On 7/27/23 19:41, Richard Henderson wrote: > On 7/21/23 02:08, Claudio Fontana wrote: >> Thread 3 "qemu-system-s39" received signal SIGABRT, Aborted. >> [Switching to Thread 0x7ffff53516c0 (LWP 215975)] >> (gdb) bt >> #0 0x00007ffff730dabc in __pthread_kill_implementation () at >> /lib64/libc.so.6 >> #1 0x00007ffff72bc266 in raise () at /lib64/libc.so.6 >> #2 0x00007ffff72a4897 in abort () at /lib64/libc.so.6 >> #3 0x00007ffff76f0eee in () at /lib64/libglib-2.0.so.0 >> #4 0x00007ffff775649a in g_assertion_message_expr () at >> /lib64/libglib-2.0.so.0 >> #5 0x0000555555b96134 in page_unlock__debug (pd=0x7ffee8680440) at >> ../accel/tcg/tb-maint.c:348 >> #6 0x0000555555b962a9 in page_unlock (pd=0x7ffee8680440) at >> ../accel/tcg/tb-maint.c:397 >> #7 0x0000555555b96580 in tb_unlock_pages (tb=0x7fffefffeb00) at >> ../accel/tcg/tb-maint.c:483 >> #8 0x0000555555b94698 in cpu_exec_longjmp_cleanup (cpu=0x555556566a30) at >> ../accel/tcg/cpu-exec.c:556 > > > https://patchew.org/QEMU/20230726201330.357175-1-richard.hender...@linaro.org/ > > > r~
Hi Richard, I applied your patch, however I still encounter an assert: ERROR:../accel/tcg/tb-maint.c:367:assert_no_pages_locked: assertion failed: (g_hash_table_size(ht_pages_locked_debug) == 0) Bail out! ERROR:../accel/tcg/tb-maint.c:367:assert_no_pages_locked: assertion failed: (g_hash_table_size(ht_pages_locked_debug) == 0) Thread 6 "qemu-system-s39" received signal SIGABRT, Aborted. [Switching to Thread 0x7ffeef5fe6c0 (LWP 116343)] 0x00007ffff730dabc in __pthread_kill_implementation () from /lib64/libc.so.6 (gdb) bt #0 0x00007ffff730dabc in __pthread_kill_implementation () at /lib64/libc.so.6 #1 0x00007ffff72bc266 in raise () at /lib64/libc.so.6 #2 0x00007ffff72a4897 in abort () at /lib64/libc.so.6 #3 0x00007ffff76f0eee in () at /lib64/libglib-2.0.so.0 #4 0x00007ffff775649a in g_assertion_message_expr () at /lib64/libglib-2.0.so.0 #5 0x0000555555b96f82 in assert_no_pages_locked () at ../accel/tcg/tb-maint.c:367 #6 0x0000555555b976cc in page_collection_lock (start=6674, last=6674) at ../accel/tcg/tb-maint.c:614 #7 0x0000555555b9877c in tb_invalidate_phys_range (start=27336872, last=27336879) at ../accel/tcg/tb-maint.c:1197 #8 0x0000555555b6b25e in invalidate_and_set_dirty (mr=0x5555563f6e90, addr=27336872, length=8) at ../softmmu/physmem.c:2542 #9 0x0000555555b6d72d in address_space_stq_internal (as=0x5555566b7350, addr=27336872, val=2930044561408, attrs=..., result=0x0, endian=DEVICE_NATIVE_ENDIAN) at /root/git/qemu/memory_ldst.c.inc:495 #10 0x0000555555b6d7aa in address_space_stq (as=0x5555566b7350, addr=27336872, val=2930044561408, attrs=..., result=0x0) at /root/git/qemu/memory_ldst.c.inc:510 #11 0x0000555555a9fff6 in stq_phys (as=0x5555566b7350, addr=27336872, val=2930044561408) at /root/git/qemu/include/exec/memory_ldst_phys.h.inc:55 #12 0x0000555555aa0630 in s390_cpu_tlb_fill (cs=0x555556663c80, address=2930044559360, size=1, access_type=MMU_INST_FETCH, mmu_idx=0, probe=false, retaddr=0) at ../target/s390x/tcg/excp_helper.c:194 #13 0x0000555555ba8a89 in probe_access_internal (env=0x555556666460, addr=2930044559360, fault_size=1, access_type=MMU_INST_FETCH, mmu_idx=0, nonfault=false, phost=0x7ffeef5fcfd0, pfu\ ll=0x7ffeef5fcfc8, retaddr=0, check_mem_cbs=false) at ../accel/tcg/cputlb.c:1530 #14 0x0000555555ba90f0 in get_page_addr_code_hostp (env=0x555556666460, addr=2930044559360, hostp=0x7ffeef5fd2f0) at ../accel/tcg/cputlb.c:1695 #15 0x0000555555ba122d in translator_access (env=0x555556666460, db=0x7ffeef5fd2c0, pc=2930044559360, len=4) at ../accel/tcg/translator.c:257 #16 0x0000555555ba15e2 in translator_ldl (env=0x555556666460, db=0x7ffeef5fd2c0, pc=2930044559360) at ../accel/tcg/translator.c:351 #17 0x0000555555abd537 in ld_code4 (env=0x555556666460, s=0x7ffeef5fd2c0, pc=2930044559360) at ../target/s390x/tcg/translate.c:399 #18 0x0000555555ad9e93 in extract_insn (env=0x555556666460, s=0x7ffeef5fd2c0) at ../target/s390x/tcg/translate.c:6204 #19 0x0000555555ada171 in translate_one (env=0x555556666460, s=0x7ffeef5fd2c0) at ../target/s390x/tcg/translate.c:6296 #20 0x0000555555ada85c in s390x_tr_translate_insn (dcbase=0x7ffeef5fd2c0, cs=0x555556663c80) at ../target/s390x/tcg/translate.c:6469 #21 0x0000555555ba100d in translator_loop (cpu=0x555556663c80, tb=0x7fffe77a1480, max_insns=0x7ffeef5fd3f4, pc=2930044559358, host_pc=0x7fff08801ffe, ops=0x555556216b60 <s390x_t\ r_ops>, db=0x7ffeef5fd2c0) at ../accel/tcg/translator.c:180 #22 0x0000555555adaabe in gen_intermediate_code (cs=0x555556663c80, tb=0x7fffe77a1480, max_insns=0x7ffeef5fd3f4, pc=2930044559358, host_pc=0x7fff08801ffe) at ../target/s390x/tcg/translate.c:6535 #23 0x0000555555b9f167 in setjmp_gen_code (env=0x555556666460, tb=0x7fffe77a1480, pc=2930044559358, host_pc=0x7fff08801ffe, max_insns=0x7ffeef5fd3f4, ti=0x7ffeef5fd410) at ../accel/tcg/translate-all.c:278 #24 0x0000555555b9f47e in tb_gen_code (cpu=0x555556663c80, pc=2930044559358, cs_base=0, flags=1744961539, cflags=-16252928) at ../accel/tcg/translate-all.c:360 #25 0x0000555555b960b3 in cpu_exec_loop (cpu=0x555556663c80, sc=0x7ffeef5fd540) at ../accel/tcg/cpu-exec.c:1005 #26 0x0000555555b96252 in cpu_exec_setjmp (cpu=0x555556663c80, sc=0x7ffeef5fd540) at ../accel/tcg/cpu-exec.c:1057 #27 0x0000555555b962d9 in cpu_exec (cpu=0x555556663c80) at ../accel/tcg/cpu-exec.c:1083 #28 0x0000555555bba868 in tcg_cpus_exec (cpu=0x555556663c80) at ../accel/tcg/tcg-accel-ops.c:75 #29 0x0000555555bbaf20 in mttcg_cpu_thread_fn (arg=0x555556663c80) at ../accel/tcg/tcg-accel-ops-mttcg.c:95 #30 0x0000555555dc1ece in qemu_thread_start (args=0x5555566b74f0) at ../util/qemu-thread-posix.c:541 #31 0x00007ffff730bc64 in start_thread () at /lib64/libc.so.6 #32 0x00007ffff7393550 in clone3 () at /lib64/libc.so.6 (gdb) thread apply all bt Thread 87 (Thread 0x7ffec2beb6c0 (LWP 116440) "qemu-system-s39"): #0 0x00007ffff730820e in __futex_abstimed_wait_common () at /lib64/libc.so.6 #1 0x00007ffff730b275 in pthread_cond_timedwait@@GLIBC_2.3.2 () at /lib64/libc.so.6 #2 0x0000555555dc1739 in qemu_cond_timedwait_ts (cond=0x5555563ff1b0, mutex=0x5555563ff140, ts=0x7ffec2bea580, file=0x555555fea535 "../util/thread-pool.c", line=90) at ../util/qemu-thread-posix.c:239 #3 0x0000555555dc17d4 in qemu_cond_timedwait_impl (cond=0x5555563ff1b0, mutex=0x5555563ff140, ms=10000, file=0x555555fea535 "../util/thread-pool.c", line=90) at ../util/qemu-thread-posix.c:253 #4 0x0000555555ddddfc in worker_thread (opaque=0x5555563ff130) at ../util/thread-pool.c:90 #5 0x0000555555dc1ece in qemu_thread_start (args=0x7ffebc000b70) at ../util/qemu-thread-posix.c:541 #6 0x00007ffff730bc64 in start_thread () at /lib64/libc.so.6 #7 0x00007ffff7393550 in clone3 () at /lib64/libc.so.6 Thread 86 (Thread 0x7ffecde2c6c0 (LWP 116439) "qemu-system-s39"): #0 0x00007ffff730820e in __futex_abstimed_wait_common () at /lib64/libc.so.6 #1 0x00007ffff730b275 in pthread_cond_timedwait@@GLIBC_2.3.2 () at /lib64/libc.so.6 #2 0x0000555555dc1739 in qemu_cond_timedwait_ts (cond=0x5555563ff1b0, mutex=0x5555563ff140, ts=0x7ffecde2b580, file=0x555555fea535 "../util/thread-pool.c", line=90) at ../util/qemu-thread-posix.c:239 #3 0x0000555555dc17d4 in qemu_cond_timedwait_impl (cond=0x5555563ff1b0, mutex=0x5555563ff140, ms=10000, file=0x555555fea535 "../util/thread-pool.c", line=90) at ../util/qemu-thread-posix.c:253 #4 0x0000555555ddddfc in worker_thread (opaque=0x5555563ff130) at ../util/thread-pool.c:90 #5 0x0000555555dc1ece in qemu_thread_start (args=0x7ffea4000b70) at ../util/qemu-thread-posix.c:541 #6 0x00007ffff730bc64 in start_thread () at /lib64/libc.so.6 #7 0x00007ffff7393550 in clone3 () at /lib64/libc.so.6 Thread 85 (Thread 0x7ffecf73e6c0 (LWP 116438) "qemu-system-s39"): #0 0x00007ffff730820e in __futex_abstimed_wait_common () at /lib64/libc.so.6 #1 0x00007ffff730b275 in pthread_cond_timedwait@@GLIBC_2.3.2 () at /lib64/libc.so.6 #2 0x0000555555dc1739 in qemu_cond_timedwait_ts (cond=0x5555563ff1b0, mutex=0x5555563ff140, ts=0x7ffecf73d580, file=0x555555fea535 "../util/thread-pool.c", line=90) at ../util/qemu-thread-posix.c:239 #3 0x0000555555dc17d4 in qemu_cond_timedwait_impl (cond=0x5555563ff1b0, mutex=0x5555563ff140, ms=10000, file=0x555555fea535 "../util/thread-pool.c", line=90) at ../util/qemu-thread-posix.c:253 #4 0x0000555555ddddfc in worker_thread (opaque=0x5555563ff130) at ../util/thread-pool.c:90 #5 0x0000555555dc1ece in qemu_thread_start (args=0x7ffeb0000b70) at ../util/qemu-thread-posix.c:541 #6 0x00007ffff730bc64 in start_thread () at /lib64/libc.so.6 #7 0x00007ffff7393550 in clone3 () at /lib64/libc.so.6 Thread 84 (Thread 0x7ffec14e26c0 (LWP 116437) "qemu-system-s39"): #0 0x00007ffff730820e in __futex_abstimed_wait_common () at /lib64/libc.so.6 #1 0x00007ffff730b275 in pthread_cond_timedwait@@GLIBC_2.3.2 () at /lib64/libc.so.6 #2 0x0000555555dc1739 in qemu_cond_timedwait_ts (cond=0x5555563ff1b0, mutex=0x5555563ff140, ts=0x7ffec14e1580, file=0x555555fea535 "../util/thread-pool.c", line=90) at ../util/qemu-thread-posix.c:239 #3 0x0000555555dc17d4 in qemu_cond_timedwait_impl (cond=0x5555563ff1b0, mutex=0x5555563ff140, ms=10000, file=0x555555fea535 "../util/thread-pool.c", line=90) at ../util/qemu-thread-posix.c:253 #4 0x0000555555ddddfc in worker_thread (opaque=0x5555563ff130) at ../util/thread-pool.c:90 #5 0x0000555555dc1ece in qemu_thread_start (args=0x7ffe88000b70) at ../util/qemu-thread-posix.c:541 #6 0x00007ffff730bc64 in start_thread () at /lib64/libc.so.6 #7 0x00007ffff7393550 in clone3 () at /lib64/libc.so.6 Thread 83 (Thread 0x7ffea3fff6c0 (LWP 116436) "qemu-system-s39"): #0 0x00007ffff730820e in __futex_abstimed_wait_common () at /lib64/libc.so.6 #1 0x00007ffff730b275 in pthread_cond_timedwait@@GLIBC_2.3.2 () at /lib64/libc.so.6 #2 0x0000555555dc1739 in qemu_cond_timedwait_ts (cond=0x5555563ff1b0, mutex=0x5555563ff140, ts=0x7ffea3ffe580, file=0x555555fea535 "../util/thread-pool.c", line=90) at ../util/qemu-thread-posix.c:239 #3 0x0000555555dc17d4 in qemu_cond_timedwait_impl (cond=0x5555563ff1b0, mutex=0x5555563ff140, ms=10000, file=0x555555fea535 "../util/thread-pool.c", line=90) at ../util/qemu-thread-posix.c:253 #4 0x0000555555ddddfc in worker_thread (opaque=0x5555563ff130) at ../util/thread-pool.c:90 #5 0x0000555555dc1ece in qemu_thread_start (args=0x55555675eb70) at ../util/qemu-thread-posix.c:541 #6 0x00007ffff730bc64 in start_thread () at /lib64/libc.so.6 #7 0x00007ffff7393550 in clone3 () at /lib64/libc.so.6 Thread 82 (Thread 0x7ffea0ff96c0 (LWP 116435) "qemu-system-s39"): #0 0x00007ffff730820e in __futex_abstimed_wait_common () at /lib64/libc.so.6 #1 0x00007ffff730b275 in pthread_cond_timedwait@@GLIBC_2.3.2 () at /lib64/libc.so.6 #2 0x0000555555dc1739 in qemu_cond_timedwait_ts (cond=0x5555563ff1b0, mutex=0x5555563ff140, ts=0x7ffea0ff8580, file=0x555555fea535 "../util/thread-pool.c", line=90) at ../util/qemu-thread-posix.c:239 #3 0x0000555555dc17d4 in qemu_cond_timedwait_impl (cond=0x5555563ff1b0, mutex=0x5555563ff140, ms=10000, file=0x555555fea535 "../util/thread-pool.c", line=90) at ../util/qemu-thread-posix.c:253 #4 0x0000555555ddddfc in worker_thread (opaque=0x5555563ff130) at ../util/thread-pool.c:90 #5 0x0000555555dc1ece in qemu_thread_start (args=0x5555565bc420) at ../util/qemu-thread-posix.c:541 #6 0x00007ffff730bc64 in start_thread () at /lib64/libc.so.6 #7 0x00007ffff7393550 in clone3 () at /lib64/libc.so.6 Thread 81 (Thread 0x7ffe6e7fc6c0 (LWP 116434) "qemu-system-s39"): #0 0x00007ffff730820e in __futex_abstimed_wait_common () at /lib64/libc.so.6 #1 0x00007ffff730b275 in pthread_cond_timedwait@@GLIBC_2.3.2 () at /lib64/libc.so.6 #2 0x0000555555dc1739 in qemu_cond_timedwait_ts (cond=0x5555563ff1b0, mutex=0x5555563ff140, ts=0x7ffe6e7fb580, file=0x555555fea535 "../util/thread-pool.c", line=90) at ../util/qemu-thread-posix.c:239 #3 0x0000555555dc17d4 in qemu_cond_timedwait_impl (cond=0x5555563ff1b0, mutex=0x5555563ff140, ms=10000, file=0x555555fea535 "../util/thread-pool.c", line=90) at ../util/qemu-thread-posix.c:253 #4 0x0000555555ddddfc in worker_thread (opaque=0x5555563ff130) at ../util/thread-pool.c:90 #5 0x0000555555dc1ece in qemu_thread_start (args=0x5555565bf630) at ../util/qemu-thread-posix.c:541 #6 0x00007ffff730bc64 in start_thread () at /lib64/libc.so.6 #7 0x00007ffff7393550 in clone3 () at /lib64/libc.so.6 Thread 10 (Thread 0x7ffeed5fa6c0 (LWP 