From dee4dcba78baf712cab403d47d9db319ab7f95d6 Mon Sep 17 00:00:00 2001 From: Christian Krinitsin Date: Thu, 3 Jul 2025 19:39:53 +0200 Subject: restructure results --- results/classifier/zero-shot/118/kernel/1069 | 43 +++++++++ results/classifier/zero-shot/118/kernel/1073 | 59 ++++++++++++ results/classifier/zero-shot/118/kernel/1078 | 74 +++++++++++++++ results/classifier/zero-shot/118/kernel/1119686 | 76 +++++++++++++++ results/classifier/zero-shot/118/kernel/1120 | 42 +++++++++ results/classifier/zero-shot/118/kernel/1157 | 43 +++++++++ results/classifier/zero-shot/118/kernel/1164 | 47 ++++++++++ results/classifier/zero-shot/118/kernel/1165 | 33 +++++++ results/classifier/zero-shot/118/kernel/1169049 | 57 ++++++++++++ results/classifier/zero-shot/118/kernel/1184 | 99 ++++++++++++++++++++ results/classifier/zero-shot/118/kernel/1186303 | 118 ++++++++++++++++++++++++ results/classifier/zero-shot/118/kernel/1241 | 43 +++++++++ results/classifier/zero-shot/118/kernel/1280 | 38 ++++++++ results/classifier/zero-shot/118/kernel/1281 | 31 +++++++ results/classifier/zero-shot/118/kernel/1298 | 45 +++++++++ results/classifier/zero-shot/118/kernel/1320 | 42 +++++++++ results/classifier/zero-shot/118/kernel/1336123 | 48 ++++++++++ results/classifier/zero-shot/118/kernel/1392 | 44 +++++++++ results/classifier/zero-shot/118/kernel/1426092 | 70 ++++++++++++++ results/classifier/zero-shot/118/kernel/1461918 | 53 +++++++++++ results/classifier/zero-shot/118/kernel/1462 | 44 +++++++++ results/classifier/zero-shot/118/kernel/1543057 | 58 ++++++++++++ results/classifier/zero-shot/118/kernel/1552 | 45 +++++++++ results/classifier/zero-shot/118/kernel/1568589 | 81 ++++++++++++++++ results/classifier/zero-shot/118/kernel/1585 | 57 ++++++++++++ results/classifier/zero-shot/118/kernel/1624726 | 70 ++++++++++++++ results/classifier/zero-shot/118/kernel/1639791 | 63 +++++++++++++ results/classifier/zero-shot/118/kernel/1650 | 44 +++++++++ results/classifier/zero-shot/118/kernel/1654826 | 58 ++++++++++++ results/classifier/zero-shot/118/kernel/1694998 | 79 ++++++++++++++++ results/classifier/zero-shot/118/kernel/1695286 | 54 +++++++++++ results/classifier/zero-shot/118/kernel/1696 | 69 ++++++++++++++ results/classifier/zero-shot/118/kernel/1724 | 75 +++++++++++++++ results/classifier/zero-shot/118/kernel/1733720 | 107 +++++++++++++++++++++ results/classifier/zero-shot/118/kernel/1745895 | 65 +++++++++++++ results/classifier/zero-shot/118/kernel/1747 | 46 +++++++++ results/classifier/zero-shot/118/kernel/1767146 | 76 +++++++++++++++ results/classifier/zero-shot/118/kernel/1774 | 53 +++++++++++ results/classifier/zero-shot/118/kernel/1780814 | 80 ++++++++++++++++ results/classifier/zero-shot/118/kernel/1813045 | 54 +++++++++++ results/classifier/zero-shot/118/kernel/1836537 | 44 +++++++++ results/classifier/zero-shot/118/kernel/1842916 | 83 +++++++++++++++++ results/classifier/zero-shot/118/kernel/1843711 | 65 +++++++++++++ results/classifier/zero-shot/118/kernel/1849 | 101 ++++++++++++++++++++ results/classifier/zero-shot/118/kernel/1850 | 59 ++++++++++++ results/classifier/zero-shot/118/kernel/1854 | 48 ++++++++++ results/classifier/zero-shot/118/kernel/1882784 | 95 +++++++++++++++++++ results/classifier/zero-shot/118/kernel/1885553 | 74 +++++++++++++++ results/classifier/zero-shot/118/kernel/1893634 | 73 +++++++++++++++ results/classifier/zero-shot/118/kernel/1910 | 92 ++++++++++++++++++ results/classifier/zero-shot/118/kernel/1921092 | 70 ++++++++++++++ results/classifier/zero-shot/118/kernel/1922430 | 101 ++++++++++++++++++++ results/classifier/zero-shot/118/kernel/1926249 | 64 +++++++++++++ results/classifier/zero-shot/118/kernel/1939179 | 61 ++++++++++++ results/classifier/zero-shot/118/kernel/1991 | 94 +++++++++++++++++++ results/classifier/zero-shot/118/kernel/2000 | 75 +++++++++++++++ results/classifier/zero-shot/118/kernel/2037 | 45 +++++++++ results/classifier/zero-shot/118/kernel/2074 | 50 ++++++++++ results/classifier/zero-shot/118/kernel/2226 | 86 +++++++++++++++++ results/classifier/zero-shot/118/kernel/2281 | 37 ++++++++ results/classifier/zero-shot/118/kernel/2284 | 31 +++++++ results/classifier/zero-shot/118/kernel/2384 | 56 +++++++++++ results/classifier/zero-shot/118/kernel/2500 | 34 +++++++ results/classifier/zero-shot/118/kernel/2657 | 41 ++++++++ results/classifier/zero-shot/118/kernel/2794 | 79 ++++++++++++++++ results/classifier/zero-shot/118/kernel/2833 | 49 ++++++++++ results/classifier/zero-shot/118/kernel/444 | 31 +++++++ results/classifier/zero-shot/118/kernel/485239 | 68 ++++++++++++++ results/classifier/zero-shot/118/kernel/512 | 31 +++++++ results/classifier/zero-shot/118/kernel/520 | 63 +++++++++++++ results/classifier/zero-shot/118/kernel/598 | 31 +++++++ results/classifier/zero-shot/118/kernel/627982 | 61 ++++++++++++ results/classifier/zero-shot/118/kernel/664 | 44 +++++++++ results/classifier/zero-shot/118/kernel/677 | 31 +++++++ results/classifier/zero-shot/118/kernel/679 | 31 +++++++ results/classifier/zero-shot/118/kernel/682360 | 59 ++++++++++++ results/classifier/zero-shot/118/kernel/703 | 47 ++++++++++ results/classifier/zero-shot/118/kernel/706 | 68 ++++++++++++++ results/classifier/zero-shot/118/kernel/747 | 60 ++++++++++++ results/classifier/zero-shot/118/kernel/839790 | 68 ++++++++++++++ results/classifier/zero-shot/118/kernel/876 | 64 +++++++++++++ results/classifier/zero-shot/118/kernel/923 | 31 +++++++ results/classifier/zero-shot/118/kernel/973 | 49 ++++++++++ 83 files changed, 4927 insertions(+) create mode 100644 results/classifier/zero-shot/118/kernel/1069 create mode 100644 results/classifier/zero-shot/118/kernel/1073 create mode 100644 results/classifier/zero-shot/118/kernel/1078 create mode 100644 results/classifier/zero-shot/118/kernel/1119686 create mode 100644 results/classifier/zero-shot/118/kernel/1120 create mode 100644 results/classifier/zero-shot/118/kernel/1157 create mode 100644 results/classifier/zero-shot/118/kernel/1164 create mode 100644 results/classifier/zero-shot/118/kernel/1165 create mode 100644 results/classifier/zero-shot/118/kernel/1169049 create mode 100644 results/classifier/zero-shot/118/kernel/1184 create mode 100644 results/classifier/zero-shot/118/kernel/1186303 create mode 100644 results/classifier/zero-shot/118/kernel/1241 create mode 100644 results/classifier/zero-shot/118/kernel/1280 create mode 100644 results/classifier/zero-shot/118/kernel/1281 create mode 100644 results/classifier/zero-shot/118/kernel/1298 create mode 100644 results/classifier/zero-shot/118/kernel/1320 