Branch: refs/heads/master
Home: https://github.com/qemu/qemu
Commit: 813dbe869f4f82f00f2b465fdd22d30db1d5233e
https://github.com/qemu/qemu/commit/813dbe869f4f82f00f2b465fdd22d30db1d5233e
Author: Richard Henderson <[email protected]>
Date: 2026-02-06 (Fri, 06 Feb 2026)
Changed paths:
M accel/tcg/internal-common.h
Log Message:
-----------
accel/tcg: Don't pass NULL to get_page_addr_code_hostp
Pass a dummy variable instead to let the value be discarded,
in preparation for making the argument mandatory.
Reviewed-by: Philippe Mathieu-Daudé <[email protected]>
Signed-off-by: Richard Henderson <[email protected]>
Commit: 0039e5fd22344fec664c980d7a27443568834264
https://github.com/qemu/qemu/commit/0039e5fd22344fec664c980d7a27443568834264
Author: Richard Henderson <[email protected]>
Date: 2026-02-06 (Fri, 06 Feb 2026)
Changed paths:
M accel/tcg/cputlb.c
M accel/tcg/internal-common.h
M accel/tcg/user-exec.c
Log Message:
-----------
accel/tcg: Fix uninitialized hostp in get_page_addr_code_hostp
This uninitialized value violates the contract in the
documentation comment, and may lead to a SEGV during
translaton with -d in_asm.
Change the documentation to disallow hostp NULL.
Pass hostp to probe_access_internal directly.
Reported-by: Panda Jiang <[email protected]>
Reviewed-by: Philippe Mathieu-Daudé <[email protected]>
Signed-off-by: Richard Henderson <[email protected]>
Commit: d22e9aec572396836782e993cb18d598e6012688
https://github.com/qemu/qemu/commit/d22e9aec572396836782e993cb18d598e6012688
Author: Aleksandr Sergeev <[email protected]>
Date: 2026-02-06 (Fri, 06 Feb 2026)
Changed paths:
M linux-user/main.c
M linux-user/syscall.c
M linux-user/user-internals.h
Log Message:
-----------
linux-user/syscall.c: Prevent acquiring clone_lock while fork()
By the spec, fork() copies only the thread which executes it.
So it may happen, what while one thread is doing a fork,
another thread is holding `clone_lock` mutex
(e.g. doing a `fork()` or `exit()`).
So the child process is born with the mutex being held,
and there are nobody to release it.
As the thread executing do_syscall() is not considered running,
start_exclusive() does not protect us from the case.
Resolves: https://gitlab.com/qemu-project/qemu/-/issues/3226
Signed-off-by: Aleksandr Sergeev <[email protected]>
Reviewed-by: Richard Henderson <[email protected]>
Signed-off-by: Richard Henderson <[email protected]>
Message-ID: <[email protected]>
Commit: 251a3d4ca3c961d95cd624252a178a33066455a2
https://github.com/qemu/qemu/commit/251a3d4ca3c961d95cd624252a178a33066455a2
Author: Paolo Bonzini <[email protected]>
Date: 2026-02-06 (Fri, 06 Feb 2026)
Changed paths:
M accel/tcg/cpu-exec.c
Log Message:
-----------
Revert "tcg/user: do not set exit_request gratuitously"
This reverts commit b422a7bff64eaf55b8250225533ca1df42c3777e.
The reporter says "The commit breaks go; if you run go build in a loop,
it eventually hangs uninterruptible (except -9) with a couple of zombie
children left over".
Reported-by: Andreas Schwab <[email protected]>
Signed-off-by: Paolo Bonzini <[email protected]>
Reviewed-by: Richard Henderson <[email protected]>
Signed-off-by: Richard Henderson <[email protected]>
Message-ID: <[email protected]>
Commit: 973b0b0e3a5e4c4816cddcb367dfff5dd16be611
https://github.com/qemu/qemu/commit/973b0b0e3a5e4c4816cddcb367dfff5dd16be611
Author: Jim Shu <[email protected]>
Date: 2026-02-06 (Fri, 06 Feb 2026)
Changed paths:
M accel/tcg/cputlb.c
Log Message:
-----------
accel/tcg: Remove a redundant argument attrs in io_prepare()
attrs is already in CPUTLBEntryFull, so this argument is redundant.
