1 files changed, 67 insertions, 0 deletions
diff --git a/results/classifier/zero-shot/118/TCG-arm/2585 b/results/classifier/zero-shot/118/TCG-arm/2585
new file mode 100644
index 00000000..f9c63b54
--- /dev/null
+++ b/results/classifier/zero-shot/118/TCG-arm/2585
@@ -0,0 +1,67 @@
+TCG: 0.935
+debug: 0.881
+arm: 0.848
+boot: 0.828
+device: 0.822
+architecture: 0.817
+peripherals: 0.802
+network: 0.725
+mistranslation: 0.718
+kernel: 0.618
+socket: 0.614
+graphic: 0.603
+semantic: 0.548
+i386: 0.540
+performance: 0.528
+PID: 0.516
+vnc: 0.504
+x86: 0.477
+register: 0.444
+risc-v: 0.440
+hypervisor: 0.422
+ppc: 0.410
+VMM: 0.363
+user-level: 0.349
+virtual: 0.250
+assembly: 0.248
+files: 0.246
+KVM: 0.196
+permissions: 0.160
+--------------------
+arm: 1.000
+TCG: 0.948
+hypervisor: 0.691
+debug: 0.644
+kernel: 0.098
+virtual: 0.050
+register: 0.030
+files: 0.027
+boot: 0.017
+device: 0.014
+user-level: 0.010
+architecture: 0.009
+KVM: 0.008
+peripherals: 0.008
+VMM: 0.007
+PID: 0.006
+assembly: 0.006
+performance: 0.005
+semantic: 0.003
+risc-v: 0.003
+ppc: 0.002
+network: 0.002
+permissions: 0.002
+socket: 0.001
+vnc: 0.001
+mistranslation: 0.001
+x86: 0.001
+graphic: 0.001
+i386: 0.000
+
+qemu-system-arm highmem support broken with TCG
+Additional information:
+I initially bisected this to commit 39a1fd25287f ("target/arm: Fix handling of LPAE block descriptors"), which introduced an identical bug by masking the wrong address bits due to a type mismatch, but this was in turn fixed by commit c2360eaa0262 ("target/arm: Fix qemu-system-arm handling of LPAE block descriptors for highmem"). The bug resurfaced between qemu-7.1.0 and qemu-7.2.0 after commit f3639a64f602 ("target/arm: Use softmmu tlbs for page table walking"), but may be caused by the preceding 4a35855682ce ("target/arm: Plumb debug into S1Translate") which fails to boot for an unrelated reason.
+
+I reproduced this on qemu-7.2 as shipped by Debian as well as on qemu-9.1 (built locally).
+
+Part of this problem appeared to be hidden by the 'highmem=on' argument not having the intended effect during parts of the bisection, which I worked around by overriding the 'pa_bits' variable in machvirt_init().