I followed the instructions from the document located at https://wiki.linaro.org/KenWerner/Sandbox/AndroidQEMU

But I didn't do patch mentioned in the document, because the latest qemu source code was different from the one referenced in DOC.

Then I followed the other steps:

I used  Vexpress binary from http://releases.linaro.org/13.07/android/vexpress

At last, after I entered the qemu command like this:

qemu-system-arm -M vexpress-a9 -m 1024 -smp 1 -snapshot -serial stdio -no-reboot -kernel vmlinuz -initrd initrd.gz -drive file=../vexpress.img,if=sd,cache=writeback --append "console=tty0 console=ttyAMA0,38400n8 rootwait ro init=/init androidboot.console=ttyAMA0"

There was an booting error:

pulseaudio: set_sink_input_volume() failed
pulseaudio: Reason: Invalid argument
pulseaudio: set_sink_input_mute() failed
pulseaudio: Reason: Invalid argument
[    0.000000] Booting Linux on physical CPU 0x0
[    0.000000] Initializing cgroup subsys cpu
[    0.000000] Linux version 3.10.0-rc2-00182-g4f1a63b (jenkins-build@ip-10-60-18-139) (gcc version 4.7.4 20130508 (prerelease) (Linaro GCC 4.7-2013.05) ) #1 SMP Mon May 27 12:58:29 UTC 2013
[    0.000000] Kernel was built at commit id ''
[    0.000000] CPU: ARMv7 Processor [410fc090] revision 0 (ARMv7), cr=50c5387d
[    0.000000] CPU: PIPT / VIPT nonaliasing data cache, VIPT aliasing instruction cache
[    0.000000] Machine: ARM-Versatile Express
[    0.000000] Memory policy: ECC disabled, Data cache writealloc
[    0.000000] Zone ranges:
[    0.000000]   Normal   [mem 0x60000000-0x8f7fffff]
[    0.000000]   HighMem  [mem 0x8f800000-0x9fffffff]
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x60000000-0x9fffffff]
[    0.000000] sched_clock: 32 bits at 24MHz, resolution 41ns, wraps every 178956ms
[    0.000000] PERCPU: Embedded 9 pages/cpu @c0ea7000 s13760 r8192 d14912 u36864
[    0.000000] Built 1 zonelists in Zone order, mobility grouping on.  Total pages: 260624
[    0.000000] Kernel command line: console=tty0 console=ttyAMA0,38400n8 rootwait ro init=/init androidboot.console=ttyAMA0
[    0.000000] PID hash table entries: 4096 (order: 2, 16384 bytes)
[    0.000000] Dentry cache hash table entries: 131072 (order: 7, 524288 bytes)
[    0.000000] Inode-cache hash table entries: 65536 (order: 6, 262144 bytes)
[    0.000000] Memory: 1024MB = 1024MB total
[    0.000000] Memory: 1032512k/1032512k available, 16064k reserved, 270336K highmem
[    0.000000] Virtual kernel memory layout:
[    0.000000]     vector  : 0xffff0000 - 0xffff1000   (   4 kB)
[    0.000000]     fixmap  : 0xfff00000 - 0xfffe0000   ( 896 kB)
[    0.000000]     vmalloc : 0xf0000000 - 0xff000000   ( 240 MB)
[    0.000000]     lowmem  : 0xc0000000 - 0xef800000   ( 760 MB)
[    0.000000]     pkmap   : 0xbfe00000 - 0xc0000000   (   2 MB)
[    0.000000]     modules : 0xbf800000 - 0xbfe00000   (   6 MB)
[    0.000000]       .text : 0xc0008000 - 0xc05a14e4   (5734 kB)
[    0.000000]       .init : 0xc05a2000 - 0xc05f05c0   ( 314 kB)
[    0.000000]       .data : 0xc05f2000 - 0xc0633180   ( 261 kB)
[    0.000000]        .bss : 0xc0633180 - 0xc069fd14   ( 435 kB)
[    0.000000] Hierarchical RCU implementation.
[    0.000000] RCU restricting CPUs from NR_CPUS=8 to nr_cpu_ids=1.
[    0.000000] NR_IRQS:16 nr_irqs:16 16
[    0.000000] GIC CPU mask not found - kernel will fail to boot.