Just remove it.
Clean up commit 94c6e9cf04409e38563080348d6136879f91ffee
Signed-off-by: Jim Shu <[email protected]>
Reviewed-by: Gustavo Romero <[email protected]>
Reviewed-by: Philippe Mathieu-Daudé <[email protected]>
Reviewed-by: Richard Henderson <[email protected]>
Signed-off-by: Richard Henderson <[email protected]>
Message-ID: <[email protected]>
Commit: 33a0e3c75577f3677590f03a7f28647d57c4de27
https://github.com/qemu/qemu/commit/33a0e3c75577f3677590f03a7f28647d57c4de27
Author: Andrey Drobyshev <[email protected]>
Date: 2026-02-09 (Mon, 09 Feb 2026)
Changed paths:
M scripts/qemugdb/mtree.py
Log Message:
-----------
scripts/qemugdb: mtree: Fix OverflowError in mtree with 128-bit addresses
The 'qemu mtree' command fails with "OverflowError: int too big to
convert" when memory regions have 128-bit addresses.
Fix by changing conversion base from 16 to 0 (automatic detection based
on string prefix). This works more reliably in GDB's embedded
Python.
Signed-off-by: Andrey Drobyshev <[email protected]>
Reviewed-by: Stefan Hajnoczi <[email protected]>
Message-id: [email protected]
Signed-off-by: Stefan Hajnoczi <[email protected]>
Commit: 80c97930a93c32e2e666f5420af2d5734021a135
https://github.com/qemu/qemu/commit/80c97930a93c32e2e666f5420af2d5734021a135
Author: Andrey Drobyshev <[email protected]>
Date: 2026-02-09 (Mon, 09 Feb 2026)
Changed paths:
M scripts/qemugdb/timers.py
Log Message:
-----------
scripts/qemugdb: timers: Fix KeyError in 'qemu timers' command
Currently invoking 'qemu timers' command results into: "gdb.error: There
is no member named last". Let's remove the legacy 'last' field from
QEMUClock, as it was removed in v4.2.0 by the commit 3c2d4c8aa6a
("timer: last, remove last bits of last").
Signed-off-by: Andrey Drobyshev <[email protected]>
Reviewed-by: Stefan Hajnoczi <[email protected]>
Message-id: [email protected]
Signed-off-by: Stefan Hajnoczi <[email protected]>
Commit: 03a37ce754d66cf506627b8e785df4fc906417ce
https://github.com/qemu/qemu/commit/03a37ce754d66cf506627b8e785df4fc906417ce
Author: Andrey Drobyshev <[email protected]>
Date: 2026-02-09 (Mon, 09 Feb 2026)
Changed paths:
M scripts/qemugdb/timers.py
Log Message:
-----------
scripts/qemugdb: timers: Improve 'qemu timers' command readability
* Add the 'attributes' field from QEMUTimer;
* Stringify the field's value in accordance with macros from
include/qemu/timer.h;
* Make timer expiration times human-readable by converting from nanoseconds
to appropriate units (ms/s/min/hrs/days) and showing the scale factor
(ns/us/ms/s).
Signed-off-by: Andrey Drobyshev <[email protected]>
Reviewed-by: Stefan Hajnoczi <[email protected]>
Message-id: [email protected]
Signed-off-by: Stefan Hajnoczi <[email protected]>
Commit: 42f3c143c3a04a9d193147e503b8f0c64bf0fb78
https://github.com/qemu/qemu/commit/42f3c143c3a04a9d193147e503b8f0c64bf0fb78
Author: Andrey Drobyshev <[email protected]>
Date: 2026-02-09 (Mon, 09 Feb 2026)
Changed paths:
M scripts/qemugdb/coroutine.py
Log Message:
-----------
scripts/qemugdb: coroutine: Add option for obtaining detailed trace in
coredump
Commit 772f86839f ("scripts/qemu-gdb: Support coroutine dumps in
coredumps") introduced coroutine traces in coredumps using raw stack
unwinding. While this works, this approach does not allow to view the
function arguments in the corresponding stack frames.
As an alternative, we can obtain saved registers from the coroutine's
jmpbuf, patch them into the coredump's struct elf_prstatus in place, and
execute another gdb subprocess to get backtrace from the patched temporary
coredump.
