Re: Kernel panic - not syncing: Unable to initialise architected timer : unable to boot Android 14 with qemu-system-aarch64 on Ubuntu 24.04 X64 bit

[Mario Marietto]

Appending the root device does not change the scenario :

qemu-system-aarch64 \
        -smp 4 \
        -m 2048 \
        -cpu cortex-a72 \
        -machine virt \
        -serial stdio \
        -initrd /mnt/zroot2/zroot2/OS/Linux/lineage-21.0-20240618-UNOFFICIAL-KonstaKANG-rpi4-atv/0.fat \
        -kernel /mnt/zroot2/zroot2/OS/Linux/lineage-21.0-20240618-UNOFFICIAL-KonstaKANG-rpi4-atv/boot/Image \
        -append "console=ttyAMA0,38400 drm.debug=0x0 rootwait rootdelay=5 root=/dev/vdd1 rw"

[    0.000000] Booting Linux on physical CPU 0x0000000000 [0x410fd083]

[    0.000000] Linux version 6.6.36-g01aac93821d2-v8 (kleaf@build-host) (Android (11368308, +pgo, +bolt, +lto, +mlgo, based on r510928)
clang version 18.0.0 (https://android.googlesource.com/toolchain/llvm-project 477610d4d0d988e69dbc3fae4fe86bff3f07f2b5), LLD 18.0.0) #
1 SMP PREEMPT Tue Jul  2 09:02:32 UTC 2024
[    0.000000] KASLR enabled
[    0.000000] random: crng init done
[    0.000000] Machine model: linux,dummy-virt
[    0.000000] efi: UEFI not found.
[    0.000000] Zone ranges:
[    0.000000]   DMA      [mem 0x0000000040000000-0x00000000bfffffff]
[    0.000000]   DMA32    empty
[    0.000000]   Normal   empty
[    0.000000] Movable zone start for each node
[    0.000000] NoSplit zone start for each node
[    0.000000] NoMerge zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000040000000-0x00000000bfffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000040000000-0x00000000bfffffff]
[    0.000000] cma: Reserved 8 MiB at 0x00000000bd000000 on node -1
[    0.000000] psci: probing for conduit method from DT.
[    0.000000] psci: PSCIv1.1 detected in firmware.
[    0.000000] psci: Using standard PSCI v0.2 function IDs
[    0.000000] psci: Trusted OS migration not required
[    0.000000] psci: SMC Calling Convention v1.0
[    0.000000] percpu: Embedded 31 pages/cpu s87016 r8192 d31768 u126976
[    0.000000] Detected PIPT I-cache on CPU0
[    0.000000] CPU features: detected: Spectre-v2
[    0.000000] CPU features: detected: Spectre-v3a
[    0.000000] CPU features: detected: Spectre-v4
[    0.000000] CPU features: detected: Spectre-BHB
[    0.000000] CPU features: kernel page table isolation forced ON by KASLR
[    0.000000] CPU features: detected: Kernel page table isolation (KPTI)
[    0.000000] CPU features: detected: ARM erratum 1742098
[    0.000000] CPU features: detected: ARM errata 1165522, 1319367, or 1530923
[    0.000000] alternatives: applying boot alternatives
[    0.000000] Kernel command line: console=ttyAMA0,38400 drm.debug=0x0 rootwait rootdelay=5 root=/dev/vdd1 rw androidboot.serialno=100
00000abcd1234 androidboot.btmacaddr=11:22:33:44:55:66
[    0.000000] Dentry cache hash table entries: 262144 (order: 9, 2097152 bytes, linear)
[    0.000000] Inode-cache hash table entries: 131072 (order: 8, 1048576 bytes, linear)
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 516096
[    0.000000] mem auto-init: stack:all(zero), heap alloc:off, heap free:off
[    0.000000] Memory: 1881596K/2097152K available (19328K kernel code, 2374K rwdata, 7612K rodata, 1792K init, 1192K bss, 207364K rese
rved, 8192K cma-reserved)
[    0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1
[    0.000000] ftrace: allocating 56269 entries in 220 pages
[    0.000000] ftrace: allocated 220 pages with 5 groups
[    0.000000] trace event string verifier disabled
[    0.000000] rcu: Preemptible hierarchical RCU implementation.
[    0.000000] rcu:     RCU event tracing is enabled.
