpu_transaction_failed + (retaddr=0, response=2, attrs=..., mmu_idx=3, access_type=MMU_INST_FETCH, size=<optimized out>, addr=0, physaddr=<optimized out>, cpu=0x55e2294e4070) at ../accel/tcg/cputlb.c:1344 +#4 io_readx + (env=env@entry=0x55e2294e53d0, full=full@entry=0x7fd90c029410, mmu_idx=3, addr=addr@entry=0, retaddr=retaddr@entry=0, access_type=access_type@entry=MMU_INST_FETCH, op=MO_16) + at ../accel/tcg/cputlb.c:1380 +#5 0x000055e2274fba28 in load_helper + (full_load=<optimized out>, code_read=true, op=MO_16, retaddr=0, oi=19, addr=0, env=0x55e2294e53d0) at ../accel/tcg/cputlb.c:1970 +#6 full_lduw_code (env=env@entry=0x55e2294e53d0, addr=addr@entry=0, oi=19, retaddr=0) + at ../accel/tcg/cputlb.c:2606 +#7 0x000055e22750827b in cpu_lduw_code (env=env@entry=0x55e2294e53d0, addr=addr@entry=0) + at ../accel/tcg/cputlb.c:2612 +#8 0x000055e2274f87fa in translator_lduw + (env=env@entry=0x55e2294e53d0, db=db@entry=0x7fd913dfe5a0, pc=0) + at ../accel/tcg/translator.c:216 +#9 0x000055e2273e423a in riscv_tr_translate_insn (dcbase=0x7fd913dfe5a0, cpu=<optimized out>) + at ../target/riscv/translate.c:1158 +#10 0x000055e2274f83d3 in translator_loop + (cpu=cpu@entry=0x55e2294e4070, tb=tb@entry=0x7fd91c000240 <code_gen_buffer+531>, max_insns=<optim + ized out>, pc=pc@entry=0, host_pc=host_pc@entry=0x55e2274efe74 <tb_htable_lookup+84>, ops=ops@entry=0x55e227a75c80 <riscv_tr_ops>, db=0x7fd913dfe5a0) at ../accel/tcg/translator.c:96 +#11 0x000055e227411760 in gen_intermediate_code + (cs=cs@entry=0x55e2294e4070, tb=tb@entry=0x7fd91c000240 <code_gen_buffer+531>, max_insns=<optimized out>, pc=pc@entry=0, host_pc=host_pc@entry=0x55e2274efe74 <tb_htable_lookup+84>) + at ../target/riscv/translate.c:1240 +#12 0x000055e2274f6954 in setjmp_gen_code + (env=env@entry=0x55e2294e53d0, tb=tb@entry=0x7fd91c000240 <code_gen_buffer+531>, pc=pc@entry=0, host_pc=0x55e2274efe74 <tb_htable_lookup+84>, max_insns=max_insns@entry=0x7fd913dfe744, ti=<optimized out>) at ../accel/tcg/translate-all.c:761 +#13 0x000055e2274f7294 in tb_gen_code + (cpu=cpu@entry=0x55e2294e4070, pc=0, cs_base=0, flags=1085443, cflags=<optimized out>, + cflags@entry=-16777216) at ../accel/tcg/translate-all.c:841 +#14 0x000055e2274f10cf in cpu_exec (cpu=cpu@entry=0x55e2294e4070) at ../accel/tcg/cpu-exec.c:1006 +#15 0x000055e22750a904 in tcg_cpus_exec (cpu=cpu@entry=0x55e2294e4070) + at ../accel/tcg/tcg-accel-ops.c:69 +#16 0x000055e22750aa57 in mttcg_cpu_thread_fn (arg=arg@entry=0x55e2294e4070) + at ../accel/tcg/tcg-accel-ops-mttcg.c:95 +#17 0x000055e227674b21 in qemu_thread_start (args=<optimized out>) + at ../util/qemu-thread-posix.c:505 +#18 0x00007fd9611a9b43 in start_thread (arg=<optimized out>) at ./nptl/pthread_create.c:442 +#19 0x00007fd96123ba00 in clone3 () at ../sysdeps/unix/sysv/linux/x86_64/clone3.S:81 +``` + +disassembly code +``` +80001ac6 <xPortStartFirstTask>: +80001ac6:\t85c1a103 \tlw\tsp,-1956(gp) # 800809fc <pxCurrentTCB> +80001aca:\t4102 \tlw\tsp,0(sp) +80001acc:\t4082 \tlw\tra,0(sp) +80001ace:\t43c2 \tlw\tt2,16(sp) +80001ad0:\t4452 \tlw\ts0,20(sp) +80001ad2:\t44e2 \tlw\ts1,24(sp) +80001ad4:\t4572 \tlw\ta0,28(sp) +80001ad6:\t5582 \tlw\ta1,32(sp) +80001ad8:\t5612 \tlw\ta2,36(sp) +80001ada:\t56a2 \tlw\ta3,40(sp) +80001adc:\t5732 \tlw\ta4,44(sp) +80001ade:\t57c2 \tlw\ta5,48(sp) +80001ae0:\t5852 \tlw\ta6,52(sp) +80001ae2:\t58e2 \tlw\ta7,56(sp) +80001ae4:\t5972 \tlw\ts2,60(sp) +80001ae6:\t4986 \tlw\ts3,64(sp) +80001ae8:\t4a16 \tlw\ts4,68(sp) +80001aea:\t4aa6 \tlw\ts5,72(sp) +80001aec:\t4b36 \tlw\ts6,76(sp) +80001aee:\t4bc6 \tlw\ts7,80(sp) +80001af0:\t4c56 \tlw\ts8,84(sp) +80001af2:\t4ce6 \tlw\ts9,88(sp) +80001af4:\t4d76 \tlw\ts10,92(sp) +80001af6:\t5d86 \tlw\ts11,96(sp) +80001af8:\t5e16 \tlw\tt3,100(sp) +80001afa:\t5ea6 \tlw\tt4,104(sp) +80001afc:\t5f36 \tlw\tt5,108(sp) +80001afe:\t5fc6 \tlw\tt6,112(sp) +80001b00:\t52d6 \tlw\tt0,116(sp) +80001b02:\t0007f317 \tauipc\tt1,0x7f +80001b06:\tea232303 \tlw\tt1,-350(t1) # 800809a4 <pxCriticalNesting> +80001b0a:\t00532023 \tsw\tt0,0(t1) +80001b0e:\t52e6 \tlw\tt0,120(sp) +80001b10:\t02a1 \taddi\tt0,t0,8 +80001b12:\t30029073 \tcsrw\tmstatus,t0 <--- hang on this line +80001b16:\t42a2 \tlw\tt0,8(sp) +80001b18:\t4332 \tlw\tt1,12(sp) +80001b1a:\t07c10113 \taddi\tsp,sp,124 +80001b1e:\t8082 \tret +``` + +``` +(gdb) bt +#0 cpu_loop_exit (cpu=cpu@entry=0x564cd884b070) at ../accel/tcg/cpu-exec-common.c:65 +#1 0x0000564cd6685631 in helper_lookup_tb_ptr (env=0x564cd884c3d0) at ../accel/tcg/cpu-exec.c:400 +#2 0x00007f55dc00014c in code_gen_buffer () +#3 0x0000564cd668521b in cpu_tb_exec + (cpu=cpu@entry=0x564cd884b070, itb=itb@entry=0x7f55dc000040 <code_gen_buffer+19>, tb_exit=tb_exit@entry=0x7f56235f67ec) at ../accel/tcg/cpu-exec.c:438 +#4 0x0000564cd6685cfb in cpu_loop_exec_tb + (tb_exit=0x7f56235f67ec, last_tb=<synthetic pointer>, pc=<optimized out>, tb=0x7f55dc000040 <code_gen_buffer+19>, cpu=0x564cd884b070) at ../accel/tcg/cpu-exec.c:868 +#5 cpu_exec (cpu=cpu@entry=0x564cd884b070) at ../accel/tcg/cpu-exec.c:1032 +#6 0x0000564cd669f904 in tcg_cpus_exec (cpu=cpu@entry=0x564cd884b070) + at ../accel/tcg/tcg-accel-ops.c:69 +#7 0x0000564cd669fa57 in mttcg_cpu_thread_fn (arg=arg@entry=0x564cd884b070) + at ../accel/tcg/tcg-accel-ops-mttcg.c:95 +#8 0x0000564cd6809b21 in qemu_thread_start (args=<optimized out>) + at ../util/qemu-thread-posix.c:505 +#9 0x00007f562429ab43 in start_thread (arg=<optimized out>) at ./nptl/pthread_create.c:442 +#10 0x00007f562432ca00 in clone3 () at ../sysdeps/unix/sysv/linux/x86_64/clone3.S:81 +``` + +I also build a very simple elf for qemu-virt-platform, just contain boot-loader and write mstatus as 0x1888, it can't reproduce.\\ +I also build different qemu version such v6.0.0, it still can reproduce.\\ +I has modify the march to the most simple arch:rv32i, is still can reproduce. + +~"target: riscv"""" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/1447.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/1447.toml new file mode 100644 index 00000000..e69ff5a4 --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/1447.toml @@ -0,0 +1,19 @@ +id = 1447 +title = "riscv: reset_vec uses CSR even when disabled causing inability to boot" +state = "closed" +created_at = "2023-01-17T16:40:23.220Z" +closed_at = "2023-02-07T20:12:33.668Z" +labels = ["kind::Bug", "target: riscv"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/1447" +host-os = "N/A" +host-arch = "N/A" +qemu-version = "used: 7.2.50" +guest-os = "n/a" +guest-arch = "n/a" +description = "n/a" +reproduce = """1. Run any rv32 binary with `./qemu-system-riscv32 -cpu rv32,d=off,f=off,Zicsr=off` + +To view using GDB use `./qemu-system-riscv32 -cpu rv32,d=off,f=off,Zicsr=off -S -s` +`gdb-multiarch --ex="target remote localhost:1234" -ex "layout asm"` +then type `si` till $pc jumps to zero on `csrr a0, mhartid`""" +additional = "n/a" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/1449.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/1449.toml new file mode 100644 index 00000000..3c08488b --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/1449.toml @@ -0,0 +1,15 @@ +id = 1449 +title = "RISCV: wrong check for vector extension ELEN value." +state = "closed" +created_at = "2023-01-18T15:45:22.681Z" +closed_at = "2023-01-23T02:19:24.925Z" +labels = ["target: riscv"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/1449" +host-os = "n/a" +host-arch = "n/a" +qemu-version = "n/a" +guest-os = "n/a" +guest-arch = "n/a" +description = """When checking if the vector extension ELEN value is in the range [8, 64], the lower bound check uses the `vlen` field instead of the `elen` one: https://gitlab.com/qemu-project/qemu/-/blob/master/target/riscv/cpu.c#L885.""" +reproduce = "n/a" +additional = """This is basically just a typo I found while reading the code, I do not have a real case scenario which resulted in this check to fail.""" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/1542.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/1542.toml new file mode 100644 index 00000000..f7fc69c5 --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/1542.toml @@ -0,0 +1,21 @@ +id = 1542 +title = "Non-Executable PMP regions of size less than 4K trigger instruction access faults non-deterministically" +state = "closed" +created_at = "2023-03-13T21:06:56.173Z" +closed_at = "2023-06-15T04:33:51.396Z" +labels = ["target: riscv"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/1542" +host-os = "Bare-metal" +host-arch = "RISC-V" +qemu-version = "7.2.0, master" +guest-os = "Bare-metal" +guest-arch = "RISC-V" +description = """When a non-executable PMP region of size less than 4K (page size) with a start address that is not 4K-aligned is created, QEMU will non-deterministically dispatch instruction access faults when instructions are executed from the PMP-covered region (will in some cases, won't in others, based on the current TLB state)""" +reproduce = """1. Create a PMP region of size less than 4K, that is not aligned to the start of the page, make it non-executable +2. Flush TLB with `sfence.vma x0, x0` +3. Jump to the start of the pmp-protected page and start executing instructions +4. Notice that no instruction access fault is reported once we reach the protected region inside the page""" +additional = """@rth7680 I believe this is at least partially an unintentional result of this commit that you authored: 7e0d9973ea665bf459b2dbd173d0e51bc6ca5216, which modified the behavior of `get_page_addr_code_hostp` probes to probe a single byte, instead of a full page size (signaled by passing 0). +This means that we initially probe the first byte of the page, see that no PMP faults are raised, and then assume that no other bytes in the page can cause a PMP fault. + +Note that I believe that simply changing this back to 0 from 1 is not enough, as this will likely simply reintroduce the issue I originally reported in #1053.""" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/1556.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/1556.toml new file mode 100644 index 00000000..34003734 --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/1556.toml @@ -0,0 +1,45 @@ +id = 1556 +title = "RISCV HGATP CSR writes incorrect" +state = "closed" +created_at = "2023-03-24T09:29:24.568Z" +closed_at = "2024-08-13T03:04:50.861Z" +labels = ["target: riscv", "workflow::Triaged"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/1556" +host-os = "OpenSuse Leap 15.2" +host-arch = "x86" +qemu-version = "QEMU emulator version 7.2.91 (v8.0.0-rc1-36-g60ca584b8a)" +guest-os = "Bare metal" +guest-arch = "Riscv" +description = """Issue with CSR writes/reads of SATP and HGATP. +Starting with SATP, in file `qemu/target/riscv/csr.c` the function write_satp has the following code snippet: + +```C + if (riscv_cpu_mxl(env) == MXL_RV32) { + vm = validate_vm(env, get_field(val, SATP32_MODE)); + mask = (val ^ env->satp) & (SATP32_MODE | SATP32_ASID | SATP32_PPN); + } else { + vm = validate_vm(env, get_field(val, SATP64_MODE)); + mask = (val ^ env->satp) & (SATP64_MODE | SATP64_ASID | SATP64_PPN); + } + + if (vm && mask) { + if (env->priv == PRV_S && get_field(env->mstatus, MSTATUS_TVM)) { + return RISCV_EXCP_ILLEGAL_INST; +``` +The potential problem I see in the code is that a CSR write which is either illegal or the same as what was previously in the CSR will not yield an illegal instruction. This potential issue could be simple to fix by simply moving the TVM check outside the vm && mask if-statement. +EDIT: I haven't been able to replicate this. Maybe there is code somewhere else which guards against this situation, I'll leave this comment here anyway just to get an extra pair of eyes on this code. + +For writes to hgatp (in the same source file) the value provided to the function is simply written directly to hgatp. +``` +static RISCVException write_hgatp(CPURISCVState *env, int csrno, + target_ulong val) +{ + env->hgatp = val; + return RISCV_EXCP_NONE; +} +``` +This can not be correct, the specification for example states `"A write to hgatp with an unsupported MODE value is not ignored as it is for satp. Instead, the fields of hgatp are WARL in the normal way, when so indicated."` Furthermore, there is also a restriction on the ppn field saying that ppn[1:0] must be 0. Finally when reading hgatp the tvm flag is not taken into consideration at all.""" +reproduce = "n/a" +additional = """The provided binary should be able to replicate the issue. The error regarding num_unexp_trap can be disregarded in this case, normally I break a test directly on an assertion failure but I didn't this time which is why the counter is increasing. + +[main](/uploads/31ef3bc424d63097177cba3579d9b411/main)""" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/1606.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/1606.toml new file mode 100644 index 00000000..e2433a17 --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/1606.toml @@ -0,0 +1,37 @@ +id = 1606 +title = "riscv: fence.i is not functional" +state = "opened" +created_at = "2023-04-17T17:03:39.906Z" +closed_at = "n/a" +labels = ["target: riscv"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/1606" +host-os = "Ubuntu 22.04.2 LTS" +host-arch = "x86" +qemu-version = "7.2.94 (v8.0.0-rc4)" +guest-os = "Ubuntu 22.04.2 LTS" +guest-arch = "RISC-V (riscv64-softmmu)" +description = """The attached user-level test is designed to do the following (in iteration): + + - Thread P0 on CPU0 changes some text/code, while + + - Thread P1 on CPU1 checks/reads the code, fence.i, then executes the same code. + +Results (in stdout) indicates that CPU1 has read the new code (1:x5=a009) but executed the old one (1:x7=1) (against the specification).""" +reproduce = """1. echo 2 > /proc/sys/vm/nr_hugepages +2. ./CoRF+fence.i""" +additional = """Example output: +```[CoRF+fence.i.c](/uploads/c150ca0910783cc4bfc3886789b64c28/CoRF+fence.i.c) +Test CoRF+fence.i Allowed +Histogram (4 states) +25784 :>1:x5=0xa009; 1:x7=2; +24207 *>1:x5=0xa009; 1:x7=1; <-- THIS LINE +8 :>1:x5=0xa019; 1:x7=1; +1 :>1:x5=0xa019; 1:x7=2; +Ok +Witnesses +Positive: 24207 Negative 25793 +Condition exists (1:x5=0xa009 /\\ 1:x7=1) is validated +Observation CoRF+fence.i Sometimes 24207 25793 +Time CoRF+fence.i 0.85 +Hash= +```""" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/1617.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/1617.toml new file mode 100644 index 00000000..6a91b8b7 --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/1617.toml @@ -0,0 +1,70 @@ +id = 1617 +title = "RISC-V: VS external IRQ can be taken in M-mode" +state = "closed" +created_at = "2023-04-24T08:56:54.418Z" +closed_at = "2024-01-10T16:21:42.604Z" +labels = ["target: riscv"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/1617" +host-os = "OpenSuse" +host-arch = "x86" +qemu-version = "QEMU emulator version 7.2.91 (v8.0.0-rc1-36-g60ca584b8a)" +guest-os = "None" +guest-arch = "RISC-V" +description = """The RISC-V specification states that `VS-level interrupts and guest external interrupts are always delegated past M-mode to HS mode.` +I happened to come across a situation where QEMU takes the vs_external IRQ in machine mode.""" +reproduce = """1. Enable IRQs globally (mstatus, vsstatus) +2. Set hstatus.VGEIN to a legal value +3. Write -1 to mie +4. Write -1 to hvip + +I included a binary that should be able to reproduce the issue. + +I use a vectored setup for mtvec and as soon as the VSEIP bit in hvip has been set the machine jumps to mtvec.vsei. +To confirm that I actually went to mtvec and not somewhere with a faulty print I also performed an ecall and that was reported as an M mode ecall.""" +additional = """``` +TRACE: [hart_ctrl.c:35] STARTING CPU 0 +DEBUG: [trap_handling.c: 886] Setting up trap handlers +DEBUG: [aia_ctrl.c: 377] Initializing interrupt controller +TRACE: [main.c:31] Writing -1 to mie +TRACE: [main.c:33] Writing -1 to hvip +riscv_cpu_do_interrupt: hart:0, async:1, cause:000000000000000a, epc:0x0000000080000114, tval:0x0000000000000000, desc=vs_external +ERROR: [trap_handling.c:280] mtvec_vsei should be unreachable +mstatus = 0x0000000a000038a2 hstatus: + SIE = 1 VSXL[1:0] = 2 + MIE = 0 VTSR = 0 + SPIE = 1 VTW = 0 + UBE = 0 VTVM = 0 + MPIE = 1 VGEIN[5:0] = 1 + SPP = 0 HU = 0 + VS = 0 SPVP = 0 + MPP = 3 SPV = 0 + FS = 1 GVA = 0 + MPRV = 0 VSBE = 0 + SUM = 0 + MXR = 0 + TVM = 0 + TW = 0 + TSR = 0 + UXL = 2 + SXL = 2 + SBE = 0 + MBE = 0 + GVA = 0 + MPV = 0 +mie mip mideleg hvip + ssie (1) = 1 ssip (1) = 0 ssi (1) = 0 ssip (1) = 0 + vssie(2) = 1 vssip(2) = 1 vssi (2) = 0 vssip(2) = 1 + msie (3) = 1 msip (3) = 0 msi (3) = 0 msip (3) = 0 + stie (5) = 1 stip (5) = 0 sti (5) = 0 stip (5) = 0 + vstie(6) = 1 vstip(6) = 0 vsti (6) = 0 vstip(6) = 0 + mtie (7) = 1 mtip (7) = 0 mti (7) = 0 mtip (7) = 0 + seie (9) = 1 seip (9) = 0 sei (9) = 0 seip (9) = 0 + vseie(10) = 1 vseip(10) = 1 vsei (10) = 0 vseip(10) = 1 + meie (11) = 1 meip (11) = 0 mei (11) = 0 meip (11) = 0 + sgeie(12) = 1 sgeip(12) = 0 sgei (12) = 0 sgeip(12) = 0 +DEBUG: [trap_handling.c: 28] hart_ctrl.kill_hart = 0x8000a00c +TRACE: [trap_handling.c:29] Program done, exiting +QEMU: Terminated +``` +Reproducer of the problem: +[main](/uploads/26a5698ce948149ca9d34f6b3dfac6a4/main)""" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/1633.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/1633.toml new file mode 100644 index 00000000..e94f1b52 --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/1633.toml @@ -0,0 +1,76 @@ +id = 1633 +title = "[8.0.0] Broken icount support on RISC-V" +state = "closed" +created_at = "2023-04-29T23:43:28.353Z" +closed_at = "2023-05-03T02:23:00.885Z" +labels = ["target: riscv"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/1633" +host-os = "macOS 13.3.1" +host-arch = "x86_64" +qemu-version = "8.0.0" +guest-os = "Ubuntu" +guest-arch = "RISC-V 64-bit" +description = """After https://gitlab.com/qemu-project/qemu/-/commit/5a4ae64cac49564354cd6f17598840e4af70e4f5 was merged, RISC-V VMs no longer run with -icount 1 specified in the QEMU arguments. Reverting this commit resolves the issue.""" +reproduce = """1. Download preinstalled Ubuntu 22.04.2 image from [here](https://cdimage.ubuntu.com/releases/22.04.2/release/ubuntu-22.04.2-preinstalled-server-riscv64+unmatched.img.xz) +2. Download uboot from [here](http://security.ubuntu.com/ubuntu/pool/main/u/u-boot/u-boot-qemu_2022.01+dfsg-2ubuntu2.3_all.deb) +3. Extract both. +4. Run with the command-line specified above.""" +additional = """Reading Ubuntu wiki describing how to run RISC-V VMs can help: https://wiki.ubuntu.com/RISC-V/QEMU + +Full output: + +``` +% qemu-system-riscv64 \\ +-machine virt -nographic -m 2048 -smp 4 \\ +-kernel u-boot/qemu-riscv64_smode/uboot.elf \\ +-device virtio-net-device,netdev=eth0 -netdev user,id=eth0 \\ +-drive file=ubuntu-22.04.2-preinstalled-server-riscv64+unmatched.img,format=raw,if=virtio -icount 1 + +OpenSBI v1.2 + ____ _____ ____ _____ + / __ \\ / ____| _ \\_ _| + | | | |_ __ ___ _ __ | (___ | |_) || | + | | | | '_ \\ / _ \\ '_ \\ \\___ \\| _ < | | + | |__| | |_) | __/ | | |____) | |_) || |_ + \\____/| .__/ \\___|_| |_|_____/|____/_____| + | | + |_| + +Platform Name : riscv-virtio,qemu +Platform Features : medeleg +Platform HART Count : 4 +Platform IPI Device : aclint-mswi +Platform Timer Device : aclint-mtimer @ 10000000Hz +Platform Console Device : uart8250 +Platform HSM Device : --- +Platform PMU Device : --- +Platform Reboot Device : sifive_test +Platform Shutdown Device : sifive_test +Firmware Base : 0x80000000 +Firmware Size : 236 KB +Runtime SBI Version : 1.0 + +Domain0 Name : root +Domain0 Boot HART : 0 +Domain0 HARTs : 0*,1*,2*,3* +Domain0 Region00 : 0x0000000002000000-0x000000000200ffff (I) +Domain0 Region01 : 0x0000000080000000-0x000000008003ffff () +Domain0 Region02 : 0x0000000000000000-0xffffffffffffffff (R,W,X) +Domain0 Next Address : 0x0000000080200000 +Domain0 Next Arg1 : 0x00000000bfe00000 +Domain0 Next Mode : S-mode +Domain0 SysReset : yes + +Boot HART ID : 0 +Boot HART Domain : root +Boot HART Priv Version : v1.12 +Boot HART Base ISA : rv64imafdch +Boot HART ISA Extensions : time,sstc +Boot HART PMP Count : 16 +Boot HART PMP Granularity : 4 +Boot HART PMP Address Bits: 54 +Boot HART MHPM Count : 16 +Boot HART MIDELEG : 0x0000000000001666 +Boot HART MEDELEG : 0x0000000000f0b509 +qemu-system-riscv64: Bad icount read +```""" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/1636.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/1636.toml new file mode 100644 index 00000000..338e46b6 --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/1636.toml @@ -0,0 +1,110 @@ +id = 1636 +title = "RISCV: Interrupt not cleared correctly (supervisor external IRQ)" +state = "opened" +created_at = "2023-05-04T15:09:09.127Z" +closed_at = "n/a" +labels = ["target: riscv", "workflow::Triaged"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/1636" +host-os = "N/A" +host-arch = "riscv" +qemu-version = "QEMU emulator version 8.0.50 (v8.0.0-244-g1eb95e1bae-dirty)" +guest-os = "n/a" +guest-arch = "n/a" +description = """""" +reproduce = """1. Set mie -> 0 +2. Assert all interrupt sources which can be taken in M-mode (i.e. set mei, msi, mti, sei, ssi, sti) +3. I'm using the imsic for the external interrupts and the clint for timer interrupts. +4. Once all IRQs are pending set mie -> 0xFFFF +5. IRQs are taken one by one, all M-level IRQs are cleared without issues. +6. The issue occurs when trying to clear the S-external IRQ, when writing stopei to clear the IRQ mip is not updated correctly. + +I believe I have located the issue in target/riscv/cpu.c:1314 + +**Old code:** +``` +riscv_cpu_update_mip(cpu, 1 << irq, + BOOL_TO_MASK(level | env->software_seip)); +``` +**Changed code:** +``` +riscv_cpu_update_mip(cpu, 1 << irq, + BOOL_TO_MASK(level)); +``` + +When we reach the next code snippet (cpu_helper.c:628) we enter cpu_interrupt instead of cpu_reset_interrupt and thus end up in an infinite loop since the imsic message from that point on will be 0. It looks weird to me to use env->software_seip and not env->external_seip, in any case I changed it to BOOL_TO_MASK(level) and I now see the behavior I expect from my test program. + +```c + env->mip = (env->mip & ~mask) | (value & mask); + + if (env->mip | vsgein | vstip) { + cpu_interrupt(cs, CPU_INTERRUPT_HARD); + } else { + cpu_reset_interrupt(cs, CPU_INTERRUPT_HARD); + } + +```""" +additional = """Log when getting the error. +``` +TRACE: [src/hart_ctrl.c:35] STARTING CPU 0 +DEBUG: [src/trap_handling.c: 938] Setting up trap handlers +TRACE: [src/page_tables.c:341] Setting up page tables between 0x80000000 -> 0x81c00000 +TRACE: [src/page_tables.c:355] Setting up page tables for UART 0x10000000 +TRACE: [src/page_tables.c:365] Setting up page tables for CLINT 0x2000000 +DEBUG: [src/page_tables.c: 383] Mapping IMISIC 0x24000000 +DEBUG: [src/page_tables.c: 383] Mapping IMISIC 0x28000000 +DEBUG: [src/page_tables.c: 383] Mapping IMISIC 0x28001000 +DEBUG: [src/util_fn.c: 339] Setting satp: 0x8000100000081017 +DEBUG: [src/util_fn.c: 342] Setting hgatp: 0x8000000000081014 +TRACE: [src/main.c:40] Asserting M-level interrupts simultaneously +DEBUG: [src/irq_trigger.c: 121] Setting inteded cause to: Cause machine external interrupt +DEBUG: [src/irq_trigger.c: 121] Setting inteded cause to: Cause machine software interrupt +DEBUG: [src/irq_trigger.c: 121] Setting inteded cause to: Cause machine timer interrupt +DEBUG: [src/irq_trigger.c: 121] Setting inteded cause to: Cause supervisor external interrupt +DEBUG: [src/irq_trigger.c: 121] Setting inteded cause to: Cause supervisor software interrupt +DEBUG: [src/irq_trigger.c: 121] Setting inteded cause to: Cause supervisor timer interrupt +riscv_cpu_do_interrupt: hart:0, async:1, cause:000000000000000b, epc:0x0000000080004d80, tval:0x0000000000000000, desc=m_external +DEBUG: [src/trap_handling.c: 315] mtvec_mei +DEBUG: [src/trap_handling.c: 65] Cause to check is currently Cause machine external interrupt +DEBUG: [src/trap_handling.c: 76] Cause machine external interrupt exception: MEPC = 0x80004d80, MTVAL = 0x0 +DEBUG: [src/aia_ctrl.c: 352] Popped IMSIC message = 1 +riscv_cpu_do_interrupt: hart:0, async:1, cause:0000000000000003, epc:0x0000000080004d80, tval:0x0000000000000000, desc=m_software +DEBUG: [src/trap_handling.c: 65] Cause to check is currently Cause machine software interrupt +DEBUG: [src/trap_handling.c: 76] Cause machine software interrupt exception: MEPC = 0x80004d80, MTVAL = 0x0 +riscv_cpu_do_interrupt: hart:0, async:1, cause:0000000000000007, epc:0x0000000080004d80, tval:0x0000000000000000, desc=m_timer +DEBUG: [src/trap_handling.c: 65] Cause to check is currently Cause machine timer interrupt +DEBUG: [src/trap_handling.c: 76] Cause machine timer interrupt exception: MEPC = 0x80004d80, MTVAL = 0x0 +riscv_cpu_do_interrupt: hart:0, async:1, cause:0000000000000009, epc:0x0000000080004d80, tval:0x0000000000000000, desc=s_external +DEBUG: [src/trap_handling.c: 296] mtvec_sei +DEBUG: [src/trap_handling.c: 65] Cause to check is currently Cause supervisor external interrupt +DEBUG: [src/trap_handling.c: 76] Cause supervisor external interrupt exception: MEPC = 0x80004d80, MTVAL = 0x0 +mip + ssip (1) = 1 + vssip(2) = 0 + msip (3) = 0 + stip (5) = 1 + vstip(6) = 0 + mtip (7) = 0 + seip (9) = 1 + vseip(10) = 0 + meip (11) = 0 + sgeip(12) = 0 +DEBUG: [src/aia_ctrl.c: 339] Writing stopei -> 0 +DEBUG: [src/aia_ctrl.c: 344] stopei = 0x0000000000000000 +DEBUG: [src/aia_ctrl.c: 352] Popped IMSIC message = 1 +mip + ssip (1) = 1 + vssip(2) = 0 + msip (3) = 0 + stip (5) = 1 + vstip(6) = 0 + mtip (7) = 0 + seip (9) = 1 + vseip(10) = 0 + meip (11) = 0 + sgeip(12) = 0 +riscv_cpu_do_interrupt: hart:0, async:1, cause:0000000000000009, epc:0x0000000080004d80, tval:0x0000000000000000, desc=s_external +DEBUG: [src/trap_handling.c: 296] mtvec_sei +DEBUG: [src/trap_handling.c: 65] Cause to check is currently Cause supervisor software interrupt +DEBUG: [src/trap_handling.c: 76] Cause supervisor external interrupt exception: MEPC = 0x80004d80, MTVAL = 0x0 +ERROR: [src/trap_handling.c:121] The following assert failed: masked_cause == cause2check +masked_cause = 9""" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/1647.