Last kernel I could boot correctly under qemu is 3.7.6-102.fc17.armv7l.
When I try 3.7.9-101.fc17.armv7l, I get this under qemu-1.4.0 :
[ OK ] Started /etc/rc.d/rc.local Compatibility.
Starting Wait for Plymouth Boot Screen to Quit...
Starting Terminate Plymouth Boot Screen...
[ OK ] Started Wait for Plymouth Boot Screen to Quit.
Starting Serial Getty on ttyAMA0...
[ OK ] Started Serial Getty on ttyAMA0.
Starting Getty on tty1...
[ OK ] Started Getty on tty1.
Starting Serial Getty on hvc0...
[ OK ] Started Serial Getty on hvc0.
[ OK ] Reached target Login Prompts.
[ OK ] Started Terminate Plymouth Boot Screen.
[ 313.435453] Internal error: Oops - undefined instruction: 0 [#1] SMP ARM
[ 313.437735] Modules linked in: snd_aaci snd_ac97_codec ac97_bus snd_seq snd_seq_device snd_pcm smsc snd_page_alloc snd_timer i2c_versatile snd i2c_algo_bit soundcore of_i2c i2c_core smsc911x isp1760 ambakmi amba_clcd cfbfillrect cfbimgblt cfbcopyarea
mmc_block
[ 313.440888] CPU: 0 Not tainted (3.7.9-101.fc17.armv7l #1)
[ 313.442095] PC is at hvc_dcc_get_chars+0x10/0x38
[ 313.442623] LR is at hvc_poll+0xd4/0x284
[ 313.442935] pc : [<c02dc01c>] lr : [<c02dc9b0>] psr: 80000093
[ 313.442935] sp : ee8e3ef0 ip : c074f170 fp : ee8e3efc
[ 313.443791] r10: ef25fa7c r9 : 20000013 r8 : 00000000
[ 313.444330] r7 : c0794950 r6 : 00000001 r5 : ee5a6000 r4 : ef25fa00
[ 313.444790] r3 : c02dc00c r2 : 00000010 r1 : ee8e3efc r0 : 00000000
[ 313.445461] Flags: Nzcv IRQs off FIQs on Mode SVC_32 ISA ARM Segment kernel
[ 313.445992] Control: 10c5307d Table: 8d8a406a DAC: 00000015
[ 313.446723] Process khvcd (pid: 36, stack limit = 0xee8e2240)
[ 313.447252] Stack: (0xee8e3ef0 to 0xee8e4000)
[ 313.447833] 3ee0: f6ecb520 00000000 00000000 ef03fef8
[ 313.448514] 3f00: ef03feec 00000001 00000000 271aea15 00000001 ee8e2000 ef25fa00 c084e1a8
[ 313.449136] 3f20: c0794950 00000000 c07ba5a4 00000000 c07949c8 c02dcbfc 00000000 00000000
[ 313.449768] 3f40: ee8e3f50 ef03fee0 00000000 00000000 c02dcb60 00000000 00000000 00000000
[ 313.450483] 3f60: 00000000 c0043584 00000000 00000000 00000000 00000000 00000000 00000000
[ 313.451107] 3f80: ee8e3f80 ee8e3f80 00000000 00000000 ee8e3f90 ee8e3f90 ee8e3fac ef03fee0
[ 313.451748] 3fa0: c00434dc 00000000 00000000 c000e358 00000000 00000000 00000000 00000000
[ 313.452440] 3fc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[ 313.453069] 3fe0: 00000000 00000000 00000000 00000000 00000013 00000000 00000000 00000000
[ 313.454071] [<c02dc01c>] (hvc_dcc_get_chars+0x10/0x38) from [<c02dc9b0>] (hvc_poll+0xd4/0x284)
[ 313.454853] [<c02dc9b0>] (hvc_poll+0xd4/0x284) from [<c02dcbfc>] (khvcd+0x9c/0x168)
[ 313.455519] [<c02dcbfc>] (khvcd+0x9c/0x168) from [<c0043584>] (kthread+0xa8/0xb8)
[ 313.456107] [<c0043584>] (kthread+0xa8/0xb8) from [<c000e358>] (ret_from_fork+0x14/0x20)