create mode 100644 results/classifier/zero-shot/118/kernel/1336123 create mode 100644 results/classifier/zero-shot/118/kernel/1392 create mode 100644 results/classifier/zero-shot/118/kernel/1426092 create mode 100644 results/classifier/zero-shot/118/kernel/1461918 create mode 100644 results/classifier/zero-shot/118/kernel/1462 create mode 100644 results/classifier/zero-shot/118/kernel/1543057 create mode 100644 results/classifier/zero-shot/118/kernel/1552 create mode 100644 results/classifier/zero-shot/118/kernel/1568589 create mode 100644 results/classifier/zero-shot/118/kernel/1585 create mode 100644 results/classifier/zero-shot/118/kernel/1624726 create mode 100644 results/classifier/zero-shot/118/kernel/1639791 create mode 100644 results/classifier/zero-shot/118/kernel/1650 create mode 100644 results/classifier/zero-shot/118/kernel/1654826 create mode 100644 results/classifier/zero-shot/118/kernel/1694998 create mode 100644 results/classifier/zero-shot/118/kernel/1695286 create mode 100644 results/classifier/zero-shot/118/kernel/1696 create mode 100644 results/classifier/zero-shot/118/kernel/1724 create mode 100644 results/classifier/zero-shot/118/kernel/1733720 create mode 100644 results/classifier/zero-shot/118/kernel/1745895 create mode 100644 results/classifier/zero-shot/118/kernel/1747 create mode 100644 results/classifier/zero-shot/118/kernel/1767146 create mode 100644 results/classifier/zero-shot/118/kernel/1774 create mode 100644 results/classifier/zero-shot/118/kernel/1780814 create mode 100644 results/classifier/zero-shot/118/kernel/1813045 create mode 100644 results/classifier/zero-shot/118/kernel/1836537 create mode 100644 results/classifier/zero-shot/118/kernel/1842916 create mode 100644 results/classifier/zero-shot/118/kernel/1843711 create mode 100644 results/classifier/zero-shot/118/kernel/1849 create mode 100644 results/classifier/zero-shot/118/kernel/1850 create mode 100644 results/classifier/zero-shot/118/kernel/1854 create mode 100644 results/classifier/zero-shot/118/kernel/1882784 create mode 100644 results/classifier/zero-shot/118/kernel/1885553 create mode 100644 results/classifier/zero-shot/118/kernel/1893634 create mode 100644 results/classifier/zero-shot/118/kernel/1910 create mode 100644 results/classifier/zero-shot/118/kernel/1921092 create mode 100644 results/classifier/zero-shot/118/kernel/1922430 create mode 100644 results/classifier/zero-shot/118/kernel/1926249 create mode 100644 results/classifier/zero-shot/118/kernel/1939179 create mode 100644 results/classifier/zero-shot/118/kernel/1991 create mode 100644 results/classifier/zero-shot/118/kernel/2000 create mode 100644 results/classifier/zero-shot/118/kernel/2037 create mode 100644 results/classifier/zero-shot/118/kernel/2074 create mode 100644 results/classifier/zero-shot/118/kernel/2226 create mode 100644 results/classifier/zero-shot/118/kernel/2281 create mode 100644 results/classifier/zero-shot/118/kernel/2284 create mode 100644 results/classifier/zero-shot/118/kernel/2384 create mode 100644 results/classifier/zero-shot/118/kernel/2500 create mode 100644 results/classifier/zero-shot/118/kernel/2657 create mode 100644 results/classifier/zero-shot/118/kernel/2794 create mode 100644 results/classifier/zero-shot/118/kernel/2833 create