Bug 1016732

Description of problem:
Updated my arm VM to use beta TC2 kernel/initrd, crashes with 5 seconds after startup

Libvirt log has:
LC_ALL=C PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin QEMU_AUDIO_DRV=none /usr/bin/qemu-system-arm -name fedora20-arm -S -machine vexpress-a9,accel=tcg,usb=off -m 1024 -realtime mlock=off -smp 1,sockets=1,cores=1,threads=1 -uuid 6de0eccb-ea0f-45e3-b20d-73b6fb95613c -nographic -no-user-config -nodefaults -chardev socket,id=charmonitor,path=/var/lib/libvirt/qemu/fedora20-arm.monitor,server,nowait -mon chardev=charmonitor,id=monitor,mode=control -rtc base=utc -no-shutdown -kernel /mnt/data/devel/images/initramfs-3.11.3-301.fc20.armv7hl.img -initrd /mnt/data/devel/images/vmlinuz-3.11.3-301.fc20.armv7hl -append console=ttyAMA0 rw root=/dev/vda3 -dtb /mnt/data/devel/images/vexpress-v2p-ca9.dtb -usb -drive file=/mnt/data/devel/images/Fedora-Minimal-armhfp-20-Beta-TC2-sda.raw,if=none,id=drive-virtio-disk0,format=raw -device virtio-blk-device,scsi=off,drive=drive-virtio-disk0,id=virtio-disk0,bootindex=1 -netdev tap,fd=29,id=hostnet0 -device virtio-net-device,netdev=hostnet0,id=net0,mac=52:54:00:db:28:2b -serial pty
char device redirected to /dev/pts/3 (label serial0)
qemu: fatal: Trying to execute code outside RAM or ROM at 0xe3a00000

R00=00000000 R01=00000000 R02=68489000 R03=00000000
R04=00000000 R05=00000000 R06=00000000 R07=00000000
R08=00000000 R09=00000000 R10=00000000 R11=00000000
R12=00000000 R13=00000000 R14=00000000 R15=e3a00000
PSR=800001d3 N--- A svc32
s00=00000000 s01=00000000 d00=0000000000000000
s02=00000000 s03=00000000 d01=0000000000000000
s04=00000000 s05=00000000 d02=0000000000000000
s06=00000000 s07=00000000 d03=0000000000000000
s08=00000000 s09=00000000 d04=0000000000000000
s10=00000000 s11=00000000 d05=0000000000000000
s12=00000000 s13=00000000 d06=0000000000000000
s14=00000000 s15=00000000 d07=0000000000000000
s16=00000000 s17=00000000 d08=0000000000000000
s18=00000000 s19=00000000 d09=0000000000000000
s20=00000000 s21=00000000 d10=0000000000000000
s22=00000000 s23=00000000 d11=0000000000000000
s24=00000000 s25=00000000 d12=0000000000000000
s26=00000000 s27=00000000 d13=0000000000000000
s28=00000000 s29=00000000 d14=0000000000000000
s30=00000000 s31=00000000 d15=0000000000000000
s32=00000000 s33=00000000 d16=0000000000000000
s34=00000000 s35=00000000 d17=0000000000000000
s36=00000000 s37=00000000 d18=0000000000000000
s38=00000000 s39=00000000 d19=0000000000000000
s40=00000000 s41=00000000 d20=0000000000000000
s42=00000000 s43=00000000 d21=0000000000000000
s44=00000000 s45=00000000 d22=0000000000000000
s46=00000000 s47=00000000 d23=0000000000000000
s48=00000000 s49=00000000 d24=0000000000000000
s50=00000000 s51=00000000 d25=0000000000000000
s52=00000000 s53=00000000 d26=0000000000000000
s54=00000000 s55=00000000 d27=0000000000000000
s56=00000000 s57=00000000 d28=0000000000000000
s58=00000000 s59=00000000 d29=0000000000000000
s60=00000000 s61=00000000 d30=0000000000000000
s62=00000000 s63=00000000 d31=0000000000000000
FPSCR: 00000000
2013-10-08 14:24:26.657+0000: shutting down

Version-Release number of selected component:
qemu-system-arm-1.6.0-9.fc20

Additional info:
reporter:       libreport-2.1.7
backtrace_rating: 4
cmdline:        /usr/bin/qemu-system-arm -name fedora20-arm -S -machine vexpress-a9,accel=tcg,usb=off -m 1024 -realtime mlock=off -smp 1,sockets=1,cores=1,threads=1 -uuid 6de0eccb-ea0f-45e3-b20d-73b6fb95613c -nographic -no-user-config -nodefaults -chardev socket,id=charmonitor,path=/var/lib/libvirt/qemu/fedora20-arm.monitor,server,nowait -mon chardev=charmonitor,id=monitor,mode=control -rtc base=utc -no-shutdown -kernel /mnt/data/devel/images/initramfs-3.11.3-301.fc20.armv7hl.img -initrd /mnt/data/devel/images/vmlinuz-3.11.3-301.fc20.armv7hl -append 'console=ttyAMA0 rw root=/dev/vda3' -dtb /mnt/data/devel/images/vexpress-v2p-ca9.dtb -usb -drive file=/mnt/data/devel/images/Fedora-Minimal-armhfp-20-Beta-TC2-sda.raw,if=none,id=drive-virtio-disk0,format=raw -device virtio-blk-device,scsi=off,drive=drive-virtio-disk0,id=virtio-disk0,bootindex=1 -netdev tap,fd=29,id=hostnet0 -device virtio-net-device,netdev=hostnet0,id=net0,mac=52:54:00:db:28:2b -serial pty
crash_function: cpu_abort
executable:     /usr/bin/qemu-system-arm
kernel:         3.11.3-301.fc20.x86_64
runlevel:       N 5
type:           CCpp
uid:            107

Truncated backtrace:
Thread no. 1 (9 frames)
 #2 cpu_abort at /usr/src/debug/qemu-1.6.0/exec.c:640
 #3 get_page_addr_code at /usr/src/debug/qemu-1.6.0/cputlb.c:353
 #4 tb_find_slow at /usr/src/debug/qemu-1.6.0/cpu-exec.c:116
 #5 tb_find_fast at /usr/src/debug/qemu-1.6.0/cpu-exec.c:172
 #6 cpu_arm_exec at /usr/src/debug/qemu-1.6.0/cpu-exec.c:599
 #7 tcg_cpu_exec at /usr/src/debug/qemu-1.6.0/cpus.c:1159
 #8 tcg_exec_all at /usr/src/debug/qemu-1.6.0/cpus.c:1192
 #9 qemu_tcg_cpu_thread_fn at /usr/src/debug/qemu-1.6.0/cpus.c:868
 #11 clone at ../sysdeps/unix/sysv/linux/x86_64/clone.S:111

Potential duplicate: bug 889700