116347) "qemu-system-s39"): #0 0x00007ffff730820e in __futex_abstimed_wait_common () at /lib64/libc.so.6 #1 0x00007ffff730af50 in pthread_cond_wait@@GLIBC_2.3.2 () at /lib64/libc.so.6 #2 0x0000555555dc1686 in qemu_cond_wait_impl (cond=0x555556806210, mutex=0x55555632cf60 <qemu_global_mutex>, file=0x555555f07d6b "../softmmu/cpus.c", line=424) at ../util/qemu-thread-posix.c:225 #3 0x00005555559d78fb in qemu_wait_io_event (cpu=0x5555567b28e0) at ../softmmu/cpus.c:424 #4 0x0000555555bbafec in mttcg_cpu_thread_fn (arg=0x5555567b28e0) at ../accel/tcg/tcg-accel-ops-mttcg.c:123 #5 0x0000555555dc1ece in qemu_thread_start (args=0x555556806250) at ../util/qemu-thread-posix.c:541 #6 0x00007ffff730bc64 in start_thread () at /lib64/libc.so.6 #7 0x00007ffff7393550 in clone3 () at /lib64/libc.so.6 Thread 9 (Thread 0x7ffeeddfb6c0 (LWP 116346) "qemu-system-s39"): #0 0x00007ffff730820e in __futex_abstimed_wait_common () at /lib64/libc.so.6 #1 0x00007ffff730af50 in pthread_cond_wait@@GLIBC_2.3.2 () at /lib64/libc.so.6 #2 0x0000555555dc1686 in qemu_cond_wait_impl (cond=0x5555567b2620, mutex=0x55555632cf60 <qemu_global_mutex>, file=0x555555f07d6b "../softmmu/cpus.c", line=424) at ../util/qemu-thread-posix.c:225 #3 0x00005555559d78fb in qemu_wait_io_event (cpu=0x55555675edf0) at ../softmmu/cpus.c:424 #4 0x0000555555bbafec in mttcg_cpu_thread_fn (arg=0x55555675edf0) at ../accel/tcg/tcg-accel-ops-mttcg.c:123 #5 0x0000555555dc1ece in qemu_thread_start (args=0x5555567b2660) at ../util/qemu-thread-posix.c:541 #6 0x00007ffff730bc64 in start_thread () at /lib64/libc.so.6 #7 0x00007ffff7393550 in clone3 () at /lib64/libc.so.6 Thread 8 (Thread 0x7ffeee5fc6c0 (LWP 116345) "qemu-system-s39"): #0 0x00007ffff730820e in __futex_abstimed_wait_common () at /lib64/libc.so.6 #1 0x00007ffff730af50 in pthread_cond_wait@@GLIBC_2.3.2 () at /lib64/libc.so.6 #2 0x0000555555dc1686 in qemu_cond_wait_impl (cond=0x55555675eb30, mutex=0x55555632cf60 <qemu_global_mutex>, file=0x555555f07d6b "../softmmu/cpus.c", line=424) at ../util/qemu-thread-posix.c:225 #3 0x00005555559d78fb in qemu_wait_io_event (cpu=0x55555670b3d0) at ../softmmu/cpus.c:424 #4 0x0000555555bbafec in mttcg_cpu_thread_fn (arg=0x55555670b3d0) at ../accel/tcg/tcg-accel-ops-mttcg.c:123 #5 0x0000555555dc1ece in qemu_thread_start (args=0x55555675eb70) at ../util/qemu-thread-posix.c:541 #6 0x00007ffff730bc64 in start_thread () at /lib64/libc.so.6 #7 0x00007ffff7393550 in clone3 () at /lib64/libc.so.6 Thread 7 (Thread 0x7ffeeedfd6c0 (LWP 116344) "qemu-system-s39"): #0 0x0000555555ba7596 in tlb_reset_dirty_range_locked (tlb_entry=0x555556757140, start=140732950200320, length=4096) at ../accel/tcg/cputlb.c:993 #1 0x0000555555ba76d7 in tlb_reset_dirty (cpu=0x55555670b3d0, start1=140732950200320, length=4096) at ../accel/tcg/cputlb.c:1041 #2 0x0000555555b66e02 in tlb_reset_dirty_range_all (start=27344896, length=4096) at ../softmmu/physmem.c:839 #3 0x0000555555b6709d in cpu_physical_memory_test_and_clear_dirty (start=27344896, length=4096, client=1) at ../softmmu/physmem.c:886 #4 0x0000555555ba755b in tlb_protect_code (ram_addr=27344896) at ../accel/tcg/cputlb.c:961 #5 0x0000555555b97a4b in tb_page_add (p=0x7ffee8120090, tb=0x7fffe8599f80, n=0) at ../accel/tcg/tb-maint.c:706 #6 0x0000555555b97b2b in tb_record (tb=0x7fffe8599f80) at ../accel/tcg/tb-maint.c:721 #7 0x0000555555b9848d in tb_link_page (tb=0x7fffe8599f80) at ../accel/tcg/tb-maint.c:983 #8 0x0000555555b9facd in tb_gen_code (cpu=0x5555566b7770, pc=1026, cs_base=0, flags=1744928771, cflags=-16252928) at ../accel/tcg/translate-all.c:553 #9 0x0000555555b960b3 in cpu_exec_loop (cpu=0x5555566b7770, sc=0x7ffeeedfc540) at ../accel/tcg/cpu-exec.c:1005 #10 0x0000555555b96252 in cpu_exec_setjmp (cpu=0x5555566b7770, sc=0x7ffeeedfc540) at ../accel/tcg/cpu-exec.c:1057 #11 0x0000555555b962d9 in cpu_exec (cpu=0x5555566b7770) at ../accel/tcg/cpu-exec.c:1083 #12 0x0000555555bba868 in tcg_cpus_exec (cpu=0x5555566b7770) at ../accel/tcg/tcg-accel-ops.c:75 #13 0x0000555555bbaf20 in mttcg_cpu_thread_fn (arg=0x5555566b7770) at ../accel/tcg/tcg-accel-ops-mttcg.c:95 #14 0x0000555555dc1ece in qemu_thread_start (args=0x55555670b170) at ../util/qemu-thread-posix.c:541 #15 0x00007ffff730bc64 in start_thread () at /lib64/libc.so.6 #16 0x00007ffff7393550 in clone3 () at /lib64/libc.so.6 Thread 6 (Thread 0x7ffeef5fe6c0 (LWP 116343) "qemu-system-s39"): #0 0x00007ffff730dabc in __pthread_kill_implementation () at /lib64/libc.so.6 #1 0x00007ffff72bc266 in raise () at /lib64/libc.so.6 #2 0x00007ffff72a4897 in abort () at /lib64/libc.so.6 #3 0x00007ffff76f0eee in () at /lib64/libglib-2.0.so.0 #4 0x00007ffff775649a in g_assertion_message_expr () at /lib64/libglib-2.0.so.0 #5 0x0000555555b96f82 in assert_no_pages_locked () at ../accel/tcg/tb-maint.c:367 #6 0x0000555555b976cc in page_collection_lock (start=6674, last=6674) at ../accel/tcg/tb-maint.c:614 #7 0x0000555555b9877c in tb_invalidate_phys_range (start=27336872, last=27336879) at ../accel/tcg/tb-maint.c:1197 #8 0x0000555555b6b25e in invalidate_and_set_dirty (mr=0x5555563f6e90, addr=27336872, length=8) at ../softmmu/physmem.c:2542 #9 0x0000555555b6d72d in address_space_stq_internal (as=0x5555566b7350, addr=27336872, val=2930044561408, attrs=..., result=0x0, endian=DEVICE_NATIVE_ENDIAN) at /root/git/qemu/memory_ldst.c.inc:495 #10 0x0000555555b6d7aa in address_space_stq (as=0x5555566b7350, addr=27336872, val=2930044561408, attrs=..., result=0x0) at /root/git/qemu/memory_ldst.c.inc:510 #11 0x0000555555a9fff6 in stq_phys (as=0x5555566b7350, addr=27336872, val=2930044561408) at /root/git/qemu/include/exec/memory_ldst_phys.h.inc:55 #12 0x0000555555aa0630 in s390_cpu_tlb_fill (cs=0x555556663c80, address=2930044559360, size=1, access_type=MMU_INST_FETCH, mmu_idx=0, probe=false, retaddr=0) at ../target/s390x/tcg/excp_helper.c:194 #13 0x0000555555ba8a89 in probe_access_internal (env=0x555556666460, addr=2930044559360, fault_size=1, access_type=MMU_INST_FETCH, mmu_idx=0, nonfault=false, phost=0x7ffeef5fcfd0, pfull=0x7ffeef5fcfc8, retaddr=0, check_mem_cbs=false) at ../accel/tcg/cputlb.c:1530 #14 0x0000555555ba90f0 in get_page_addr_code_hostp (env=0x555556666460, addr=2930044559360, hostp=0x7ffeef5fd2f0) at ../accel/tcg/cputlb.c:1695 #15 0x0000555555ba122d in translator_access (env=0x555556666460, db=0x7ffeef5fd2c0, pc=2930044559360, len=4) at ../accel/tcg/translator.c:257 #16 0x0000555555ba15e2 in translator_ldl (env=0x555556666460, db=0x7ffeef5fd2c0, pc=2930044559360) at ../accel/tcg/translator.c:351 #17 0x0000555555abd537 in ld_code4 (env=0x555556666460, s=0x7ffeef5fd2c0, pc=2930044559360) at ../target/s390x/tcg/translate.c:399 #18 0x0000555555ad9e93 in extract_insn (env=0x555556666460, s=0x7ffeef5fd2c0) at ../target/s390x/tcg/translate.c:6204 #19 0x0000555555ada171 in translate_one (env=0x555556666460, s=0x7ffeef5fd2c0) at ../target/s390x/tcg/translate.c:6296 #20 0x0000555555ada85c in s390x_tr_translate_insn (dcbase=0x7ffeef5fd2c0, cs=0x555556663c80) at ../target/s390x/tcg/translate.c:6469 #21 0x0000555555ba100d in translator_loop (cpu=0x555556663c80, tb=0x7fffe77a1480, max_insns=0x7ffeef5fd3f4, pc=2930044559358, host_pc=0x7fff08801ffe, ops=0x555556216b60 <s390x_tr_ops>, db=0x7ffeef5fd2c0) at ../accel/tcg/translator.c:180 #22 0x0000555555adaabe in gen_intermediate_code (cs=0x555556663c80, tb=0x7fffe77a1480, max_insns=0x7ffeef5fd3f4, pc=2930044559358, host_pc=0x7fff08801ffe) at ../target/s390x/tcg/translate.c:6535 #23 0x0000555555b9f167 in setjmp_gen_code (env=0x555556666460, tb=0x7fffe77a1480, pc=2930044559358, host_pc=0x7fff08801ffe, max_insns=0x7ffeef5fd3f4, ti=0x7ffeef5fd410) at ../accel/tcg/translate-all.c:278 #24 0x0000555555b9f47e in tb_gen_code (cpu=0x555556663c80, pc=2930044559358, cs_base=0, flags=1744961539, cflags=-16252928) at ../accel/tcg/translate-all.c:360 #25 0x0000555555b960b3 in cpu_exec_loop (cpu=0x555556663c80, sc=0x7ffeef5fd540) at ../accel/tcg/cpu-exec.c:1005 #26 0x0000555555b96252 in cpu_exec_setjmp (cpu=0x555556663c80, sc=0x7ffeef5fd540) at ../accel/tcg/cpu-exec.c:1057 #27 0x0000555555b962d9 in cpu_exec (cpu=0x555556663c80) at ../accel/tcg/cpu-exec.c:1083 #28 0x0000555555bba868 in tcg_cpus_exec (cpu=0x555556663c80) at ../accel/tcg/tcg-accel-ops.c:75 #29 0x0000555555bbaf20 in mttcg_cpu_thread_fn (arg=0x555556663c80) at ../accel/tcg/tcg-accel-ops-mttcg.c:95 #30 0x0000555555dc1ece in qemu_thread_start (args=0x5555566b74f0) at ../util/qemu-thread-posix.c:541 #31 0x00007ffff730bc64 in start_thread () at /lib64/libc.so.6 #32 0x00007ffff7393550 in clone3 () at /lib64/libc.so.6 Thread 5 (Thread 0x7ffeefdff6c0 (LWP 116342) "qemu-system-s39"): #0 0x00007ffff730820e in __futex_abstimed_wait_common () at /lib64/libc.so.6 #1 0x00007ffff730af50 in pthread_cond_wait@@GLIBC_2.3.2 () at /lib64/libc.so.6 #2 0x0000555555dc1686 in qemu_cond_wait_impl (cond=0x5555566639c0, mutex=0x55555632cf60 <qemu_global_mutex>, file=0x555555f07d6b "../softmmu/cpus.c", line=424) at ../util/qemu-thread-posix.c:225 #3 0x00005555559d78fb in qemu_wait_io_event (cpu=0x555556610190) at ../softmmu/cpus.c:424 #4 0x0000555555bbafec in mttcg_cpu_thread_fn (arg=0x555556610190) at ../accel/tcg/tcg-accel-ops-mttcg.c:123 #5 0x0000555555dc1ece in qemu_thread_start (args=0x555556663a00) at ../util/qemu-thread-posix.c:541 #6 