lkml.org 
[lkml]   [2014]   [Mar]   [19]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: rb tree hrtimer lockup bug (found by perf_fuzzer)
On Wed, 19 Mar 2014, Thomas Gleixner wrote:

> On Wed, 19 Mar 2014, Vince Weaver wrote:
> > On Tue, 18 Mar 2014, Thomas Gleixner wrote:
> > your patch didn't seem to print anything additional the first time throug.
> >
> > I then tried the trace command you suggested, but I'm getting an empty
> > ftrace buffer which possibly means I don't have enough ftrace kernel
> > options enabled.
> >
> > Here's the most recent boot crash.
> >
> > [ 5.367069] ODEBUG: Info active (active state 0) object type: timer_list hint: (null)
>
> Stupid me. We get the hint from the wreckaged object ....
>
> A hopefully better approach is the delta patch below.

with that applied on top:

[ 5.342681] Invalid timer base: tmr ffff880117740150 tmr->base (null) base ffff880118618000
[ 5.352786] ------------[ cut here ]------------
[ 5.357911] WARNING: CPU: 4 PID: 0 at lib/debugobjects.c:260 debug_print_object+0x8c/0xb0()
[ 5.367023] ODEBUG: Info active (active state 0) object type: timer_list hint: (null) delayed_work_timer_fn+0x0/0x20
[ 5.379430] Modules linked in: sg sd_mod sr_mod crc_t10dif crct10dif_common cdrom hid_generic usbhid hid ehci_pci xhci_hcd ehci_hcd ahci libahci e1000e libata usbcore ptp crc32c_intel usb_common scsi_mod pps_core fan thermal thermal_sys
[ 5.404562] CPU: 4 PID: 0 Comm: swapper/4 Not tainted 3.14.0-rc7+ #6
[ 5.411527] Hardware name: LENOVO 10AM000AUS/SHARKBAY, BIOS FBKT72AUS 01/26/2014
[ 5.419604] 0000000000000009 ffff88011eb03d60 ffffffff8155b173 ffff88011eb03da8
[ 5.428072] ffff88011eb03d98 ffffffff810661ad ffff880117a51828 ffffffff8183a7e0
[ 5.436571] ffffffff8173de38 00000000000258b0 ffffffff818774d0 ffff88011eb03df8
[ 5.445017] Call Trace:
[ 5.447777] <IRQ> [<ffffffff8155b173>] dump_stack+0x45/0x56
[ 5.454257] [<ffffffff810661ad>] warn_slowpath_common+0x7d/0xa0
[ 5.460820] [<ffffffff8106621c>] warn_slowpath_fmt+0x4c/0x50
[ 5.467103] [<ffffffff8131d1ec>] debug_print_object+0x8c/0xb0
[ 5.473485] [<ffffffff8107fc30>] ? __queue_work+0x320/0x320
[ 5.479710] [<ffffffff8131d954>] debug_object_info+0xf4/0x100
[ 5.486082] [<ffffffff81071904>] cascade+0xc4/0xd0
[ 5.491489] [<ffffffff81072d7c>] run_timer_softirq+0x21c/0x2a0
[ 5.497965] [<ffffffff810cf5db>] ? clockevents_program_event+0x6b/0xf0
[ 5.505203] [<ffffffff8106b5a5>] __do_softirq+0xf5/0x290
[ 5.511108] [<ffffffff8106b98d>] irq_exit+0xad/0xc0
[ 5.516530] [<ffffffff8156c0f5>] smp_apic_timer_interrupt+0x45/0x60
[ 5.523488] [<ffffffff8156aa5d>] apic_timer_interrupt+0x6d/0x80
[ 5.530048] <EOI> [<ffffffff81433152>] ? cpuidle_enter_state+0x52/0xc0
[ 5.537601] [<ffffffff81433279>] cpuidle_idle_call+0xb9/0x1f0
[ 5.543967] [<ffffffff8101e48e>] arch_cpu_idle+0xe/0x30
[ 5.549798] [<ffffffff810bb57e>] cpu_startup_entry+0x9e/0x240
[ 5.556220] [<ffffffff81044af0>] start_secondary+0x1a0/0x1f0
[ 5.562492] ---[ end trace e60b62481a1a0611 ]---
[ 5.567568] ------------[ cut here ]------------
[ 5.572623] kernel BUG at kernel/timer.c:1088!
[ 5.577511] invalid opcode: 0000 [#1] SMP
[ 5.582190] Dumping ftrace buffer:
[ 5.585956] (ftrace buffer empty)
[ 5.589941] Modules linked in: sg sd_mod sr_mod crc_t10dif crct10dif_common cdrom hid_generic usbhid hid ehci_pci xhci_hcd ehci_hcd ahci libahci e1000e libata usbcore ptp crc32c_intel usb_common scsi_mod pps_core fan thermal thermal_sys
[ 5.615094] CPU: 4 PID: 0 Comm: swapper/4 Tainted: G W 3.14.0-rc7+ #6
[ 5.623062] Hardware name: LENOVO 10AM000AUS/SHARKBAY, BIOS FBKT72AUS 01/26/2014
[ 5.631142] task: ffff88011886ea00 ti: ffff880118872000 task.ti: ffff880118872000
[ 5.639286] RIP: 0010:[<ffffffff81071904>] [<ffffffff81071904>] cascade+0xc4/0xd0
[ 5.647630] RSP: 0018:ffff88011eb03e78 EFLAGS: 00010002
[ 5.653456] RAX: 0000000000000024 RBX: ffff880117740150 RCX: 00000000000007d4
[ 5.661261] RDX: 0000000000001369 RSI: 0000000000000002 RDI: 0000000000000002
[ 5.668990] RBP: ffff88011eb03ea8 R08: 0000000000000000 R09: 00000000000002b2
[ 5.676785] R10: ffffffff8165a580 R11: ffff88011eb03a9e R12: ffff880118618000
[ 5.684590] R13: ffff88011eb03e78 R14: 0000000000000020 R15: ffffffff818774d0
[ 5.692366] FS: 0000000000000000(0000) GS:ffff88011eb00000(0000) knlGS:0000000000000000
[ 5.701150] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 5.707459] CR2: 00007f8ec214b214 CR3: 000000000180e000 CR4: 00000000001407e0
[ 5.715222] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 5.723008] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 5.730767] Stack:
[ 5.733020] ffff88011772b470 ffff88011eb10740 ffff880118618000 0000000000000000
[ 5.741497] 0000000000000001 0000000000000100 ffff88011eb03f18 ffffffff81072d7c
[ 5.749956] ffff880118619c28 ffff880118619828 ffff880118619428 ffff880118619028
[ 5.758481] Call Trace:
[ 5.761210] <IRQ>
[ 5.763390] [<ffffffff81072d7c>] run_timer_softirq+0x21c/0x2a0
[ 5.770310] [<ffffffff810cf5db>] ? clockevents_program_event+0x6b/0xf0
[ 5.777520] [<ffffffff8106b5a5>] __do_softirq+0xf5/0x290
[ 5.783440] [<ffffffff8106b98d>] irq_exit+0xad/0xc0
[ 5.788888] [<ffffffff8156c0f5>] smp_apic_timer_interrupt+0x45/0x60
[ 5.795830] [<ffffffff8156aa5d>] apic_timer_interrupt+0x6d/0x80
[ 5.802380] <EOI>
[ 5.804559] [<ffffffff81433152>] ? cpuidle_enter_state+0x52/0xc0
[ 5.811624] [<ffffffff81433279>] cpuidle_idle_call+0xb9/0x1f0
[ 5.818009] [<ffffffff8101e48e>] arch_cpu_idle+0xe/0x30
[ 5.823838] [<ffffffff810bb57e>] cpu_startup_entry+0x9e/0x240
[ 5.830235] [<ffffffff81044af0>] start_secondary+0x1a0/0x1f0
[ 5.836523] Code: 5d 41 5e 5d c3 48 89 f3 4c 89 e1 48 89 de 48 c7 c7 f8 05 71 81 31 c0 e8 de 6c 4e 00 48 c7 c6 e0 a7 83 81 48 89 df e8 5c bf 2a 00 <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 55 48 89 e5
[ 5.862939] RIP [<ffffffff81071904>] cascade+0xc4/0xd0
[ 5.868769] RSP <ffff88011eb03e78>
[ 5.872662] ---[ end trace e60b62481a1a0612 ]---
[ 5.877728] Kernel panic - not syncing: Fatal exception in interrupt
[ 5.884701] Dumping ftrace buffer:
[ 5.888452] (ftrace buffer empty)
[ 5.892407] Kernel Offset: 0x0 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffff9fffffff)



\
 
 \ /
  Last update: 2014-03-19 16:21    [W:0.085 / U:3.572 seconds]
©2003-2018 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site