While providing more detailed info, this alternative approach, however, is
more invasive as it might potentially corrupt the coredump file. We do take
precautions by saving the original registers values into a separate binary
blob /path/to/coredump.ptregs, so that it can be restores in the next
GDB session. Still, instead of making it a new deault, let's keep raw unwind
the default behaviour, but add the '--detailed' option for 'qemu bt' and
'qemu coroutine' command which would enforce the new behaviour.
That's how this looks:
(gdb) qemu coroutine 0x7fda9335a508
#0 0x5602bdb41c26 in qemu_coroutine_switch<+214> () at
../util/coroutine-ucontext.c:321
#1 0x5602bdb3e8fe in qemu_aio_coroutine_enter<+493> () at
../util/qemu-coroutine.c:293
#2 0x5602bdb3c4eb in co_schedule_bh_cb<+538> () at ../util/async.c:547
#3 0x5602bdb3b518 in aio_bh_call<+119> () at ../util/async.c:172
#4 0x5602bdb3b79a in aio_bh_poll<+457> () at ../util/async.c:219
#5 0x5602bdb10f22 in aio_poll<+1201> () at ../util/aio-posix.c:719
#6 0x5602bd8fb1ac in iothread_run<+123> () at ../iothread.c:63
#7 0x5602bdb18a24 in qemu_thread_start<+355> () at
../util/qemu-thread-posix.c:393
(gdb) qemu coroutine 0x7fda9335a508 --detailed
patching core file /tmp/tmpq4hmk2qc
found "CORE" at 0x10c48
assume pt_regs at 0x10cbc
write r15 at 0x10cbc
write r14 at 0x10cc4
write r13 at 0x10ccc
write r12 at 0x10cd4
write rbp at 0x10cdc
write rbx at 0x10ce4
write rip at 0x10d3c
write rsp at 0x10d54
#0 0x00005602bdb41c26 in qemu_coroutine_switch (from_=0x7fda9335a508,
to_=0x7fda8400c280, action=COROUTINE_ENTER) at ../util/coroutine-ucontext.c:321
#1 0x00005602bdb3e8fe in qemu_aio_coroutine_enter (ctx=0x5602bf7147c0,
co=0x7fda8400c280) at ../util/qemu-coroutine.c:293
#2 0x00005602bdb3c4eb in co_schedule_bh_cb (opaque=0x5602bf7147c0) at
../util/async.c:547
#3 0x00005602bdb3b518 in aio_bh_call (bh=0x5602bf714a40) at
../util/async.c:172
#4 0x00005602bdb3b79a in aio_bh_poll (ctx=0x5602bf7147c0) at
../util/async.c:219
#5 0x00005602bdb10f22 in aio_poll (ctx=0x5602bf7147c0, blocking=true) at
../util/aio-posix.c:719
#6 0x00005602bd8fb1ac in iothread_run (opaque=0x5602bf42b100) at
../iothread.c:63
#7 0x00005602bdb18a24 in qemu_thread_start (args=0x5602bf7164a0) at
../util/qemu-thread-posix.c:393
#8 0x00007fda9e89f7f2 in start_thread (arg=<optimized out>) at
pthread_create.c:443
#9 0x00007fda9e83f450 in clone3 () at
../sysdeps/unix/sysv/linux/x86_64/clone3.S:81
CC: Vladimir Sementsov-Ogievskiy <[email protected]>
CC: Peter Xu <[email protected]>
Originally-by: Vladimir Sementsov-Ogievskiy <[email protected]>
Signed-off-by: Andrey Drobyshev <[email protected]>
Reviewed-by: Stefan Hajnoczi <[email protected]>
Message-id: [email protected]
Signed-off-by: Stefan Hajnoczi <[email protected]>
Commit: 03396b9afcf93964bb4dbb9d0cd7387ba0f63aa3
https://github.com/qemu/qemu/commit/03396b9afcf93964bb4dbb9d0cd7387ba0f63aa3
Author: Stefan Hajnoczi <[email protected]>
Date: 2026-02-09 (Mon, 09 Feb 2026)
Changed paths:
M hw/scsi/scsi-disk.c
M hw/scsi/scsi-generic.c
M include/hw/scsi/scsi.h
Log Message:
-----------
scsi: generalize scsi_SG_IO_FROM_DEV() to scsi_SG_IO()
Add a direction argument so that scsi_SG_IO() can be used for
SG_DXFER_FROM_DEV and SG_DXFER_TO_DEV transfers.