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/1647.toml new file mode 100644 index 00000000..921fbb2d --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/1647.toml @@ -0,0 +1,22 @@ +id = 1647 +title = "Potential Bug in RISCV Hypervisor Extension: Timer Interrupt Handling in QEMU v8.0.0-rc1" +state = "opened" +created_at = "2023-05-12T02:41:56.024Z" +closed_at = "n/a" +labels = ["target: riscv", "workflow::Triaged"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/1647" +host-os = "Ubuntu 20.04.5 LTS" +host-arch = "x86_64" +qemu-version = "v8.0.0-rc1" +guest-os = "Linux" +guest-arch = "RISCV" +description = "n/a" +reproduce = """1. Build and run a simple hypervisor on QEMU v8.0.0-rc1 with the hypervisor extension feature of RISCV. +2. Set up hideleg, henvcfg, etc., in hypervisor and run the Linux kernel. +3. Observe the issue of infinite loop caused by the pending timer interrupt.""" +additional = """Linux version: riscv_aia_v1 from github.com/avpatel/linux +OpenSBI version: Modified 1.1 + +I would greatly appreciate it if you could kindly provide some guidance. Is this behavior expected or could this be a bug? I've tried to provide a detailed analysis of my observations, but I'm not 100% certain if my understanding is correct. + +Thank you for your time and consideration.""" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/1649.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/1649.toml new file mode 100644 index 00000000..5896e1a0 --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/1649.toml @@ -0,0 +1,25 @@ +id = 1649 +title = "\"slli\" instruction before \"la\" and \"csrw\" sequence leads to failure in setting the cs register" +state = "closed" +created_at = "2023-05-13T06:58:11.401Z" +closed_at = "2023-05-13T17:21:05.509Z" +labels = ["target: riscv"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/1649" +host-os = "MacOS Ventura 13.1" +host-arch = "x86" +qemu-version = "QEMU emulator version 8.0.0" +guest-os = "bare metal" +guest-arch = "riscv" +description = """slli a0, a0, 8 (1) + la a0, mtimvec (2) + csrw mtvec, a0 (3) + mtimvec: (4) + +For the above assembly snippet, the mtvec could be successfully set to the value of a0 +without the presence of the line (1) or with the shift amount being zero. However, +the mtvec can never be set successfully with the presence of line (1).""" +reproduce = """1. Create a test.s file and put these 4 lines of assembly into the file +2. In terminal, run: "riscv64-unknown-elf-gcc -Ttext 0x80000000 -c test.s -o test", "riscv64-unknown-elf-objcopy test -S -O binary test", and "qemu-system-riscv64 test -s -S" +3. In another terminal window, run [riscv64-unknown-elf-gdb -ex "target remote localhost:1234" -ex "layout asm"]. Keep running si command in gdb until you are at 0x80000000 where you shall see the first instruction as shown in line (1). Then keep going till you have stepped over the instruction shown in line (3). Now, run "p $mtvec" in gdb, you shall see its value being 0. +4. Redo the above steps without line (1), you shall see mtvec loaded successfully with the correct value.""" +additional = """""" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/1671.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/1671.toml new file mode 100644 index 00000000..33bd1c06 --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/1671.toml @@ -0,0 +1,1365 @@ +id = 1671 +title = "segfault/errors in gdbstub with linux userspace emulator (qemu-riscv64), from racy behavior with singal handler?" +state = "opened" +created_at = "2023-05-31T04:53:14.225Z" +closed_at = "n/a" +labels = ["GDB", "linux-user", "target: riscv", "workflow::Needs Info"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/1671" +host-os = "Linux (Manjaro)" +host-arch = "x86_64" +qemu-version = "qemu-riscv64 version 8.0.0" +guest-os = "N/A (whatever qemu does for its usermode on linux)" +guest-arch = "riscv64" +description = """Often, qemu segfaults, sometimes GDB just spits out a wall of "Ignoring packet error, continuing..." and ~hangs: I don't get a GDB command prompt quickly, if at all, and when I ctrl-c I see "The target is not responding to GDB commands. Stop debugging it? (y or n)".""" +reproduce = """1. Run the `testb3` binary from below as described +2. Connect via GDB and `continue` +3. Multiple threads (independently) SIGABRT themselves when they fail their test(s), which happens quickly on my machine (which has 16 physical cores)""" +additional = """From the coredump, it looks like there's a lot of cooks in the gdbstub kitchen: + +``` + Id Target Id Frame +* 1 Thread 0x7febc02ef6c0 (LWP 3922802) gdb_next_attached_cpu () at ../qemu-8.0.0/gdbstub/gdbstub.c:282 + 2 Thread 0x7febc06db6c0 (LWP 3922792) safe_syscall_base () + at ../qemu-8.0.0/common-user/host/x86_64/safe-syscall.inc.S:75 + 3 Thread 0x7febc03b26c0 (LWP 3922799) 0x00007febc16f1b1c in recv () from /usr/lib/libc.so.6 + 4 Thread 0x7febc0f5d6c0 (LWP 3922751) 0x00007febc16e80dd in syscall () from /usr/lib/libc.so.6 + 5 Thread 0x7febc0f5ebc0 (LWP 3922750) safe_syscall_base () + at ../qemu-8.0.0/common-user/host/x86_64/safe-syscall.inc.S:75 + 6 Thread 0x7febc01696c0 (LWP 3922808) 0x00007febc16de96c in read () from /usr/lib/libc.so.6 + 7 Thread 0x7febc04f76c0 (LWP 3922794) 0x00007febc16f1d4c in send () from /usr/lib/libc.so.6 + 8 Thread 0x7febc026d6c0 (LWP 3922804) 0x00007febc16de96c in read () from /usr/lib/libc.so.6 + 9 Thread 0x7febc01aa6c0 (LWP 3922807) 0x00007febc16de96c in read () from /usr/lib/libc.so.6 + 10 Thread 0x7febc075c6c0 (LWP 3922793) 0x00007febc16de96c in read () from /usr/lib/libc.so.6 + 11 Thread 0x7febc04756c0 (LWP 3922796) 0x00007febc16f1b1c in recv () from /usr/lib/libc.so.6 + 12 Thread 0x7febc01eb6c0 (LWP 3922806) 0x00007febc16de96c in read () from /usr/lib/libc.so.6 + 13 Thread 0x7febc022c6c0 (LWP 3922805) 0x00007febc16f1b1c in recv () from /usr/lib/libc.so.6 + 14 Thread 0x7febc03f36c0 (LWP 3922798) 0x00007febc16de96c in read () from /usr/lib/libc.so.6 + 15 Thread 0x7febc04346c0 (LWP 3922797) 0x00007febc16de96c in read () from /usr/lib/libc.so.6 + 16 Thread 0x7febc03716c0 (LWP 3922800) 0x00007febc16f1b1c in recv () from /usr/lib/libc.so.6 + 17 Thread 0x7febc04b66c0 (LWP 3922795) 0x00007febc16de96c in read () from /usr/lib/libc.so.6 + 18 Thread 0x7febc02ae6c0 (LWP 3922803) 0x00007febc16de96c in read () from /usr/lib/libc.so.6 + 19 Thread 0x7febc03306c0 (LWP 3922801) 0x00007febc16de96c in read () from /usr/lib/libc.so.6 +``` + +Each of those `read` and `send` threads look something similar to this one: + +``` +Thread 19 (Thread 0x7febc03306c0 (LWP 3922801)): +#0 0x00007febc16de96c in read () from /usr/lib/libc.so.6 +#1 0x00005582273ae6ce in read () at /usr/include/bits/unistd.h:38 +#2 gdb_handlesig () at ../qemu-8.0.0/gdbstub/user.c:148 +#3 0x00005582273919fb in handle_pending_signal () at ../qemu-8.0.0/linux-user/signal.c:1042 +#4 0x0000558227391dd2 in process_pending_signals () at ../qemu-8.0.0/linux-user/signal.c:1153 +#5 0x00005582272964b8 in cpu_loop () at ../qemu-8.0.0/linux-user/riscv/cpu_loop.c:93 +#6 0x00005582273a1d15 in clone_func () at ../qemu-8.0.0/linux-user/syscall.c:6621 +#7 0x00007febc166dbb5 in ?? () from /usr/lib/libc.so.6 +#8 0x00007febc16efd90 in ?? () from /usr/lib/libc.so.6 +``` + +Which, at a guess, seems like there's maybe 20 different concurrent processes fighting over the singular [gdbstub state](https://gitlab.com/qemu-project/qemu/-/blob/master/gdbstub/gdbstub.c#L57)? Specifically, they're all stomping on each other by writing to the same [buffer](https://gitlab.com/qemu-project/qemu/-/blob/master/gdbstub/user.c#L136) and advancing the [current CPU list pointer](https://gitlab.com/qemu-project/qemu/-/blob/master/gdbstub/gdbstub.c#L1422), which causes the "bad packet" cross-talk and the segfault respectively. + +<details><summary>full backtrace</summary> + +``` +(gdb) thread apply all bt full + +Thread 19 (Thread 0x7febc03306c0 (LWP 3922801)): +#0 0x00007febc16de96c in read () from /usr/lib/libc.so.6 +No symbol table info available. +#1 0x00005582273ae6ce in read () at /usr/include/bits/unistd.h:38 +No locals. +#2 gdb_handlesig () at ../qemu-8.0.0/gdbstub/user.c:148 +No locals. +#3 0x00005582273919fb in handle_pending_signal () at ../qemu-8.0.0/linux-user/signal.c:1042 +No locals. +#4 0x0000558227391dd2 in process_pending_signals () at ../qemu-8.0.0/linux-user/signal.c:1153 +No locals. +#5 0x00005582272964b8 in cpu_loop () at ../qemu-8.0.0/linux-user/riscv/cpu_loop.c:93 +No locals. +#6 0x00005582273a1d15 in clone_func () at ../qemu-8.0.0/linux-user/syscall.c:6621 +No locals. +#7 0x00007febc166dbb5 in ?? () from /usr/lib/libc.so.6 +No symbol table info available. +#8 0x00007febc16efd90 in ?? () from /usr/lib/libc.so.6 +No symbol table info available. + +Thread 18 (Thread 0x7febc02ae6c0 (LWP 3922803)): +#0 0x00007febc16de96c in read () from /usr/lib/libc.so.6 +No symbol table info available. +#1 0x00005582273ae6ce in read () at /usr/include/bits/unistd.h:38 +No locals. +#2 gdb_handlesig () at ../qemu-8.0.0/gdbstub/user.c:148 +No locals. +#3 0x00005582273919fb in handle_pending_signal () at ../qemu-8.0.0/linux-user/signal.c:1042 +No locals. +#4 0x0000558227391dd2 in process_pending_signals () at ../qemu-8.0.0/linux-user/signal.c:1153 +No locals. +#5 0x00005582272964b8 in cpu_loop () at ../qemu-8.0.0/linux-user/riscv/cpu_loop.c:93 +No locals. +#6 0x00005582273a1d15 in clone_func () at ../qemu-8.0.0/linux-user/syscall.c:6621 +No locals. +#7 0x00007febc166dbb5 in ?? () from /usr/lib/libc.so.6 +No symbol table info available. +#8 0x00007febc16efd90 in ?? () from /usr/lib/libc.so.6 +No symbol table info available. + +Thread 17 (Thread 0x7febc04b66c0 (LWP 3922795)): +#0 0x00007febc16de96c in read () from /usr/lib/libc.so.6 +No symbol table info available. +#1 0x00005582273ae6ce in read () at /usr/include/bits/unistd.h:38 +No locals. +#2 gdb_handlesig () at ../qemu-8.0.0/gdbstub/user.c:148 +No locals. +#3 0x00005582273919fb in handle_pending_signal () at ../qemu-8.0.0/linux-user/signal.c:1042 +No locals. +#4 0x0000558227391dd2 in process_pending_signals () at ../qemu-8.0.0/linux-user/signal.c:1153 +No locals. +#5 0x00005582272964b8 in cpu_loop () at ../qemu-8.0.0/linux-user/riscv/cpu_loop.c:93 +No locals. +#6 0x00005582273a1d15 in clone_func () at ../qemu-8.0.0/linux-user/syscall.c:6621 +No locals. +#7 0x00007febc166dbb5 in ?? () from /usr/lib/libc.so.6 +No symbol table info available. +#8 0x00007febc16efd90 in ?? () from /usr/lib/libc.so.6 +No symbol table info available. + +Thread 16 (Thread 0x7febc03716c0 (LWP 3922800)): +#0 0x00007febc16f1b1c in recv () from /usr/lib/libc.so.6 +No symbol table info available. +#1 0x00005582273a9882 in recv () at /usr/include/bits/socket2.h:38 +No locals. +#2 gdb_get_char () at ../qemu-8.0.0/gdbstub/user.c:39 +No locals. +#3 0x00005582273aad28 in gdb_got_immediate_ack () at ../qemu-8.0.0/gdbstub/user.c:62 +No locals. +#4 gdb_put_packet_binary () at ../qemu-8.0.0/gdbstub/gdbstub.c:164 +No locals. +#5 0x00005582273ab768 in gdb_put_strbuf () at ../qemu-8.0.0/gdbstub/gdbstub.c:181 +No locals. +#6 handle_query_threads () at ../qemu-8.0.0/gdbstub/gdbstub.c:1410 +No locals. +#7 0x000055822741cb78 in process_string_cmd.constprop.0 () at ../qemu-8.0.0/gdbstub/gdbstub.c:838 +No locals. +#8 0x00005582273abad6 in handle_gen_query () at ../qemu-8.0.0/gdbstub/gdbstub.c:1673 +No locals. +#9 handle_gen_query () at ../qemu-8.0.0/gdbstub/gdbstub.c:1661 +No locals. +#10 0x000055822741cbb3 in process_string_cmd.constprop.0 () at ../qemu-8.0.0/gdbstub/gdbstub.c:838 +No locals. +#11 0x00005582273ae272 in run_cmd_parser () at ../qemu-8.0.0/gdbstub/gdbstub.c:856 +No locals. +#12 gdb_handle_packet () at ../qemu-8.0.0/gdbstub/gdbstub.c:1953 +No locals. +#13 gdb_read_byte () at ../qemu-8.0.0/gdbstub/gdbstub.c:2113 +No locals. +#14 0x00005582273ae6ec in gdb_handlesig () at ../qemu-8.0.0/gdbstub/user.c:153 +No locals. +#15 0x00005582273919fb in handle_pending_signal () at ../qemu-8.0.0/linux-user/signal.c:1042 +No locals. +#16 0x0000558227391dd2 in process_pending_signals () at ../qemu-8.0.0/linux-user/signal.c:1153 +No locals. +#17 0x00005582272964b8 in cpu_loop () at ../qemu-8.0.0/linux-user/riscv/cpu_loop.c:93 +No locals. +#18 0x00005582273a1d15 in clone_func () at ../qemu-8.0.0/linux-user/syscall.c:6621 +No locals. +#19 0x00007febc166dbb5 in ?? () from /usr/lib/libc.so.6 +No symbol table info available. +#20 0x00007febc16efd90 in ?? () from /usr/lib/libc.so.6 +No symbol table info available. + +Thread 15 (Thread 0x7febc04346c0 (LWP 3922797)): +#0 0x00007febc16de96c in read () from /usr/lib/libc.so.6 +No symbol table info available. +#1 0x00005582273ae6ce in read () at /usr/include/bits/unistd.h:38 +No locals. +#2 gdb_handlesig () at ../qemu-8.0.0/gdbstub/user.c:148 +No locals. +#3 0x00005582273919fb in handle_pending_signal () at ../qemu-8.0.0/linux-user/signal.c:1042 +No locals. +#4 0x0000558227391dd2 in process_pending_signals () at ../qemu-8.0.0/linux-user/signal.c:1153 +No locals. +#5 0x00005582272964b8 in cpu_loop () at ../qemu-8.0.0/linux-user/riscv/cpu_loop.c:93 +No locals. +#6 0x00005582273a1d15 in clone_func () at ../qemu-8.0.0/linux-user/syscall.c:6621 +No locals. +#7 0x00007febc166dbb5 in ?? () from /usr/lib/libc.so.6 +No symbol table info available. +#8 0x00007febc16efd90 in ?? () from /usr/lib/libc.so.6 +No symbol table info available. + +Thread 14 (Thread 0x7febc03f36c0 (LWP 3922798)): +#0 0x00007febc16de96c in read () from /usr/lib/libc.so.6 +No symbol table info available. +#1 0x00005582273ae6ce in read () at /usr/include/bits/unistd.h:38 +No locals. +#2 gdb_handlesig () at ../qemu-8.0.0/gdbstub/user.c:148 +No locals. +#3 0x00005582273919fb in handle_pending_signal () at ../qemu-8.0.0/linux-user/signal.c:1042 +No locals. +#4 0x0000558227391dd2 in process_pending_signals () at ../qemu-8.0.0/linux-user/signal.c:1153 +No locals. +#5 0x00005582272964b8 in cpu_loop () at ../qemu-8.0.0/linux-user/riscv/cpu_loop.c:93 +No locals. +#6 0x00005582273a1d15 in clone_func () at ../qemu-8.0.0/linux-user/syscall.c:6621 +No locals. +#7 0x00007febc166dbb5 in ?? () from /usr/lib/libc.so.6 +No symbol table info available. +#8 0x00007febc16efd90 in ?? () from /usr/lib/libc.so.6 +No symbol table info available. + +Thread 13 (Thread 0x7febc022c6c0 (LWP 3922805)): +#0 0x00007febc16f1b1c in recv () from /usr/lib/libc.so.6 +No symbol table info available. +#1 0x00005582273a9882 in recv () at /usr/include/bits/socket2.h:38 +No locals. +#2 gdb_get_char () at ../qemu-8.0.0/gdbstub/user.c:39 +No locals. +#3 0x00005582273aad28 in gdb_got_immediate_ack () at ../qemu-8.0.0/gdbstub/user.c:62 +No locals. +#4 gdb_put_packet_binary () at ../qemu-8.0.0/gdbstub/gdbstub.c:164 +No locals. +#5 0x00005582273ab768 in gdb_put_strbuf () at ../qemu-8.0.0/gdbstub/gdbstub.c:181 +No locals. +#6 handle_query_threads () at ../qemu-8.0.0/gdbstub/gdbstub.c:1410 +No locals. +#7 0x000055822741cb78 in process_string_cmd.constprop.0 () at ../qemu-8.0.0/gdbstub/gdbstub.c:838 +No locals. +#8 0x00005582273abad6 in handle_gen_query () at ../qemu-8.0.0/gdbstub/gdbstub.c:1673 +No locals. +#9 handle_gen_query () at ../qemu-8.0.0/gdbstub/gdbstub.c:1661 +No locals. +#10 0x000055822741cbb3 in process_string_cmd.constprop.0 () at ../qemu-8.0.0/gdbstub/gdbstub.c:838 +No locals. +#11 0x00005582273ae272 in run_cmd_parser () at ../qemu-8.0.0/gdbstub/gdbstub.c:856 +No locals. +#12 gdb_handle_packet () at ../qemu-8.0.0/gdbstub/gdbstub.c:1953 +No locals. +#13 gdb_read_byte () at ../qemu-8.0.0/gdbstub/gdbstub.c:2113 +No locals. +#14 0x00005582273ae6ec in gdb_handlesig () at ../qemu-8.0.0/gdbstub/user.c:153 +No locals. +#15 0x00005582273919fb in handle_pending_signal () at ../qemu-8.0.0/linux-user/signal.c:1042 +No locals. +#16 0x0000558227391dd2 in process_pending_signals () at ../qemu-8.0.0/linux-user/signal.c:1153 +No locals. +#17 0x00005582272964b8 in cpu_loop () at ../qemu-8.0.0/linux-user/riscv/cpu_loop.c:93 +No locals. +#18 0x00005582273a1d15 in clone_func () at ../qemu-8.0.0/linux-user/syscall.c:6621 +No locals. +#19 0x00007febc166dbb5 in ?? () from /usr/lib/libc.so.6 +No symbol table info available. +#20 0x00007febc16efd90 in ?? () from /usr/lib/libc.so.6 +No symbol table info available. + +Thread 12 (Thread 0x7febc01eb6c0 (LWP 3922806)): +#0 0x00007febc16de96c in read () from /usr/lib/libc.so.6 +No symbol table info available. +#1 0x00005582273ae6ce in read () at /usr/include/bits/unistd.h:38 +No locals. +#2 gdb_handlesig () at ../qemu-8.0.0/gdbstub/user.c:148 +No locals. +#3 0x00005582273919fb in handle_pending_signal () at ../qemu-8.0.0/linux-user/signal.c:1042 +No locals. +#4 0x0000558227391dd2 in process_pending_signals () at ../qemu-8.0.0/linux-user/signal.c:1153 +No locals. +#5 0x00005582272964b8 in cpu_loop () at ../qemu-8.0.0/linux-user/riscv/cpu_loop.c:93 +No locals. +#6 0x00005582273a1d15 in clone_func () at ../qemu-8.0.0/linux-user/syscall.c:6621 +No locals. +#7 0x00007febc166dbb5 in ?? () from /usr/lib/libc.so.6 +No symbol table info available. +#8 0x00007febc16efd90 in ?? () from /usr/lib/libc.so.6 +No symbol table info available. + +Thread 11 (Thread 0x7febc04756c0 (LWP 3922796)): +#0 0x00007febc16f1b1c in recv () from /usr/lib/libc.so.6 +No symbol table info available. +#1 0x00005582273a9882 in recv () at /usr/include/bits/socket2.h:38 +No locals. +#2 gdb_get_char () at ../qemu-8.0.0/gdbstub/user.c:39 +No locals. +#3 0x00005582273aad28 in gdb_got_immediate_ack () at ../qemu-8.0.0/gdbstub/user.c:62 +No locals. +#4 gdb_put_packet_binary () at ../qemu-8.0.0/gdbstub/gdbstub.c:164 +No locals. +#5 0x00005582273ab768 in gdb_put_strbuf () at ../qemu-8.0.0/gdbstub/gdbstub.c:181 +No locals. +#6 handle_query_threads () at ../qemu-8.0.0/gdbstub/gdbstub.c:1410 +No locals. +#7 0x000055822741cb78 in process_string_cmd.constprop.0 () at ../qemu-8.0.0/gdbstub/gdbstub.c:838 +No locals. +#8 0x00005582273abad6 in handle_gen_query () at ../qemu-8.0.0/gdbstub/gdbstub.c:1673 +No locals. +#9 handle_gen_query () at ../qemu-8.0.0/gdbstub/gdbstub.c:1661 +No locals. +#10 0x000055822741cbb3 in process_string_cmd.constprop.0 () at ../qemu-8.0.0/gdbstub/gdbstub.c:838 +No locals. +#11 0x00005582273ae272 in run_cmd_parser () at ../qemu-8.0.0/gdbstub/gdbstub.c:856 +No locals. +#12 gdb_handle_packet () at ../qemu-8.0.0/gdbstub/gdbstub.c:1953 +No locals. +#13 gdb_read_byte () at ../qemu-8.0.0/gdbstub/gdbstub.c:2113 +No locals. +#14 0x00005582273ae6ec in gdb_handlesig () at ../qemu-8.0.0/gdbstub/user.c:153 +No locals. +#15 0x00005582273919fb in handle_pending_signal () at ../qemu-8.0.0/linux-user/signal.c:1042 +No locals. +#16 0x0000558227391dd2 in process_pending_signals () at ../qemu-8.0.0/linux-user/signal.c:1153 +No locals. +#17 0x00005582272964b8 in cpu_loop () at ../qemu-8.0.0/linux-user/riscv/cpu_loop.c:93 +No locals. +#18 0x00005582273a1d15 in clone_func () at ../qemu-8.0.0/linux-user/syscall.c:6621 +No locals. +#19 0x00007febc166dbb5 in ?? () from /usr/lib/libc.so.6 +No symbol table info available. +#20 0x00007febc16efd90 in ?? () from /usr/lib/libc.so.6 +No symbol table info available. + +Thread 10 (Thread 0x7febc075c6c0 (LWP 3922793)): +#0 0x00007febc16de96c in read () from /usr/lib/libc.so.6 +No symbol table info available. +#1 0x00005582273ae6ce in read () at /usr/include/bits/unistd.h:38 +No locals. +#2 gdb_handlesig () at ../qemu-8.0.0/gdbstub/user.c:148 +No locals. +#3 0x00005582273919fb in handle_pending_signal () at ../qemu-8.0.0/linux-user/signal.c:1042 +No locals. +#4 0x0000558227391dd2 in process_pending_signals () at ../qemu-8.0.0/linux-user/signal.c:1153 +No locals. +#5 0x00005582272964b8 in cpu_loop () at ../qemu-8.0.0/linux-user/riscv/cpu_loop.c:93 +No locals. +#6 0x00005582273a1d15 in clone_func () at ../qemu-8.0.0/linux-user/syscall.c:6621 +No locals. +#7 0x00007febc166dbb5 in ?? () from /usr/lib/libc.so.6 +No symbol table info available. +#8 0x00007febc16efd90 in ?? () from /usr/lib/libc.so.6 +No symbol table info available. + +Thread 9 (Thread 0x7febc01aa6c0 (LWP 3922807)): +#0 0x00007febc16de96c in read () from /usr/lib/libc.so.6 +No symbol table info available. +#1 0x00005582273ae6ce in read () at /usr/include/bits/unistd.h:38 +No locals. +#2 gdb_handlesig () at ../qemu-8.0.0/gdbstub/user.c:148 +No locals. +#3 0x00005582273919fb in handle_pending_signal () at ../qemu-8.0.0/linux-user/signal.c:1042 +No locals. +#4 0x0000558227391dd2 in process_pending_signals () at ../qemu-8.0.0/linux-user/signal.c:1153 +No locals. +#5 0x00005582272964b8 in cpu_loop () at ../qemu-8.0.0/linux-user/riscv/cpu_loop.c:93 +No locals. +#6 0x00005582273a1d15 in clone_func () at ../qemu-8.0.0/linux-user/syscall.c:6621 +No locals. +#7 0x00007febc166dbb5 in ?? () from /usr/lib/libc.so.6 +No symbol table info available. +#8 0x00007febc16efd90 in ?? () from /usr/lib/libc.so.6 +No symbol table info available. + +Thread 8 (Thread 0x7febc026d6c0 (LWP 3922804)): +#0 0x00007febc16de96c in read () from /usr/lib/libc.so.6 +No symbol table info available. +#1 0x00005582273ae6ce in read () at /usr/include/bits/unistd.h:38 +No locals. +#2 gdb_handlesig () at ../qemu-8.0.0/gdbstub/user.c:148 +No locals. +#3 0x00005582273919fb in handle_pending_signal () at ../qemu-8.0.0/linux-user/signal.c:1042 +No locals. +#4 0x0000558227391dd2 in process_pending_signals () at ../qemu-8.0.0/linux-user/signal.c:1153 +No locals. +#5 0x00005582272964b8 in cpu_loop () at ../qemu-8.0.0/linux-user/riscv/cpu_loop.c:93 +No locals. +#6 0x00005582273a1d15 in clone_func () at ../qemu-8.0.0/linux-user/syscall.c:6621 +No locals. +#7 0x00007febc166dbb5 in ?? () from /usr/lib/libc.so.6 +No symbol table info available. +#8 0x00007febc16efd90 in ?? () from /usr/lib/libc.so.6 +No symbol table info available. + +Thread 7 (Thread 0x7febc04f76c0 (LWP 3922794)): +#0 0x00007febc16f1d4c in send () from /usr/lib/libc.so.6 +No symbol table info available. +#1 0x00005582273a994a in gdb_put_buffer () at ../qemu-8.0.0/gdbstub/user.c:82 +No locals. +#2 0x00005582273aad23 in gdb_put_packet_binary () at ../qemu-8.0.0/gdbstub/gdbstub.c:161 +No locals. +#3 0x00005582273ab768 in gdb_put_strbuf () at ../qemu-8.0.0/gdbstub/gdbstub.c:181 +No locals. +#4 handle_query_threads () at ../qemu-8.0.0/gdbstub/gdbstub.c:1410 +No locals. +#5 0x000055822741cb78 in process_string_cmd.constprop.0 () at ../qemu-8.0.0/gdbstub/gdbstub.c:838 +No locals. +#6 0x00005582273abad6 in handle_gen_query () at ../qemu-8.0.0/gdbstub/gdbstub.c:1673 +No locals. +#7 handle_gen_query () at ../qemu-8.0.0/gdbstub/gdbstub.c:1661 +No locals. +#8 0x000055822741cbb3 in process_string_cmd.constprop.0 () at ../qemu-8.0.0/gdbstub/gdbstub.c:838 +No locals. +#9 0x00005582273ae272 in run_cmd_parser () at ../qemu-8.0.0/gdbstub/gdbstub.c:856 +No locals. +#10 gdb_handle_packet () at ../qemu-8.0.0/gdbstub/gdbstub.c:1953 +No locals. +#11 gdb_read_byte () at ../qemu-8.0.0/gdbstub/gdbstub.c:2113 +No locals. +#12 0x00005582273ae6ec in gdb_handlesig () at ../qemu-8.0.0/gdbstub/user.c:153 +No locals. +#13 0x00005582273919fb in handle_pending_signal () at ../qemu-8.0.0/linux-user/signal.c:1042 +No locals. +#14 0x0000558227391dd2 in process_pending_signals () at ../qemu-8.0.0/linux-user/signal.c:1153 +No locals. +#15 0x00005582272964b8 in cpu_loop () at ../qemu-8.0.0/linux-user/riscv/cpu_loop.c:93 +No locals. +#16 0x00005582273a1d15 in clone_func () at ../qemu-8.0.0/linux-user/syscall.c:6621 +No locals. +#17 0x00007febc166dbb5 in ?? () from /usr/lib/libc.so.6 +No symbol table info available. +#18 0x00007febc16efd90 in ?? () from /usr/lib/libc.so.6 +No symbol table info available. + +Thread 6 (Thread 0x7febc01696c0 (LWP 3922808)): +#0 0x00007febc16de96c in read () from /usr/lib/libc.so.6 +No symbol table info available. +#1 0x00005582273ae6ce in read () at /usr/include/bits/unistd.h:38 +No locals. +#2 gdb_handlesig () at ../qemu-8.0.0/gdbstub/user.c:148 +No locals. +#3 0x00005582273919fb in handle_pending_signal () at ../qemu-8.0.0/linux-user/signal.c:1042 +No locals. +#4 0x0000558227391dd2 in process_pending_signals () at ../qemu-8.0.0/linux-user/signal.c:1153 +No locals. +#5 0x00005582272964b8 in cpu_loop () at ../qemu-8.0.0/linux-user/riscv/cpu_loop.c:93 +No locals. +#6 0x00005582273a1d15 in clone_func () at ../qemu-8.0.0/linux-user/syscall.c:6621 +No locals. +#7 0x00007febc166dbb5 in ?? () from /usr/lib/libc.so.6 +No symbol table info available. +#8 0x00007febc16efd90 in ?? () from /usr/lib/libc.so.6 +No symbol table info available. + +Thread 5 (Thread 0x7febc0f5ebc0 (LWP 3922750)): +#0 safe_syscall_base () at ../qemu-8.0.0/common-user/host/x86_64/safe-syscall.inc.S:75 +No locals. +#1 0x00005582274134c2 in safe_futex () at ../qemu-8.0.0/linux-user/syscall.c:678 +No locals. +#2 do_safe_futex () at ../qemu-8.0.0/linux-user/syscall.c:7804 +No locals. +#3 do_futex () at ../qemu-8.0.0/linux-user/syscall.c:7891 +No locals. +#4 0x00005582274191fa in do_syscall1.constprop.0 () at ../qemu-8.0.0/linux-user/syscall.c:12476 +No locals. +#5 0x00005582273a2a22 in do_syscall () at ../qemu-8.0.0/linux-user/syscall.c:13375 +No locals. +#6 0x000055822729644c in cpu_loop () at ../qemu-8.0.0/linux-user/riscv/cpu_loop.c:55 +No locals. +#7 0x000055822728bfa1 in main () at ../qemu-8.0.0/linux-user/main.c:962 +No locals. + +Thread 4 (Thread 0x7febc0f5d6c0 (LWP 3922751)): +#0 0x00007febc16e80dd in syscall () from /usr/lib/libc.so.6 +No symbol table info available. +#1 0x00005582273cdcb3 in qemu_futex_wait () at /usr/src/debug/qemu/qemu-8.0.0/include/qemu/futex.h:29 +No locals. +#2 qemu_event_wait () at ../qemu-8.0.0/util/qemu-thread-posix.c:464 +No locals. +#3 0x00005582273d83ad in call_rcu_thread () at ../qemu-8.0.0/util/rcu.c:261 +No locals. +#4 0x00005582273cde58 in qemu_thread_start () at ../qemu-8.0.0/util/qemu-thread-posix.c:541 +No locals. +#5 0x00007febc166dbb5 in ?? () from /usr/lib/libc.so.6 +No symbol table info available. +#6 0x00007febc16efd90 in ?? () from /usr/lib/libc.so.6 +No symbol table info available. + +Thread 3 (Thread 0x7febc03b26c0 (LWP 3922799)): +#0 0x00007febc16f1b1c in recv () from /usr/lib/libc.so.6 +No symbol table info available. +#1 0x00005582273a9882 in recv () at /usr/include/bits/socket2.h:38 +No locals. +#2 gdb_get_char () at ../qemu-8.0.0/gdbstub/user.c:39 +No locals. +#3 0x00005582273aad28 in gdb_got_immediate_ack () at ../qemu-8.0.0/gdbstub/user.c:62 +No locals. +#4 gdb_put_packet_binary () at ../qemu-8.0.0/gdbstub/gdbstub.c:164 +No locals. +#5 0x00005582273ab768 in gdb_put_strbuf () at ../qemu-8.0.0/gdbstub/gdbstub.c:181 +No locals. +#6 handle_query_threads () at ../qemu-8.0.0/gdbstub/gdbstub.c:1410 +No locals. +#7 0x000055822741cb78 in process_string_cmd.constprop.0 () at ../qemu-8.0.0/gdbstub/gdbstub.c:838 +No locals. +#8 0x00005582273abad6 in handle_gen_query () at ../qemu-8.0.0/gdbstub/gdbstub.c:1673 +No locals. +#9 handle_gen_query () at ../qemu-8.0.0/gdbstub/gdbstub.c:1661 +No locals. +#10 0x000055822741cbb3 in process_string_cmd.constprop.0 () at ../qemu-8.0.0/gdbstub/gdbstub.c:838 +No locals. +#11 0x00005582273ae272 in run_cmd_parser () at ../qemu-8.0.0/gdbstub/gdbstub.c:856 +No locals. +#12 gdb_handle_packet () at ../qemu-8.0.0/gdbstub/gdbstub.c:1953 +No locals. +#13 gdb_read_byte () at ../qemu-8.0.0/gdbstub/gdbstub.c:2113 +No locals. +#14 0x00005582273ae6ec in gdb_handlesig () at ../qemu-8.0.0/gdbstub/user.c:153 +No locals. +#15 0x00005582273919fb in handle_pending_signal () at ../qemu-8.0.0/linux-user/signal.c:1042 +No locals. +#16 0x0000558227391dd2 in process_pending_signals () at ../qemu-8.0.0/linux-user/signal.c:1153 +No locals. +#17 0x00005582272964b8 in cpu_loop () at ../qemu-8.0.0/linux-user/riscv/cpu_loop.c:93 +No locals. +#18 0x00005582273a1d15 in clone_func () at ../qemu-8.0.0/linux-user/syscall.c:6621 +No locals. +#19 0x00007febc166dbb5 in ?? () from /usr/lib/libc.so.6 +No symbol table info available. +#20 0x00007febc16efd90 in ?? () from /usr/lib/libc.so.6 +No symbol table info available. + +Thread 2 (Thread 0x7febc06db6c0 (LWP 3922792)): +#0 safe_syscall_base () at ../qemu-8.0.0/common-user/host/x86_64/safe-syscall.inc.S:75 +No locals. +#1 0x00005582274134c2 in safe_futex () at ../qemu-8.0.0/linux-user/syscall.c:678 +No locals. +#2 do_safe_futex () at ../qemu-8.0.0/linux-user/syscall.c:7804 +No locals. +#3 do_futex () at ../qemu-8.0.0/linux-user/syscall.c:7891 +No locals. +#4 0x00005582274191fa in do_syscall1.constprop.0 () at ../qemu-8.0.0/linux-user/syscall.c:12476 +No locals. +#5 0x00005582273a2a22 in do_syscall () at ../qemu-8.0.0/linux-user/syscall.c:13375 +No locals. +#6 0x000055822729644c in cpu_loop () at ../qemu-8.0.0/linux-user/riscv/cpu_loop.c:55 +No locals. +#7 0x00005582273a1d15 in clone_func () at ../qemu-8.0.0/linux-user/syscall.c:6621 +No locals. +#8 0x00007febc166dbb5 in ?? () from /usr/lib/libc.so.6 +No symbol table info available. +#9 0x00007febc16efd90 in ?? () from /usr/lib/libc.so.6 +No symbol table info available. + +Thread 1 (Thread 0x7febc02ef6c0 (LWP 3922802)): +#0 gdb_next_attached_cpu () at ../qemu-8.0.0/gdbstub/gdbstub.c:282 +No locals. +#1 0x00005582273ab774 in handle_query_threads () at ../qemu-8.0.0/gdbstub/gdbstub.c:1411 +No locals. +#2 0x000055822741cb78 in process_string_cmd.constprop.0 () at ../qemu-8.0.0/gdbstub/gdbstub.c:838 +No locals. +#3 0x00005582273abad6 in handle_gen_query () at ../qemu-8.0.0/gdbstub/gdbstub.c:1673 +No locals. +#4 handle_gen_query () at ../qemu-8.0.0/gdbstub/gdbstub.c:1661 +No locals. +#5 0x000055822741cbb3 in process_string_cmd.constprop.0 () at ../qemu-8.0.0/gdbstub/gdbstub.c:838 +No locals. +#6 0x00005582273ae272 in run_cmd_parser () at ../qemu-8.0.0/gdbstub/gdbstub.c:856 +No locals. +#7 gdb_handle_packet () at ../qemu-8.0.0/gdbstub/gdbstub.c:1953 +No locals. +#8 gdb_read_byte () at ../qemu-8.0.0/gdbstub/gdbstub.c:2113 +No locals. +#9 0x00005582273ae6ec in gdb_handlesig () at ../qemu-8.0.0/gdbstub/user.c:153 +No locals. +#10 0x00005582273919fb in handle_pending_signal () at ../qemu-8.0.0/linux-user/signal.c:1042 +No locals. +#11 0x0000558227391dd2 in process_pending_signals () at ../qemu-8.0.0/linux-user/signal.c:1153 +No locals. +#12 0x00005582272964b8 in cpu_loop () at ../qemu-8.0.0/linux-user/riscv/cpu_loop.c:93 +No locals. +#13 0x00005582273a1d15 in clone_func () at ../qemu-8.0.0/linux-user/syscall.c:6621 +No locals. +#14 0x00007febc166dbb5 in ?? () from /usr/lib/libc.so.6 +No symbol table info available. +#15 0x00007febc16efd90 in ?? () from /usr/lib/libc.so.6 +No symbol table info available. +(gdb) thread apply all bt + +Thread 19 (Thread 0x7febc03306c0 (LWP 3922801)): +#0 0x00007febc16de96c in read () from /usr/lib/libc.so.6 +#1 0x00005582273ae6ce in read () at /usr/include/bits/unistd.h:38 +#2 gdb_handlesig () at ../qemu-8.0.0/gdbstub/user.c:148 +#3 0x00005582273919fb in handle_pending_signal () at ../qemu-8.0.0/linux-user/signal.c:1042 +#4 0x0000558227391dd2 in process_pending_signals () at ../qemu-8.0.0/linux-user/signal.c:1153 +#5 0x00005582272964b8 in cpu_loop () at ../qemu-8.0.0/linux-user/riscv/cpu_loop.c:93 +#6 0x00005582273a1d15 in clone_func () at ../qemu-8.0.0/linux-user/syscall.c:6621 +#7 0x00007febc166dbb5 in ?? () from /usr/lib/libc.so.6 +#8 0x00007febc16efd90 in ?? () from /usr/lib/libc.so.6 + +Thread 18 (Thread 0x7febc02ae6c0 (LWP 3922803)): +#0 0x00007febc16de96c in read () from /usr/lib/libc.so.6 +#1 0x00005582273ae6ce in read () at /usr/include/bits/unistd.h:38 +#2 gdb_handlesig () at ../qemu-8.0.0/gdbstub/user.c:148 +#3 0x00005582273919fb in handle_pending_signal () at ../qemu-8.0.0/linux-user/signal.c:1042 +#4 0x0000558227391dd2 in process_pending_signals () at ../qemu-8.0.0/linux-user/signal.c:1153 +#5 0x00005582272964b8 in cpu_loop () at ../qemu-8.0.0/linux-user/riscv/cpu_loop.c:93 +#6 0x00005582273a1d15 in clone_func () at ../qemu-8.0.0/linux-user/syscall.c:6621 +#7 0x00007febc166dbb5 in ?? () from /usr/lib/libc.so.6 +#8 0x00007febc16efd90 in ?? () from /usr/lib/libc.so.6 + +Thread 17 (Thread 0x7febc04b66c0 (LWP 3922795)): +#0 0x00007febc16de96c in read () from /usr/lib/libc.so.6 +#1 0x00005582273ae6ce in read () at /usr/include/bits/unistd.h:38 +#2 gdb_handlesig () at ../qemu-8.0.0/gdbstub/user.c:148 +#3 0x00005582273919fb in handle_pending_signal () at ../qemu-8.0.0/linux-user/signal.c:1042 +#4 0x0000558227391dd2 in process_pending_signals () at ../qemu-8.0.0/linux-user/signal.c:1153 +#5 0x00005582272964b8 in cpu_loop () at ../qemu-8.0.0/linux-user/riscv/cpu_loop.c:93 +#6 0x00005582273a1d15 in clone_func () at ../qemu-8.0.0/linux-user/syscall.c:6621 +#7 0x00007febc166dbb5 in ?? () from /usr/lib/libc.so.6 +#8 0x00007febc16efd90 in ?? () from /usr/lib/libc.so.6 + +Thread 16 (Thread 0x7febc03716c0 (LWP 3922800)): +#0 0x00007febc16f1b1c in recv () from /usr/lib/libc.so.6 +#1 0x00005582273a9882 in recv () at /usr/include/bits/socket2.h:38 +#2 gdb_get_char () at ../qemu-8.0.0/gdbstub/user.c:39 +#3 0x00005582273aad28 in gdb_got_immediate_ack () at ../qemu-8.0.0/gdbstub/user.c:62 +#4 gdb_put_packet_binary () at ../qemu-8.0.0/gdbstub/gdbstub.c:164 +#5 0x00005582273ab768 in gdb_put_strbuf () at ../qemu-8.0.0/gdbstub/gdbstub.c:181 +#6 handle_query_threads () at ../qemu-8.0.0/gdbstub/gdbstub.c:1410 +#7 0x000055822741cb78 in process_string_cmd.constprop.0 () at ../qemu-8.0.0/gdbstub/gdbstub.c:838 +#8 0x00005582273abad6 in handle_gen_query () at ../qemu-8.0.0/gdbstub/gdbstub.c:1673 +#9 handle_gen_query () at ../qemu-8.0.0/gdbstub/gdbstub.c:1661 +#10 0x000055822741cbb3 in process_string_cmd.constprop.0 () at ../qemu-8.0.0/gdbstub/gdbstub.c:838 +#11 0x00005582273ae272 in run_cmd_parser () at ../qemu-8.0.0/gdbstub/gdbstub.c:856 +#12 gdb_handle_packet () at ../qemu-8.0.0/gdbstub/gdbstub.c:1953 +#13 gdb_read_byte () at ../qemu-8.0.0/gdbstub/gdbstub.c:2113 +#14 0x00005582273ae6ec in gdb_handlesig () at ../qemu-8.0.0/gdbstub/user.c:153 +#15 0x00005582273919fb in handle_pending_signal () at ../qemu-8.0.0/linux-user/signal.c:1042 +#16 0x0000558227391dd2 in process_pending_signals () at ../qemu-8.0.0/linux-user/signal.c:1153 +#17 0x00005582272964b8 in cpu_loop () at ../qemu-8.0.0/linux-user/riscv/cpu_loop.c:93 +#18 0x00005582273a1d15 in clone_func () at ../qemu-8.0.0/linux-user/syscall.c:6621 +#19 0x00007febc166dbb5 in ?? () from /usr/lib/libc.so.6 +#20 0x00007febc16efd90 in ?? () from /usr/lib/libc.so.6 + +Thread 15 (Thread 0x7febc04346c0 (LWP 3922797)): +#0 0x00007febc16de96c in read () from /usr/lib/libc.so.6 +#1 0x00005582273ae6ce in read () at /usr/include/bits/unistd.h:38 +#2 gdb_handlesig () at ../qemu-8.0.0/gdbstub/user.c:148 +#3 0x00005582273919fb in handle_pending_signal () at ../qemu-8.0.0/linux-user/signal.c:1042 +#4 0x0000558227391dd2 in process_pending_signals () at ../qemu-8.0.0/linux-user/signal.c:1153 +#5 0x00005582272964b8 in cpu_loop () at ../qemu-8.0.0/linux-user/riscv/cpu_loop.c:93 +#6 0x00005582273a1d15 in clone_func () at ../qemu-8.0.0/linux-user/syscall.c:6621 +#7 0x00007febc166dbb5 in ?? () from /usr/lib/libc.so.6 +#8 0x00007febc16efd90 in ?? () from /usr/lib/libc.so.6 + +Thread 14 (Thread 0x7febc03f36c0 (LWP 3922798)): +#0 0x00007febc16de96c in read () from /usr/lib/libc.so.6 +#1 0x00005582273ae6ce in read () at /usr/include/bits/unistd.h:38 +#2 gdb_handlesig () at ../qemu-8.0.0/gdbstub/user.c:148 +#3 0x00005582273919fb in handle_pending_signal () at ../qemu-8.0.0/linux-user/signal.c:1042 +#4 0x0000558227391dd2 in process_pending_signals () at ../qemu-8.0.0/linux-user/signal.c:1153 +#5 0x00005582272964b8 in cpu_loop () at ../qemu-8.0.0/linux-user/riscv/cpu_loop.c:93 +#6 0x00005582273a1d15 in clone_func () at ../qemu-8.0.0/linux-user/syscall.c:6621 +#7 0x00007febc166dbb5 in ?? () from /usr/lib/libc.so.6 +#8 0x00007febc16efd90 in ?? () from /usr/lib/libc.so.6 + +Thread 13 (Thread 0x7febc022c6c0 (LWP 3922805)): +#0 0x00007febc16f1b1c in recv () from /usr/lib/libc.so.6 +#1 0x00005582273a9882 in recv () at /usr/include/bits/socket2.h:38 +#2 gdb_get_char () at ../qemu-8.0.0/gdbstub/user.c:39 +#3 0x00005582273aad28 in gdb_got_immediate_ack () at ../qemu-8.0.0/gdbstub/user.c:62 +#4 gdb_put_packet_binary () at ../qemu-8.0.0/gdbstub/gdbstub.c:164 +#5 0x00005582273ab768 in gdb_put_strbuf () at ../qemu-8.0.0/gdbstub/gdbstub.c:181 +#6 handle_query_threads () at ../qemu-8.0.0/gdbstub/gdbstub.c:1410 +#7 0x000055822741cb78 in process_string_cmd.constprop.0 () at ../qemu-8.0.0/gdbstub/gdbstub.c:838 +#8 0x00005582273abad6 in handle_gen_query () at ../qemu-8.0.0/gdbstub/gdbstub.c:1673 +#9 handle_gen_query () at ../qemu-8.0.0/gdbstub/gdbstub.c:1661 +#10 0x000055822741cbb3 in process_string_cmd.constprop.0 () at ../qemu-8.0.0/gdbstub/gdbstub.c:838 +#11 0x00005582273ae272 in run_cmd_parser () at ../qemu-8.0.0/gdbstub/gdbstub.c:856 +#12 gdb_handle_packet () at ../qemu-8.0.0/gdbstub/gdbstub.c:1953 +#13 gdb_read_byte () at ../qemu-8.0.0/gdbstub/gdbstub.c:2113 +#14 0x00005582273ae6ec in gdb_handlesig () at ../qemu-8.0.0/gdbstub/user.c:153 +#15 0x00005582273919fb in handle_pending_signal () at ../qemu-8.0.0/linux-user/signal.c:1042 +#16 0x0000558227391dd2 in process_pending_signals () at ../qemu-8.0.0/linux-user/signal.c:1153 +#17 0x00005582272964b8 in cpu_loop () at ../qemu-8.0.0/linux-user/riscv/cpu_loop.c:93 +#18 0x00005582273a1d15 in clone_func () at ../qemu-8.0.0/linux-user/syscall.c:6621 +#19 0x00007febc166dbb5 in ?? () from /usr/lib/libc.so.6 +#20 0x00007febc16efd90 in ?? () from /usr/lib/libc.so.6 + +Thread 12 (Thread 0x7febc01eb6c0 (LWP 3922806)): +#0 0x00007febc16de96c in read () from /usr/lib/libc.so.6 +#1 0x00005582273ae6ce in read () at /usr/include/bits/unistd.h:38 +#2 gdb_handlesig () at ../qemu-8.0.0/gdbstub/user.c:148 +#3 0x00005582273919fb in handle_pending_signal () at ../qemu-8.0.0/linux-user/signal.c:1042 +#4 0x0000558227391dd2 in process_pending_signals () at ../qemu-8.0.0/linux-user/signal.c:1153 +#5 0x00005582272964b8 in cpu_loop () at ../qemu-8.0.0/linux-user/riscv/cpu_loop.c:93 +#6 0x00005582273a1d15 in clone_func () at ../qemu-8.0.0/linux-user/syscall.c:6621 +#7 0x00007febc166dbb5 in ?? () from /usr/lib/libc.so.6 +#8 0x00007febc16efd90 in ?? () from /usr/lib/libc.so.6 + +Thread 11 (Thread 0x7febc04756c0 (LWP 3922796)): +#0 0x00007febc16f1b1c in recv () from /usr/lib/libc.so.6 +#1 0x00005582273a9882 in recv () at /usr/include/bits/socket2.h:38 +#2 gdb_get_char () at ../qemu-8.0.0/gdbstub/user.c:39 +#3 0x00005582273aad28 in gdb_got_immediate_ack () at ../qemu-8.0.0/gdbstub/user.c:62 +#4 gdb_put_packet_binary () at ../qemu-8.0.0/gdbstub/gdbstub.c:164 +#5 0x00005582273ab768 in gdb_put_strbuf () at ../qemu-8.0.0/gdbstub/gdbstub.c:181 +#6 handle_query_threads () at ../qemu-8.0.0/gdbstub/gdbstub.c:1410 +#7 0x000055822741cb78 in process_string_cmd.constprop.0 () at ../qemu-8.0.0/gdbstub/gdbstub.c:838 +#8 0x00005582273abad6 in handle_gen_query () at ../qemu-8.0.0/gdbstub/gdbstub.c:1673 +#9 handle_gen_query () at ../qemu-8.0.0/gdbstub/gdbstub.c:1661 +#10 0x000055822741cbb3 in process_string_cmd.constprop.0 () at ../qemu-8.0.0/gdbstub/gdbstub.c:838 +#11 0x00005582273ae272 in run_cmd_parser () at ../qemu-8.0.0/gdbstub/gdbstub.c:856 +#12 gdb_handle_packet () at ../qemu-8.0.0/gdbstub/gdbstub.c:1953 +#13 gdb_read_byte () at ../qemu-8.0.0/gdbstub/gdbstub.c:2113 +#14 0x00005582273ae6ec in gdb_handlesig () at ../qemu-8.0.0/gdbstub/user.c:153 +#15 0x00005582273919fb in handle_pending_signal () at ../qemu-8.0.0/linux-user/signal.c:1042 +#16 0x0000558227391dd2 in process_pending_signals () at ../qemu-8.0.0/linux-user/signal.c:1153 +#17 0x00005582272964b8 in cpu_loop () at ../qemu-8.0.0/linux-user/riscv/cpu_loop.c:93 +#18 0x00005582273a1d15 in clone_func () at ../qemu-8.0.0/linux-user/syscall.c:6621 +#19 0x00007febc166dbb5 in ?? () from /usr/lib/libc.so.6 +#20 0x00007febc16efd90 in ?? () from /usr/lib/libc.so.6 + +Thread 10 (Thread 0x7febc075c6c0 (LWP 3922793)): +#0 0x00007febc16de96c in read () from /usr/lib/libc.so.6 +#1 0x00005582273ae6ce in read () at /usr/include/bits/unistd.h:38 +#2 gdb_handlesig () at ../qemu-8.0.0/gdbstub/user.c:148 +#3 0x00005582273919fb in handle_pending_signal () at ../qemu-8.0.0/linux-user/signal.c:1042 +#4 0x0000558227391dd2 in process_pending_signals () at ../qemu-8.0.0/linux-user/signal.c:1153 +#5 0x00005582272964b8 in cpu_loop () at ../qemu-8.0.0/linux-user/riscv/cpu_loop.c:93 +#6 0x00005582273a1d15 in clone_func () at ../qemu-8.0.0/linux-user/syscall.c:6621 +#7 0x00007febc166dbb5 in ?? () from /usr/lib/libc.so.6 +#8 0x00007febc16efd90 in ?? () from /usr/lib/libc.so.6 + +Thread 9 (Thread 0x7febc01aa6c0 (LWP 3922807)): +#0 0x00007febc16de96c in read () from /usr/lib/libc.so.6 +#1 0x00005582273ae6ce in read () at /usr/include/bits/unistd.h:38 +#2 gdb_handlesig () at ../qemu-8.0.0/gdbstub/user.c:148 +#3 0x00005582273919fb in handle_pending_signal () at ../qemu-8.0.0/linux-user/signal.c:1042 +#4 0x0000558227391dd2 in process_pending_signals () at ../qemu-8.0.0/linux-user/signal.c:1153 +#5 0x00005582272964b8 in cpu_loop () at ../qemu-8.0.0/linux-user/riscv/cpu_loop.c:93 +#6 0x00005582273a1d15 in clone_func () at ../qemu-8.0.0/linux-user/syscall.c:6621 +#7 0x00007febc166dbb5 in ?? () from /usr/lib/libc.so.6 +#8 0x00007febc16efd90 in ?? () from /usr/lib/libc.so.6 + +Thread 8 (Thread 0x7febc026d6c0 (LWP 3922804)): +#0 0x00007febc16de96c in read () from /usr/lib/libc.so.6 +#1 0x00005582273ae6ce in read () at /usr/include/bits/unistd.h:38 +#2 gdb_handlesig () at ../qemu-8.0.0/gdbstub/user.c:148 +#3 0x00005582273919fb in handle_pending_signal () at ../qemu-8.0.0/linux-user/signal.c:1042 +#4 0x0000558227391dd2 in process_pending_signals () at ../qemu-8.0.0/linux-user/signal.c:1153 +#5 0x00005582272964b8 in cpu_loop () at ../qemu-8.0.0/linux-user/riscv/cpu_loop.c:93 +#6 0x00005582273a1d15 in clone_func () at ../qemu-8.0.0/linux-user/syscall.c:6621 +#7 0x00007febc166dbb5 in ?? () from /usr/lib/libc.so.6 +#8 0x00007febc16efd90 in ?? () from /usr/lib/libc.so.6 + +Thread 7 (Thread 0x7febc04f76c0 (LWP 3922794)): +#0 0x00007febc16f1d4c in send () from /usr/lib/libc.so.6 +#1 0x00005582273a994a in gdb_put_buffer () at ../qemu-8.0.0/gdbstub/user.c:82 +#2 0x00005582273aad23 in gdb_put_packet_binary () at ../qemu-8.0.0/gdbstub/gdbstub.c:161 +#3 0x00005582273ab768 in gdb_put_strbuf () at ../qemu-8.0.0/gdbstub/gdbstub.c:181 +#4 handle_query_threads () at ../qemu-8.0.0/gdbstub/gdbstub.c:1410 +#5 0x000055822741cb78 in process_string_cmd.constprop.0 () at ../qemu-8.0.0/gdbstub/gdbstub.c:838 +#6 0x00005582273abad6 in handle_gen_query () at ../qemu-8.0.0/gdbstub/gdbstub.c:1673 +#7 handle_gen_query () at ../qemu-8.0.0/gdbstub/gdbstub.c:1661 +#8 0x000055822741cbb3 in process_string_cmd.constprop.0 () at ../qemu-8.0.0/gdbstub/gdbstub.c:838 +#9 0x00005582273ae272 in run_cmd_parser () at ../qemu-8.0.0/gdbstub/gdbstub.c:856 +#10 gdb_handle_packet () at ../qemu-8.0.0/gdbstub/gdbstub.c:1953 +#11 gdb_read_byte () at ../qemu-8.0.0/gdbstub/gdbstub.c:2113 +#12 0x00005582273ae6ec in gdb_handlesig () at ../qemu-8.0.0/gdbstub/user.c:153 +#13 0x00005582273919fb in handle_pending_signal () at ../qemu-8.0.0/linux-user/signal.c:1042 +#14 0x0000558227391dd2 in process_pending_signals () at ../qemu-8.0.0/linux-user/signal.c:1153 +#15 0x00005582272964b8 in cpu_loop () at ../qemu-8.0.0/linux-user/riscv/cpu_loop.c:93 +#16 0x00005582273a1d15 in clone_func () at ../qemu-8.0.0/linux-user/syscall.c:6621 +#17 0x00007febc166dbb5 in ?? () from /usr/lib/libc.so.6 +#18 0x00007febc16efd90 in ?? () from /usr/lib/libc.so.6 + +Thread 6 (Thread 0x7febc01696c0 (LWP 3922808)): +#0 0x00007febc16de96c in read () from /usr/lib/libc.so.6 +#1 0x00005582273ae6ce in read () at /usr/include/bits/unistd.h:38 +#2 gdb_handlesig () at ../qemu-8.0.0/gdbstub/user.c:148 +#3 0x00005582273919fb in handle_pending_signal () at ../qemu-8.0.0/linux-user/signal.c:1042 +#4 0x0000558227391dd2 in process_pending_signals () at ../qemu-8.0.0/linux-user/signal.c:1153 +#5 0x00005582272964b8 in cpu_loop () at ../qemu-8.0.0/linux-user/riscv/cpu_loop.c:93 +#6 0x00005582273a1d15 in clone_func () at ../qemu-8.0.0/linux-user/syscall.c:6621 +#7 0x00007febc166dbb5 in ?? () from /usr/lib/libc.so.6 +#8 0x00007febc16efd90 in ?? () from /usr/lib/libc.so.6 + +Thread 5 (Thread 0x7febc0f5ebc0 (LWP 3922750)): +#0 safe_syscall_base () at ../qemu-8.0.0/common-user/host/x86_64/safe-syscall.inc.S:75 +#1 0x00005582274134c2 in safe_futex () at ../qemu-8.0.0/linux-user/syscall.c:678 +#2 do_safe_futex () at ../qemu-8.0.0/linux-user/syscall.c:7804 +#3 do_futex () at ../qemu-8.0.0/linux-user/syscall.c:7891 +#4 0x00005582274191fa in do_syscall1.constprop.0 () at ../qemu-8.0.0/linux-user/syscall.c:12476 +#5 0x00005582273a2a22 in do_syscall () at ../qemu-8.0.0/linux-user/syscall.c:13375 +#6 0x000055822729644c in cpu_loop () at ../qemu-8.0.0/linux-user/riscv/cpu_loop.c:55 +#7 0x000055822728bfa1 in main () at ../qemu-8.0.0/linux-user/main.c:962 + +Thread 4 (Thread 0x7febc0f5d6c0 (LWP 3922751)): +#0 0x00007febc16e80dd in syscall () from /usr/lib/libc.so.6 +#1 0x00005582273cdcb3 in qemu_futex_wait () at /usr/src/debug/qemu/qemu-8.0.0/include/qemu/futex.h:29 +#2 qemu_event_wait () at ../qemu-8.0.0/util/qemu-thread-posix.c:464 +#3 0x00005582273d83ad in call_rcu_thread () at ../qemu-8.0.0/util/rcu.c:261 +#4 0x00005582273cde58 in qemu_thread_start () at ../qemu-8.0.0/util/qemu-thread-posix.c:541 +#5 0x00007febc166dbb5 in ?? () from /usr/lib/libc.so.6 +#6 0x00007febc16efd90 in ?? () from /usr/lib/libc.so.6 + +Thread 3 (Thread 0x7febc03b26c0 (LWP 3922799)): +#0 0x00007febc16f1b1c in recv () from /usr/lib/libc.so.6 +#1 0x00005582273a9882 in recv () at /usr/include/bits/socket2.h:38 +#2 gdb_get_char () at ../qemu-8.0.0/gdbstub/user.c:39 +#3 0x00005582273aad28 in gdb_got_immediate_ack () at ../qemu-8.0.0/gdbstub/user.c:62 +#4 gdb_put_packet_binary () at ../qemu-8.0.0/gdbstub/gdbstub.c:164 +#5 0x00005582273ab768 in gdb_put_strbuf () at ../qemu-8.0.0/gdbstub/gdbstub.c:181 +#6 handle_query_threads () at ../qemu-8.0.0/gdbstub/gdbstub.c:1410 +#7 0x000055822741cb78 in process_string_cmd.constprop.0 () at ../qemu-8.0.0/gdbstub/gdbstub.c:838 +#8 0x00005582273abad6 in handle_gen_query () at ../qemu-8.0.0/gdbstub/gdbstub.c:1673 +#9 handle_gen_query () at ../qemu-8.0.0/gdbstub/gdbstub.c:1661 +#10 0x000055822741cbb3 in process_string_cmd.constprop.0 () at ../qemu-8.0.0/gdbstub/gdbstub.c:838 +#11 0x00005582273ae272 in run_cmd_parser () at ../qemu-8.0.0/gdbstub/gdbstub.c:856 +#12 gdb_handle_packet () at ../qemu-8.0.0/gdbstub/gdbstub.c:1953 +#13 gdb_read_byte () at ../qemu-8.0.0/gdbstub/gdbstub.c:2113 +#14 0x00005582273ae6ec in gdb_handlesig () at ../qemu-8.0.0/gdbstub/user.c:153 +#15 0x00005582273919fb in handle_pending_signal () at ../qemu-8.0.0/linux-user/signal.c:1042 +#16 0x0000558227391dd2 in process_pending_signals () at ../qemu-8.0.0/linux-user/signal.c:1153 +#17 0x00005582272964b8 in cpu_loop () at ../qemu-8.0.0/linux-user/riscv/cpu_loop.c:93 +#18 0x00005582273a1d15 in clone_func () at ../qemu-8.0.0/linux-user/syscall.c:6621 +#19 0x00007febc166dbb5 in ?? () from /usr/lib/libc.so.6 +#20 0x00007febc16efd90 in ?? () from /usr/lib/libc.so.6 + +Thread 2 (Thread 0x7febc06db6c0 (LWP 3922792)): +#0 safe_syscall_base () at ../qemu-8.0.0/common-user/host/x86_64/safe-syscall.inc.S:75 +#1 0x00005582274134c2 in safe_futex () at ../qemu-8.0.0/linux-user/syscall.c:678 +#2 do_safe_futex () at ../qemu-8.0.0/linux-user/syscall.c:7804 +#3 do_futex () at ../qemu-8.0.0/linux-user/syscall.c:7891 +#4 0x00005582274191fa in do_syscall1.constprop.0 () at ../qemu-8.0.0/linux-user/syscall.c:12476 +#5 0x00005582273a2a22 in do_syscall () at ../qemu-8.0.0/linux-user/syscall.c:13375 +#6 0x000055822729644c in cpu_loop () at ../qemu-8.0.0/linux-user/riscv/cpu_loop.c:55 +#7 0x00005582273a1d15 in clone_func () at ../qemu-8.0.0/linux-user/syscall.c:6621 +#8 0x00007febc166dbb5 in ?? () from /usr/lib/libc.so.6 +#9 0x00007febc16efd90 in ?? () from /usr/lib/libc.so.6 + +Thread 1 (Thread 0x7febc02ef6c0 (LWP 3922802)): +#0 gdb_next_attached_cpu () at ../qemu-8.0.0/gdbstub/gdbstub.c:282 +#1 0x00005582273ab774 in handle_query_threads () at ../qemu-8.0.0/gdbstub/gdbstub.c:1411 +#2 0x000055822741cb78 in process_string_cmd.constprop.0 () at ../qemu-8.0.0/gdbstub/gdbstub.c:838 +#3 0x00005582273abad6 in handle_gen_query () at ../qemu-8.0.0/gdbstub/gdbstub.c:1673 +#4 handle_gen_query () at ../qemu-8.0.0/gdbstub/gdbstub.c:1661 +#5 0x000055822741cbb3 in process_string_cmd.constprop.0 () at ../qemu-8.0.0/gdbstub/gdbstub.c:838 +#6 0x00005582273ae272 in run_cmd_parser () at ../qemu-8.0.0/gdbstub/gdbstub.c:856 +#7 gdb_handle_packet () at ../qemu-8.0.0/gdbstub/gdbstub.c:1953 +#8 gdb_read_byte () at ../qemu-8.0.0/gdbstub/gdbstub.c:2113 +#9 0x00005582273ae6ec in gdb_handlesig () at ../qemu-8.0.0/gdbstub/user.c:153 +#10 0x00005582273919fb in handle_pending_signal () at ../qemu-8.0.0/linux-user/signal.c:1042 +#11 0x0000558227391dd2 in process_pending_signals () at ../qemu-8.0.0/linux-user/signal.c:1153 +#12 0x00005582272964b8 in cpu_loop () at ../qemu-8.0.0/linux-user/riscv/cpu_loop.c:93 +#13 0x00005582273a1d15 in clone_func () at ../qemu-8.0.0/linux-user/syscall.c:6621 +#14 0x00007febc166dbb5 in ?? () from /usr/lib/libc.so.6 +#15 0x00007febc16efd90 in ?? () from /usr/lib/libc.so.6 +(gdb) thread apply all bt full + +Thread 19 (Thread 0x7febc03306c0 (LWP 3922801)): +#0 0x00007febc16de96c in read () from /usr/lib/libc.so.6 +No symbol table info available. +#1 0x00005582273ae6ce in read () at /usr/include/bits/unistd.h:38 +No locals. +#2 gdb_handlesig () at ../qemu-8.0.0/gdbstub/user.c:148 +No locals. +#3 0x00005582273919fb in handle_pending_signal () at ../qemu-8.0.0/linux-user/signal.c:1042 +No locals. +#4 0x0000558227391dd2 in process_pending_signals () at ../qemu-8.0.0/linux-user/signal.c:1153 +No locals. +#5 0x00005582272964b8 in cpu_loop () at ../qemu-8.0.0/linux-user/riscv/cpu_loop.c:93 +No locals. +#6 0x00005582273a1d15 in clone_func () at ../qemu-8.0.0/linux-user/syscall.c:6621 +No locals. +#7 0x00007febc166dbb5 in ?? () from /usr/lib/libc.so.6 +No symbol table info available. +#8 0x00007febc16efd90 in ?? () from /usr/lib/libc.so.6 +No symbol table info available. + +Thread 18 (Thread 0x7febc02ae6c0 (LWP 3922803)): +#0 0x00007febc16de96c in read () from /usr/lib/libc.so.6 +No symbol table info available. +#1 0x00005582273ae6ce in read () at /usr/include/bits/unistd.h:38 +No locals. +#2 gdb_handlesig () at ../qemu-8.0.0/gdbstub/user.c:148 +No locals. +#3 0x00005582273919fb in handle_pending_signal () at ../qemu-8.0.0/linux-user/signal.c:1042 +No locals. +#4 0x0000558227391dd2 in process_pending_signals () at ../qemu-8.0.0/linux-user/signal.c:1153 +No locals. +#5 0x00005582272964b8 in cpu_loop () at ../qemu-8.0.0/linux-user/riscv/cpu_loop.c:93 +No locals. +#6 0x00005582273a1d15 in clone_func () at ../qemu-8.0.0/linux-user/syscall.c:6621 +No locals. +#7 0x00007febc166dbb5 in ?? () from /usr/lib/libc.so.6 +No symbol table info available. +#8 0x00007febc16efd90 in ?? () from /usr/lib/libc.so.6 +No symbol table info available. + +Thread 17 (Thread 0x7febc04b66c0 (LWP 3922795)): +#0 0x00007febc16de96c in read () from /usr/lib/libc.so.6 +No symbol table info available. +#1 0x00005582273ae6ce in read () at /usr/include/bits/unistd.h:38 +No locals. +#2 gdb_handlesig () at ../qemu-8.0.0/gdbstub/user.c:148 +No locals. +#3 0x00005582273919fb in handle_pending_signal () at ../qemu-8.0.0/linux-user/signal.c:1042 +No locals. +#4 0x0000558227391dd2 in process_pending_signals () at ../qemu-8.0.0/linux-user/signal.c:1153 +No locals. +#5 0x00005582272964b8 in cpu_loop () at ../qemu-8.0.0/linux-user/riscv/cpu_loop.c:93 +No locals. +#6 0x00005582273a1d15 in clone_func () at ../qemu-8.0.0/linux-user/syscall.c:6621 +No locals. +#7 0x00007febc166dbb5 in ?? () from /usr/lib/libc.so.6 +No symbol table info available. +#8 0x00007febc16efd90 in ?? () from /usr/lib/libc.so.6 +No symbol table info available. + +Thread 16 (Thread 0x7febc03716c0 (LWP 3922800)): +#0 0x00007febc16f1b1c in recv () from /usr/lib/libc.so.6 +No symbol table info available. +#1 0x00005582273a9882 in recv () at /usr/include/bits/socket2.h:38 +No locals. +#2 gdb_get_char () at ../qemu-8.0.0/gdbstub/user.c:39 +No locals. +#3 0x00005582273aad28 in gdb_got_immediate_ack () at ../qemu-8.0.0/gdbstub/user.c:62 +No locals. +#4 gdb_put_packet_binary () at ../qemu-8.0.0/gdbstub/gdbstub.c:164 +No locals. +#5 0x00005582273ab768 in gdb_put_strbuf () at ../qemu-8.0.0/gdbstub/gdbstub.c:181 +No locals. +#6 handle_query_threads () at ../qemu-8.0.0/gdbstub/gdbstub.c:1410 +No locals. +#7 0x000055822741cb78 in process_string_cmd.constprop.0 () at ../qemu-8.0.0/gdbstub/gdbstub.c:838 +No locals. +#8 0x00005582273abad6 in handle_gen_query () at ../qemu-8.0.0/gdbstub/gdbstub.c:1673 +No locals. +#9 handle_gen_query () at ../qemu-8.0.0/gdbstub/gdbstub.c:1661 +No locals. +#10 0x000055822741cbb3 in process_string_cmd.constprop.0 () at ../qemu-8.0.0/gdbstub/gdbstub.c:838 +No locals. +#11 0x00005582273ae272 in run_cmd_parser () at ../qemu-8.0.0/gdbstub/gdbstub.c:856 +No locals. +#12 gdb_handle_packet () at ../qemu-8.0.0/gdbstub/gdbstub.c:1953 +No locals. +#13 gdb_read_byte () at ../qemu-8.0.0/gdbstub/gdbstub.c:2113 +No locals. +#14 0x00005582273ae6ec in gdb_handlesig () at ../qemu-8.0.0/gdbstub/user.c:153 +No locals. +#15 0x00005582273919fb in handle_pending_signal () at ../qemu-8.0.0/linux-user/signal.c:1042 +No locals. +#16 0x0000558227391dd2 in process_pending_signals () at ../qemu-8.0.0/linux-user/signal.c:1153 +No locals. +#17 0x00005582272964b8 in cpu_loop () at ../qemu-8.0.0/linux-user/riscv/cpu_loop.c:93 +No locals. +#18 0x00005582273a1d15 in clone_func () at ../qemu-8.0.0/linux-user/syscall.c:6621 +No locals. +#19 0x00007febc166dbb5 in ?? () from /usr/lib/libc.so.6 +No symbol table info available. +#20 0x00007febc16efd90 in ?? () from /usr/lib/libc.so.6 +No symbol table info available. + +Thread 15 (Thread 0x7febc04346c0 (LWP 3922797)): +#0 0x00007febc16de96c in read () from /usr/lib/libc.so.6 +No symbol table info available. +#1 0x00005582273ae6ce in read () at /usr/include/bits/unistd.h:38 +No locals. +#2 gdb_handlesig () at ../qemu-8.0.0/gdbstub/user.c:148 +No locals. +#3 0x00005582273919fb in handle_pending_signal () at ../qemu-8.0.0/linux-user/signal.c:1042 +No locals. +#4 0x0000558227391dd2 in process_pending_signals () at ../qemu-8.0.0/linux-user/signal.c:1153 +No locals. +#5 0x00005582272964b8 in cpu_loop () at ../qemu-8.0.0/linux-user/riscv/cpu_loop.c:93 +No locals. +#6 0x00005582273a1d15 in clone_func () at ../qemu-8.0.0/linux-user/syscall.c:6621 +No locals. +#7 0x00007febc166dbb5 in ?? () from /usr/lib/libc.so.6 +No symbol table info available. +#8 0x00007febc16efd90 in ?? () from /usr/lib/libc.so.6 +No symbol table info available. + +Thread 14 (Thread 0x7febc03f36c0 (LWP 3922798)): +#0 0x00007febc16de96c in read () from /usr/lib/libc.so.6 +No symbol table info available. +#1 0x00005582273ae6ce in read () at /usr/include/bits/unistd.h:38 +No locals. +#2 gdb_handlesig () at ../qemu-8.0.0/gdbstub/user.c:148 +No locals. +#3 0x00005582273919fb in handle_pending_signal () at ../qemu-8.0.0/linux-user/signal.c:1042 +No locals. +#4 0x0000558227391dd2 in process_pending_signals () at ../qemu-8.0.0/linux-user/signal.c:1153 +No locals. +#5 0x00005582272964b8 in cpu_loop () at ../qemu-8.0.0/linux-user/riscv/cpu_loop.c:93 +No locals. +#6 0x00005582273a1d15 in clone_func () at ../qemu-8.0.0/linux-user/syscall.c:6621 +No locals. +#7 0x00007febc166dbb5 in ?? () from /usr/lib/libc.so.6 +No symbol table info available. +#8 0x00007febc16efd90 in ?? () from /usr/lib/libc.so.6 +No symbol table info available. + +Thread 13 (Thread 0x7febc022c6c0 (LWP 3922805)): +#0 0x00007febc16f1b1c in recv () from /usr/lib/libc.so.6 +No symbol table info available. +#1 0x00005582273a9882 in recv () at /usr/include/bits/socket2.h:38 +No locals. +#2 gdb_get_char () at ../qemu-8.0.0/gdbstub/user.c:39 +No locals. +#3 0x00005582273aad28 in gdb_got_immediate_ack () at ../qemu-8.0.0/gdbstub/user.c:62 +No locals. +#4 gdb_put_packet_binary () at ../qemu-8.0.0/gdbstub/gdbstub.c:164 +No locals. +#5 0x00005582273ab768 in gdb_put_strbuf () at ../qemu-8.0.0/gdbstub/gdbstub.c:181 +No locals. +#6 handle_query_threads () at ../qemu-8.0.0/gdbstub/gdbstub.c:1410 +No locals. +#7 0x000055822741cb78 in process_string_cmd.constprop.0 () at ../qemu-8.0.0/gdbstub/gdbstub.c:838 +No locals. +#8 0x00005582273abad6 in handle_gen_query () at ../qemu-8.0.0/gdbstub/gdbstub.c:1673 +No locals. +#9 handle_gen_query () at ../qemu-8.0.0/gdbstub/gdbstub.c:1661 +No locals. +#10 0x000055822741cbb3 in process_string_cmd.constprop.0 () at ../qemu-8.0.0/gdbstub/gdbstub.c:838 +No locals. +#11 0x00005582273ae272 in run_cmd_parser () at ../qemu-8.0.0/gdbstub/gdbstub.c:856 +No locals. +#12 gdb_handle_packet () at ../qemu-8.0.0/gdbstub/gdbstub.c:1953 +No locals. +#13 gdb_read_byte () at ../qemu-8.0.0/gdbstub/gdbstub.c:2113 +No locals. +#14 0x00005582273ae6ec in gdb_handlesig () at ../qemu-8.0.0/gdbstub/user.c:153 +No locals. +#15 0x00005582273919fb in handle_pending_signal () at ../qemu-8.0.0/linux-user/signal.c:1042 +No locals. +#16 0x0000558227391dd2 in process_pending_signals () at ../qemu-8.0.0/linux-user/signal.c:1153 +No locals. +#17 0x00005582272964b8 in cpu_loop () at ../qemu-8.0.0/linux-user/riscv/cpu_loop.c:93 +No locals. +#18 0x00005582273a1d15 in clone_func () at ../qemu-8.0.0/linux-user/syscall.c:6621 +No locals. +#19 0x00007febc166dbb5 in ?? () from /usr/lib/libc.so.6 +No symbol table info available. +#20 0x00007febc16efd90 in ?? () from /usr/lib/libc.so.6 +No symbol table info available. + +Thread 12 (Thread 0x7febc01eb6c0 (LWP 3922806)): +#0 0x00007febc16de96c in read () from /usr/lib/libc.so.6 +No symbol table info available. +#1 0x00005582273ae6ce in read () at /usr/include/bits/unistd.h:38 +No locals. +#2 gdb_handlesig () at ../qemu-8.0.0/gdbstub/user.c:148 +No locals. +#3 0x00005582273919fb in handle_pending_signal () at ../qemu-8.0.0/linux-user/signal.c:1042 +No locals. +#4 0x0000558227391dd2 in process_pending_signals () at ../qemu-8.0.0/linux-user/signal.c:1153 +No locals. +#5 0x00005582272964b8 in cpu_loop () at ../qemu-8.0.0/linux-user/riscv/cpu_loop.c:93 +No locals. +#6 0x00005582273a1d15 in clone_func () at ../qemu-8.0.0/linux-user/syscall.c:6621 +No locals. +#7 0x00007febc166dbb5 in ?? () from /usr/lib/libc.so.6 +No symbol table info available. +#8 0x00007febc16efd90 in ?? () from /usr/lib/libc.so.6 +No symbol table info available. + +Thread 11 (Thread 0x7febc04756c0 (LWP 3922796)): +#0 0x00007febc16f1b1c in recv () from /usr/lib/libc.so.6 +No symbol table info available. +#1 0x00005582273a9882 in recv () at /usr/include/bits/socket2.h:38 +No locals. +#2 gdb_get_char () at ../qemu-8.0.0/gdbstub/user.c:39 +No locals. +#3 0x00005582273aad28 in gdb_got_immediate_ack () at ../qemu-8.0.0/gdbstub/user.c:62 +No locals. +#4 gdb_put_packet_binary () at ../qemu-8.0.0/gdbstub/gdbstub.c:164 +No locals. +#5 0x00005582273ab768 in gdb_put_strbuf () at ../qemu-8.0.0/gdbstub/gdbstub.c:181 +No locals. +#6 handle_query_threads () at ../qemu-8.0.0/gdbstub/gdbstub.c:1410 +No locals. +#7 0x000055822741cb78 in process_string_cmd.constprop.0 () at ../qemu-8.0.0/gdbstub/gdbstub.c:838 +No locals. +#8 0x00005582273abad6 in handle_gen_query () at ../qemu-8.0.0/gdbstub/gdbstub.c:1673 +No locals. +#9 handle_gen_query () at ../qemu-8.0.0/gdbstub/gdbstub.c:1661 +No locals. +#10 0x000055822741cbb3 in process_string_cmd.constprop.0 () at ../qemu-8.0.0/gdbstub/gdbstub.c:838 +No locals. +#11 0x00005582273ae272 in run_cmd_parser () at ../qemu-8.0.0/gdbstub/gdbstub.c:856 +No locals. +#12 gdb_handle_packet () at ../qemu-8.0.0/gdbstub/gdbstub.c:1953 +No locals. +#13 gdb_read_byte () at ../qemu-8.0.0/gdbstub/gdbstub.c:2113 +No locals. +#14 0x00005582273ae6ec in gdb_handlesig () at ../qemu-8.0.0/gdbstub/user.c:153 +No locals. +#15 0x00005582273919fb in handle_pending_signal () at ../qemu-8.0.0/linux-user/signal.c:1042 +No locals. +#16 0x0000558227391dd2 in process_pending_signals () at ../qemu-8.0.0/linux-user/signal.c:1153 +No locals. +#17 0x00005582272964b8 in cpu_loop () at ../qemu-8.0.0/linux-user/riscv/cpu_loop.c:93 +No locals. +#18 0x00005582273a1d15 in clone_func () at ../qemu-8.0.0/linux-user/syscall.c:6621 +No locals. +#19 0x00007febc166dbb5 in ?? () from /usr/lib/libc.so.6 +No symbol table info available. +#20 0x00007febc16efd90 in ?? () from /usr/lib/libc.so.6 +No symbol table info available. + +Thread 10 (Thread 0x7febc075c6c0 (LWP 3922793)): +#0 0x00007febc16de96c in read () from /usr/lib/libc.so.6 +No symbol table info available. +#1 0x00005582273ae6ce in read () at /usr/include/bits/unistd.h:38 +No locals. +#2 gdb_handlesig () at ../qemu-8.0.0/gdbstub/user.c:148 +No locals. +#3 0x00005582273919fb in handle_pending_signal () at ../qemu-8.0.0/linux-user/signal.c:1042 +No locals. +#4 0x0000558227391dd2 in process_pending_signals () at ../qemu-8.0.0/linux-user/signal.c:1153 +No locals. +#5 0x00005582272964b8 in cpu_loop () at ../qemu-8.0.0/linux-user/riscv/cpu_loop.c:93 +No locals. +#6 0x00005582273a1d15 in clone_func () at ../qemu-8.0.0/linux-user/syscall.c:6621 +No locals. +#7 0x00007febc166dbb5 in ?? () from /usr/lib/libc.so.6 +No symbol table info available. +#8 0x00007febc16efd90 in ?? () from /usr/lib/libc.so.6 +No symbol table info available. + +Thread 9 (Thread 0x7febc01aa6c0 (LWP 3922807)): +#0 0x00007febc16de96c in read () from /usr/lib/libc.so.6 +No symbol table info available. +#1 0x00005582273ae6ce in read () at /usr/include/bits/unistd.h:38 +No locals. +#2 gdb_handlesig () at ../qemu-8.0.0/gdbstub/user.c:148 +No locals. +#3 0x00005582273919fb in handle_pending_signal () at ../qemu-8.0.0/linux-user/signal.c:1042 +No locals. +#4 0x0000558227391dd2 in process_pending_signals () at ../qemu-8.0.0/linux-user/signal.c:1153 +No locals. +#5 0x00005582272964b8 in cpu_loop () at ../qemu-8.0.0/linux-user/riscv/cpu_loop.c:93 +No locals. +#6 0x00005582273a1d15 in clone_func () at ../qemu-8.0.0/linux-user/syscall.c:6621 +No locals. +#7 0x00007febc166dbb5 in ?? () from /usr/lib/libc.so.6 +No symbol table info available. +#8 0x00007febc16efd90 in ?? () from /usr/lib/libc.so.6 +No symbol table info available. + +Thread 8 (Thread 0x7febc026d6c0 (LWP 3922804)): +#0 0x00007febc16de96c in read () from /usr/lib/libc.so.6 +No symbol table info available. +#1 0x00005582273ae6ce in read () at /usr/include/bits/unistd.h:38 +No locals. +#2 gdb_handlesig () at ../qemu-8.0.0/gdbstub/user.c:148 +No locals. +#3 0x00005582273919fb in handle_pending_signal () at ../qemu-8.0.0/linux-user/signal.c:1042 +No locals. +#4 0x0000558227391dd2 in process_pending_signals () at ../qemu-8.0.0/linux-user/signal.c:1153 +No locals. +#5 0x00005582272964b8 in cpu_loop () at ../qemu-8.0.0/linux-user/riscv/cpu_loop.c:93 +No locals. +#6 0x00005582273a1d15 in clone_func () at ../qemu-8.0.0/linux-user/syscall.c:6621 +No locals. +#7 0x00007febc166dbb5 in ?? () from /usr/lib/libc.so.6 +No symbol table info available. +#8 0x00007febc16efd90 in ?? () from /usr/lib/libc.so.6 +No symbol table info available. + +Thread 7 (Thread 0x7febc04f76c0 (LWP 3922794)): +#0 0x00007febc16f1d4c in send () from /usr/lib/libc.so.6 +No symbol table info available. +#1 0x00005582273a994a in gdb_put_buffer () at ../qemu-8.0.0/gdbstub/user.c:82 +No locals. +#2 0x00005582273aad23 in gdb_put_packet_binary () at ../qemu-8.0.0/gdbstub/gdbstub.c:161 +No locals. +#3 0x00005582273ab768 in gdb_put_strbuf () at ../qemu-8.0.0/gdbstub/gdbstub.c:181 +No locals. +#4 handle_query_threads () at ../qemu-8.0.0/gdbstub/gdbstub.c:1410 +No locals. +#5 0x000055822741cb78 in process_string_cmd.constprop.0 () at ../qemu-8.0.0/gdbstub/gdbstub.c:838 +No locals. +#6 0x00005582273abad6 in handle_gen_query () at ../qemu-8.0.0/gdbstub/gdbstub.c:1673 +No locals. +#7 handle_gen_query () at ../qemu-8.0.0/gdbstub/gdbstub.c:1661 +No locals. +#8 0x000055822741cbb3 in process_string_cmd.constprop.0 () at ../qemu-8.0.0/gdbstub/gdbstub.c:838 +No locals. +#9 0x00005582273ae272 in run_cmd_parser () at ../qemu-8.0.0/gdbstub/gdbstub.c:856 +No locals. +#10 gdb_handle_packet () at ../qemu-8.0.0/gdbstub/gdbstub.c:1953 +No locals. +#11 gdb_read_byte () at ../qemu-8.0.0/gdbstub/gdbstub.c:2113 +No locals. +#12 0x00005582273ae6ec in gdb_handlesig () at ../qemu-8.0.0/gdbstub/user.c:153 +No locals. +#13 0x00005582273919fb in handle_pending_signal () at ../qemu-8.0.0/linux-user/signal.c:1042 +No locals. +#14 0x0000558227391dd2 in process_pending_signals () at ../qemu-8.0.0/linux-user/signal.c:1153 +No locals. +#15 0x00005582272964b8 in cpu_loop () at ../qemu-8.0.0/linux-user/riscv/cpu_loop.c:93 +No locals. +#16 0x00005582273a1d15 in clone_func () at ../qemu-8.0.0/linux-user/syscall.c:6621 +No locals. +#17 0x00007febc166dbb5 in ?? () from /usr/lib/libc.so.6 +No symbol table info available. +#18 0x00007febc16efd90 in ?? () from /usr/lib/libc.so.6 +No symbol table info available. + +Thread 6 (Thread 0x7febc01696c0 (LWP 3922808)): +#0 0x00007febc16de96c in read () from /usr/lib/libc.so.6 +No symbol table info available. +#1 0x00005582273ae6ce in read () at /usr/include/bits/unistd.h:38 +No locals. +#2 gdb_handlesig () at ../qemu-8.0.0/gdbstub/user.c:148 +No locals. +#3 0x00005582273919fb in handle_pending_signal () at ../qemu-8.0.0/linux-user/signal.c:1042 +No locals. +#4 0x0000558227391dd2 in process_pending_signals () at ../qemu-8.0.0/linux-user/signal.c:1153 +No locals. +#5 0x00005582272964b8 in cpu_loop () at ../qemu-8.0.0/linux-user/riscv/cpu_loop.c:93 +No locals. +#6 0x00005582273a1d15 in clone_func () at ../qemu-8.0.0/linux-user/syscall.c:6621 +No locals. +#7 0x00007febc166dbb5 in ?? () from /usr/lib/libc.so.6 +No symbol table info available. +#8 0x00007febc16efd90 in ?? () from /usr/lib/libc.so.6 +No symbol table info available. + +Thread 5 (Thread 0x7febc0f5ebc0 (LWP 3922750)): +#0 safe_syscall_base () at ../qemu-8.0.0/common-user/host/x86_64/safe-syscall.inc.S:75 +No locals. +#1 0x00005582274134c2 in safe_futex () at ../qemu-8.0.0/linux-user/syscall.c:678 +No locals. +#2 do_safe_futex () at ../qemu-8.0.0/linux-user/syscall.c:7804 +No locals. +#3 do_futex () at ../qemu-8.0.0/linux-user/syscall.c:7891 +No locals. +#4 0x00005582274191fa in do_syscall1.constprop.0 () at ../qemu-8.0.0/linux-user/syscall.c:12476 +No locals. +#5 0x00005582273a2a22 in do_syscall () at ../qemu-8.0.0/linux-user/syscall.c:13375 +No locals. +#6 0x000055822729644c in cpu_loop () at ../qemu-8.0.0/linux-user/riscv/cpu_loop.c:55 +No locals. +#7 0x000055822728bfa1 in main () at ../qemu-8.0.0/linux-user/main.c:962 +No locals. + +Thread 4 (Thread 0x7febc0f5d6c0 (LWP 3922751)): +#0 0x00007febc16e80dd in syscall () from /usr/lib/libc.so.6 +No symbol table info available. +#1 0x00005582273cdcb3 in qemu_futex_wait () at /usr/src/debug/qemu/qemu-8.0.0/include/qemu/futex.h:29 +No locals. +#2 qemu_event_wait () at ../qemu-8.0.0/util/qemu-thread-posix.c:464 +No locals. +#3 0x00005582273d83ad in call_rcu_thread () at ../qemu-8.0.0/util/rcu.c:261 +No locals. +#4 0x00005582273cde58 in qemu_thread_start () at ../qemu-8.0.0/util/qemu-thread-posix.c:541 +No locals. +#5 0x00007febc166dbb5 in ?? () from /usr/lib/libc.so.6 +No symbol table info available. +#6 0x00007febc16efd90 in ?? () from /usr/lib/libc.so.6 +No symbol table info available. + +Thread 3 (Thread 0x7febc03b26c0 (LWP 3922799)): +#0 0x00007febc16f1b1c in recv () from /usr/lib/libc.so.6 +No symbol table info available. +#1 0x00005582273a9882 in recv () at /usr/include/bits/socket2.h:38 +No locals. +#2 gdb_get_char () at ../qemu-8.0.0/gdbstub/user.c:39 +No locals. +#3 0x00005582273aad28 in gdb_got_immediate_ack () at ../qemu-8.0.0/gdbstub/user.c:62 +No locals. +#4 gdb_put_packet_binary () at ../qemu-8.0.0/gdbstub/gdbstub.c:164 +No locals. +#5 0x00005582273ab768 in gdb_put_strbuf () at ../qemu-8.0.0/gdbstub/gdbstub.c:181 +No locals. +#6 handle_query_threads () at ../qemu-8.0.0/gdbstub/gdbstub.c:1410 +No locals. +#7 0x000055822741cb78 in process_string_cmd.constprop.0 () at ../qemu-8.0.0/gdbstub/gdbstub.c:838 +No locals. +#8 0x00005582273abad6 in handle_gen_query () at ../qemu-8.0.0/gdbstub/gdbstub.c:1673 +No locals. +#9 handle_gen_query () at ../qemu-8.0.0/gdbstub/gdbstub.c:1661 +No locals. +#10 0x000055822741cbb3 in process_string_cmd.constprop.0 () at ../qemu-8.0.0/gdbstub/gdbstub.c:838 +No locals. +#11 0x00005582273ae272 in run_cmd_parser () at ../qemu-8.0.0/gdbstub/gdbstub.c:856 +No locals. +#12 gdb_handle_packet () at ../qemu-8.0.0/gdbstub/gdbstub.c:1953 +No locals. +#13 gdb_read_byte () at ../qemu-8.0.0/gdbstub/gdbstub.c:2113 +No locals. +#14 0x00005582273ae6ec in gdb_handlesig () at ../qemu-8.0.0/gdbstub/user.c:153 +No locals. +#15 0x00005582273919fb in handle_pending_signal () at ../qemu-8.0.0/linux-user/signal.c:1042 +No locals. +#16 0x0000558227391dd2 in process_pending_signals () at ../qemu-8.0.0/linux-user/signal.c:1153 +No locals. +#17 0x00005582272964b8 in cpu_loop () at ../qemu-8.0.0/linux-user/riscv/cpu_loop.c:93 +No locals. +#18 0x00005582273a1d15 in clone_func () at ../qemu-8.0.0/linux-user/syscall.c:6621 +No locals. +#19 0x00007febc166dbb5 in ?? () from /usr/lib/libc.so.6 +No symbol table info available. +#20 0x00007febc16efd90 in ?? () from /usr/lib/libc.so.6 +No symbol table info available. + +Thread 2 (Thread 0x7febc06db6c0 (LWP 3922792)): +#0 safe_syscall_base () at ../qemu-8.0.0/common-user/host/x86_64/safe-syscall.inc.S:75 +No locals. +#1 0x00005582274134c2 in safe_futex () at ../qemu-8.0.0/linux-user/syscall.c:678 +No locals. +#2 do_safe_futex () at ../qemu-8.0.0/linux-user/syscall.c:7804 +No locals. +#3 do_futex () at ../qemu-8.0.0/linux-user/syscall.c:7891 +No locals. +#4 0x00005582274191fa in do_syscall1.constprop.0 () at ../qemu-8.0.0/linux-user/syscall.c:12476 +No locals. +#5 0x00005582273a2a22 in do_syscall () at ../qemu-8.0.0/linux-user/syscall.c:13375 +No locals. +#6 0x000055822729644c in cpu_loop () at ../qemu-8.0.0/linux-user/riscv/cpu_loop.c:55 +No locals. +#7 0x00005582273a1d15 in clone_func () at ../qemu-8.0.0/linux-user/syscall.c:6621 +No locals. +#8 0x00007febc166dbb5 in ?? () from /usr/lib/libc.so.6 +No symbol table info available. +#9 0x00007febc16efd90 in ?? () from /usr/lib/libc.so.6 +No symbol table info available. + +Thread 1 (Thread 0x7febc02ef6c0 (LWP 3922802)): +#0 gdb_next_attached_cpu () at ../qemu-8.0.0/gdbstub/gdbstub.c:282 +No locals. +#1 0x00005582273ab774 in handle_query_threads () at ../qemu-8.0.0/gdbstub/gdbstub.c:1411 +No locals. +#2 0x000055822741cb78 in process_string_cmd.constprop.0 () at ../qemu-8.0.0/gdbstub/gdbstub.c:838 +No locals. +#3 0x00005582273abad6 in handle_gen_query () at ../qemu-8.0.0/gdbstub/gdbstub.c:1673 +No locals. +#4 handle_gen_query () at ../qemu-8.0.0/gdbstub/gdbstub.c:1661 +No locals. +#5 0x000055822741cbb3 in process_string_cmd.constprop.0 () at ../qemu-8.0.0/gdbstub/gdbstub.c:838 +No locals. +#6 0x00005582273ae272 in run_cmd_parser () at ../qemu-8.0.0/gdbstub/gdbstub.c:856 +No locals. +#7 gdb_handle_packet () at ../qemu-8.0.0/gdbstub/gdbstub.c:1953 +No locals. +#8 gdb_read_byte () at ../qemu-8.0.0/gdbstub/gdbstub.c:2113 +No locals. +#9 0x00005582273ae6ec in gdb_handlesig () at ../qemu-8.0.0/gdbstub/user.c:153 +No locals. +#10 0x00005582273919fb in handle_pending_signal () at ../qemu-8.0.0/linux-user/signal.c:1042 +No locals. +#11 0x0000558227391dd2 in process_pending_signals () at ../qemu-8.0.0/linux-user/signal.c:1153 +No locals. +#12 0x00005582272964b8 in cpu_loop () at ../qemu-8.0.0/linux-user/riscv/cpu_loop.c:93 +No locals. +#13 0x00005582273a1d15 in clone_func () at ../qemu-8.0.0/linux-user/syscall.c:6621 +No locals. +#14 0x00007febc166dbb5 in ?? () from /usr/lib/libc.so.6 +No symbol table info available. +#15 0x00007febc16efd90 in ?? () from /usr/lib/libc.so.6 +No symbol table info available. + +``` + +</details> + + + +- coredump + - [core.qemu-riscv64.1000.efb558e6104b4cc5bfa37605fc9af294.3922750.1685497956000000.zst](/uploads/071fc96520ca4008941044802c176d6a/core.qemu-riscv64.1000.efb558e6104b4cc5bfa37605fc9af294.3922750.1685497956000000.zst) + - [qemu-riscv64](/uploads/f203d5aed8559d80c2d66e439bb4dddf/qemu-riscv64) (the binary the coredump was generated from) + - download both, extract corefile, use `DEBUGINFOD_URLS=https://debuginfod.archlinux.org gdb /path/to/qemu-riscv64 -c /tmp/coredump` to debug +- reproducer + - [testb3.tar.xz](/uploads/84bdbb547e01527c3d804e0d88c6c9fe/testb3.tar.xz) (includes testb3 + sysroot to work with command line above) + - This binary is a cross-compiled `testb3` from [WebKit](https://github.com/WebKit/WebKit/blob/9755847ab1d40841374b2467b3036d943b723183/Source/JavaScriptCore/b3/testb3_1.cpp#L927) ; sorry, that's about all I know about it so far + - A GDB you might use to connect is [SiFive's](https://static.dev.sifive.com/dev-tools/riscv64-unknown-elf-gcc-8.1.0-2019.01.0-x86_64-linux-ubuntu14.tar.gz). I got more consistent segfaults with a more recent gdb (12.1), but I'm not sure how to tell you how to get that `gdb` besides "creating a riscv64 poky distribution" (what I did), which is likely not helpful.""" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/1688.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/1688.toml new file mode 100644 index 00000000..7723e09a --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/1688.toml @@ -0,0 +1,41 @@ +id = 1688 +title = "target/riscv KVM_RISCV_SET_TIMER macro is not configured correctly" +state = "closed" +created_at = "2023-06-06T08:51:28.349Z" +closed_at = "2023-07-10T22:58:39.120Z" +labels = ["target: riscv", "workflow::Triaged"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/1688" +host-os = "Linux" +host-arch = "X86" +qemu-version = "QEMU emulator version 7.2.50 (v7.2.0-333-g222059a0fc)" +guest-os = "Linux" +guest-arch = "RISCV" +description = """When riscv kvm vm state changed, guest virtual time would stop/continue. But KVM_RISCV_SET_TIMER is wrong, qemu-kvm can only set 'time'.""" +reproduce = """1.start host kernel +2.start qemu-kvm""" +additional = """Below code has some probelm: +``` +=================================================================== +#define KVM_RISCV_SET_TIMER(cs, env, name, reg) \\ + do { \\ + int ret = kvm_set_one_reg(cs, RISCV_TIMER_REG(env, time), ®); \\ + +=================================================================== +``` +I think it should be like this: + +``` +diff --git a/target/riscv/kvm.c b/target/riscv/kvm.c +index 30f21453d6..0c567f668c 100644 +--- a/target/riscv/kvm.c ++++ b/target/riscv/kvm.c +@@ -99,7 +99,7 @@ static uint64_t kvm_riscv_reg_id(CPURISCVState *env, uint64_t type, + + #define KVM_RISCV_SET_TIMER(cs, env, name, reg) \\ + do { \\ +- int ret = kvm_set_one_reg(cs, RISCV_TIMER_REG(env, time), ®); \\ ++ int ret = kvm_set_one_reg(cs, RISCV_TIMER_REG(env, name), ®); \\ + if (ret) { \\ + abort(); \\ + } \\ +```""" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/1708.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/1708.toml new file mode 100644 index 00000000..51f1e28e --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/1708.toml @@ -0,0 +1,77 @@ +id = 1708 +title = "RISCV: Illegal instruction delegated to VS mode sets the wrong vscause value" +state = "closed" +created_at = "2023-06-13T14:06:56.176Z" +closed_at = "2024-01-10T16:21:42.552Z" +labels = ["target: riscv", "workflow::Triaged"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/1708" +host-os = "OpenSuse" +host-arch = "x86" +qemu-version = "QEMU emulator version 8.0.50 (v8.0.0-244-g1eb95e1bae-dirty)" +guest-os = "None" +guest-arch = "RISC-V" +description = """When delegating an illegal instruction exception caused in VS-mode to VS-mode, the vscause value for an illegal instruction is set incorrectly. + +Steps to reproduce: +1. Delegate 2(,6,10) in medeleg and hedeleg. +2. Enter VS-mode +3. Cause an illegal instruction fault, cause 6 can't happen in QEMU since there is misaligned support and 10 can't be delegated to VS mode. +4. The (v)scause CSR is then set to 1, i.e. instruction access fault which isn't correct. + +I have located the issue in the code @ cpu_helper.c:1703 +``` +if ((cause == IRQ_VS_TIMER || cause == IRQ_VS_SOFT || + cause == IRQ_VS_EXT)) { + cause = cause - 1; +} +``` + +The if statement should include a check for the async otherwise the cause shouldn't be altered. The patch I propose is simply to **and** the current statement with async. +``` +if (async & (cause == IRQ_VS_TIMER || cause == IRQ_VS_SOFT || + cause == IRQ_VS_EXT)) { + cause = cause - 1; +} +```""" +reproduce = "n/a" +additional = """Log where the incorrect cause is set. Note this line: `DEBUG: [src/trap_handling.c: 105] Instruction access fault exception: SEPC = 0x80008850, STVAL = 0x0` +``` +TRACE: [src/hart_ctrl.c:35] STARTING CPU 0 +TRACE: [src/page_tables.c:343] Setting up page tables between 0x80000000 -> 0x81c00000 +TRACE: [src/page_tables.c:359] Setting up page tables between 0x81c01000 -> 0x81c02000 +TRACE: [src/page_tables.c:374] Setting up page tables for UART 0x10000000 +TRACE: [src/page_tables.c:386] Setting up page tables for CLINT 0x2000000 +DEBUG: [src/page_tables.c: 406] Mapping IMISIC 0x24000000 +DEBUG: [src/page_tables.c: 406] Mapping IMISIC 0x28000000 +DEBUG: [src/page_tables.c: 406] Mapping IMISIC 0x28001000 +TRACE: [src/main.c:32] STARTING HYPERVISOR TESTS +DEBUG: [src/util_fn.c:1175] pmpcfg0 = 0x00000000000f000f +DEBUG: [src/util_fn.c:1176] pmpcfg2 = 0x0000000000000000 +PMP Entry : 0 +Low Address : 0x0 +High Address : 0x81c00000 +Address Range : 0x0 - 0x81c00000 +Mode : TOR +Executable : Yes +Writable : Yes +Readable : Yes +Locked : No +-------------------------------------- +PMP Entry : 2 +Low Address : 0x82000000 +High Address : 0xfffffffffffffffc +Address Range : 0x82000000 - 0xfffffffffffffffc +Mode : TOR +Executable : Yes +Writable : Yes +Readable : Yes +Locked : No +-------------------------------------- +DEBUG: [src/trap_trigger.c: 85] Switching mode to VS +riscv_cpu_do_interrupt: hart:0, async:0, cause:0000000000000002, epc:0x00000000800062a4, tval:0x0000000000000000, desc=illegal_instruction +DEBUG: [src/trap_handling.c: 102] Illegal instruction exception: MEPC = 0x800062a4, MTVAL = 0x0 +TRACE: [src/util_fn.c:374] Done switching mode +riscv_cpu_do_interrupt: hart:0, async:0, cause:0000000000000002, epc:0x0000000080008850, tval:0x0000000000000000, desc=illegal_instruction +DEBUG: [src/trap_handling.c: 105] Instruction access fault exception: SEPC = 0x80008850, STVAL = 0x0 +ERROR: [src/trap_handling.c:158] The following assert failed: mask_cause == cause2check +mask_cause = 0x1""" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/1733.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/1733.toml new file mode 100644 index 00000000..af5af63d --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/1733.toml @@ -0,0 +1,15 @@ +id = 1733 +title = "[riscv-pmp]: PMP_is_locked function has redundant top pmp check" +state = "closed" +created_at = "2023-06-27T02:31:28.018Z" +closed_at = "2023-07-21T00:00:07.659Z" +labels = ["target: riscv", "workflow::Triaged"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/1733" +host-os = "n/a" +host-arch = "n/a" +qemu-version = "n/a" +guest-os = "n/a" +guest-arch = "n/a" +description = "n/a" +reproduce = "n/a" +additional = """""" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/1735.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/1735.toml new file mode 100644 index 00000000..36bd003c --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/1735.toml @@ -0,0 +1,41 @@ +id = 1735 +title = "[riscv-pmp] Pmp_hart_has_privs local variable name easily misunderstood" +state = "closed" +created_at = "2023-06-27T06:25:07.275Z" +closed_at = "2023-07-20T23:59:01.166Z" +labels = ["target: riscv", "workflow::Triaged"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/1735" +host-os = "n/a" +host-arch = "n/a" +qemu-version = "n/a" +guest-os = "n/a" +guest-arch = "n/a" +description = "n/a" +reproduce = "n/a" +additional = """```c +// int => bool +static int pmp_is_in_range(CPURISCVState *env, int pmp_index, + target_ulong addr); + +bool pmp_hart_has_privs(CPURISCVState *env, target_ulong addr, + target_ulong size, pmp_priv_t privs, + pmp_priv_t *allowed_privs, target_ulong mode) +{ + int i = 0; + int pmp_size = 0; + // easily misunderstood local variable + target_ulong s = 0; + target_ulong e = 0; + + for (i = 0; i < MAX_RISCV_PMPS; i++) { + s = pmp_is_in_range(env, i, addr); + e = pmp_is_in_range(env, i, addr + pmp_size - 1); + + /* partially inside */ + if ((s + e) == 1) { + + } + + /* fully inside */ + if ((s + e) == 2) { +```""" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/1749.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/1749.toml new file mode 100644 index 00000000..a6431844 --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/1749.toml @@ -0,0 +1,30 @@ +id = 1749 +title = "[Riscv-fu540] UEFI cannot be started with gdb on sifive fu540 platform？" +state = "closed" +created_at = "2023-07-06T06:01:57.785Z" +closed_at = "2023-07-20T23:57:23.407Z" +labels = ["GDB", "target: riscv"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/1749" +host-os = "n/a" +host-arch = "n/a" +qemu-version = "n/a" +guest-os = "n/a" +guest-arch = "n/a" +description = """Using qemu start UEFI on sifive fu540 platform with option： -S -s. +``` +qemu-system-riscv64 \\ + -cpu sifive-u54 -machine sifive_u \\ + -bios U540.fd \\ + -m 2048 -nographic -smp cpus=2,maxcpus=2 \\ + -S -s +``` +UEFI url is： https://github.com/tianocore/edk2.git""" +reproduce = """1. start qemu with -S -s param in one terminal +2. riscv64-unknown-linux-gnu-gdb in other terminal +3. in gdb terminal: +``` + target remove :1234 + c +``` +4. in qemu terminal, there has no any output ?""" +additional = "n/a" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/1752.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/1752.toml new file mode 100644 index 00000000..27a55064 --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/1752.toml @@ -0,0 +1,32 @@ +id = 1752 +title = "QEMU bug: csrw `MIE_MEIE | MIE_MSIE | MIE_MTIE` to sie changes mie" +state = "closed" +created_at = "2023-07-07T04:11:17.038Z" +closed_at = "2023-07-07T07:05:26.694Z" +labels = ["target: riscv", "workflow::Triaged"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/1752" +host-os = "Ubuntu 22.04" +host-arch = "n/a" +qemu-version = "QEMU emulator version 8.0.50 (v8.0.0-2372-g822cb97cef)" +guest-os = "n/a" +guest-arch = "n/a" +description = """QEMU bug: csrw `MIE_MEIE | MIE_MSIE | MIE_MTIE` to sie changes mie. + +**Only csrw causes this bug. csrs/csrc have no effect.**""" +reproduce = """output from my test program: +``` +[firmware_main] Clear mie +[firmware_main] mie is 0x0 +[firmware_main] sie is 0x0 +[firmware_main] Set MIE_SEIE | MIE_STIE | MIE_SSIE | MIE_MEIE for mie +[firmware_main] mie is 0xa22 +[firmware_main] sie is 0x0 +[firmware_main] mideleg is 0x0 +[firmware_main] Set MIE_SEIE | MIE_STIE | MIE_SSIE for mideleg +[firmware_main] mie is 0xa22 +[firmware_main] sie is 0x222 +[firmware_main] Set MIE_SSIE for sie +[firmware_main] mie is 0x800 +[firmware_main] sie is 0x0 +```""" +additional = "n/a" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/1793.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/1793.toml new file mode 100644 index 00000000..4c554faf --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/1793.toml @@ -0,0 +1,43 @@ +id = 1793 +title = "getauxval(AT_HWCAP) returns different value under qemu-system-riscv64 and qemu-riscv64" +state = "closed" +created_at = "2023-07-27T00:12:49.466Z" +closed_at = "2023-08-07T01:16:42.433Z" +labels = ["Closed::Fixed", "linux-user", "target: riscv"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/1793" +host-os = "Gentoo Linux" +host-arch = "x86_64" +qemu-version = "qemu-riscv64 version 8.0.3" +guest-os = "Gentoo Linux" +guest-arch = "riscv64" +description = """I have a test program that checks for the presence of the RISC-V Vector extension (RVV) via getauxval(). + +```c +#include <sys/auxv.h> +#include <stdio.h> + +#define ISA_V_HWCAP (1 << ('v' - 'a')) + +void main() { + unsigned long hw_cap = getauxval(AT_HWCAP); + printf("RVV %s\\n", hw_cap & ISA_V_HWCAP ? "detected" : "not found"); +} +``` + +When run inside `qemu-system-riscv64` with a 6.5-rc3 kernel where `CONFIG_RISCV_ISA_V=y` and `CONFIG_RISCV_ISA_V_DEFAULT_ENABLE=y` it correctly shows: + +``` +$ ./hwcap +RVV detected +``` + +However when executed with `qemu-riscv64` it does not return the V bit set: + +``` +$ qemu-riscv64 hwcap +RVV not found +```""" +reproduce = """1. Boot 6.5-rc3 kernel with `CONFIG_RISCV_ISA_V=y` and `CONFIG_RISCV_ISA_V_DEFAULT_ENABLE=y` +2. In guest run test program hwcap (source above) +3. On host run `qemu-riscv64 hwcap`""" +additional = """""" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/1908.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/1908.toml new file mode 100644 index 00000000..c03b5924 --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/1908.toml @@ -0,0 +1,57 @@ +id = 1908 +title = "8.1.0 regression: abnormal segfault in qemu-riscv64-static" +state = "opened" +created_at = "2023-09-26T04:33:53.336Z" +closed_at = "n/a" +labels = ["target: riscv", "workflow::Confirmed"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/1908" +host-os = "Arch Linux" +host-arch = "x86" +qemu-version = "8.1.0" +guest-os = "Arch Linux riscv64" +guest-arch = "riscv" +description = """loading_from_clipboard_test of Cockatrice segfaults in qemu-riscv64-static.""" +reproduce = """1. Setup an Arch Linux riscv64 qemu-user container: https://github.com/felixonmars/archriscv-packages/wiki/Setup-Arch-Linux-RISC-V-Development-Environment +2. Start the container: `sudo systemd-nspawn -D ./archriscv -a -U` +3. Build cockatrice 2.9.0 with tests in the container: https://github.com/Cockatrice/Cockatrice/releases/tag/2023-09-14-Release-2.9.0 +4. Run tests/loading_from_clipboard/loading_from_clipboard_test in the container""" +additional = """I have done bisection and find out that this commit caused the regression: 2d708164e0475064e0e2167bd73e8570e22df1e0 + +qemu built from HEAD(494a6a2) is still affected by this bug. + +Backtrace: + +``` +#0 0x00007fffe849f133 in code_gen_buffer () +#1 0x00007ffff7b3a433 in cpu_tb_exec (cpu=0x7ffff7f71010, itb=0x7fffe849f040 <code_gen_buffer+4845587>, +tb_exit=0x7fffffffde20) at ../qemu/accel/tcg/cpu-exec.c:457 +#2 0x00007ffff7b3aeac in cpu_loop_exec_tb (cpu=0x7ffff7f71010, tb=0x7fffe849f040 <code_gen_buffer+4845587>, +pc=46912625654024, last_tb=0x7fffffffde30, tb_exit=0x7fffffffde20) at ../qemu/accel/tcg/cpu-exec.c:919 +#3 0x00007ffff7b3b0e0 in cpu_exec_loop (cpu=0x7ffff7f71010, sc=0x7fffffffdeb0) at ../qemu/accel/tcg/cpu-exec.c:1040 +#4 0x00007ffff7b3b19e in cpu_exec_setjmp (cpu=0x7ffff7f71010, sc=0x7fffffffdeb0) +at ../qemu/accel/tcg/cpu-exec.c:1057 +#5 0x00007ffff7b3b225 in cpu_exec (cpu=0x7ffff7f71010) at ../qemu/accel/tcg/cpu-exec.c:1083 +#6 0x00007ffff7a53707 in cpu_loop (env=0x7ffff7f71330) at ../qemu/linux-user/riscv/cpu_loop.c:37 +#7 0x00007ffff7b5d0e0 in main (argc=4, argv=0x7fffffffe768, envp=0x7fffffffe790) at ../qemu/linux-user/main.c:999 +``` + +``` +0x7fffe849f105 <code_gen_buffer+4845784> jl 0x7fffe849f265 <code_gen_buffer+4846136> │ +│ 0x7fffe849f10b <code_gen_buffer+4845790> mov 0x50(%rbp),%rbx │ +│ 0x7fffe849f10f <code_gen_buffer+4845794> mov %rbx,%r12 │ +│ 0x7fffe849f112 <code_gen_buffer+4845797> mov %r12,0x70(%rbp) │ +│ 0x7fffe849f116 <code_gen_buffer+4845801> movabs $0x2aaaaf9bb000,%r13 │ +│ 0x7fffe849f120 <code_gen_buffer+4845811> mov %r13,0x38(%rbp) │ +│ 0x7fffe849f124 <code_gen_buffer+4845815> movq $0xffffffffaf9bb000,0x60(%rbp) │ +│ 0x7fffe849f12c <code_gen_buffer+4845823> mov $0xffffffffaf9bb4e0,%r13 │ +│ > 0x7fffe849f133 <code_gen_buffer+4845830> movzwl 0x0(%r13),%r13d │ +│ 0x7fffe849f138 <code_gen_buffer+4845835> and $0x7f,%ebx │ +│ 0x7fffe849f13b <code_gen_buffer+4845838> shl $0x7,%r13 │ +│ 0x7fffe849f13f <code_gen_buffer+4845842> add %r13,%rbx │ +│ 0x7fffe849f142 <code_gen_buffer+4845845> mov %rbx,0x50(%rbp) │ +│ 0x7fffe849f146 <code_gen_buffer+4845849> shl %rbx │ +│ 0x7fffe849f149 <code_gen_buffer+4845852> mov %rbx,0x38(%rbp) │ +│ 0x7fffe849f14d <code_gen_buffer+4845856> movabs $0x2aaaaf9a88e0,%r13 │ +│ 0x7fffe849f157 <code_gen_buffer+4845866> add %r13,%rbx │ +│ 0x7fffe849f15a <code_gen_buffer+4845869> mov %rbx,0x60(%rbp) +```""" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/1925.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/1925.toml new file mode 100644 index 00000000..b06a0499 --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/1925.toml @@ -0,0 +1,19 @@ +id = 1925 +title = "RISC-V 64 System Emulator fdt imporperly created after machine init is done" +state = "closed" +created_at = "2023-10-08T09:30:16.285Z" +closed_at = "2023-11-22T16:50:13.484Z" +labels = ["target: riscv"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/1925" +host-os = "Ubuntu 22.04" +host-arch = "x86_64" +qemu-version = "8.1.1" +guest-os = "Linux" +guest-arch = "RISC-V 64" +description = """In commit 49554856 the creation of FDT is moved to `virt_machine_done()` +However, adding guest loader device requires the presence of fdt at `hw/core/guest-loader.c:50` when the fdt ptr is still 0x0. +Thus adding of guest loader device will fail.""" +reproduce = """1. Compile Qemu with riscv64 system emulator target +2. Compile Xen hypervisor platform (not necessary) +3. Instruct Qemu start with virt machine and any valid guest-loader device specification.""" +additional = """Commit that changes order of fdt creation: 49554856f0b6f622ab6afdcc275d4ab2ecb3625c""" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/1945.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/1945.toml new file mode 100644 index 00000000..5bec29ee --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/1945.toml @@ -0,0 +1,15 @@ +id = 1945 +title = "More than 8 cores for RISC-V generic `virt` machine" +state = "closed" +created_at = "2023-10-16T11:16:24.753Z" +closed_at = "2023-11-07T04:59:18.725Z" +labels = ["Documentation", "target: riscv"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/1945" +host-os = "n/a" +host-arch = "n/a" +qemu-version = "n/a" +guest-os = "n/a" +guest-arch = "n/a" +description = "n/a" +reproduce = "n/a" +additional = "n/a" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/1965.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/1965.toml new file mode 100644 index 00000000..9403ac0a --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/1965.toml @@ -0,0 +1,15 @@ +id = 1965 +title = "riscv64 semihosting not working" +state = "closed" +created_at = "2023-10-27T11:30:54.909Z" +closed_at = "2023-11-13T19:25:30.692Z" +labels = ["Semihosting", "target: riscv", "workflow::Needs Info"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/1965" +host-os = "n/a" +host-arch = "n/a" +qemu-version = "n/a" +guest-os = "n/a" +guest-arch = "n/a" +description = "n/a" +reproduce = "n/a" +additional = "n/a" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/1978.