0x00007ffff730bc64 in start_thread () at /lib64/libc.so.6 #7 0x00007ffff7393550 in clone3 () at /lib64/libc.so.6 Thread 4 (Thread 0x7ffff4b506c0 (LWP 116341) "qemu-system-s39"): #0 0x00007ffff730820e in __futex_abstimed_wait_common () at /lib64/libc.so.6 #1 0x00007ffff730af50 in pthread_cond_wait@@GLIBC_2.3.2 () at /lib64/libc.so.6 #2 0x0000555555dc1686 in qemu_cond_wait_impl (cond=0x55555660fed0, mutex=0x55555632cf60 <qemu_global_mutex>, file=0x555555f07d6b "../softmmu/cpus.c", line=424) at ../util/qemu-thread-posix.c:225 #3 0x00005555559d78fb in qemu_wait_io_event (cpu=0x5555565bc6a0) at ../softmmu/cpus.c:424 #4 0x0000555555bbafec in mttcg_cpu_thread_fn (arg=0x5555565bc6a0) at ../accel/tcg/tcg-accel-ops-mttcg.c:123 #5 0x0000555555dc1ece in qemu_thread_start (args=0x55555660ff10) at ../util/qemu-thread-posix.c:541 #6 0x00007ffff730bc64 in start_thread () at /lib64/libc.so.6 #7 0x00007ffff7393550 in clone3 () at /lib64/libc.so.6 Thread 3 (Thread 0x7ffff53516c0 (LWP 116339) "qemu-system-s39"): #0 0x00007ffff730820e in __futex_abstimed_wait_common () at /lib64/libc.so.6 #1 0x00007ffff730af50 in pthread_cond_wait@@GLIBC_2.3.2 () at /lib64/libc.so.6 #2 0x0000555555dc1686 in qemu_cond_wait_impl (cond=0x5555565bc3e0, mutex=0x55555632cf60 <qemu_global_mutex>, file=0x555555f07d6b "../softmmu/cpus.c", line=424) at ../util/qemu-thread-posix.c:225 #3 0x00005555559d78fb in qemu_wait_io_event (cpu=0x555556568c90) at ../softmmu/cpus.c:424 #4 0x0000555555bbafec in mttcg_cpu_thread_fn (arg=0x555556568c90) at ../accel/tcg/tcg-accel-ops-mttcg.c:123 #5 0x0000555555dc1ece in qemu_thread_start (args=0x5555565bc420) at ../util/qemu-thread-posix.c:541 #6 0x00007ffff730bc64 in start_thread () at /lib64/libc.so.6 #7 0x00007ffff7393550 in clone3 () at /lib64/libc.so.6 Thread 2 (Thread 0x7ffff63bb6c0 (LWP 116338) "qemu-system-s39"): #0 0x00007ffff738b41d in syscall () at /lib64/libc.so.6 #1 0x0000555555dc1b34 in qemu_futex_wait (f=0x555556354cf8 <rcu_call_ready_event>, val=4294967295) at /root/git/qemu/include/qemu/futex.h:29 #2 0x0000555555dc1d1b in qemu_event_wait (ev=0x555556354cf8 <rcu_call_ready_event>) at ../util/qemu-thread-posix.c:464 #3 0x0000555555dce603 in call_rcu_thread (opaque=0x0) at ../util/rcu.c:278 #4 0x0000555555dc1ece in qemu_thread_start (args=0x5555563bff20) at ../util/qemu-thread-posix.c:541 #5 0x00007ffff730bc64 in start_thread () at /lib64/libc.so.6 #6 0x00007ffff7393550 in clone3 () at /lib64/libc.so.6 Thread 1 (Thread 0x7ffff63bef40 (LWP 116335) "qemu-system-s39"): #0 0x00007ffff7385596 in ppoll () at /lib64/libc.so.6 #1 0x0000555555ddf603 in qemu_poll_ns (fds=0x55555680d130, nfds=75, timeout=9583649) at ../util/qemu-timer.c:351 #2 0x0000555555ddaf2b in os_host_main_loop_wait (timeout=9583649) at ../util/main-loop.c:308 #3 0x0000555555ddb05a in main_loop_wait (nonblocking=0) at ../util/main-loop.c:592 #4 0x00005555559e5ec1 in qemu_main_loop () at ../softmmu/runstate.c:732 #5 0x0000555555bc0cb4 in qemu_default_main () at ../softmmu/main.c:37 #6 0x0000555555bc0cea in main (argc=46, argv=0x7fffffffe278) at ../softmmu/main.c:48 (gdb)