TURN 36 restored QEMU GICv3 bring-up far enough to eliminate the original EC=0 idle_loop ICC_PMR_EL1 flood. With -M virt,gic-version=3 -smp 1, QEMU reaches init, heartbeat, bsshd, bounce, and 30s CPU0 timer ticks without fatal exceptions. With the native boot-test's -smp 4, QEMU now reaches userspace but later emits EL1 DATA_ABORT/INSTRUCTION_ABORT and UNHANDLED_EC with bogus ELRs into data/BSS symbols (examples: 0xffff00004022d000 near SCHEDULER/CPU0_IDLE_* data and 0xffff00004024f418 CPU0_IDLE_ITERATIONS) during service spawn. Artifacts: turn36-artifacts/nb7-aarch64-qemu/native-final-serial.txt and gicv3-smp1-serial.txt.
Acceptance Criteria
Root-cause the -smp 4 context corruption without editing gold-master context_switch/idle regions unless approved; native ARM64 QEMU boot test passes cleanly with no UNHANDLED_EC/DATA_ABORT/INSTRUCTION_ABORT; aarch64 kernel build has zero warnings.
type=bug | priority=P1 | bd status=open | bd labels: arm64, gicv3, qemu, smp
Migrated from bd issue breenix-tjh.
TURN 36 restored QEMU GICv3 bring-up far enough to eliminate the original EC=0 idle_loop ICC_PMR_EL1 flood. With -M virt,gic-version=3 -smp 1, QEMU reaches init, heartbeat, bsshd, bounce, and 30s CPU0 timer ticks without fatal exceptions. With the native boot-test's -smp 4, QEMU now reaches userspace but later emits EL1 DATA_ABORT/INSTRUCTION_ABORT and UNHANDLED_EC with bogus ELRs into data/BSS symbols (examples: 0xffff00004022d000 near SCHEDULER/CPU0_IDLE_* data and 0xffff00004024f418 CPU0_IDLE_ITERATIONS) during service spawn. Artifacts: turn36-artifacts/nb7-aarch64-qemu/native-final-serial.txt and gicv3-smp1-serial.txt.
Acceptance Criteria
Root-cause the -smp 4 context corruption without editing gold-master context_switch/idle regions unless approved; native ARM64 QEMU boot test passes cleanly with no UNHANDLED_EC/DATA_ABORT/INSTRUCTION_ABORT; aarch64 kernel build has zero warnings.
type=
bug| priority=P1 | bd status=open| bd labels: arm64, gicv3, qemu, smpMigrated from bd issue
breenix-tjh.