[    0.000000] rcu:     RCU restricting CPUs from NR_CPUS=256 to nr_cpu_ids=4.
[    0.000000]  Trampoline variant of Tasks RCU enabled.
[    0.000000]  Rude variant of Tasks RCU enabled.
[    0.000000]  Tracing variant of Tasks RCU enabled.
[    0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 25 jiffies.
[    0.000000] rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4
[    0.000000] NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0
[    0.000000] Root IRQ handler: gic_handle_irq
[    0.000000] GICv2m: range[mem 0x08020000-0x08020fff], SPI[80:143]
[    0.000000] rcu: srcu_init: Setting srcu_struct sizes based on contention.
[    0.000000] arch_timer: cp15 timer(s) running at 62.50MHz (virt).
[    0.000000] clocksource: arch_sys_counter: mask: 0x1ffffffffffffff max_cycles: 0x1cd42e208c, max_idle_ns: 881590405314 ns
[    0.000069] sched_clock: 57 bits at 63MHz, resolution 16ns, wraps every 4398046511096ns
[    0.003628] kfence: initialized - using 2097152 bytes for 255 objects at 0x(____ptrval____)-0x(____ptrval____)
[    0.010906] Calibrating delay loop (skipped), value calculated using timer frequency.. 125.00 BogoMIPS (lpj=250000)
[    0.011082] pid_max: default: 32768 minimum: 301
[    0.013020] LSM: initializing lsm=capability,selinux,integrity
[    0.013436] SELinux:  Initializing.
[    0.016921] Mount-cache hash table entries: 4096 (order: 3, 32768 bytes, linear)
[    0.016984] Mountpoint-cache hash table entries: 4096 (order: 3, 32768 bytes, linear)
[    0.031469] cgroup: Disabling memory control group subsystem
[    0.050059] cacheinfo: Unable to detect cache hierarchy for CPU 0
[    0.059978] RCU Tasks: Setting shift to 2 and lim to 1 rcu_task_cb_adjust=1.
[    0.060584] RCU Tasks Rude: Setting shift to 2 and lim to 1 rcu_task_cb_adjust=1.
[    0.060822] RCU Tasks Trace: Setting shift to 2 and lim to 1 rcu_task_cb_adjust=1.
[    0.062427] rcu: Hierarchical SRCU implementation.
[    0.062463] rcu:     Max phase no-delay instances is 1000.
[    0.068568] EFI services will not be available.
[    0.071086] smp: Bringing up secondary CPUs ...
[    0.074801] Detected PIPT I-cache on CPU1
[    0.075909] CPU1: Booted secondary processor 0x0000000001 [0x410fd083]
[    0.081065] Detected PIPT I-cache on CPU2
[    0.081470] CPU2: Booted secondary processor 0x0000000002 [0x410fd083]
[    0.083873] Detected PIPT I-cache on CPU3
[    0.084168] CPU3: Booted secondary processor 0x0000000003 [0x410fd083]
[    0.084681] smp: Brought up 1 node, 4 CPUs
[    0.084715] SMP: Total of 4 processors activated.
[    0.084800] CPU features: detected: 32-bit EL0 Support
[    0.084824] CPU features: detected: 32-bit EL1 Support
[    0.084885] CPU features: detected: CRC32 instructions
[    0.088191] CPU features: emulated: Privileged Access Never (PAN) using TTBR0_EL1 switching
[    0.088512] CPU: All CPU(s) started at EL1
[    0.088714] alternatives: applying system-wide alternatives
[    0.113756] devtmpfs: initialized
[    0.126262] Enabled cp15_barrier support
[    0.126449] Enabled setend support
[    0.127708] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 7645041785100000 ns
[    0.127840] futex hash table entries: 1024 (order: 4, 65536 bytes, linear)
[    0.131302] pinctrl core: initialized pinctrl subsystem
[    0.138216] DMI not present or invalid.
[    0.147664] NET: Registered PF_NETLINK/PF_ROUTE protocol family
[    0.158502] DMA: preallocated 256 KiB GFP_KERNEL pool for atomic allocations
[    0.158987] DMA: preallocated 256 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations
[    0.159303] audit: initializing netlink subsys (disabled)
[    0.161302] audit: type=2000 audit(0.148:1): state=initialized audit_enabled=0 res=1