[ 313.456935] Code: ee103e11 ee103e11 ee103e11 ee103e11 (ee103e11)
[ 313.458015] ---[ end trace 76031a30b5d82d33 ]---
[ 333.769135] BUG: soft lockup - CPU#0 stuck for 22s! [(agetty):1538]
[ 333.769480] Modules linked in: snd_aaci snd_ac97_codec ac97_bus snd_seq snd_seq_device snd_pcm smsc snd_page_alloc snd_timer i2c_versatile snd i2c_algo_bit soundcore of_i2c i2c_core smsc911x isp1760 ambakmi amba_clcd cfbfillrect cfbimgblt cfbcopyarea
mmc_block
[ 333.770938]
[ 333.771093] Pid: 1538, comm: (agetty)
[ 333.771442] CPU: 0 Tainted: G D (3.7.9-101.fc17.armv7l #1)
[ 333.771778] PC is at _raw_spin_lock+0x2c/0x40
[ 333.772112] LR is at hvc_get_by_index+0x1c/0x110
[ 333.772301] pc : [<c04fac00>] lr : [<c02dc690>] psr: 20000013
[ 333.772301] sp : ed8a1d70 ip : 00000000 fp : 00000000
[ 333.772784] r10: ef2147d0 r9 : 00010004 r8 : 00000000
[ 333.773021] r7 : 0e500000 r6 : ef265280 r5 : c0794950 r4 : ee5a5000
[ 333.773296] r3 : 00000004 r2 : 00000005 r1 : 00000000 r0 : c084e1f4
[ 333.773583] Flags: nzCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user
[ 333.773892] Control: 10c5307d Table: 8d8a406a DAC: 00000015
[ 333.774284] [<c0015c4c>] (unwind_backtrace+0x0/0x124) from [<c0098bac>] (watchdog_timer_fn+0x144/0x1d8)
[ 333.774695] [<c0098bac>] (watchdog_timer_fn+0x144/0x1d8) from [<c0047544>] (__run_hrtimer+0xd8/0x1fc)
[ 333.775101] [<c0047544>] (__run_hrtimer+0xd8/0x1fc) from [<c0048134>] (hrtimer_interrupt+0x128/0x2c8)
[ 333.775506] [<c0048134>] (hrtimer_interrupt+0x128/0x2c8) from [<c001e3f0>] (sp804_timer_interrupt+0x44/0x54)
[ 333.775931] [<c001e3f0>] (sp804_timer_interrupt+0x44/0x54) from [<c00996e0>] (handle_irq_event_percpu+0x38/0x20c)
[ 333.776371] [<c00996e0>] (handle_irq_event_percpu+0x38/0x20c) from [<c009990c>] (handle_irq_event+0x58/0x78)
[ 333.776791] [<c009990c>] (handle_irq_event+0x58/0x78) from [<c009c828>] (handle_fasteoi_irq+0xd4/0x140)
[ 333.777202] [<c009c828>] (handle_fasteoi_irq+0xd4/0x140) from [<c00990b8>] (generic_handle_irq+0x28/0x38)
[ 333.777622] [<c00990b8>] (generic_handle_irq+0x28/0x38) from [<c000ec28>] (handle_IRQ+0x80/0xc0)
[ 333.778014] [<c000ec28>] (handle_IRQ+0x80/0xc0) from [<c0008514>] (gic_handle_irq+0x44/0x68)
[ 333.778392] [<c0008514>] (gic_handle_irq+0x44/0x68) from [<c04fb300>] (__irq_svc+0x40/0x50)
[ 333.778752] Exception stack(0xed8a1d28 to 0xed8a1d70)
[ 333.779009] 1d20: c084e1f4 00000000 00000005 00000004 ee5a5000 c0794950
[ 333.779368] 1d40: ef265280 0e500000 00000000 00010004 ef2147d0 00000000 00000000 ed8a1d70
[ 333.779713] 1d60: c02dc690 c04fac00 20000013 ffffffff
[ 333.779973] [<c04fb300>] (__irq_svc+0x40/0x50) from [<c04fac00>] (_raw_spin_lock+0x2c/0x40)
[ 333.780347] [<c04fac00>] (_raw_spin_lock+0x2c/0x40) from [<c02dc690>] (hvc_get_by_index+0x1c/0x110)