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/1978.toml new file mode 100644 index 00000000..ce97941e --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/1978.toml @@ -0,0 +1,17 @@ +id = 1978 +title = "sifive_e : erroneous CLINT frequency" +state = "closed" +created_at = "2023-11-10T15:31:26.868Z" +closed_at = "2023-11-22T16:50:14.424Z" +labels = ["target: riscv"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/1978" +host-os = "MacOS Sonoma" +host-arch = "Arm" +qemu-version = "QEMU emulator version 8.1.2" +guest-os = "Bare metal" +guest-arch = "RISCV32" +description = """CLINT's `mtime` updates at a clock frequency of [10 MHz](https://gitlab.com/qemu-project/qemu/-/blob/master/hw/riscv/sifive_e.c?ref_type=heads#L228), whereas [SiFive documentation](https://cdn.sparkfun.com/assets/7/f/0/2/7/fe310-g002-manual-v19p05.pdf?_gl=1*w2ieef*_ga*MTcyNDI2MjM0Ny4xNjk2ODcwNTM3*_ga_T369JS7J9N*MTY5Njg3MDUzNy4xLjAuMTY5Njg3MDUzNy42MC4wLjA.) shows that its clock frequency is 32.768 kHz (i.e., the RTC clock). + +This difference leads to unexpected timing behavior. Due to the difference, it can even trigger multiple nested interrupts as the IRQ routine is not able to return before a new timer interrupt is triggered.""" +reproduce = "n/a" +additional = "n/a" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/1981.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/1981.toml new file mode 100644 index 00000000..86f6b601 --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/1981.toml @@ -0,0 +1,22 @@ +id = 1981 +title = "wrong address of pmpaddr13 and pmpaddr14 CSRs" +state = "closed" +created_at = "2023-11-15T10:09:04.373Z" +closed_at = "2023-11-17T07:03:31.753Z" +labels = ["target: riscv"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/1981" +host-os = "- OS/kernel version:" +host-arch = "- QEMU flavor:" +qemu-version = "- QEMU command line:" +guest-os = "- OS/kernel version:" +guest-arch = "## Description of problem" +description = """In qemu\\disas\\riscv.c lines 2119 & 2120 it seems that there is a confusion about the correct address of the pmpaddr13 and pmpaddr14 CSRs +``` +line 2117 case 0x03bb: return "pmpaddr11"; +line 2118 case 0x03bc: return "pmpaddr12"; +**line 2119 case 0x03bd: return "pmpaddr14"; <--- pmpaddr13 should be here +line 2120 case 0x03be: return "pmpaddr13"; <--- pmpaddr14 should be here** +line 2121 case 0x03bf: return "pmpaddr15"; +```""" +reproduce = "n/a" +additional = "n/a" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/2074.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/2074.toml new file mode 100644 index 00000000..65dd3293 --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/2074.toml @@ -0,0 +1,28 @@ +id = 2074 +title = "riscv64 cannot use the mret instruction to jump to the address corresponding to s mode" +state = "closed" +created_at = "2024-01-05T08:17:33.034Z" +closed_at = "2024-01-18T06:49:14.552Z" +labels = ["target: riscv"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/2074" +host-os = "Linux" +host-arch = "x86" +qemu-version = "QEMU emulator version 8.1.90" +guest-os = "coreboot/bios" +guest-arch = "riscv" +description = """I use coreboot to boot my linux kernel.The kernel is copied at 0x82200000,I set reg mepc 0x82200000,and set reg mstatus a00000800. +and I use "mret" instruction so that qemu can jump to 0x82200000 and enter S mode.But some errors happened. +It shows: +[DEBUG] Exception: Instruction access fault +[DEBUG] Hart ID: 0 +[DEBUG] Previous mode: machine +[DEBUG] Bad instruction pc: 0x8103f7c0 +[DEBUG] Bad address: 0x00000000 +[DEBUG] Stored ra: 0x8103f7b8 +[DEBUG] Stored sp: 0x82032f08 +Bad instruction pc: 0x8103f7c0 in my elf file instruction is "mret". +So I can not jump to my kernel's load address. +I think when I use -bios option,my qemu should in M mode.How could I can jump to my mepc address?""" +reproduce = """1.download qemu +2.download coreboot""" +additional = """When I enter qemu with -bios option,I find that the reg mstatus is 0xa0000000.""" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/2107.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/2107.toml new file mode 100644 index 00000000..4af249f2 --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/2107.toml @@ -0,0 +1,15 @@ +id = 2107 +title = "target/riscv: zve32x/zve64x are not supported" +state = "closed" +created_at = "2024-01-17T03:21:07.466Z" +closed_at = "2024-06-04T10:21:29.843Z" +labels = ["kind::Feature Request", "target: riscv", "workflow::Patch available"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/2107" +host-os = "n/a" +host-arch = "n/a" +qemu-version = "n/a" +guest-os = "n/a" +guest-arch = "n/a" +description = "n/a" +reproduce = "n/a" +additional = "n/a" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/2114.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/2114.toml new file mode 100644 index 00000000..7be87a70 --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/2114.toml @@ -0,0 +1,15 @@ +id = 2114 +title = "hw/char/riscv_htif.c and hw/char/sifive_uart call qemu_chr_fe_write() and ignore return value" +state = "closed" +created_at = "2024-01-19T15:00:54.558Z" +closed_at = "2025-02-04T17:22:27.335Z" +labels = ["flaky-ci", "kind::Bug", "target: riscv"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/2114" +host-os = "n/a" +host-arch = "n/a" +qemu-version = "n/a" +guest-os = "n/a" +guest-arch = "n/a" +description = "n/a" +reproduce = "n/a" +additional = "n/a" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/2137.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/2137.toml new file mode 100644 index 00000000..e2b05a91 --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/2137.toml @@ -0,0 +1,15 @@ +id = 2137 +title = "RISC-V Vector Slowdowns" +state = "opened" +created_at = "2024-01-31T01:49:15.774Z" +closed_at = "n/a" +labels = ["target: riscv", "workflow::Triaged"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/2137" +host-os = "n/a" +host-arch = "n/a" +qemu-version = "n/a" +guest-os = "n/a" +guest-arch = "n/a" +description = "n/a" +reproduce = "n/a" +additional = "n/a" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/2145.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/2145.toml new file mode 100644 index 00000000..61da387a --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/2145.toml @@ -0,0 +1,47 @@ +id = 2145 +title = "Issue with Graphical Interface on RISC-V Emulation in QEMU" +state = "closed" +created_at = "2024-02-01T18:39:41.005Z" +closed_at = "2024-02-05T17:06:37.139Z" +labels = ["target: riscv", "workflow::Needs Info"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/2145" +host-os = "Ubuntu" +host-arch = "x86" +qemu-version = "7.2" +guest-os = "Ubuntu" +guest-arch = "RiscV64" +description = """I am facing an issue when attempting to run Ubuntu on RISC-V architecture in QEMU with a graphical interface. Specifically, when executing the following command without the -nographic option, the operating system fails to start: + +```bash +qemu-system-riscv64 -machine virt -m 2048 -smp 4 -bios /usr/lib/riscv64-linux-gnu/opensbi/generic/fw_jump.bin -kernel /usr/lib/u-boot/qemu-riscv64_smode/uboot.elf -drive file=ubuntu-22.04.3-preinstalled-server-riscv64+unmatched.img,format=raw,if=virtio +``` + +I have not found any examples online where QEMU is used with RISC-V architecture without the -nographic option, which raises uncertainty about the feasibility of running it with a graphical interface. + +Interestingly, when I run a similar command for x86_64 architecture, the operating system starts successfully with a graphical interface: + +```bash +qemu-system-x86_64 -enable-kvm -m 2G -drive file=ubuntu-22.04.3-desktop-amd64.iso,format=raw -boot c -cpu host -vga std -device virtio-net-pci -device virtio-rng-pci +```""" +reproduce = """Execute QEMU with RISC-V architecture without the -nographic option. + +```bash +qemu-system-riscv64 -machine virt -m 2048 -smp 4 -bios /usr/lib/riscv64-linux-gnu/opensbi/generic/fw_jump.bin -kernel /usr/lib/u-boot/qemu-riscv64_smode/uboot.elf -drive file=ubuntu-22.04.3-preinstalled-server-riscv64+unmatched.img,format=raw,if=virtio +``` + +(The above command fails to start with a graphical interface) + +Execute QEMU with RISC-V architecture and the -nographic option. + +```bash +qemu-system-riscv64 -machine virt -nographic -m 2048 -smp 4 -bios /usr/lib/riscv64-linux-gnu/opensbi/generic/fw_jump.bin -kernel /usr/lib/u-boot/qemu-riscv64_smode/uboot.elf -drive file=ubuntu-22.04.3-preinstalled-server-riscv64+unmatched.img,format=raw,if=virtio +``` +(The above command works, but without a graphical interface) + +Execute QEMU with x86_64 architecture. + +```bash +qemu-system-x86_64 -enable-kvm -m 2G -drive file=ubuntu-22.04.3-desktop-amd64.iso,format=raw -boot c -cpu host -vga std -device virtio-net-pci -device virtio-rng-pci +``` +(The above command works and starts with a graphical interface)""" +additional = "n/a" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/2203.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/2203.toml new file mode 100644 index 00000000..db5dc93b --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/2203.toml @@ -0,0 +1,15 @@ +id = 2203 +title = "RISC-V RVV fractional LMUL check is wrong" +state = "closed" +created_at = "2024-03-02T15:28:20.830Z" +closed_at = "2024-03-15T11:49:40.703Z" +labels = ["target: riscv"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/2203" +host-os = "n/a" +host-arch = "n/a" +qemu-version = "n/a" +guest-os = "n/a" +guest-arch = "n/a" +description = "n/a" +reproduce = "n/a" +additional = "n/a" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/2223.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/2223.toml new file mode 100644 index 00000000..72f1b947 --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/2223.toml @@ -0,0 +1,43 @@ +id = 2223 +title = "Weird behavior on RISC-V code running on QEMU" +state = "closed" +created_at = "2024-03-14T05:10:09.064Z" +closed_at = "2024-04-04T16:31:59.985Z" +labels = ["target: riscv"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/2223" +host-os = "Zorin OS 16.3 (based on Ubuntu 22.04)" +host-arch = "x86" +qemu-version = "qemu-system-riscv32" +guest-os = "none" +guest-arch = "RISC-V" +description = """I am currently facing some weird problems on a RISC-V project meant to run on the QEMU environment and thought that maybe someone here could give me a light on the subject. The goal is to run a project built on top of one of FreeRTOS' official demo ports that target the 'virt' QEMU board. I ran across a few weird behaviors where code execution would just hang at some point (QEMU would keep execution but the expected terminal output would never come up). I don't have sufficient knowledge to tell whether the issue is with the FreeRTOS port, the RISC-V gnu toolchain or QEMU itself, hence why I am raising my hand for help on all related channels. + +This [repository](https://bitbucket.org/softcps-investigacao-risc-v/freertos-riscv-bugs/src/master/) contains more details and a sample project that illustrates well one of the problems I've been getting lately (I also give more context about it [here](https://github.com/riscv-collab/riscv-gnu-toolchain/issues/1434)). It basically goes like this: the program **executes fine** when a certain code snippet is encapsulated **within a function**, but "**crashes**" (i.e. hangs) when the same snippet is placed **directly in the main code**: + +```c +for(int i=0; i < NUMBER_OF_ITEMS; i++){ + createAndPushItem(i); + + // the function above does the exact same thing as the commented code below + // yet, the commented code does not work and will crash the program. but why?? + + // int index = priorities[i]; + // void *value = (void *) getValue(i + 1); + // LinkedListItem_t *item = createItem(index, value); + // if(item){ + // push(item, &list); + // } +} +``` + +The scope shouldn't matter at all here, since there is no local variable being used or anything like that. I have tested workarounds like removing compiling optimization (i.e. changing -Os for -O0) and using regular malloc() instead of FreeRTOS' dynamic allocation API, but all without success. Note that even though the project is build on top of the FreeRTOS demo port, no RTOS functionality is used within this code to make it as simple as it gets.""" +reproduce = """1. clone this [repository](https://bitbucket.org/softcps-investigacao-risc-v/freertos-riscv-bugs/src/master/) +2. follow the readme to install the toolchain +3. follow the readme to compile the program and run it""" +additional = """The expected output is supposed to be: + + + +but when one decides to use the commented snippet instead of the function, the program hangs right before sorting the linked list for the first time: + +""" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/2245.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/2245.toml new file mode 100644 index 00000000..e2f3d513 --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/2245.toml @@ -0,0 +1,15 @@ +id = 2245 +title = "RISC-V Extensions query for QEMU System" +state = "closed" +created_at = "2024-03-25T10:33:39.141Z" +closed_at = "2024-05-15T03:01:57.246Z" +labels = ["target: riscv"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/2245" +host-os = "n/a" +host-arch = "n/a" +qemu-version = "n/a" +guest-os = "n/a" +guest-arch = "n/a" +description = "n/a" +reproduce = "n/a" +additional = "n/a" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/2262.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/2262.toml new file mode 100644 index 00000000..cfdc3756 --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/2262.toml @@ -0,0 +1,207 @@ +id = 2262 +title = "linux-user riscv32: wait4/waitpid returns wrong value" +state = "closed" +created_at = "2024-04-02T06:34:29.814Z" +closed_at = "2024-04-10T13:42:47.757Z" +labels = ["Closed::Fixed", "Stable::to backport", "kind::Bug", "linux-user", "target: riscv"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/2262" +host-os = "Fedora 39" +host-arch = "x86_64" +qemu-version = "v9.0.0-rc1" +guest-os = "any" +guest-arch = "riscv32" +description = """Background job started by bash shell in riscv32 chroot environment under qemu linux-user emulation hangs indefinitely. + +strace shows repeated waitid flood `waitid(P_ALL, -1, {}, WNOHANG|WEXITED|WSTOPPED|WCONTINUED, NULL) = 0`.""" +reproduce = """1. cross compile a riscv32 environment with crossdev on gentoo or other way and chroot into it. +2. run `sleep 1000 &` +3. run `ls` +4. infinite hangs + +I have a small reproducer that I think may uncover the issue, but I am not 100% sure. I also tried running qemu with sanitizers enabled, but it produces no warning. Happy to provide a tar bar of my riscv32 rootfs if needed. + +<details><summary>simple_shell.c</summary> + +``` +#include <stdio.h> +#include <stdlib.h> +#include <unistd.h> +#include <string.h> +#include <sys/wait.h> +#include <signal.h> + +#define MAX_LINE 80 /* The maximum length command */ + +#define BACKGROUND 0 +#define FOREGROUND 1 + +struct Job { + pid_t pid; + char command[MAX_LINE]; + int state; // 0 for background, 1 for foreground +}; + +struct Job jobs[10]; // Maximum 10 background jobs +int num_jobs = 0; + +void handle_signal(int signum) { + // Do nothing for now +} + +int launch_process(char **args, int state) { + pid_t pid; + int status; + + pid = fork(); + if (pid == 0) { + // Child process + if (execvp(args[0], args) == -1) { + perror("Error in execvp"); + exit(EXIT_FAILURE); + } + } else if (pid < 0) { + // Error forking + perror("Error forking"); + } else { + // Parent process + if (state == FOREGROUND) { + // Wait for the child process to finish if it's foreground + do { + wait4(pid, &status, WUNTRACED, NULL); + } while (!WIFEXITED(status) && !WIFSIGNALED(status)); + } else { + // Background process, add to jobs list + jobs[num_jobs].pid = pid; + strcpy(jobs[num_jobs].command, args[0]); + jobs[num_jobs].state = BACKGROUND; + num_jobs++; + } + } + return 1; +} + +void bg_command(int job_number) { + // Send SIGCONT signal to a background job + if (kill(jobs[job_number].pid, SIGCONT) == -1) { + perror("kill"); + } else { + jobs[job_number].state = BACKGROUND; + } +} + +void fg_command(int job_number) { + // Bring a background job to foreground + if (kill(jobs[job_number].pid, SIGCONT) == -1) { + perror("kill"); + } else { + jobs[job_number].state = FOREGROUND; + int status; + wait4(jobs[job_number].pid, &status, WUNTRACED, NULL); + } +} + +int main(void) { + char *args[MAX_LINE/2 + 1]; /* command line arguments */ + int should_run = 1; /* flag to determine when to exit program */ + char command[MAX_LINE]; /* buffer to hold the command */ + char *token; /* token for parsing the command */ + + signal(SIGINT, handle_signal); /* Ignore SIGINT for now */ + signal(SIGTSTP, handle_signal); /* Ignore SIGTSTP for now */ + + while (should_run) { + printf("Shell> "); + fflush(stdout); + fgets(command, MAX_LINE, stdin); /* read command from stdin */ + command[strcspn(command, "\\n")] = '\\0'; /* remove newline character */ + + if (strcmp(command, "exit") == 0) { + should_run = 0; /* exit the shell */ + continue; + } + + if (strcmp(command, "") == 0) { + continue; /* skip empty commands */ + } + + if (strcmp(command, "cd") == 0) { + char *home = getenv("HOME"); + chdir(home); + continue; + } + + if (strcmp(command, "bg") == 0) { + // Run the most recent background job in the background + bg_command(num_jobs - 1); + continue; + } + + if (strcmp(command, "fg") == 0) { + // Bring the most recent background job to foreground + fg_command(num_jobs - 1); + continue; + } + + token = strtok(command, " "); + int i = 0; + while (token != NULL) { + args[i] = token; + token = strtok(NULL, " "); + i++; + } + args[i] = NULL; + + if (strcmp(args[i-1], "&") == 0) { + args[i-1] = NULL; + launch_process(args, BACKGROUND); + } else { + launch_process(args, FOREGROUND); + } + + pid_t tmp; + // Check if any background jobs have finished + for (int j = 0; j < num_jobs; j++) { + if ((tmp = wait4(jobs[j].pid, NULL, WNOHANG, NULL)) > 0) { + printf("[%d] Done\\t%s\\n", j, jobs[j].command); + // Remove job from list + for (int k = j; k < num_jobs - 1; k++) { + jobs[k] = jobs[k + 1]; + } + num_jobs--; + } + printf("wait4 ret: %d\\n", tmp); + } + } + return 0; +} +``` + +</details> + +<details><summary>loop.c</summary> +int main() {while(1){}} +</details> + +1. compile simple_shell.c, statically for simplicity. `riscv32-unknown-gnu-gcc simple_shell.c --static -o shell_riscv32` +2. compile loop.c to riscv32 or x86_64 (x86_64 is simpler with same result) `gcc loop.c --static -o loop` +3. run shell with qemu user +``` +qemu-user-riscv32 ./shell_riscv32 +shell> ./loop & +[0] Done ./sleep_riscv32 +wait4 ret: 98298 +``` +where it is supposed to return 0 on riscv64 or x86""" +additional = """More context: +This was found on the side when I was trying to track down a riscv32 infinite loop issue with linux-user emulation that has been blocking riscv32 gentoo bootstrap. I am not certain if my reproducer does reproduced that issue, but feels it is close. strace attached to the process repeats, +``` +waitid(P_ALL, -1, {}, WNOHANG|WEXITED, NULL) = 0 +rt_sigprocmask(SIG_SETMASK, ~[RTMIN RT_1], NULL, 8) = 0 +rt_sigprocmask(SIG_SETMASK, ~[RTMIN RT_1], NULL, 8) = 0 +rt_sigprocmask(SIG_SETMASK, [CHLD], NULL, 8) = 0 +rt_sigprocmask(SIG_SETMASK, ~[RTMIN RT_1], NULL, 8) = 0 +rt_sigprocmask(SIG_SETMASK, ~[RTMIN RT_1], NULL, 8) = 0 +rt_sigprocmask(SIG_SETMASK, [CHLD], NULL, 8) = 0 +waitid(P_ALL, -1, ^Cstrace: Process 237805 detached +``` +It appears to be first mentioned here <https://lists.gnu.org/archive/html/qemu-devel/2021-01/msg05475.html>.""" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/2269.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/2269.toml new file mode 100644 index 00000000..e63146ab --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/2269.toml @@ -0,0 +1,49 @@ +id = 2269 +title = "RISC-V exit via sifive_test does not work in scripts with -serial stdio" +state = "closed" +created_at = "2024-04-06T09:20:17.514Z" +closed_at = "2024-05-15T02:57:20.518Z" +labels = ["target: riscv"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/2269" +host-os = "Ubuntu 22.04" +host-arch = "aarch64" +qemu-version = "8.2.92" +guest-os = "bare metal" +guest-arch = "riscv64" +description = """""" +reproduce = """1. Create assembly file `hello.s`: +```as +.section .text +.globl _start +_start: csrr t0, mhartid + bnez t0, _start + li t0, 0x100000 + li t1, 0x5555 + sw t1, 0(t0) +halt: j halt +``` +2. Create linker script `link.ld`: +```ld +OUTPUT_ARCH( "riscv" ) +ENTRY(_start) +SECTIONS +{ + . = 0x80000000; +} +``` +3. Create runner script `./run.sh` (don't forget to `chmod +x`) +```sh +#!/usr/bin/env bash +timeout 10 qemu-system-riscv64 -M virt -display none -serial stdio -bios none -kernel hello +``` +4. Compile into executable: +```sh +riscv64-unknown-elf-gcc -c -mcmodel=medany -fvisibility=hidden -nostartfiles -march=rv64g -mabi=lp64 -o hello.o hello.s +riscv64-unknown-elf-ld hello.o -nostdlib -T link.ld -o hello +``` +5. Dot-source the script - it will immediately exit cleanly +6. Execute the script - it will timeout with exit code 124 +7. Execute the script with redirected stdin, e.g. `./run.sh < ./run.sh` or `echo | ./run.sh` - it will immediately exit cleanly""" +additional = """This issue happens only with `-serial stdio`. Using `chardev:file` or `chardev:null` does not reproduce the issue. Process substitution like `<(echo 'test')` does not seem to work. `cat | ./run.sh` will wait until any line is send, then exit cleanly. This is mainly an issue when using helper test scripts which want to interact with user, as proper CI/UT would redirect serial anyways. + +I have noticed similar behavior with other RISC-V UART device - when running from scripts, there is no output, as if QEMU was waiting for something, even if there is only UART TX, not RX. It does not matter if I actually type in anything or not.""" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/2286.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/2286.toml new file mode 100644 index 00000000..3dab1037 --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/2286.toml @@ -0,0 +1,15 @@ +id = 2286 +title = "QEMU RISC-V TCG: amo insn fault does not throw AMO fault" +state = "closed" +created_at = "2024-04-16T12:11:58.543Z" +closed_at = "2024-05-15T01:25:09.124Z" +labels = ["Closed::Duplicate", "target: riscv"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/2286" +host-os = "n/a" +host-arch = "n/a" +qemu-version = "n/a" +guest-os = "n/a" +guest-arch = "n/a" +description = "n/a" +reproduce = "n/a" +additional = "n/a" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/2332.