[    0.164412] thermal_sys: Registered thermal governor 'step_wise'
[    0.164806] cpuidle: using governor menu
[    0.165816] hw-breakpoint: found 6 breakpoint and 4 watchpoint registers.
[    0.166975] ASID allocator initialised with 32768 entries
[    0.168385] Serial: AMBA PL011 UART driver
[    0.196712] 9000000.pl011: ttyAMA0 at MMIO 0x9000000 (irq = 13, base_baud = 0) is a PL011 rev1
[    0.198278] printk: console [ttyAMA0] enabled
[    0.224278] Modules: 2G module region forced by RANDOMIZE_MODULE_REGION_FULL
[    0.224486] Modules: 0 pages in range for non-PLT usage
[    0.224510] Modules: 516176 pages in range for PLT usage
[    0.241442] iommu: Default domain type: Translated
[    0.241679] iommu: DMA domain TLB invalidation policy: strict mode
[    0.244200] SCSI subsystem initialized
[    0.245459] usbcore: registered new interface driver usbfs
[    0.245841] usbcore: registered new interface driver hub
[    0.246154] usbcore: registered new device driver usb
[    0.247257] mc: Linux media interface: v0.10
[    0.247617] videodev: Linux video capture interface: v2.00
[    0.248602] pps_core: LinuxPPS API ver. 1 registered
[    0.248700] pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti <giometti@linux.it>
[    0.248967] PTP clock support registered
[    0.251884] Advanced Linux Sound Architecture Driver Initialized.
[    0.262663] Bluetooth: Core ver 2.22
[    0.262960] NET: Registered PF_BLUETOOTH protocol family
[    0.263069] Bluetooth: HCI device and connection manager initialized
[    0.263344] Bluetooth: HCI socket layer initialized
[    0.263516] Bluetooth: L2CAP socket layer initialized
[    0.263840] Bluetooth: SCO socket layer initialized
[    0.266790] vgaarb: loaded
[    0.268841] clocksource: Switched to clocksource arch_sys_counter
[    0.272056] VFS: Disk quotas dquot_6.6.0
[    0.272284] VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes)
[    0.273060] FS-Cache: Loaded
[    0.278526] CacheFiles: Loaded
[    0.287007] NET: Registered PF_INET protocol family
[    0.288390] IP idents hash table entries: 32768 (order: 6, 262144 bytes, linear)
[    0.297021] tcp_listen_portaddr_hash hash table entries: 1024 (order: 2, 16384 bytes, linear)
[    0.297273] Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear)
[    0.297485] TCP established hash table entries: 16384 (order: 5, 131072 bytes, linear)
[    0.298036] TCP bind hash table entries: 16384 (order: 7, 524288 bytes, linear)
[    0.298873] TCP: Hash tables configured (established 16384 bind 16384)
[    0.301283] MPTCP token hash table entries: 2048 (order: 3, 49152 bytes, linear)
[    0.301759] UDP hash table entries: 1024 (order: 3, 32768 bytes, linear)
[    0.302186] UDP-Lite hash table entries: 1024 (order: 3, 32768 bytes, linear)
[    0.304009] NET: Registered PF_UNIX/PF_LOCAL protocol family
[    0.306868] PCI: CLS 0 bytes, default 64
[    0.312145] Trying to unpack rootfs image as initramfs...
[    0.312808] kvm [1]: HYP mode not available
[    0.318856] rootfs image is not initramfs (invalid magic at start of compressed archive); looks like an initrd
[    0.335544] Initialise system trusted keyrings
[    0.338430] workingset: timestamp_bits=46 max_order=19 bucket_order=0
[    0.339134] zbud: loaded
[    0.347742] Key type cifs.idmap registered
[    0.348673] fuse: init (API version 7.39)
[    0.386722] Key type asymmetric registered
[    0.386992] Asymmetric key parser 'x509' registered
[    0.387460] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 244)
[    0.388796] io scheduler mq-deadline registered
[    0.388954] io scheduler kyber registered
[    0.389319] io scheduler bfq registered
[    0.406358] vc-mem: phys_addr:0x00000000 mem_base=0x00000000 mem_size:0x00000000(0 MiB)
