again i'm using the branch at

https://github.com/rth7680/qemu/tree/tgt-arm-mte

to test armv8.5-a mte, now qemu-system-aarch64 segfaults
and it's easy to reproduce: minimal source and static
linked binary is attached (should be executed on linux
with mte support, i used mte-v4 kernel with reverted
memory property check).

the __aarch64_memchr function referenced is from
https://github.com/ARM-software/optimized-routines

and the bug was originally observed when running the
test executables built with gcc-10 and a config.mk like

SUBS = string
ARCH = aarch64
srcdir = .
CROSS_COMPILE = aarch64-none-linux-gnu-
CC = $(CROSS_COMPILE)gcc
CFLAGS = -std=c99 -pipe -O3
CFLAGS += -march=armv8.5-a+memtag -DWANT_MTE_TEST=1
CFLAGS += -Wall -Wno-missing-braces
CFLAGS += -Werror=implicit-function-declaration
CFLAGS += -g