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/2332.toml new file mode 100644 index 00000000..405951b7 --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/2332.toml @@ -0,0 +1,37 @@ +id = 2332 +title = "Riscv semihosting arguments parsing issue" +state = "opened" +created_at = "2024-05-07T21:55:05.097Z" +closed_at = "n/a" +labels = ["Semihosting", "TestCase", "target: riscv"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/2332" +host-os = "Linux Debian 12" +host-arch = "x86_64" +qemu-version = "8.2.3" +guest-os = "Bare metal" +guest-arch = "riscv64 or riscv32" +description = """When executing a bare metal kernel in semihosting mode with "argv" arguments provided through "-append" or "-semihostgin-config", recovering the arguments will read out-of-bound memory in the guest and often make the emulation crash through a hard fault.""" +reproduce = """1. Compile the simplest "kernel" in semihosting mode, e.g. test.c containing: + + `#include <stdio.h>` + + `#include <stdlib.h>` + + `int main(int argc, char *argv[])` + + `{ unsigned int i; printf("[+] Test OK!\\n"); for(i = 0; i < argc; i++){ printf("Arg %d is '%s'\\n", i, argv[i]); } return 0; }` +2. One can compile the previous example under Debian with + + `riscv64-unknown-elf-gcc -static -fPIC -march=rv64imac -mabi=lp64 -specs=picolibc.specs --crt0=semihost --oslib=semihost -Triscv_layout.ld test.c -o test` + + This supposes the bare metal cross-toolchain `binutils-riscv64-unknown-elf` to be installed, as well as the standard library picolibc `picolibc-riscv64-unknown-elf` that supports semihosting. + + The `riscv_layout`.ld file contains: + + `__flash = 0x80000000; __flash_size = 0x00080000; __ram = 0x80080000; __ram_size = 0x40000; __stack_size = 1k; INCLUDE picolibc.ld` +3. Execute the command line: + - `qemu-system-riscv64 -semihosting-config enable=on -monitor none -serial none -nographic -machine sifive_u,accel=tcg -no-reboot -bios none -kernel /tmp/test -append "10 20"` +4. Observe the following as an example of the bug: + + `[+] Test OK! Arg rg A is '/tmp/test0' Arg Arg 2 is 'RISCV fault x0 -2146959259z' ero 0x0000000000000000 x1 ra 0x0000000080000e94 x2 sp 0x00000000800bfea0 x3 gp 0x0000000080080820 x4 tp 0x0000000080080028 x5 t0 0x00000000800019a2 x6 t1 0x000000000000002a x7`""" +additional = """The same bug seems to affect risv32 and riscv64 system emulators. The semihosting part seems to work well when there is no access to the "argv" arguments.""" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/2422.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/2422.toml new file mode 100644 index 00000000..f7f52a2d --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/2422.toml @@ -0,0 +1,79 @@ +id = 2422 +title = "`vill` not set after reserved `vsetvli` instruction usage" +state = "opened" +created_at = "2024-07-03T10:48:26.180Z" +closed_at = "n/a" +labels = ["target: riscv"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/2422" +host-os = "Ubuntu 24.04" +host-arch = "x86-64" +qemu-version = "qemu-riscv64 version 9.0.50 (v9.0.0-1866-gff6d8490e3)" +guest-os = "n/a" +guest-arch = "n/a" +description = """The ["AVL encoding" section of the RISC-V V Spec 1.0](https://github.com/riscv/riscv-isa-manual/blob/main/src/v-st-ext.adoc#avl-encoding) states that a `vsetvli x0,x0,...` that changes VLMAX is reserved and "Implementations may set `vill`" in this case. QEMU does not set `vill` in this case. Doing so would help detect code generation issues and non-portable code. + +Here is the quote from the spec: + +> When `rs1=x0` and `rd=x0`, the instruction operates as if the current +> vector length in `vl` is used as the AVL, and the resulting value is +> written to `vl`, but not to a destination register. This form can +> only be used when VLMAX and hence `vl` is not actually changed by the +> new SEW/LMUL ratio. Use of the instruction with a new SEW/LMUL ratio +> that would result in a change of VLMAX is reserved. +> Use of the instruction is also reserved if `vill` was 1 beforehand. +> Implementations may set `vill` in either case. + +Note, I have not checked QEMU's behaviour for the other case mentioned in the quote: "Use of the instruction is also reserved if `vill` was 1 beforehand".""" +reproduce = """1. Create `test.c` +```C +#include <assert.h> + +/* Position of vill in vtype. */ + +#define VILL_BIT (__riscv_xlen - 1) + +/* Return true if vill is 1. */ + +int vill_set_p () +{ + __UINT64_TYPE__ vtype; + asm volatile ("csrr %0, vtype" : "=r"(vtype)); + + return (vtype >> VILL_BIT) & 1; +} + +/* Return true if vill is 0. */ + +int vill_clear_p () +{ + return !vill_set_p (); +} + +int main () +{ + int vl; + + assert (vill_clear_p ()); + + /* Valid: vl = VLMAX. */ + asm volatile ("vsetvli %0,zero,e64,m8,ta,ma\\n" : "=r"(vl)); + assert (vill_clear_p ()); + + /* Valid: vl and VLMAX not changed. */ + asm volatile ("vsetvli zero,zero,e64,m8,ta,ma\\n"); + assert (vill_clear_p ()); + + /* Reserved: Reduce VLMAX. */ + asm volatile ("vsetvli zero,zero,e64,m1,ta,ma\\n"); + assert (vill_set_p ()); + + return 0; +} +``` +2. Build `test.c` with `riscv32-unknown-elf-gcc test.c -o test -march=rv64gcv -mabi=lp64d` +3. Run qemu with `qemu-riscv64 -cpu rv64,v=true test` +4. The final assertion fails because executing the reserved `vsetvli` did not set `vill` +``` +assertion "vill_set_p ()" failed: file "test.c", line 40, function: main +```""" +additional = "n/a" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/2462.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/2462.toml new file mode 100644 index 00000000..8c6bbb4b --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/2462.toml @@ -0,0 +1,47 @@ +id = 2462 +title = "QEMU SIFIVE reading from stdin hangs" +state = "closed" +created_at = "2024-07-27T13:19:31.620Z" +closed_at = "2024-08-13T02:30:02.602Z" +labels = ["target: riscv"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/2462" +host-os = "Ubuntu23" +host-arch = "x86" +qemu-version = "git from july26, 2024" +guest-os = "n/a" +guest-arch = "n/a" +description = """I have a simple test program (C and ASM) that reads from stdin. When i was using the qemu provided by Ubuntu, QEMU emulator version 8.0.4 (Debian 1:8.0.4+dfsg-1ubuntu3.23.10.5), my test was working, and was able to read bytes from stdin. + +Using the latest Qemu from git, breaks my test. I can still print, but now reading hangs, like its always waiting for input but never getting it. + +My guess is that this commit breaks my code: +https://github.com/qemu/qemu/commit/6ee7ba1b8a10bd8eb1d3b918eaaf9f832a51adb4 + +Before the above commit, `qemu_chr_fe_set_handlers` was being called, and that is what allowed the default behavior of reading from stdin is on by default? + +from sifive_uart.c +``` + qemu_chr_fe_set_handlers(&s->chr, sifive_uart_can_rx, sifive_uart_rx, + sifive_uart_event, sifive_uart_be_change, s, + NULL, true); +```""" +reproduce = """1. compile simple C program that calls `read` reading a single byte from stdin +2. do not initialize UART options +3. run in QEMU, send input, hangs.""" +additional = """Other examples online, like riscv-probe, use a uart init function like below: +``` +static void sifive_uart_init() +{ + uart = (int *)(void *)getauxval(SIFIVE_UART0_CTRL_ADDR); + uint32_t uart_freq = getauxval(UART0_CLOCK_FREQ); + uint32_t baud_rate = getauxval(UART0_BAUD_RATE); + uint32_t divisor = uart_freq / baud_rate - 1; + uart[UART_REG_DIV] = divisor; + uart[UART_REG_TXCTRL] = UART_TXEN; + uart[UART_REG_RXCTRL] = UART_RXEN; + uart[UART_REG_IE] = 0; +} +``` + +However, when I was using QEMU 8.0.4, i did not have to write a function like above to init UART, because stdin and stdout were working out of the box. +Below is my C and ASM:""" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/2463.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/2463.toml new file mode 100644 index 00000000..58f7cf96 --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/2463.toml @@ -0,0 +1,19 @@ +id = 2463 +title = "allow sifive_e to use more RAM" +state = "closed" +created_at = "2024-07-27T16:38:41.790Z" +closed_at = "2024-08-13T02:27:24.981Z" +labels = ["target: riscv"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/2463" +host-os = "Ubuntu23" +host-arch = "x86" +qemu-version = "git july 26 2024" +guest-os = "none, bare-metal, no-libc" +guest-arch = "riscv rv32g" +description = """For users like me that are still learning RISC bare-metal assembly, searching online you will find many tutorials and examples using sifive_e with Qemu, so it is the easy way to get started. + +I quickly ran into crashes with my tests because I did not realize that sifive_e is limited to 16K of RAM. +I realize the 16K limit is hard coded so that it matches the real hardware, but that makes it very hard to run a variety of tests.""" +reproduce = "n/a" +additional = """My fork of Qemu changes sifive_e to allow 256MB. +https://github.com/panjea/qemu/commit/97cb89d778ebe3407a969b8282e2e7adb4be2971""" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/2467.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/2467.toml new file mode 100644 index 00000000..96866d5e --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/2467.toml @@ -0,0 +1,43 @@ +id = 2467 +title = "OpenSBI 1.5 packaged in QEMU 9.0.50 fails to support poweroff with 'spike' board" +state = "closed" +created_at = "2024-07-29T22:17:18.700Z" +closed_at = "2024-12-27T17:06:30.852Z" +labels = ["target: riscv"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/2467" +host-os = "Ubuntu 24.10" +host-arch = "amd64" +qemu-version = "9.0.50 (v9.0.0-2711-g93b799fafd)" +guest-os = "n/a" +guest-arch = "n/a" +description = "n/a" +reproduce = """Build upstream U-Boot: + +- git clone https://source.denx.de/u-boot/u-boot.git +- cd u-boot +- make qemu-riscv64_smode_defconfig +- CROSS_COMPILE=riscv64-linux-gnu- make + +Run U-Boot and execute poweroff command + +- qemu-system-riscv64 -kernel u-boot.bin +- poweroff + +Poweroff fails. + +When building upstream OpenSBI v1.5 with + +- git clone https://github.com/riscv-software-src/opensbi.git +- cd opensbi +- git reset --hard v1.5 +- CROSS_COMPILE=riscv64-linux-gnu- make PLATFORM=generic + +and then running + +- qemu-system-riscv64 -bios fw_dynamic.bin -kernel u-boot.bin +- poweroff + +poweroff succeeds. + +Please, distribute an unpatched OpenSBI v1.5 with QEMU.""" +additional = "n/a" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/2486.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/2486.toml new file mode 100644 index 00000000..809650d1 --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/2486.toml @@ -0,0 +1,22 @@ +id = 2486 +title = "RISC-V Regression: QEMU_CPU=f=false,zfinx=true gives misleading error message" +state = "closed" +created_at = "2024-08-06T18:03:57.819Z" +closed_at = "2024-10-03T09:31:50.207Z" +labels = ["target: riscv"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/2486" +host-os = "Ubuntu 22.04.4 LTS (Jammy)" +host-arch = "x86" +qemu-version = "v9.1.0-rc0" +guest-os = "QEMU user mode" +guest-arch = "RISC-V" +description = """The f extension looks like it should be toggle-able using qemu_cpu since it doesn't throw error messages when specified. +Disabling the extension using f=false does not actually disable it as shown by the zfinx error message. +Eg. Unsupported extension is explicitly rejected +``` +> QEMU_CPU=rv64,j=false ./qemu-riscv64 test.out +qemu-riscv64: can't apply global rv64-riscv-cpu.j=false: Property 'rv64-riscv-cpu.j' not found +```""" +reproduce = """1. Compile any riscv binary like: `int main() {}` +2. Execute using `QEMU_CPU=rv64,zfinx=true,f=false ./qemu-riscv64 test.out`""" +additional = "n/a" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/2543.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/2543.toml new file mode 100644 index 00000000..d437ea94 --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/2543.toml @@ -0,0 +1,21 @@ +id = 2543 +title = "QEMU UEFI for riscv64 failed to load my DIY bootloader due to unknown reason" +state = "closed" +created_at = "2024-08-28T15:29:45.182Z" +closed_at = "2024-09-02T13:19:28.708Z" +labels = ["target: riscv"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/2543" +host-os = "Fedora 40" +host-arch = "x64" +qemu-version = "9.1.0" +guest-os = "my DIY bootloader" +guest-arch = "RISC-V" +description = "n/a" +reproduce = """1. [ProblematicBootLoader.zip](/uploads/21fcff0052dc2dd95bf4bba3f6ec8fb8/ProblematicBootLoader.zip) unpack this zipped file,create a fat.img which contains FAT32 file system,and then move the unpacked file in the zip to /EFI/BOOT/bootriscv64.efi.After that using xorriso to pack it. +2. Load the cdrom in libvirt(virt-manager) using SCSI/USB +3. Then wait for seconds and error will show(I don't why STORE_ACCESS_PAGE_FAULT occurs)""" +additional = """My full source code is in https://github.com/TYDQSoft/UEFIPascalOS. + +You can get the instruction in the github to compile this problematic bootloader for testing. + +x64,AArch64 was tested successfully,but riscv64 is always problematic in evert test times.""" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/2558.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/2558.toml new file mode 100644 index 00000000..4af6bb19 --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/2558.toml @@ -0,0 +1,73 @@ +id = 2558 +title = "riscv64: Ubuntu doesn't boot with EDK2, although it boots with u-boot" +state = "closed" +created_at = "2024-09-05T07:14:00.052Z" +closed_at = "2024-09-11T09:33:37.923Z" +labels = ["target: riscv"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/2558" +host-os = "macOS 14.6.1" +host-arch = "x86_64" +qemu-version = "9.1.0" +guest-os = "Ubuntu 24.04" +guest-arch = "riscv64" +description = """Ubuntu doesn't boot with `edk2-riscv-code.fd`: + +```bash +wget https://cloud-images.ubuntu.com/noble/20240822/noble-server-cloudimg-riscv64.img + +qemu-system-riscv64 -M virt -m 2048 -nographic -hda noble-server-cloudimg-riscv64.img \\ + -drive if=pflash,format=raw,readonly=on,file=/usr/local/share/qemu/edk2-riscv-code.fd +``` + + +``` +Loading Linux 6.8.0-41-generic ... +Loading initial ramdisk ... +InstallProtocolInterface: 4006C0C1-FCB3-403E-996D-4A6C8724E06D FDB3F3C8 +InstallProtocolInterface: 09576E91-6D3F-11D2-8E39-00A0C969723B FDB3F380 +[Security] 3rd party image[0] can be loaded after EndOfDxe: MemoryMapped(0x2,0xF9CC4000,0xFC194000). +InstallProtocolInterface: 5B1B31A1-9562-11D2-8E3F-00A0C969723B FF29C2C0 +Loading driver at 0x000F732C000 EntryPoint=0x000F817FEA6 +InstallProtocolInterface: BC62157E-3E33-4FEC-9920-2D3B36D750DF FF29CC18 +ProtectUefiImageCommon - 0xFF29C2C0 + - 0x00000000F732C000 - 0x0000000002598000 +SetUefiImageMemoryAttributes - 0x00000000F732C000 - 0x0000000000001000 (0x0000000000004000) +SetUefiImageMemoryAttributes - 0x00000000F732D000 - 0x0000000000FFF000 (0x0000000000020000) +SetUefiImageMemoryAttributes - 0x00000000F832C000 - 0x0000000001598000 (0x0000000000004000) +TimerDriverSetTimerPeriod(0x0) +SetUefiImageMemoryAttributes - 0x00000000FFEC7000 - 0x000000000000C000 (0x0000000000000000) +SetUefiImageMemoryAttributes - 0x00000000FFEBC000 - 0x000000000000B000 (0x0000000000000000) +SetUefiImageMemoryAttributes - 0x00000000FFEAC000 - 0x0000000000010000 (0x0000000000000000) +SetUefiImageMemoryAttributes - 0x00000000FFEA1000 - 0x000000000000B000 (0x0000000000000000) +SetUefiImageMemoryAttributes - 0x00000000FFE84000 - 0x000000000001D000 (0x0000000000000000) +SetUefiImageMemoryAttributes - 0x00000000FFE79000 - 0x000000000000B000 (0x0000000000000000) +SetUefiImageMemoryAttributes - 0x00000000FFE6E000 - 0x000000000000B000 (0x0000000000000000) +SetUefiImageMemoryAttributes - 0x00000000FFE63000 - 0x000000000000B000 (0x0000000000000000) +SetUefiImageMemoryAttributes - 0x00000000FFE59000 - 0x000000000000A000 (0x0000000000000000) +(hangs here) +``` + +The same disk image still boots when `uboot.elf` is specified as the kernel image: + +```bash +wget https://github.com/lima-vm/u-boot-qemu-mirror/releases/download/2023.07%2Bdfsg-1/qemu-riscv64_smode_uboot.elf + +qemu-system-riscv64 -M virt -m 2048 -nographic -hda noble-server-cloudimg-riscv64.img \\ + -kernel qemu-riscv64_smode_uboot.elf +``` + +``` +Loading Linux 6.8.0-41-generic ... +Loading initial ramdisk ... +syscon-poweroff poweroff: pm_power_off already claimed for sbi_srst_power_off +-.mount +etc-machine\\x2did.mount +systemd-journald.service +dev-hugepages.mount +... +Ubuntu 24.04 LTS ubuntu ttyS0 + +ubuntu login: +```""" +reproduce = """See above""" +additional = """""" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/2573.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/2573.toml new file mode 100644 index 00000000..9910cf49 --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/2573.toml @@ -0,0 +1,17 @@ +id = 2573 +title = "RISC-V: Executing floating point instruction in VS mode under KVM acceleration leads to crash" +state = "opened" +created_at = "2024-09-15T21:37:06.474Z" +closed_at = "n/a" +labels = ["target: riscv"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/2573" +host-os = "Ubuntu 24.10" +host-arch = "riscv64" +qemu-version = "9.0.2+ds-4ubuntu5" +guest-os = "n/a" +guest-arch = "riscv64" +description = """Executing `fcvt.d.w fa5,a5` in VS mode leads to crash.""" +reproduce = """1. Download the Ubuntu 24.10 image https://cdimage.ubuntu.com/ubuntu-server/daily-preinstalled/current/oracular-preinstalled-server-riscv64.img.xz +2. On your amd64 system launch a VM using -accel tcg +3. Inside the VM launch a new VM using -accel kvm with the payload mentioned above""" +additional = """For more details see https://bugs.launchpad.net/ubuntu/+source/edk2/+bug/2077731""" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/2627.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/2627.toml new file mode 100644 index 00000000..8a988d01 --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/2627.toml @@ -0,0 +1,15 @@ +id = 2627 +title = "Possible incorrect exception order in RISC-V" +state = "closed" +created_at = "2024-10-18T14:31:32.235Z" +closed_at = "2025-03-06T06:45:22.557Z" +labels = ["TestCase", "target: riscv"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/2627" +host-os = "n/a" +host-arch = "n/a" +qemu-version = "n/a" +guest-os = "n/a" +guest-arch = "n/a" +description = "n/a" +reproduce = "n/a" +additional = "n/a" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/2655.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/2655.toml new file mode 100644 index 00000000..3896c96a --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/2655.toml @@ -0,0 +1,49 @@ +id = 2655 +title = "A problem in target/riscv/vector_helper.c: vext_ldff()" +state = "opened" +created_at = "2024-11-05T12:06:06.749Z" +closed_at = "n/a" +labels = ["TCG plugins", "target: riscv"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/2655" +host-os = "n/a" +host-arch = "n/a" +qemu-version = "9.1" +guest-os = "n/a" +guest-arch = "n/a" +description = """I‘m confused about a behavior in function vext_ldff() in target/riscv/vector_helper.c: +``` +static inline void +vext_ldff(...) +{ +... + for (i = env->vstart; i < env->vl; i++) { +... + if (i == 0) { + probe_pages(env, addr, nf << log2_esz, ra, MMU_DATA_LOAD); + } else { +... + flags = probe_access_flags(env, addr, offset, MMU_DATA_LOAD, + mmu_index, true, &host, 0); +... + if (flags & ~TLB_WATCHPOINT) { + vl = i; + goto ProbeSuccess; + } +... + } + } +ProbeSuccess: +... +} +``` +If the current instruction has a memory callback by plugin, the function probe_access_flags() will return TLB_MMIO when the page is exist. + +In this case, the function will always set vl to 1, goto ProbeSuccess, and only load the first element. Does it meet expectations? + +This problem occurred in both linux-user mode and full-system mode. + +Maybe we can add extra parameter to probe_access_flags(), in order to change the behavior of inner functions.""" +reproduce = """1. Make a binary with instruction vle(x)ff.v, what I am using is https://github.com/chipsalliance/riscv-vector-tests. +2. Write a plugin to add memory callbacks. +3. Observe the behavior of the function.""" +additional = "n/a" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/2672.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/2672.toml new file mode 100644 index 00000000..5d9ce208 --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/2672.toml @@ -0,0 +1,28 @@ +id = 2672 +title = "Skipping a jal instruction in riscv64 baremetal emulation" +state = "closed" +created_at = "2024-11-13T10:22:34.551Z" +closed_at = "2024-11-16T22:05:19.664Z" +labels = ["Closed::Invalid", "target: riscv"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/2672" +host-os = "openSUSE Leap 15.5" +host-arch = "x86_64, Intel(R) Core(TM) i5-10400T CPU @ 2.00GHz" +qemu-version = "QEMU emulator version 9.0.50" +guest-os = "baremetal" +guest-arch = "riscv64" +description = """The binary contains an illegal instruction after a jal. Normally the jal should be taken but the illegal instructi[aia_tests2.elf](/uploads/b8b646b01d7bcc15b51c36ddbffacac7/aia_tests2.elf)on next to the jal is executed generating and illegal instruction exception: + +``` +0x80006070: 00200513 addi a0,zero,2 +0x80006074: 89cff0ef jal ra,-3940 # 0x80005110 + +---------------- +IN: _Z15int_switch_modehh +0x80006078: 0000 illegal + +---------------- +IN: mtvec_table +0x8000e600: 64d0406f j 20044 # 0x8001344c +```""" +reproduce = """1. Execute the same binary with QEMU.""" +additional = """""" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/2673.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/2673.toml new file mode 100644 index 00000000..9cd3e57c --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/2673.toml @@ -0,0 +1,15 @@ +id = 2673 +title = "qemu-system-riscv32 does not pass official riscv-tests" +state = "opened" +created_at = "2024-11-13T11:30:53.846Z" +closed_at = "n/a" +labels = ["target: riscv"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/2673" +host-os = "windows 11 23H2 WSL" +host-arch = "x86" +qemu-version = "QEMU emulator version 6.2.0 (Debian 1:6.2+dfsg-2ubuntu6.24)" +guest-os = "windows 11 23H2 WSL" +guest-arch = "x86" +description = """I run riscv-tests using the above command and find qemu raises Illegalinstruction when `sret` in the machine mode.Therefore qemu cannot pass the rv32ui-v-and test.""" +reproduce = "n/a" +additional = """The tests https://github.com/riscv-software-src/riscv-tests""" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/2730.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/2730.toml new file mode 100644 index 00000000..2de4f0c7 --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/2730.toml @@ -0,0 +1,22 @@ +id = 2730 +title = "riscv Calculation error！" +state = "opened" +created_at = "2024-12-19T10:43:08.727Z" +closed_at = "n/a" +labels = ["target: riscv"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/2730" +host-os = "n/a" +host-arch = "n/a" +qemu-version = "n/a" +guest-os = "n/a" +guest-arch = "n/a" +description = "n/a" +reproduce = """The following command will produce an error output + +```asm +\tlui s0, 0x80000 +\tlw a1, -48(s0) +``` +The value of a1 becomes 0xffffffff +""" +additional = "n/a" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/2763.