[    0.000000] GIC CPU mask not found - kernel will fail to boot.
[    0.000000] smp_twd: clock not found -2
[    0.000000] Console: colour dummy device 80x30
[    0.000000] console [tty0] enabled
[    0.204757] Calibrating delay loop... 506.26 BogoMIPS (lpj=2531328)
[    0.508225] pid_max: default: 32768 minimum: 301
[    0.509463] Mount-cache hash table entries: 512
[    0.522556] CPU: Testing write buffer coherency: ok
[    0.524179] ftrace: allocating 20317 entries in 40 pages
[    0.603451] CPU0: thread -1, cpu 0, socket 0, mpidr 80000000
[    0.604124] Setting up static identity map for 0xc03d83b0 - 0xc03d83fc
[    0.616552] Brought up 1 CPUs
[    0.619701] SMP: Total of 1 processors activated (506.26 BogoMIPS).
[    0.619820] CPU: All CPU(s) started in SVC mode.
[    0.644493] sched: registering cpufreq notifiers for scale-invariant loads
[    0.646430] xor: measuring software checksum speed
[    0.737917]    arm4regs  :   500.800 MB/sec
[    0.838439]    8regs     :   452.400 MB/sec
[    0.937884]    32regs    :   421.600 MB/sec
[    0.938018] xor: using function: arm4regs (500.800 MB/sec)
[    0.948711] regulator-dummy: no parameters
[    0.952142] NET: Registered protocol family 16
[    0.954307] DMA: preallocated 256 KiB pool for atomic coherent allocations
[    0.970927] L310 cache controller enabled
[    0.971010] l2x0: 8 ways, CACHE_ID 0x410000c8, AUX_CTRL 0x02420000, Cache size: 131072 B
[    0.978369] vexpress-sysreg vexpress-sysreg: error -22
[    0.979808] hw-breakpoint: debug architecture 0x0 unsupported.
[    0.979936] Serial: AMBA PL011 UART driver
[    0.981414] mb:uart0: ttyAMA0 at MMIO 0x10009000 (irq = 37) is a PL011 rev1
[    1.009047] console [ttyAMA0] enabled
[    1.011618] mb:uart1: ttyAMA1 at MMIO 0x1000a000 (irq = 38) is a PL011 rev1
[    1.013129] mb:uart2: ttyAMA2 at MMIO 0x1000b000 (irq = 39) is a PL011 rev1
[    1.014451] mb:uart3: ttyAMA3 at MMIO 0x1000c000 (irq = 40) is a PL011 rev1
[    1.082305] bio: create slab <bio-0> at 0
[    1.248051] raid6: int32x1    217 MB/s
[    1.418014] raid6: int32x2    260 MB/s
[    1.588115] raid6: int32x4    144 MB/s
[    1.757976] raid6: int32x8    147 MB/s
[    1.758380] raid6: using algorithm int32x2 (260 MB/s)
[    1.758890] raid6: using intx1 recovery algorithm
[    1.761094] fixed-dummy: no parameters
[    1.764957] SCSI subsystem initialized
[    1.768786] usbcore: registered new interface driver usbfs
[    1.769844] usbcore: registered new interface driver hub
[    1.771284] usbcore: registered new device driver usb
[    1.777189] Advanced Linux Sound Architecture Driver Initialized.
[    1.786682] Switching to clocksource v2m-timer1
[    1.894931] NET: Registered protocol family 2
[    1.904862] TCP established hash table entries: 8192 (order: 4, 65536 bytes)
[    1.907158] TCP bind hash table entries: 8192 (order: 4, 65536 bytes)
[    1.907943] TCP: Hash tables configured (established 8192 bind 8192)
[    1.909267] TCP: reno registered
[    1.909730] UDP hash table entries: 512 (order: 2, 16384 bytes)
[    1.910397] UDP-Lite hash table entries: 512 (order: 2, 16384 bytes)
[    1.913030] NET: Registered protocol family 1
[    1.915498] RPC: Registered named UNIX socket transport module.
[    1.916020] RPC: Registered udp transport module.