[ 333.780746] [<c02dc690>] (hvc_get_by_index+0x1c/0x110) from [<c02dc7a0>] (hvc_install+0x1c/0x54)
[ 333.781140] [<c02dc7a0>] (hvc_install+0x1c/0x54) from [<c02c55d0>] (tty_init_dev+0x64/0x170)
[ 333.781520] [<c02c55d0>] (tty_init_dev+0x64/0x170) from [<c02c5eb8>] (tty_open+0x2dc/0x530)
[ 333.781892] [<c02c5eb8>] (tty_open+0x2dc/0x530) from [<c011c84c>] (chrdev_open+0x158/0x180)
[ 333.782270] [<c011c84c>] (chrdev_open+0x158/0x180) from [<c0116a3c>] (do_dentry_open+0x1dc/0x28c)
[ 333.782655] [<c0116a3c>] (do_dentry_open+0x1dc/0x28c) from [<c0116c98>] (finish_open+0x40/0x54)
[ 333.783038] [<c0116c98>] (finish_open+0x40/0x54) from [<c0125fdc>] (do_last+0xa50/0xca4)
[ 333.783399] [<c0125fdc>] (do_last+0xa50/0xca4) from [<c01262dc>] (path_openat+0xac/0x454)
[ 333.783766] [<c01262dc>] (path_openat+0xac/0x454) from [<c0126970>] (do_filp_open+0x34/0x80)
[ 333.784142] [<c0126970>] (do_filp_open+0x34/0x80) from [<c0117b90>] (do_sys_open+0xf0/0x17c)
[ 333.784518] [<c0117b90>] (do_sys_open+0xf0/0x17c) from [<c000e454>] (__sys_trace_return+0x0/0x2c)
[ 373.540867] INFO: rcu_sched detected stalls on CPUs/tasks: {} (detected by 0, t=6002 jiffies)
[ 373.541596] INFO: Stall ended before state dump start
When I use qemu-1.3.1, I get this instead:
[ 4.309225] rtc-pl031 10017000.rtc: setting system clock to 2013-03-27 17:01:26 UTC (1364403686)
[ 4.323766] Freeing init memory: 364K
[ 7.297051] dracut: dracut-018-105.git20120927.fc17
[ 8.621485] udevd[88]: starting version 182
[ 9.585873] skbuff: skb_over_panic: text:c028bb6c len:321 put:11 head:ee9fa200 data:ee9fa200 tail:0xee9fa341 end:0xee9fa340 dev:<NULL>
[ 9.593336] ------------[ cut here ]------------
[ 9.594265] kernel BUG at net/core/skbuff.c:127!
[ 9.595036] Internal error: Oops - BUG: 0 [#1] SMP ARM
[ 9.595584] Modules linked in:
[ 9.596580] CPU: 0 Not tainted (3.7.9-101.fc17.armv7l #1)
[ 9.597429] PC is at skb_put+0x7c/0x98
[ 9.597657] LR is at skb_put+0x7c/0x98
[ 9.597958] pc : [<c03e8f94>] lr : [<c03e8f94>] psr: 60000013
[ 9.597958] sp : ee9e5ea0 ip : 00000000 fp : ee948020
[ 9.598488] r10: ee9bfec0 r9 : eea05a80 r8 : c06205c0
[ 9.598835] r7 : c078dd58 r6 : c0658092 r5 : ee9fa340 r4 : ee9fa200
[ 9.599156] r3 : 60000013 r2 : c0760174 r1 : 60000013 r0 : 0000007a
[ 9.599546] Flags: nZCv IRQs on FIQs on Mode SVC_32 ISA ARM Segment user
[ 9.599987] Control: 10c5307d Table: 8ea0c06a DAC: 00000015
[ 9.600312] Process udevadm (pid: 95, stack limit = 0xee9e4240)
[ 9.600644] Stack: (0xee9e5ea0 to 0xee9e6000)
[ 9.601116] 5ea0: 0000000b ee9fa200 ee9fa200 ee9fa341 ee9fa340 c0658092 ef0c5018 ee948000
[ 9.601523] 5ec0: ef0c1600 c028bb6c 000000d0 c011971c 00000010 000280d0 00000000 00000008
[ 9.601967] 5ee0: ef0dc400 c068bf4e 00000000 00000010 c02407b0 c07a5380 00000003 00000003