mode 100644 results/classifier/zero-shot/118/kernel/444 create mode 100644 results/classifier/zero-shot/118/kernel/485239 create mode 100644 results/classifier/zero-shot/118/kernel/512 create mode 100644 results/classifier/zero-shot/118/kernel/520 create mode 100644 results/classifier/zero-shot/118/kernel/598 create mode 100644 results/classifier/zero-shot/118/kernel/627982 create mode 100644 results/classifier/zero-shot/118/kernel/664 create mode 100644 results/classifier/zero-shot/118/kernel/677 create mode 100644 results/classifier/zero-shot/118/kernel/679 create mode 100644 results/classifier/zero-shot/118/kernel/682360 create mode 100644 results/classifier/zero-shot/118/kernel/703 create mode 100644 results/classifier/zero-shot/118/kernel/706 create mode 100644 results/classifier/zero-shot/118/kernel/747 create mode 100644 results/classifier/zero-shot/118/kernel/839790 create mode 100644 results/classifier/zero-shot/118/kernel/876 create mode 100644 results/classifier/zero-shot/118/kernel/923 create mode 100644 results/classifier/zero-shot/118/kernel/973 (limited to 'results/classifier/zero-shot/118/kernel') diff --git a/results/classifier/zero-shot/118/kernel/1069 b/results/classifier/zero-shot/118/kernel/1069 new file mode 100644 index 00000000..b3a94847 --- /dev/null +++ b/results/classifier/zero-shot/118/kernel/1069 @@ -0,0 +1,43 @@ +kernel: 0.968 +graphic: 0.959 +device: 0.932 +architecture: 0.838 +PID: 0.660 +semantic: 0.644 +debug: 0.599 +x86: 0.570 +register: 0.535 +boot: 0.502 +vnc: 0.440 +performance: 0.407 +ppc: 0.403 +permissions: 0.393 +i386: 0.361 +hypervisor: 0.345 +socket: 0.325 +user-level: 0.313 +risc-v: 0.307 +TCG: 0.284 +mistranslation: 0.270 +network: 0.263 +VMM: 0.229 +virtual: 0.226 +arm: 0.200 +files: 0.171 +peripherals: 0.133 +assembly: 0.052 +KVM: 0.025 + +Qemu triggers the split lock detection of the Linux kernel +Description of problem: +Windows displays a "blue screen of death" and the Linux kernel logs this error message: + +``` +[ 180.886150] x86/split lock detection: #AC: qemu-system-x86/10167 took a split_lock trap at address: 0x3ff2624d +[ 180.946151] x86/split lock detection: #AC: qemu-system-x86/10168 took a split_lock trap at address: 0x3ff2624d +``` +Steps to reproduce: +1. Start the guest OS +2. Do some stuff in the Windows guest (for instance OS updates) +Additional information: +Is this a bug in Windows or in Qemu ? diff --git a/results/classifier/zero-shot/118/kernel/1073 b/results/classifier/zero-shot/118/kernel/1073 new file mode 100644 index 00000000..3fa5d7fe --- /dev/null +++ b/results/classifier/zero-shot/118/kernel/1073 @@ -0,0 +1,59 @@ +kernel: 0.913 +device: 0.909 +peripherals: 0.836 +graphic: 0.802 +performance: 0.786 +architecture: 0.783 +virtual: 0.670 +vnc: 0.656 +network: 0.644 +hypervisor: 0.625 +debug: 0.613 +arm: 0.604 +boot: 0.596 +ppc: 0.544 +PID: 0.515 +socket: 0.513 +files: 0.512 +permissions: 0.509 +register: 0.452 +TCG: 0.445 +user-level: 0.428 +risc-v: 0.423 +semantic: 0.412 +mistranslation: 0.377 +VMM: 0.374 +assembly: 0.236 +x86: 0.164 +i386: 0.155 +KVM: 0.142 + +SIGABRT with -M raspi3b,accel=hvf on macOS +Description of problem: +There is a `SIGUSR2` or `SIGUSR1` raised which causes QEMU to abort: +``` +(lldb) bt +* thread #3, stop reason = signal