[    1.916418] RPC: Registered tcp transport module.
[    1.916980] RPC: Registered tcp NFSv4.1 backchannel transport module.
[    1.922212] Trying to unpack rootfs image as initramfs...
[    1.976807] Freeing initrd memory: 220K (c8000000 - c8037000)
[    1.977891] CPU PMU: probing PMU on CPU 0
[    1.979236] Internal error: Oops - undefined instruction: 0 [#1] SMP THUMB2
[    1.979946] Modules linked in:
[    1.980552] CPU: 0 PID: 1 Comm: swapper/0 Not tainted 3.10.0-rc2-00182-g4f1a63b #1
[    1.981209] task: ef01ea40 ti: ef03a000 task.ti: ef03a000
[    1.982046] PC is at armv7pmu_cpu_init+0x24/0x38
[    1.982654] LR is at 0x0
[    1.982914] pc : [<c0013ce4>]    lr : [<00000000>]    psr: 60000133
[    1.982914] sp : ef03be40  ip : 00000000  fp : 008ba000
[    1.983787] r10: c05fb588  r9 : 00000000  r8 : ef259380
[    1.984226] r7 : 00000001  r6 : ef2593dc  r5 : 00000000  r4 : c0ead800
[    1.984747] r3 : c0631a84  r2 : 00000000  r1 : 00000000  r0 : ef2967c0
[    1.985348] Flags: nZCv  IRQs on  FIQs on  Mode SVC_32  ISA Thumb  Segment kernel
[    1.985928] Control: 50c5387d  Table: 6000406a  DAC: 55555555
[    1.986419] 
[    1.986419] PC: 0xc0013c64:
[    1.986793] 3c64  ee09e028 f3bf5fbc ee198f6f f8d41fbc 615930ec 30ecf8d4 6959461d 07c1eb03
[    1.987692] 3c84  ee096b7f eb037f3d 6b8901c1 1f5dee09 10a4f8d6 39013201 d3074291 1e557861
[    1.988553] 3ca4  051ff005 d1dc2900 e7dc615d b90a7862 bdf86018 0f1cee09 bf00bdf8 b500b510
[    1.989304] 3cc4  eb04f85d f8d0460c f24830a4 ebc301d0 00981303 f0943034 f8c4f823 b14000ec
[    1.990056] 3ce4  3fdcee19 f8d46183 ee1930ec 61da2ffc de02bd10 b500b538 eb04f85d 30e0f8d0
[    1.990808] 3d04  4f90ee1d 20d4f8d0 479018e4 0508f100 f3c44628 7863f903 b17b4601 3f1cee19
[    1.991570] 3d24  033ef003 8f6ff3bf b98a7862 20ecf8d4 46286013 4038e8bd b928f3c4 30ecf8d4
[    1.992325] 3d44  f003681b f3bf033e 78628f6f d0ed2a00 3f1cee09 bf00e7ed b500b538 eb04f85d
[    1.993126] 
[    1.993126] SP: 0xef03bdc0:
[    1.993476] bdc0  00000000 00000000 00000000 00000000 c0634c02 0000001d 60000113 c0013ce8
[    1.994230] bde0  00000000 ef03a050 00000001 0000003c c000c981 c000c981 ef2967c0 00000000
[    1.994996] be00  00000000 c0631a84 c0ead800 00000000 ef2593dc 00000001 ef259380 00000000
[    1.995822] be20  c05fb588 008ba000 00000000 ef03be40 00000000 c0013ce4 60000133 ffffffff
[    1.996651] be40  c05f3800 c001443b ef01ea40 00000000 ef256688 ef0bf648 ef03be70 c00efefb
[    1.997485] be60  c0602020 c00375df ef29ef40 00000000 ef0bf648 00000000 c0602030 c0693938
[    1.998302] be80  c0602030 c0602064 c05ff6f8 ef03a000 c05a5865 c05cfdcc c0633200 c028511d
[    1.999146] bea0  c0285109 c0284499 00000000 c0602030 c05ff6f8 c0602064 00000000 c0284601
[    2.000010] 
[    2.000010] R0: 0xef296740:
[    2.000363] 6740  00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[    2.001125] 6760  00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[    2.001875] 6780  00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[    2.002638] 67a0  00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[    2.003432] 67c0  00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[    2.004192] 67e0  00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[    2.004984] 6800  00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[    2.005774] 6820  00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[    2.006624] 