[    0.476330] brd: module loaded
[    0.508286] loop: module loaded
[    0.512092] Loading iSCSI transport class v2.0-870.
[    0.522449] wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information.
[    0.522729] wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld <Jason@zx2c4.com>. All Rights Reserved.
[    0.538429] tun: Universal TUN/TAP device driver, 1.6
[    0.541953] usbcore: registered new interface driver brcmfmac
[    0.542290] usbcore: registered new device driver r8152-cfgselector
[    0.542675] usbcore: registered new interface driver r8152
[    0.542971] usbcore: registered new interface driver lan78xx
[    0.543488] usbcore: registered new interface driver asix
[    0.543810] usbcore: registered new interface driver ax88179_178a
[    0.544134] usbcore: registered new interface driver cdc_ether
[    0.544609] usbcore: registered new interface driver smsc95xx
[    0.544909] usbcore: registered new interface driver net1080
[    0.545240] usbcore: registered new interface driver cdc_subset
[    0.545596] usbcore: registered new interface driver zaurus
[    0.545896] usbcore: registered new interface driver cdc_ncm
[    0.546192] usbcore: registered new interface driver r8153_ecm
[    0.547442] dwc_otg: version 3.00a 10-AUG-2012 (platform bus)
[    0.550591] usbcore: registered new interface driver cdc_acm
[    0.550756] cdc_acm: USB Abstract Control Model driver for USB modems and ISDN adapters
[    0.551948] usbcore: registered new interface driver uas
[    0.552352] usbcore: registered new interface driver usb-storage
[    0.566050] usbcore: registered new interface driver cp210x
[    0.566791] usbserial: USB Serial support registered for cp210x
[    0.567318] usbcore: registered new interface driver pl2303
[    0.567653] usbserial: USB Serial support registered for pl2303
[    0.573531] mousedev: PS/2 mouse device common for all mice
[    0.573930] usbcore: registered new interface driver xpad
[    0.574228] usbcore: registered new interface driver usb_acecad
[    0.574588] usbcore: registered new interface driver aiptek
[    0.574937] usbcore: registered new interface driver hanwang
[    0.575292] usbcore: registered new interface driver kbtab
[    0.577388] usbcore: registered new interface driver usbtouchscreen
[    0.580179] i2c_dev: i2c /dev entries driver
[    0.584010] ir_imon_decoder: IR iMON protocol handler initialized
[    0.584179] IR JVC protocol handler initialized
[    0.584296] IR MCE Keyboard/mouse protocol handler initialized
[    0.584435] IR NEC protocol handler initialized
[    0.584734] IR RC5(x/sz) protocol handler initialized
[    0.584863] IR RC6 protocol handler initialized
[    0.584991] IR RCMM protocol handler initialized
[    0.585111] IR SANYO protocol handler initialized
[    0.585226] IR Sharp protocol handler initialized
[    0.585358] IR Sony protocol handler initialized
[    0.585477] IR XMP protocol handler initialized
[    0.586421] usbcore: registered new interface driver uvcvideo
[    0.589015] device-mapper: uevent: version 1.0.3
[    0.590448] device-mapper: ioctl: 4.48.0-ioctl (2023-03-01) initialised: dm-devel@redhat.com
[    0.591924] Bluetooth: HCI UART driver ver 2.3
[    0.592106] Bluetooth: HCI UART protocol H4 registered
[    0.592885] Bluetooth: HCI UART protocol Broadcom registered
[    0.594293] sdhci: Secure Digital Host Controller Interface driver
[    0.594442] sdhci: Copyright(c) Pierre Ossman
[    0.594948] sdhci-pltfm: SDHCI platform and OF driver helper
[    0.596987] ledtrig-cpu: registered to indicate activity on CPUs
[    0.599350] hid: raw HID events driver (C) Jiri Kosina
[    0.612270] usbcore: registered new interface driver usbhid