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/2763.toml new file mode 100644 index 00000000..29ce6297 --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/2763.toml @@ -0,0 +1,34 @@ +id = 2763 +title = "RISC-V APLIC emulation: interrupt pending state of direct-delivery level-triggered interrupts is wrong after masking" +state = "opened" +created_at = "2025-01-05T14:12:33.833Z" +closed_at = "n/a" +labels = ["target: riscv"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/2763" +host-os = "Debian" +host-arch = "x86_64" +qemu-version = "master at 9ee90cfc25747ab25c7da31a50f167fc5122e20e" +guest-os = "n/a" +guest-arch = "riscv64, virt target, `aia=aplic" +description = """According to the APLIC specification, the interrupt pending state of a level-triggered interrupt in direct delivery mode should always match the (rectified) input signal: + +> When an interrupt domain is in direct delivery mode, the pending bit for a level-sensitive source is always just a copy of the rectified input value. + +(From Section 4.7 "Precise effects on interrupt-pending bits" of the specification. See also the more detailed paragraph starting with "If the + source mode is Level1 or Level0 and the interrupt domain is configured in direct delivery mode [...]".) + +However, **this is not true in Qemu's emulation**. In particular, in some situations, **a level-triggered interrupt in direct delivery mode can be raised even though the rectified input signal is off**.""" +reproduce = """1. Set `-machine virt,acpi=off,aia=aplic` to use AIA without IMSIC. +2. Program APLIC to direct delivery. Program some level triggered interrupt (e.g., an interrupt of a PCIe ECAM controller). +4. Wait until the IRQ is raised by a device (i.e., `claimi` returns the IRQ). +5. Mask the interrupt by writing to `clrie`. +6. Clear the interrupt at the device level. +7. The state of Qemu's APLIC registers is now: + ``` + Rectified input = 0 (correct) + Pending = 1 (incorrect) + topi = 0 (correct) + ``` + +Furthermore, if `setie` is written to unmask the IRQ in this situation, the IRQ is raised (in `topi` / `claimi`) despite the signal being off.""" +additional = "n/a" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/2787.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/2787.toml new file mode 100644 index 00000000..74c34451 --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/2787.toml @@ -0,0 +1,25 @@ +id = 2787 +title = "Opentitan timer layout incorrect" +state = "opened" +created_at = "2025-01-21T14:49:55.743Z" +closed_at = "n/a" +labels = ["target: riscv"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/2787" +host-os = "Ubuntu 22.04.3" +host-arch = "x86" +qemu-version = "9.1.1" +guest-os = "Bare Metal" +guest-arch = "riscv32" +description = """It looks as if some of the timer register offsets here are incorrect: + +https://gitlab.com/qemu-project/qemu/-/blob/master/hw/timer/ibex_timer.c?ref_type=heads#L37 + +Compare with: + +https://opentitan.org/book/hw/ip/rv_timer/doc/registers.html + +I suspect they're out of date. The documentation link on line 7 is not working anymore - the current documentation URL for Opentitan is the one just given. + +It might also make sense to rename this file `opentitan_timer.c`, instead of `ibex_timer.c`. The timer is an Opentitan hardware IP block, rather than a feature of the Ibex CPU.""" +reproduce = "n/a" +additional = "n/a" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/2796.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/2796.toml new file mode 100644 index 00000000..9d80b41a --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/2796.toml @@ -0,0 +1,17 @@ +id = 2796 +title = "Opentitan Timer ignores COMPARE_UPPER0/COMPARE_LOWER0" +state = "opened" +created_at = "2025-01-27T22:06:46.621Z" +closed_at = "n/a" +labels = ["target: riscv"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/2796" +host-os = "Ubuntu 22.04.3" +host-arch = "x86" +qemu-version = "9.1.1" +guest-os = "Bare Metal" +guest-arch = "riscv32" +description = """In a bare metal application, running on an emulated Opentitan board, if you set a timer interrupt threshold by writing to `rv_timer.COMPARE_UPPER0` and `rv_timer.COMPARE_LOWER0` before writing to `rv_timer.CTRL` to start the timer, then the interrupt does not fire. If you write to the `COMPARE_*` registers *after* starting the timer by writing to `CTRL`, then the interrupt fires correctly. + +I think the explanation is that [ibex_timer_update_irqs](https://gitlab.com/qemu-project/qemu/-/blob/master/hw/timer/ibex_timer.c?ref_type=heads#L61) has an early return if `rv_timer.CTRL` is not set. As a result, although writes to `COMPARE_*` always call `ibex_timer_update_irqs`, they don't have their intended side-effects before `CTRL` is unset.""" +reproduce = """Write to `rv_timer.COMPARE_UPPER0` and `rv_timer.COMPARE_LOWER0` before you have set `rv_timer.CTRL`. Observe that no timer interrupt occurs.""" +additional = "n/a" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/2808.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/2808.toml new file mode 100644 index 00000000..adab4ee4 --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/2808.toml @@ -0,0 +1,15 @@ +id = 2808 +title = "Links to the RISC-V IOMMU Architecture Specification are broken in the docs" +state = "closed" +created_at = "2025-02-12T23:21:39.997Z" +closed_at = "2025-04-02T10:53:40.673Z" +labels = ["Bite Sized", "Documentation", "target: riscv"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/2808" +host-os = "n/a" +host-arch = "n/a" +qemu-version = "n/a" +guest-os = "n/a" +guest-arch = "n/a" +description = "n/a" +reproduce = "n/a" +additional = "n/a" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/2828.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/2828.toml new file mode 100644 index 00000000..9a84b718 --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/2828.toml @@ -0,0 +1,15 @@ +id = 2828 +title = "Potential issues at Interrupt filtering and virtual interrupts for supervisor level (RISC-V AIA)" +state = "opened" +created_at = "2025-02-21T19:12:42.176Z" +closed_at = "n/a" +labels = ["target: riscv"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/2828" +host-os = "n/a" +host-arch = "n/a" +qemu-version = "n/a" +guest-os = "n/a" +guest-arch = "n/a" +description = """I am working on RISC-V Advanced Interrupt Architecture (AIA) compliance tests for our RISC-V core. These tests pass on our hardware implementation but fail when running on QEMU. There are several points where the tests fail while running in QEMU:""" +reproduce = "n/a" +additional = "n/a" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/2885.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/2885.toml new file mode 100644 index 00000000..c2410c11 --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/2885.toml @@ -0,0 +1,15 @@ +id = 2885 +title = "Unable to increase CPU's for existing RISCV VM" +state = "opened" +created_at = "2025-03-27T11:32:57.656Z" +closed_at = "n/a" +labels = ["target: riscv"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/2885" +host-os = "n/a" +host-arch = "n/a" +qemu-version = "n/a" +guest-os = "n/a" +guest-arch = "n/a" +description = "n/a" +reproduce = "n/a" +additional = "n/a" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/2930.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/2930.toml new file mode 100644 index 00000000..84b980a3 --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/2930.toml @@ -0,0 +1,15 @@ +id = 2930 +title = "Versions after QEMU9.0 cannot boot vxworks on sifive_u" +state = "opened" +created_at = "2025-04-24T02:52:34.375Z" +closed_at = "n/a" +labels = ["target: riscv", "workflow::Needs Info"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/2930" +host-os = "n/a" +host-arch = "n/a" +qemu-version = "n/a" +guest-os = "n/a" +guest-arch = "n/a" +description = "n/a" +reproduce = "n/a" +additional = "n/a" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/2957.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/2957.toml new file mode 100644 index 00000000..a579cc8f --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/2957.toml @@ -0,0 +1,36 @@ +id = 2957 +title = "qemu-system-riscv32: Some ROM regions are overlapping" +state = "opened" +created_at = "2025-05-08T08:52:12.843Z" +closed_at = "n/a" +labels = ["target: riscv"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/2957" +host-os = "Ubuntu 24.04.2 LTS" +host-arch = "x86-64" +qemu-version = "8.2.2" +guest-os = "Buildroot" +guest-arch = "RV32" +description = """Booting the image produces: +``` +qemu-system-riscv32: Some ROM regions are overlapping +These ROM regions might have been loaded by direct user request or by default. +They could be BIOS/firmware images, a guest kernel, initrd or some other file loaded into guest memory. +Check whether you intended to load all this guest code, and whether it has been built to load to the correct addresses. + +The following two regions overlap (in the memory address space): + output/images/fw_jump.elf ELF program header segment 1 (addresses 0x0000000000000000 - 0x00000000000278cc) + mrom.reset (addresses 0x0000000000001000 - 0x0000000000001028) +```""" +reproduce = """1. `make qemu_riscv32_virt_defconfig` +2. `make` +3. `qemu-system-riscv32 \\ +-M virt -nographic \\ +-bios output/images/fw_jump.elf \\ +-kernel output/images/Image \\ +-append "root=/dev/vda ro" \\ +-drive file=output/images/rootfs.ext2,format=raw,id=hd0 \\ +-device virtio-blk-device,drive=hd0 \\ +-netdev user,id=net0 -device virtio-net-device,netdev=net0`""" +additional = """Changing `-bios output/images/fw_jump.elf` to `-bios output/images/fw_jump.bin` or `-bios output/images/fw_dynamic.bin` resolves the issue. + +Similar issue observed elsewhere, e.g. here [https://github.com/riscv-software-src/opensbi/issues/372](https://github.com/riscv-software-src/opensbi/issues/372)""" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/435.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/435.toml new file mode 100644 index 00000000..a80a8cf9 --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/435.toml @@ -0,0 +1,15 @@ +id = 435 +title = "RISC-V: Support more cores" +state = "closed" +created_at = "2021-06-18T16:33:14.063Z" +closed_at = "2022-01-08T17:37:01.747Z" +labels = ["kind::Feature Request", "target: riscv", "workflow::In Progress"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/435" +host-os = "n/a" +host-arch = "n/a" +qemu-version = "n/a" +guest-os = "n/a" +guest-arch = "n/a" +description = "n/a" +reproduce = "n/a" +additional = "n/a" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/47.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/47.toml new file mode 100644 index 00000000..b4df4c19 --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/47.toml @@ -0,0 +1,15 @@ +id = 47 +title = "A typo in target/riscv/insn32-64.decode" +state = "closed" +created_at = "2021-04-14T17:02:00.542Z" +closed_at = "2021-06-16T02:49:19.369Z" +labels = ["kind::Bug", "target: riscv", "workflow::In Progress"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/47" +host-os = "n/a" +host-arch = "n/a" +qemu-version = "n/a" +guest-os = "n/a" +guest-arch = "n/a" +description = "n/a" +reproduce = "n/a" +additional = "n/a" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/493.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/493.toml new file mode 100644 index 00000000..438ad6f5 --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/493.toml @@ -0,0 +1,19 @@ +id = 493 +title = "RISC-V: Setting mtimecmp to -1 immediately triggers an interrupt" +state = "closed" +created_at = "2021-07-21T09:45:58.217Z" +closed_at = "2021-09-01T09:56:33.052Z" +labels = ["target: riscv", "workflow::In Progress"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/493" +host-os = "Arch Linux" +host-arch = "x86" +qemu-version = "6.0.50" +guest-os = "Bare metal" +guest-arch = "RISC-V" +description = """When setting mtimecmp to -1, which should set a timer infinitely far in the future, a timer interrupt is triggered immediately. This happens for most values over 2^61. It is the same for both 32-bit and 64-bit, and for M-mode writing to mtimecmp directly and S-mode using OpenSBI. + +I have looked through the source code, and the problem is in the function `sifive_clint_write_mtimecmp`, in the file `/hw/intc/sifive_clint.c`. First, the muldiv64 multiplies diff with 100, causing an overflow (at least for -M virt, other machines might use a different timebase_freq). Then, the unsigned `next` is passed to `timer_mod`, which takes a signed integer. In `timer_mod_ns_locked` the value is set to `MAX(next, 0)`, which means that if the MSB of `next` was set, the interrupt happens immediately. This means that it is impossible to set timers more than 2^63 nanoseconds in the future. + +This problem basically only affects programs which disable timer interrupts by setting the next one infinitely far in the future. However, the SBI doc specifically says that this is a valid approach, so it should be supported. Using the MSB doesn't work without changing code functionality in QEMU, but it should be sufficient to cap `next` at the maximum signed value.""" +reproduce = "n/a" +additional = "n/a" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/529.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/529.toml new file mode 100644 index 00000000..d21dd36a --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/529.toml @@ -0,0 +1,16 @@ +id = 529 +title = "qemu-system-riscv64 hard lockup on non-stdio serial output" +state = "closed" +created_at = "2021-08-16T19:26:07.538Z" +closed_at = "2022-01-07T07:54:06.481Z" +labels = ["Chardev", "device:virtio", "target: riscv"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/529" +host-os = "ArchLinux" +host-arch = "x86_64" +qemu-version = "6.0.0" +guest-os = "stock u-boot + Haiku (pre OS load)" +guest-arch = "n/a" +description = "n/a" +reproduce = "n/a" +additional = """u-boot pre-compiled firmware: (directory contains all git revisions, build flags, etc) +https://github.com/haiku/firmware/tree/master/u-boot/riscv64/qemu""" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/53.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/53.toml new file mode 100644 index 00000000..5bad7018 --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/53.toml @@ -0,0 +1,15 @@ +id = 53 +title = "RISC-V Disassembler/translator instruction decoding disagreement" +state = "closed" +created_at = "2021-04-30T10:10:18.891Z" +closed_at = "2021-05-05T21:44:20.555Z" +labels = ["Launchpad", "target: riscv"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/53" +host-os = "n/a" +host-arch = "n/a" +qemu-version = "n/a" +guest-os = "n/a" +guest-arch = "n/a" +description = "n/a" +reproduce = "n/a" +additional = "n/a" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/585.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/585.toml new file mode 100644 index 00000000..4428bd95 --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/585.toml @@ -0,0 +1,15 @@ +id = 585 +title = "mret trigger exception when pmp equals false" +state = "closed" +created_at = "2021-08-31T08:13:47.719Z" +closed_at = "2022-01-13T07:50:49.514Z" +labels = ["target: riscv"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/585" +host-os = "n/a" +host-arch = "n/a" +qemu-version = "n/a" +guest-os = "n/a" +guest-arch = "n/a" +description = "n/a" +reproduce = "n/a" +additional = "n/a" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/639.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/639.toml new file mode 100644 index 00000000..ba051ef6 --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/639.toml @@ -0,0 +1,15 @@ +id = 639 +title = "Crash using riscv.shakti.cclass.soc device" +state = "closed" +created_at = "2021-09-26T16:05:05.534Z" +closed_at = "2021-10-07T17:25:07.361Z" +labels = ["target: riscv"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/639" +host-os = "n/a" +host-arch = "n/a" +qemu-version = "n/a" +guest-os = "n/a" +guest-arch = "n/a" +description = "n/a" +reproduce = "n/a" +additional = "n/a" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/783.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/783.toml new file mode 100644 index 00000000..3bf65a3b --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/783.toml @@ -0,0 +1,15 @@ +id = 783 +title = "risc-v: provide CPU without MMU" +state = "closed" +created_at = "2021-12-18T09:58:21.547Z" +closed_at = "2022-02-01T06:27:06.205Z" +labels = ["kind::Feature Request", "target: riscv", "workflow::Needs Info"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/783" +host-os = "n/a" +host-arch = "n/a" +qemu-version = "n/a" +guest-os = "n/a" +guest-arch = "n/a" +description = "n/a" +reproduce = "n/a" +additional = """""" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/836.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/836.toml new file mode 100644 index 00000000..d8599736 --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/836.toml @@ -0,0 +1,93 @@ +id = 836 +title = "qemu-riscv32: Syscall LSEEK returns -14 (EFAULT)" +state = "closed" +created_at = "2022-01-23T23:50:47.356Z" +closed_at = "2022-01-28T14:15:32.539Z" +labels = ["linux-user", "target: riscv"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/836" +host-os = "Arch Linux" +host-arch = "x86_64" +qemu-version = "6.2.0" +guest-os = "Linux (user-mode)" +guest-arch = "riscv32" +description = """The lseek() system call returns -14 (EFAULT) if the file descriptor is correct, +which it should never do (According to the lseek(2) man page). + +Here is some demonstrative code: +``` +/* System Call numbers, according to https://github.com/riscv-software-src/riscv-pk/blob/master/pk/syscall.h */ +.set SYS_OPENAT, 0x38 +.set SYS_CLOSE, 0x39 +.set SYS_LSEEK, 0x3e +.set SYS_READ, 0x3f +.set SYS_WRITE, 0x40 +.set SYS_EXIT, 0x5d + +.set SEEK_CUR, 1 + +/* According to https://elixir.bootlin.com/linux/v5.16.2/C/ident/AT_FDCWD */ +.set AT_FDCWD, (-100) + +.section .text +.global _start +_start: + +/* Open the file with SYS_OPENAT, because SYS_OPEN does not exist on riscv32 for some reason. + Effectively: + s0 = open(argv[1], 0, 0644); */ +li a7, SYS_OPENAT +li a0, AT_FDCWD +lw a1, 8(sp) +li a2, 0 +li a3, 0644 +ecall + +/* Error checking. This succeeds. */ +blt a0, zero, unrelated_error + +mv s0, a0 + +/* The broken lseek() call. + Same also happens no matter the position in the file. + Effectively: + lseek(s0, 0, SEEK_CUR); */ +li a7, SYS_LSEEK +mv a0, s0 +li a1, 0 +li a2, SEEK_CUR +ecall + +/* XXX: lseek() returns -14 */ +blt a0, zero, lseek_error + +/* Close the file. */ +li a7, SYS_CLOSE +mv a0, s0 +ecall + +/* Error checking. This also succeeds. */ +blt a0, zero, unrelated_error + +/* exit(0); */ +li a7, SYS_EXIT +li a0, 0 +ecall + +/* exit(-return_value); */ +lseek_error: +li a7, SYS_EXIT +sub a0, zero, a0 +ecall + +unrelated_error: +li a7, SYS_EXIT +li a0, 128 +ecall +```""" +reproduce = """1. riscv32-unknown-linux-gnu-as test.s -o test.o +2. riscv32-unknown-linux-gnu-ld test.o +3. qemu-riscv32 ./a.out test +4. echo $? # This returns 14""" +additional = """Complete test setup: + +[test.tgz](/uploads/af68c9a5236628a9c6f31f2ce94e2f04/test.tgz)""" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/904.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/904.toml new file mode 100644 index 00000000..b9d0173c --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/904.toml @@ -0,0 +1,24 @@ +id = 904 +title = "RISC-V: Cannot set SEIP bit of mip csr register in M mode" +state = "closed" +created_at = "2022-03-12T08:49:54.479Z" +closed_at = "2022-04-22T10:54:01.743Z" +labels = ["target: riscv"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/904" +host-os = "Ubuntu" +host-arch = "x86_64" +qemu-version = "6.1.1" +guest-os = "No operating system" +guest-arch = "riscv64 imafc, riscv32 imafc" +description = """""" +reproduce = """1. run assembly instructions **in M mode**: +``` +not t0, x0 // set t0 to 0b11..11 +csrs mip, t0 // write mip with t0, mip registers are WARL(Write Any Values, Reads Legal Values) +csrr t1, mip // read value from mip to t1 +``` +2. GDB enters the command `display/z $t1` to see that the content of the t1 register is 0x466, which means that the SEIP bit of mip is not set. +3. According to page 47 of [riscv-privileged-20211203](https://github.com/riscv/riscv-isa-manual/releases/download/Priv-v1.12/riscv-privileged-20211203.pdf), `SEIP is writable in mip`. +4. According to page 81 of the same manual,`If implemented, SEIP is read-only in sip`. +5. However, the above code and results show that the SEIP bit of mip cannot be set by software **in M mode**.""" +additional = """""" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/942.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/942.toml new file mode 100644 index 00000000..1d286fd4 --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/942.toml @@ -0,0 +1,15 @@ +id = 942 +title = "No TPM support for riscv64 in QEMU" +state = "closed" +created_at = "2022-03-28T02:15:50.492Z" +closed_at = "2022-04-29T21:51:33.056Z" +labels = ["device: TPM", "kind::Feature Request", "target: riscv"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/942" +host-os = "n/a" +host-arch = "n/a" +qemu-version = "n/a" +guest-os = "n/a" +guest-arch = "n/a" +description = "n/a" +reproduce = "n/a" +additional = "n/a" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/955.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/955.toml new file mode 100644 index 00000000..6604ebe7 --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/955.toml @@ -0,0 +1,15 @@ +id = 955 +title = "support multiple UARTs in qemu-riscv-virt by default" +state = "closed" +created_at = "2022-04-01T17:29:27.846Z" +closed_at = "2022-11-06T22:46:40.569Z" +labels = ["target: riscv"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/955" +host-os = "n/a" +host-arch = "n/a" +qemu-version = "n/a" +guest-os = "n/a" +guest-arch = "n/a" +description = "n/a" +reproduce = "n/a" +additional = "n/a" diff --git a/gitlab/issues/target_riscv/host_missing/accel_missing/992.toml b/gitlab/issues/target_riscv/host_missing/accel_missing/992.toml new file mode 100644 index 00000000..6dd2395b --- /dev/null +++ b/gitlab/issues/target_riscv/host_missing/accel_missing/992.toml @@ -0,0 +1,28 @@ +id = 992 +title = "qemu-system-riscv64: Some ROM regions are overlapping When memory set <= 16" +state = "closed" +created_at = "2022-04-18T17:09:16.664Z" +closed_at = "2022-07-03T04:38:37.972Z" +labels = ["target: riscv"] +url = "https://gitlab.com/qemu-project/qemu/-/issues/992" +host-os = "Archlinux" +host-arch = "x86" +qemu-version = "QEMU emulator version 6.2.94 (v7.0.0-rc4) (built from master branch)" +guest-os = "none" +guest-arch = "risc-v" +description = """""" +reproduce = """1. Build the qemu +2. run `./build/riscv64-softmmu/qemu-system-riscv64 --nographic -machine virt -m 16` +3. got error message: +``` +qemu-system-riscv64: Some ROM regions are overlapping +These ROM regions might have been loaded by direct user request or by default. +They could be BIOS/firmware images, a guest kernel, initrd or some other file loaded into guest memory. +Check whether you intended to load all this guest code, and whether it has been built to load to the correct addresses. + +The following two regions overlap (in the memory address space): + /home/shiroko/Developments/qemu/build/pc-bios/opensbi-riscv64-generic-fw_dynamic.bin (addresses 0x0000000080000000 - 0x0000000080019b50) + fdt (addresses 0x0000000080000000 - 0x0000000080100000) +```""" +additional = """Using `./build/riscv64-softmmu/qemu-system-riscv64 --nographic -machine virt -m 17` could bootup and seen OpenSBI messages. +This problem appears on qemu-system-riscv32 too.""" |