[    2.006624] R3: 0xc0631a04:
[    2.006978] 1a04  00000000 00000000 c0546870 00000000 00000000 00000000 00000000 c0546880
[    2.007789] 1a24  00000000 00000000 00000000 00000000 c0546890 00000000 00000000 00000000
[    2.008560] 1a44  00000000 c0546898 00000000 00000000 00000000 00000000 c05468b0 00000000
[    2.009351] 1a64  00000000 00000000 00000000 c05468c0 00000000 00000000 00000000 00000000
[    2.010144] 1a84  c05468d4 00000000 00000000 00000000 00000000 c05468f8 00000000 00000000
[    2.010920] 1aa4  00000000 00000000 c0546918 00000000 00000000 00000000 00000000 c05468dc
[    2.011737] 1ac4  00000000 00000000 00000000 00000000 c054693c 00000000 00000000 00000000
[    2.012706] 1ae4  00000000 c0546968 00000000 00000000 00000000 00000000 c0546b28 00000000
[    2.013560] 
[    2.013560] R4: 0xc0ead780:
[    2.013938] d780  00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[    2.014797] d7a0  00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[    2.015588] d7c0  00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[    2.016364] d7e0  00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[    2.017134] d800  00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[    2.017931] d820  00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[    2.018682] d840  00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[    2.019437] d860  00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[    2.020209] 
[    2.020209] R6: 0xef25935c:
[    2.020549] 935c  00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[    2.021297] 937c  00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[    2.022040] 939c  00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[    2.022788] 93bc  00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[    2.023560] 93dc  000000ff c04d60c4 c0013f89 c0013e85 c0013db9 c0014151 00000000 c0013475
[    2.024305] 93fc  c00134f5 c0013d5d c0013cf9 c0013b3d 00000000 00000000 c0014119 c0013585
[    2.025053] 941c  c0013c0d c0013cc1 00000001 00000000 00000000 00000000 00000000 00000000
[    2.025807] 943c  00000000 00000000 00000000 ffffffff 00000000 c0602020 00000000 00000000
[    2.026628] 
[    2.026628] R8: 0xef259300:
[    2.026979] 9300  00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[    2.027801] 9320  00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[    2.028596] 9340  00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[    2.029365] 9360  00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[    2.030161] 9380  00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[    2.030966] 93a0  00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[    2.031790] 93c0  00000000 00000000 00000000 00000000 00000000 00000000 00000000 000000ff
[    2.032570] 93e0  c04d60c4 c0013f89 c0013e85 c0013db9 c0014151 00000000 c0013475 c00134f5
[    2.033371] 
[    2.033371] R10: 0xc05fb508:
[    2.033733] b508  00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[    2.034508] b528  00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[    2.035272] b548  00000064 00009000 0000000f c0eb0100 00000001 00000009 0000002c c0ea7000
[    2.036056] b568  c0eb00c0 c0eb0080 00000001 c0eb0000 c0eb0040 00001000 00000000 00000000
