[Qemu-devel] [BUG] mips: tcg fatal error

[Stefan Weil <weil@mail.berlios.de>]

Hello,

MIPS Malta guest always raises a tcg fatal error
during aptitude safe-upgrade. Maybe this is a regression,
because it used to work some weeks ago.

If this is necessary, I can try to find the bad
commit.

guest: MIPS Malta (big endian) Debian lenny
host: x86-64 Debian lenny

See more details below.

Regards
Stefan


$ mips-softmmu/qemu-system-mips \
    --kernel 2.6.26.3/be/vmlinux \
    --append 'debug nohz=off root=/dev/nfs rw ip=::::malta::dhcp' \
    -M malta --cpu 4KEc --net nic,model=pcnet --net user -m 256

/home/stefan/src/qemu/trunk/tcg/tcg.c:1767: tcg fatal error

Program received signal SIGABRT, Aborted.
[Switching to Thread 0x7f411d0896e0 (LWP 19501)]
0x00007f411b8b6ed5 in raise () from /lib/libc.so.6
(gdb) i s
#0  0x00007f411b8b6ed5 in raise () from /lib/libc.so.6
#1  0x00007f411b8b83f3 in abort () from /lib/libc.so.6
#2  0x0000000000528212 in tcg_reg_alloc_call (s=0xc9ae60, def=0x810200,
opc=8, args=0xca3bf8, dead_iargs=3) at
/home/stefan/src/qemu/trunk/tcg/x86_64/tcg-target.c:1176
#3  0x000000000053134e in tcg_gen_code (s=0xc9ae60,
gen_code_buf=0x42f1af00 "A\213ntH\213?\203? A?\001") at
/home/stefan/src/qemu/trunk/tcg/tcg.c:1973
#4  0x00000000004ceab8 in cpu_mips_gen_code (env=0x2b8ed50,
tb=0x7f41175046e0, gen_code_size_ptr=0x7fff250b5d74) at
/home/stefan/src/qemu/trunk/translate-all.c:122
#5  0x00000000004cd5ad in tb_gen_code (env=0x2b8ed50, pc=2142442064,
cs_base=0, flags=<value optimized out>, cflags=0) at
/home/stefan/src/qemu/trunk/exec.c:890
#6  0x00000000004cf0cc in cpu_mips_exec (env1=<value optimized out>) at
/home/stefan/src/qemu/trunk/cpu-exec.c:160
#7  0x000000000040a82c in main (argc=15, argv=0x7fff250b63e8,
envp=<value optimized out>) at /home/stefan/src/qemu/trunk/vl.c:3839
(gdb) p *ts
$1 = {base_type = 0, type = 0, val_type = 0, reg = 5, val = 19, mem_reg
= 14, mem_offset = 68056, fixed_reg = 0, mem_coherent = 0, mem_allocated
= 0, temp_local = 0,
  temp_allocated = 0, next_free_temp = 54, name = 0x0}


$ tail -30 /tmp/qemu.log
do_interrupt enter: PC 2aaf7f30 EPC 2aaf7f1c coprocessor unusable exception
do_interrupt: PC 80000180 EPC 2aaf7f30 cause 11
    S 0000a413 C 1080002c A 00499738 D 00000000
helper_raise_exception_err: 19 1
do_interrupt enter: PC 2aaf7fec EPC 2aaf7fdc coprocessor unusable exception
do_interrupt: PC 80000180 EPC 2aaf7fec cause 11
    S 0000a413 C 1080002c A 00499738 D 00000000
helper_raise_exception_err: 19 1
do_interrupt enter: PC 2aaf7f30 EPC 2aaf8008 coprocessor unusable exception
do_interrupt: PC 80000180 EPC 2aaf7f30 cause 11
    S 0000a413 C 1080002c A 00499738 D 00000000
IN:
0x7f894610:  addiu      s1,sp,32
0x7f894614:  lw zero,1(zero)
0x7f894618:  tne        zero,zero,0x2f4
0x7f89461c:  slti       t7,s5,-32736
0x7f894620:  slti       s0,t8,22824
0x7f894624:  tge        t5,t2,0x27f
0x7f894628:  0x408715b2
0x7f89462c:  sltiu      t6,t0,22020
0x7f894630:  0x6b
0x7f894634:  slti       a1,t9,-20860
0x7f894638:  slti       sp,s5,29120
0x7f89463c:  0x48
0x7f894640:  sltiu      s0,s5,7400
0x7f894644:  0x6b4d47
0x7f894648:  bnel       v0,s0,0x7f8a5bb4
0x7f89464c:  0x59b01ce8
0x7f894650:  ori        s3,t9,0x396b