[    0.612441] usbhid: USB HID core driver
[    0.615743] ashmem: initialized
[    0.617297] SPI driver st-accel-spi has no spi_device_id for st,lis302dl-spi
[    0.617473] SPI driver st-accel-spi has no spi_device_id for st,lis3lv02dl-accel
[    0.617626] SPI driver st-accel-spi has no spi_device_id for st,lis3dh-accel
[    0.617769] SPI driver st-accel-spi has no spi_device_id for st,lsm330d-accel
[    0.617919] SPI driver st-accel-spi has no spi_device_id for st,lsm330dl-accel
[    0.618062] SPI driver st-accel-spi has no spi_device_id for st,lsm330dlc-accel
[    0.618206] SPI driver st-accel-spi has no spi_device_id for st,lis331dlh-accel
[    0.618357] SPI driver st-accel-spi has no spi_device_id for st,lsm330-accel
[    0.618493] SPI driver st-accel-spi has no spi_device_id for st,lsm303agr-accel
[    0.618638] SPI driver st-accel-spi has no spi_device_id for st,lis2dh12-accel
[    0.618775] SPI driver st-accel-spi has no spi_device_id for st,lng2dm-accel
[    0.618911] SPI driver st-accel-spi has no spi_device_id for st,h3lis331dl-accel
[    0.619056] SPI driver st-accel-spi has no spi_device_id for st,lis331dl-accel
[    0.619209] SPI driver st-accel-spi has no spi_device_id for st,lsm303c-accel
[    0.620207] SPI driver st-magn-spi has no spi_device_id for st,lis3mdl-magn
[    0.620355] SPI driver st-magn-spi has no spi_device_id for st,lsm303agr-magn
[    0.620510] SPI driver st-magn-spi has no spi_device_id for st,lsm9ds1-magn
[    0.620768] SPI driver st-magn-spi has no spi_device_id for st,lsm303c-magn
[    0.626130] hw perfevents: enabled with armv8_pmuv3 PMU driver, 7 counters available
[    0.630320] usbcore: registered new interface driver snd-usb-audio
[    0.638439] Mirror/redirect action on
[    0.639343] netem: version 1.3
[    0.639435] u32 classifier
[    0.639508]     input device check on
[    0.639602]     Actions configured
[    0.648469] xt_time: kernel timezone is -0000
[    0.649096] gre: GRE over IPv4 demultiplexor driver
[    0.649255] IPv4 over IPsec tunneling driver
[    0.654843] Initializing XFRM netlink socket
[    0.655213] IPsec XFRM device driver
[    0.676037] NET: Registered PF_INET6 protocol family
[    0.687646] Segment Routing with IPv6
[    0.687964] In-situ OAM (IOAM) with IPv6
[    0.689074] mip6: Mobile IPv6
[    0.693823] sit: IPv6, IPv4 and MPLS over IPv4 tunneling driver
[    0.699298] NET: Registered PF_PACKET protocol family
[    0.699567] NET: Registered PF_KEY protocol family
[    0.699819] Key type dns_resolver registered
[    0.798005] Freeing initrd memory: 131072K
[    0.806166] registered taskstats version 1
[    0.807819] Loading compiled-in X.509 certificates
[    0.834497] Key type .fscrypt registered
[    0.834641] Key type fscrypt-provisioning registered
[    0.841634] of_cfs_init
[    0.842079] of_cfs_init: OK
[    0.845830] cfg80211: Loading compiled-in X.509 certificates for regulatory database
[    0.876283] Loaded X.509 cert 'benh@debian.org: 577e021cb980e0e820821ba7b54b4961b8b4fadf'
[    0.877632] Loaded X.509 cert 'romain.perier@gmail.com: 3abbc6ec146e09d1b6016ab9d6cf71dd233f0328'
[    0.878441] Loaded X.509 cert 'sforshee: 00b28ddf47aef9cea7'
[    0.879187] Loaded X.509 cert 'wens: 61c038651aabdcf94bd0ac7ff06c7248db18c600'
[    0.885017] clk: Disabling unused clocks
[    0.885499] ALSA device list:
[    0.885646]   No soundcards found.
[    0.894059] uart-pl011 9000000.pl011: no DMA platform data
[    0.895672] Waiting 5 sec before mounting root device...
[    6.132758] RAMDISK: Couldn't find valid RAM disk image starting at 0.
[    6.133865] Waiting for root device /dev/vdd1...
[   10.994096] platform gpio-keys: deferred probe pending