Signed-off-by: Stefan Hajnoczi <[email protected]>
Reviewed-by: Paolo Bonzini <[email protected]>
Message-id: [email protected]
Signed-off-by: Stefan Hajnoczi <[email protected]>
Commit: 6302598fe538206fd02494007ab5d218524dc7a7
https://github.com/qemu/qemu/commit/6302598fe538206fd02494007ab5d218524dc7a7
Author: Stefan Hajnoczi <[email protected]>
Date: 2026-02-09 (Mon, 09 Feb 2026)
Changed paths:
M hw/scsi/scsi-disk.c
M hw/scsi/scsi-generic.c
M include/hw/scsi/scsi.h
Log Message:
-----------
scsi: add error reporting to scsi_SG_IO()
Report the details of the SG_IO ioctl failure if an Error pointer is
provided. This information aids troubleshooting and will be used by the
SCSI Persistent Reservations migration code.
Signed-off-by: Stefan Hajnoczi <[email protected]>
Reviewed-by: Paolo Bonzini <[email protected]>
Message-id: [email protected]
Signed-off-by: Stefan Hajnoczi <[email protected]>
Commit: 70f0e0cedb2e0d7511cdebbce9b21a01bba55b74
https://github.com/qemu/qemu/commit/70f0e0cedb2e0d7511cdebbce9b21a01bba55b74
Author: Stefan Hajnoczi <[email protected]>
Date: 2026-02-09 (Mon, 09 Feb 2026)
Changed paths:
M hw/scsi/scsi-bus.c
M hw/scsi/scsi-generic.c
M hw/scsi/trace-events
M include/hw/scsi/scsi.h
M include/scsi/constants.h
Log Message:
-----------
scsi: track SCSI reservation state for live migration
SCSI Persistent Reservations are stateful and external to the guest. In
order to transparently move reservations to the destination host during
live migration, it is necessary to track the state built up on the
source host before migration. Only then can the destination host ensure
an equivalent state is restored upon migration.
Snoop on successful PERSISTENT RESERVE OUT commands and save the
reservation key and reservation type. This will allow registered keys
and reservations to be migrated.
Also patch PERSISTENT RESERVE IN replies with the REPORT CAPABILITIES
service action since features that involve the physical SCSI bus target
ports must not be exposed to the guest (it sees a virtual SCSI bus).
Usually this plays out as follows:
1. The guest invokes the REGISTER service action to register a
reservation key on its I_T nexus.
2. The guest invokes the RESERVE service action to create a reservation
using the previously-registered key.
This commit implements the snooping and stores the reservation key and
type (if any) for each LUN. The snooped PR state and the migrate_pr flag
to enable PR migration will be used in later commits.
Signed-off-by: Stefan Hajnoczi <[email protected]>
Reviewed-by: Paolo Bonzini <[email protected]>
Message-id: [email protected]
Signed-off-by: Stefan Hajnoczi <[email protected]>
Commit: ab57b51f1375b6a6f098a74c6f79207a9630948d
https://github.com/qemu/qemu/commit/ab57b51f1375b6a6f098a74c6f79207a9630948d
Author: Stefan Hajnoczi <[email protected]>
Date: 2026-02-09 (Mon, 09 Feb 2026)
Changed paths:
M hw/core/machine.c
M hw/scsi/scsi-disk.c
M hw/scsi/scsi-generic.c
M hw/scsi/trace-events
M include/hw/scsi/scsi.h
Log Message:
-----------
scsi: save/load SCSI reservation state
Add a vmstate subsection to SCSIDiskState so that scsi-block devices can
transfer their reservation state during live migration. Upon loading the
subsection, the destination QEMU invokes the PERSISTENT RESERVE OUT
command's PREEMPT service action to atomically move the reservation from
the source I_T nexus to the destination I_T nexus. This results in
transparent live migration of SCSI reservations.
