One more comment, the env address looks wrong going all the way up the stack
#0 0x0000000100436b71 in gen_intermediate_code_internal (env=0x102064680, tb=0x108e5b070, search_pc=1) at translate.c:9793
#1 0x0000000100437776 in gen_intermediate_code_pc (env=0x102064680, tb=0x108e5b070) at translate.c:9961
#2 0x000000010044539f in cpu_restore_state (tb=0x108e5b070, env=0x102064680, searched_pc=4410683708) at translate-all.c:126
#3 0x00000001003ed7b3 in tlb_fill (env1=0x102064680, addr=17328, is_write=0, mmu_idx=0, retaddr=4410683708) at op_helper.c:93
#4 0x00000001003ec14d in __ldl_mmu (addr=17328, mmu_idx=0) at softmmu_template.h:159
#5 0x0000000106e5b13d in ?? ()
One more comment, the env address looks wrong going all the way up the stack
#0 0x0000000100436b71 in gen_intermediat e_code_ internal (env=0x102064680, tb=0x108e5b070, search_pc=1) at translate.c:9793 e_code_ pc (env=0x102064680, tb=0x108e5b070) at translate.c:9961 pc=4410683708) at translate-all.c:126 template. h:159
#1 0x0000000100437776 in gen_intermediat
#2 0x000000010044539f in cpu_restore_state (tb=0x108e5b070, env=0x102064680, searched_
#3 0x00000001003ed7b3 in tlb_fill (env1=0x102064680, addr=17328, is_write=0, mmu_idx=0, retaddr=4410683708) at op_helper.c:93
#4 0x00000001003ec14d in __ldl_mmu (addr=17328, mmu_idx=0) at softmmu_
#5 0x0000000106e5b13d in ?? ()
Olvier