On Sun, Aug 25, 2024 at 2:30 PM Mario Marietto <marietto2008@gmail.com> wrote:

When I unpack this file :

lineage-21.0-20240618-UNOFFICIAL-KonstaKANG-rpi4-atv.img

I get these files :

0.fat
1.img
2.img
3.img

So,I assume that :

0.fat is : initrd

1.img is : system-rw.img
2.img is   :  vendor-rw.img
3.img is   :  userdata.img

If I use 0.fat as initrd,like this :

-initrd /mnt/zroot2/zroot2/OS/Linux/lineage-21.0-20240618-UNOFFICIAL-KonstaKANG-rpi4-atv/0.fat

I get this message :

rootfs image is not initramfs (invalid magic at start of compressed archive); looks like an initrd

it looks like an initrd : right,it's true : it is initrd. (for this reason I've assumed that 0.fat is initrd...

On Sun, Aug 25, 2024 at 1:26 PM Peter Maydell <peter.maydell@linaro.org> wrote:

On Sun, 25 Aug 2024 at 11:45, Mario Marietto <marietto2008@gmail.com> wrote:
>
> Please look at this example :
>
> qemu-system-aarch64 \
> -smp 4 \
> -m 2048 \
> -cpu cortex-a72 \
> -machine virt \
> -serial stdio \
> -kernel /mnt/zroot2/zroot2/OS/Linux/lineage-21.0-20240618-UNOFFICIAL-KonstaKANG-rpi4-atv/boot/Image \

This (assuming it's the complete command line your script is
running) doesn't pass any arguments telling QEMU to provide a
root disk, and it doesn't pass any arguments to the kernel
telling it what root disk to use...

> [    0.000000] Kernel command line: console=ttyAMA0,115200 kgdboc=ttyAMA0,115200 root=/dev/mmcblk0p2 rootfstype=ext4 rootwait androidboot.serialno=10000000abcd1234 androidboot.btmacaddr=11:22:33:44:55:66

...so the kernel defaults to "/dev/mmcblk0p2" as its root disk because
it's using the command line argument that was compiled into it...

> [    0.658240] Waiting for root device /dev/mmcblk0p2...

...and then it's hanging around forever waiting for that.

You need to:
 (1) pass QEMU arguments telling it to provide a root fs
 (2) pass the kernel arguments telling it to look for the
     root fs in the place where QEMU is providing it

Your other command line looks more on the right lines:

        -kernel
/mnt/zroot2/zroot2/OS/Linux/lineage-21.0-20240618-UNOFFICIAL-KonstaKANG-rpi4-atv/boot/Image
\
        -initrd
/mnt/zroot2/zroot2/OS/Linux/lineage-21.0-20240618-UNOFFICIAL-KonstaKANG-rpi4-atv/0.fat
\
        -drive index=0,if=none,id=system,file=/mnt/zroot2/zroot2/OS/Linux/lineage-21.0-20240618-UNOFFICIAL-KonstaKANG-rpi4-atv/1.img
\
        -device virtio-blk-pci,drive=system \
        -drive index=1,if=none,id=vendor,file=/mnt/zroot2/zroot2/OS/Linux/lineage-21.0-20240618-UNOFFICIAL-KonstaKANG-rpi4-atv/2.img
\
        -device virtio-blk-pci,drive=vendor \
        -drive index=2,if=none,id=userdata,file=/mnt/zroot2/zroot2/OS/Linux/lineage-21.0-20240618-UNOFFICIAL-KonstaKANG-rpi4-atv/3.img
\
        -device virtio-blk-pci,drive=userdata \

though I wonder if the kernel really expects a
FAT file for the initrd, given it complains:

[    0.344033] Trying to unpack rootfs image as initramfs...
[    0.344947] rootfs image is not initramfs (invalid magic at start
of compressed archive); looks like an initrd

and then later

[    5.905329] RAMDISK: Couldn't find valid RAM disk image starting at 0.

I think if I were you I'd start by figuring out what's going on
with the initrd.

thanks
-- PMM

--

Mario.

--

Mario.