[ 9.602363] 5f00: ef0c5010 00000003 ee9bfe58 ee9e5f80 c053aca0 ef0c5018 b829c218 c02ed744
[ 9.602816] 5f20: ef0c5010 00000000 eea06000 ef0c6080 ee9bfe40 c02ec96c 00000003 c017c390
[ 9.603215] 5f40: eea059c0 beec4f00 ee9e5f80 00000000 00000003 ee9e4000 00000003 c0118588
[ 9.603596] 5f60: eea059c0 beec4f00 00000000 00000000 eea059c0 00000000 beec4f00 c0118890
[ 9.604055] 5f80: 00000000 00000000 00000003 b7005010 b7005010 00000003 00000004 c000e484
[ 9.604449] 5fa0: 00000000 c000e2c0 b7005010 b7005010 00000003 beec4f00 00000003 00000000
[ 9.604899] 5fc0: b7005010 b7005010 00000003 00000004 b6ff9ddc b8288008 b6fd5eb8 b829c218
[ 9.605292] 5fe0: 00000000 beec439c b6febc30 b6e98cac 40000010 00000003 00000000 00000000
[ 9.606682] [<c03e8f94>] (skb_put+0x7c/0x98) from [<c028bb6c>] (kobject_uevent_env+0x378/0x55c)
[ 9.607235] [<c028bb6c>] (kobject_uevent_env+0x378/0x55c) from [<c02ed744>] (store_uevent+0x38/0x54)
[ 9.607709] [<c02ed744>] (store_uevent+0x38/0x54) from [<c02ec96c>] (dev_attr_store+0x20/0x2c)
[ 9.608287] [<c02ec96c>] (dev_attr_store+0x20/0x2c) from [<c017c390>] (sysfs_write_file+0x108/0x150)
[ 9.608726] [<c017c390>] (sysfs_write_file+0x108/0x150) from [<c0118588>] (vfs_write+0xb0/0x188)
[ 9.609243] [<c0118588>] (vfs_write+0xb0/0x188) from [<c0118890>] (sys_write+0x40/0x6c)
[ 9.609635] [<c0118890>] (sys_write+0x40/0x6c) from [<c000e2c0>] (ret_fast_syscall+0x0/0x30)
[ 9.610277] Code: e7f001f2 e7f001f2 e7f001f2 e7f001f2 (e7f001f2)
[ 9.611106] ---[ end trace d3d497a83405e5ad ]---
/init: line 131: 95 Segmentation fault udevadm trigger --type=devices --action=add > /dev/null 2>&1
In either case, the boot hangs.
I use the following script to boot:
#!/bin/sh
BASEDIR=`dirname $0`
#QEMU_BIN=/home/palosanto/programa/qemu-build/arm-softmmu/qemu-system-arm
QEMU_BIN=/opt/qemu-1.4.0/bin/qemu-system-arm
#QEMU_BIN=/opt/qemu-1.1-custom/bin/qemu-system-arm
#QEMU_BIN=/opt/qemu-1.3.1/bin/qemu-system-arm
QEMU_MACH=vexpress-a9
#QEMU_MACH=vexpress-a15
#KERNELVER=3.3.6-3.fc17.armv5tel
# 3.4.2-3.fc17.armv5tel requiere physmap.enabled=0
#KERNELVER=3.4.2-3.fc17.armv5tel
#KERNELVER=3.5.3-1.fc17.armv5tel
#KERNELVER=3.5.6-1.fc17.armv5tel
#KERNELVER=3.7.6-102.fc17.armv7l
KERNELVER=3.7.9-101.fc17.armv7l
DTB=vexpress-v2p-ca9.dtb
#DTB=vexpress-v2p-ca15_a7.dtb
rm -f $BASEDIR/*.sock
/usr/bin/nohup $QEMU_BIN -display vnc=:0 -m 1024 -M $QEMU_MACH -kernel $BASEDIR/boot/vmlinuz-$KERNELVER -initrd $BASEDIR/boot/initramfs-$KERNELVER.img -dtb $BASEDIR/boot/dtb-$KERNELVER/$DTB -append "root=LABEL=rootfs console=ttyAMA0 raid=noautodetect
physmap.enabled=0" -drive if=sd,cache=writeback,file=$BASEDIR/fedora-17-arm.vmdk -net nic,vlan=0 -net bridge,vlan=0 -monitor unix:$BASEDIR/qemu-arm-monitor.sock,server,nowait -serial unix:$BASEDIR/qemu-arm-serial.sock,server,nowait -daemonize