This approach is incomplete since SCSI reservations are cooperative and
other hosts could interfere. Neither the source QEMU nor the destination
QEMU are aware of changes made by other hosts. The assumption is that
reservation is not taken over by a third host without cooperation from
the source host.
I considered adding the vmstate subsection to SCSIDevice instead of
SCSIDiskState, since reservations are part of the SCSI Primary Commands
that other devices apart from disks could support. However, due to
fragility of migrating reservations, we will probably limit support to
scsi-block and maybe scsi-disk in the future. In the end, I think it
makes sense to place this within scsi-disk.c.
Signed-off-by: Stefan Hajnoczi <[email protected]>
Reviewed-by: Paolo Bonzini <[email protected]>
Message-id: [email protected]
Signed-off-by: Stefan Hajnoczi <[email protected]>
Commit: a67819adb2212977360e9290bd005badb07dd2e4
https://github.com/qemu/qemu/commit/a67819adb2212977360e9290bd005badb07dd2e4
Author: Stefan Hajnoczi <[email protected]>
Date: 2026-02-09 (Mon, 09 Feb 2026)
Changed paths:
M docs/system/device-emulation.rst
A docs/system/devices/scsi/index.rst
A docs/system/devices/scsi/migrate-pr.rst
Log Message:
-----------
docs: add SCSI migrate-pr documentation
Suggested-by: Paolo Bonzini <[email protected]>
Signed-off-by: Stefan Hajnoczi <[email protected]>
Reviewed-by: Paolo Bonzini <[email protected]>
Message-id: [email protected]
Signed-off-by: Stefan Hajnoczi <[email protected]>
Commit: 51e36e86d920131d545ca729e7dcebe36a07798c
https://github.com/qemu/qemu/commit/51e36e86d920131d545ca729e7dcebe36a07798c
Author: Peter Maydell <[email protected]>
Date: 2026-02-09 (Mon, 09 Feb 2026)
Changed paths:
M accel/tcg/cpu-exec.c
M accel/tcg/cputlb.c
M accel/tcg/internal-common.h
M accel/tcg/user-exec.c
M linux-user/main.c
M linux-user/syscall.c
M linux-user/user-internals.h
Log Message:
-----------
Merge tag 'pull-tcg-20260206' of https://gitlab.com/rth7680/qemu into staging
linux-user/syscall.c: Prevent acquiring clone_lock while fork()
accel/tcg: Remove a redundant argument attrs in io_prepare()
accel/tcg: Fix uninitialized hostp in get_page_addr_code_hostp
Revert "tcg/user: do not set exit_request gratuitously"
# -----BEGIN PGP SIGNATURE-----
#
# iQFRBAABCgA7FiEEekgeeIaLTbaoWgXAZN846K9+IV8FAmmFkJ0dHHJpY2hhcmQu
# aGVuZGVyc29uQGxpbmFyby5vcmcACgkQZN846K9+IV9aLQgAjOLW3deluyYPggdi
# YXDAS8YfCFbtXJ36jAeMZnRisXnIXcXkWZr/dseVyVoghz3WUbbRAJrbPuIFrTMq
# b+IX2Gjh7uXgh65EhmwYrinH2jygOdIK5SdJV7x2DtukA1MdRbDHeM8k1gvFNOdn
# Y4nNbTFzI6wuNfti6rvat2SaPm+b7QgMckxB3R8cTAb3o4zvzeUqJ1HMbYil9VG8
# EHQOGJyq2fViTtBm6ZBQ98BylHxqXOsVclchqwARYTlWrvxeVrJ7LopjbD6BfAUr
# 3qasEKoM9Gu1J+i2HXC14qHofScqVYIO3zFl4jbMSwBSsABGZY1OQBxynfOw3cJ9
# 15BiXQ==
# =1ALE
# -----END PGP SIGNATURE-----
# gpg: Signature made Fri Feb 6 06:56:29 2026 GMT
# gpg: using RSA key 7A481E78868B4DB6A85A05C064DF38E8AF7E215F
# gpg: issuer "[email protected]"
# gpg: Good signature from "Richard Henderson <[email protected]>"
[full]