[    2.036819] b588  008ba000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[    2.037584] b5a8  00010800 00000001 0008f7f9 0009ffff 00020000 00002000 00000000 00000032
[    2.038349] b5c8  0000fffa 00000001 00000001 00000000 ef011bc0 ef015690 00000000 00000000
[    2.039122] b5e8  00000000 00000011 c0eb4200 0001ffff ef011cc0 ef011d40 00000064 00000010
[    2.039986] Process swapper/0 (pid: 1, stack limit = 0xef03a238)
[    2.040554] Stack: (0xef03be40 to 0xef03c000)
[    2.041028] be40: c05f3800 c001443b ef01ea40 00000000 ef256688 ef0bf648 ef03be70 c00efefb
[    2.041876] be60: c0602020 c00375df ef29ef40 00000000 ef0bf648 00000000 c0602030 c0693938
[    2.042667] be80: c0602030 c0602064 c05ff6f8 ef03a000 c05a5865 c05cfdcc c0633200 c028511d
[    2.043309] bea0: c0285109 c0284499 00000000 c0602030 c05ff6f8 c0602064 00000000 c0284601
[    2.043974] bec0: 00000000 c05ff6f8 c02845b1 c02833e1 ef00a5dc ef0ae3f4 c05ff6f8 ef296840
[    2.044626] bee0: c0619598 c0283ecd c04d6308 c05ff6f8 c05ff6f8 00000006 c05cfdc0 c0633200
[    2.045283] bf00: ef03a000 c028493b 00000000 00000000 00000006 c05cfdc0 c0633200 ef03a000
[    2.045960] bf20: c05a5865 c05a5883 c05eca68 c0008581 000000a0 c0032277 00000000 00000000
[    2.046653] bf40: c0574f1c 00000006 c0ea49d7 00000006 c06045bc c05eca68 00000006 c05cfdc0
[    2.047302] bf60: c0633200 000000a0 c05a21e9 c05cfdcc 00000000 c05a26df 00000006 00000006
[    2.047959] bf80: c05a21e9 00000000 00000000 c03ce411 00000000 00000000 00000000 00000000
[    2.048588] bfa0: 00000000 c03ce41d 00000000 c000cdfd 00000000 00000000 00000000 00000000
[    2.049198] bfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[    2.049813] bfe0: 00000000 00000000 00000000 00000000 00000013 00000000 00000000 00000000
[    2.051094] [<c0013ce4>] (armv7pmu_cpu_init+0x24/0x38) from [<c001443b>] (cpu_pmu_device_probe+0x28f/0x5b4)
[    2.051939] [<c001443b>] (cpu_pmu_device_probe+0x28f/0x5b4) from [<c028511d>] (platform_drv_probe+0x15/0x18)
[    2.052806] [<c028511d>] (platform_drv_probe+0x15/0x18) from [<c0284499>] (driver_probe_device+0x4d/0x164)
[    2.053554] [<c0284499>] (driver_probe_device+0x4d/0x164) from [<c0284601>] (__driver_attach+0x51/0x54)
[    2.054269] [<c0284601>] (__driver_attach+0x51/0x54) from [<c02833e1>] (bus_for_each_dev+0x2d/0x4c)
[    2.054955] [<c02833e1>] (bus_for_each_dev+0x2d/0x4c) from [<c0283ecd>] (bus_add_driver+0x95/0x170)
[    2.055657] [<c0283ecd>] (bus_add_driver+0x95/0x170) from [<c028493b>] (driver_register+0x43/0xd0)
[    2.056373] [<c028493b>] (driver_register+0x43/0xd0) from [<c05a5883>] (register_pmu_driver+0x1f/0x40)
[    2.057150] [<c05a5883>] (register_pmu_driver+0x1f/0x40) from [<c0008581>] (do_one_initcall+0xb5/0x100)
[    2.057895] [<c0008581>] (do_one_initcall+0xb5/0x100) from [<c05a26df>] (kernel_init_freeable+0xb7/0x148)
[    2.058657] [<c05a26df>] (kernel_init_freeable+0xb7/0x148) from [<c03ce41d>] (kernel_init+0xd/0xa0)
[    2.059376] [<c03ce41d>] (kernel_init+0xd/0xa0) from [<c000cdfd>] (ret_from_fork+0x11/0x20)
[    2.060145] Code: f823 f8c4 00ec b140 (ee19) 3fdc 
[    2.060862] ---[ end trace fe11f9f2e00cb3f3 ]---
[    2.061768] Kernel panic - not syncing: Attempted to kill init! exitcode=0x0000000b
[    2.061768] 


How do I solve this issue? anyone help me to launch the linaro android binary from QEMU?

Thanks very much!