SIGUSR2 + * frame #0: 0x0000000184c384a4 libsystem_kernel.dylib`__sigsuspend + 8 + frame #1: 0x0000000100b7ff34 qemu-system-aarch64`qemu_coroutine_new at coroutine-sigaltstack.c:221:9 + frame #2: 0x0000000100b91f0c qemu-system-aarch64`qemu_coroutine_create(entry=(qemu-system-aarch64`monitor_qmp_dispatcher_co at qmp.c:211), opaque=0x0000000000000000) at qemu-coroutine.c:90:14 + frame #3: 0x0000000100a833d8 qemu-system-aarch64`monitor_init_globals_core at monitor.c:707:25 +``` + +I tried skipping over it with `lldb`: +``` +(lldb) b main +(lldb) r +(lldb) process handle SIGUSR1 -s false -p true +(lldb) process handle SIGUSR2 -s false -p true +(lldb) c +qemu-system-aarch64: Unknown Error +``` + +I investigated the Unknown Error and and it's actually `HV_ILLEGAL_GUEST_STATE` which is unhandled in the `assert_hvf_ok` function. From here the VM will fail. +Steps to reproduce: +1. Get a fake disk. Or create a fake one with: `qemu-img create -f qcow2 zero.qcow2 2G` +2. Run QEMU with the HVF accelerator: `qemu-system-aarch64 -M raspi3b,accel=hvf -drive id=card0,if=none,format=qcow2,index=0,file=./zero.qcow2 -device sd-card,drive=card0 -serial stdio +` +Additional information: + diff --git a/results/classifier/zero-shot/118/kernel/1078 b/results/classifier/zero-shot/118/kernel/1078 new file mode 100644 index 00000000..7d1cb066 --- /dev/null +++ b/results/classifier/zero-shot/118/kernel/1078 @@ -0,0 +1,74 @@ +kernel: 0.962 +performance: 0.956 +architecture: 0.954 +arm: 0.948 +device: 0.922 +graphic: 0.910 +VMM: 0.878 +debug: 0.852 +peripherals: 0.851 +boot: 0.829 +ppc: 0.823 +user-level: 0.813 +semantic: 0.793 +risc-v: 0.788 +mistranslation: 0.760 +vnc: 0.756 +PID: 0.754 +permissions: 0.745 +files: 0.722 +hypervisor: 0.713 +socket: 0.674 +TCG: 0.669 +x86: 0.661 +assembly: 0.654 +KVM: 0.629 +register: 0.609 +virtual: 0.521 +i386: 0.518 +network: 0.509 + +qemu-system-arm: unable to use LPAE +Description of problem: +Failed to run qemu: qemu-system-arm: Addressing limited to 32 bits, +but memory exceeds it by 1073741824 bytes +Steps to reproduce: +1. ./configure --target-list=arm-softmmu +2. make +3. +./qemu-system-arm \ +-machine virt,highmem=on \ +-cpu cortex-a15 -smp 4 \ +-m 4096 \ +-kernel ./zImage \ +-drive id=disk0,file=./rootfs.ext4,if=none,format=raw \ +-object rng-random,filename=/dev/urandom,id=rng0 \ +-device virtio-rng-pci,rng=rng0 \ +-device virtio-blk-device,drive=disk0 \ +-device virtio-gpu-pci \ +-serial mon:stdio -serial null \ +-nographic \ +-append 'root=/dev/vda rw mem=4096M ip=dhcp console=ttyAMA0 console=hvc0' +Additional information: +We set physical address bits to 40 if ARM_FEATURE_LPAE is enabled. But ARM_FEATURE_V7VE also implies ARM_FEATURE_LPAE as set later in arm_cpu_realizefn. + +We should add condition for ARM_FEATURE_V7VE, otherwise we would not be able to use highmem larger than 3GB even though we have enabled highmem, since we would fail and return right from machvirt_init. + +I have already made a patch to fix this issue. +https://gitlab.com/realhezhe/qemu/-/commit/4dad8167c1c1a7695af88d8929e8d7f6399177de +`hw/arm/virt.c` +```c + if (object_property_get_bool(cpuobj, "aarch64", NULL)) { + pa_bits = arm_pamax(armcpu); + } else if (arm_feature(&armcpu->env, ARM_FEATURE_LPAE)) { + } else if (arm_feature(&armcpu->env, ARM_FEATURE_LPAE) + || arm_feature(&armcpu->env, ARM_FEATURE_V7VE)) { + /* v7 with LPAE */ + pa_bits = 40; + } else { +``` + +After applying the patch, I can make sure that the pa_bits has already been set to 40, but qemu hangs later. By bisecting I found if the following commit is reverted qemu can boot up successfully.. +39a1fd2528 ("target/arm: Fix handling of LPAE block descriptors") + +It can't be quickly determined what's going on here at my side. Maybe the author can help give some hints. Thanks. diff --git a/results/classifier/zero-shot/118/kernel/1119686 b/results/classifier/zero-shot/118/kernel/1119686 new file mode 100644 index 00000000..fdba220c --- /dev/null +++ b/results/classifier/zero-shot/118/kernel/1119686 @@ -0,0 +1,76 @@ +kernel: 0.857 +architecture: 0.855 +debug: 0.815 +x86: 0.802 +files: 0.785 +virtual: 0.760 +hypervisor: 0.754 +semantic: 0.745 +graphic: 0.740 +device: 0.726 +ppc: 0.720 +permissions: 0.706 +network: 0.696 +performance: 0.687 +user-level: 0.680 +socket: 0.664 +i386: 0.654 +vnc: 0.624 +peripherals: 0.620 +risc-v: 0.599 +register: 0.598 +arm: 0.594 +KVM: 0.589 +VMM: 0.559 +TCG: 0.554 +PID: 0.547 +boot: 0.508 +assembly: 0.381 +mistranslation: 0.327 + +Incorrect handling of icebp + +Wine conformance suite tests the behavior of various low-level Windows API functions. One of the tests involves checking the interaction of breakpoints and exceptions, and in particular the 'icebp' breakpoint. This test works on a Windows XP machine running either on the metal or in VMware ESX but fails when run in QEmu. + +To reproduce the issue grab the attached 'exception.exe' file and run it. If you get 'Test failed' lines like below then it means the problem is still present: + + exception.c:202: exception 0: 80000004 flags:0 addr:003F0000 + exception.c:208: Test failed: 0: Wrong exception address 003F0000/003F0001 + exception.c:214: this is the last test seen before the exception + exception: unhandled exception 80000004 at 003F0000 + exception.c:202: exception 0: c0000027 flags:2 addr:7C80E0B9 + exception.c:205: Test failed: 0: Wrong exception code c0000027/80000004 + exception.c:208: Test failed: 0: Wrong exception address 7C80E0B9/003F0001 + +Note that this bug was not present in QEmu 1.1.2+dfsg-5 (Debian Testing) but is now present in 1.4.0~rc0+dfsg-1exp (Debian Experimental). + + + +This bug is still present in QEMU 1.6.0 (as per Debian's qemu-system-x86 1.6.0+dfsg-1 package). + + +This bug is still present in QEMU 1.7.0 (as per Debian's qemu-system-x86 1.7.0+dfsg-3 package). + +The patch submitted upstream was for the kernel. Is this also a bug in QEMU when TCG is disabled? + +s/TCG/KVM/ - Is this also a bug when KVM is disabled? + +[Expired for QEMU because there has been no activity for 60 days.] + +Actually this got fixed by the following Linux kernel commit: + +https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=fd2a445a94d2ab6b39fb623dc02fee48d01a565a + +commit fd2a445a94d2ab6b39fb623dc02fee48d01a565a (patch) + +KVM: VMX: Advance rip to after an ICEBP instruction +When entering an exception after an ICEBP, the saved instruction +pointer should point to after the instruction. + +This fixes the bug here: https://bugs.launchpad.net/qemu/+bug/1119686 + +Signed-off-by: Huw Davies