# Primary key fingerprint: 7A48 1E78 868B 4DB6 A85A 05C0 64DF 38E8 AF7E 215F
* tag 'pull-tcg-20260206' of https://gitlab.com/rth7680/qemu:
accel/tcg: Remove a redundant argument attrs in io_prepare()
Revert "tcg/user: do not set exit_request gratuitously"
linux-user/syscall.c: Prevent acquiring clone_lock while fork()
accel/tcg: Fix uninitialized hostp in get_page_addr_code_hostp
accel/tcg: Don't pass NULL to get_page_addr_code_hostp
Signed-off-by: Peter Maydell <[email protected]>
Commit: b3abdfa4862f1f8fa19a9968060d0deb771dc277
https://github.com/qemu/qemu/commit/b3abdfa4862f1f8fa19a9968060d0deb771dc277
Author: Peter Maydell <[email protected]>
Date: 2026-02-09 (Mon, 09 Feb 2026)
Changed paths:
M docs/system/device-emulation.rst
A docs/system/devices/scsi/index.rst
A docs/system/devices/scsi/migrate-pr.rst
M hw/core/machine.c
M hw/scsi/scsi-bus.c
M hw/scsi/scsi-disk.c
M hw/scsi/scsi-generic.c
M hw/scsi/trace-events
M include/hw/scsi/scsi.h
M include/scsi/constants.h
M scripts/qemugdb/coroutine.py
M scripts/qemugdb/mtree.py
M scripts/qemugdb/timers.py
Log Message:
-----------
Merge tag 'block-pull-request' of https://gitlab.com/stefanha/qemu into
staging
Pull request
Andrey Drobyshev's qemugdb script improvements and my --device
scsi-block,migrate-pr=on|off live migration support for SCSI Persistent
Reservations.
# -----BEGIN PGP SIGNATURE-----
#
# iQEzBAABCgAdFiEEhpWov9P5fNqsNXdanKSrs4Grc8gFAmmJ8t0ACgkQnKSrs4Gr
# c8goXggAgx8Fehp5q1e1xUulb/WwnHw14lfl2+O4Or3FxK9TDWSUjT0Htk0+QwAf
# W+7Q7MTnSzLTDYKbsPj+4RxZ+Pth/ra2rhIS3YWMQLNAjFKAIWKvQdD0krOlJ8t+
# i3DkERhaw/ke2ImR7GSr7SZjJjhHaxTaC+R/DEPWVxgK1j4mLt/pwAhigWxlvVLT
# SInnZAvfy7+OspFu3AcBtwDEe0MvIQKdTgxZS7wSf/tWS/9WZqsM8pSL/1+ozPGg
# hWjHevhGI6LS4QfRqdF6+dq/XaGT81hFNosCL2o9YWbLuipk/9TyUSX7uevo1IFz
# SpXwxFltCyPicaGJcufX4MjASJqjrg==
# =DKtL
# -----END PGP SIGNATURE-----
# gpg: Signature made Mon Feb 9 14:44:45 2026 GMT
# gpg: using RSA key 8695A8BFD3F97CDAAC35775A9CA4ABB381AB73C8
# gpg: Good signature from "Stefan Hajnoczi <[email protected]>" [full]
# gpg: aka "Stefan Hajnoczi <[email protected]>" [full]
# Primary key fingerprint: 8695 A8BF D3F9 7CDA AC35 775A 9CA4 ABB3 81AB 73C8
* tag 'block-pull-request' of https://gitlab.com/stefanha/qemu:
docs: add SCSI migrate-pr documentation
scsi: save/load SCSI reservation state
scsi: track SCSI reservation state for live migration
scsi: add error reporting to scsi_SG_IO()
scsi: generalize scsi_SG_IO_FROM_DEV() to scsi_SG_IO()
scripts/qemugdb: coroutine: Add option for obtaining detailed trace in
coredump
scripts/qemugdb: timers: Improve 'qemu timers' command readability
scripts/qemugdb: timers: Fix KeyError in 'qemu timers' command
scripts/qemugdb: mtree: Fix OverflowError in mtree with 128-bit addresses
Signed-off-by: Peter Maydell <[email protected]>
Compare: https://github.com/qemu/qemu/compare/c4a9d49c7b23...b3abdfa4862f
To unsubscribe from these emails, change your notification settings at
https://github.com/qemu/qemu/settings/notifications
