# DF-2929 baseline panics (stock INVARIANTS kernel, stock drm.ko) # # [A] raw engine sequence (mode 2: systimer_init_oneshot on a queued timer) DF2929 mode=1: reverse hops=8 seen_st=1 DF2929 mode=1: forward hops=8 seen_st=1 seen_p=1 P->next==st:1 st->prev!=P:0 => queue ok DF2929: cleaned up. fires P=0 st=0 N=0 (st fired >1x == double-dispatch) DF2929 mode=2: reverse hops=7 seen_st=1 DF2929 mode=2: forward hops=24 seen_st=8 seen_p=8 P->next==st:0 st->prev!=P:1 => QUEUE CORRUPT panic: Bad link elm 0xffffffff82600400 prev->next != elm cpuid = 0 Trace beginning at frame 0xfffff801182a7738 systimer_del() at systimer_del+0xd4 0xffffffff8065a554 systimer_del() at systimer_del+0xd4 0xffffffff8065a554 df2929_run() at df2929_run+0x20c 0xffffffff8260020c sysctl_root.isra.5() at sysctl_root.isra.5+0x166 0xffffffff80683d06 userland_sysctl() at userland_sysctl+0x111 0xffffffff806840a1 sys___sysctl() at sys___sysctl+0x74 0xffffffff80684204 Debugger("panic") CPU0 stopping CPUs: 0x0000003e stopped Stopped at Debugger+0x7c: movb $0,0xbdaf09(%rip) db> # [B] real in-tree wrapper path (mode 5: hrtimer_start_range_ns twice) DF2929 mode=5: hrtimer path: hops=1 dht.st seen=1 onqueue-flag=1 => queue ok panic: Bad link elm 0xffffffff826005c8 prev->next != elm cpuid = 4 Trace beginning at frame 0xfffff8011963f6a8 systimer_intr() at systimer_intr+0x235 0xffffffff8065a555 systimer_intr() at systimer_intr+0x235 0xffffffff8065a555 pcpu_timer_process_oncpu() at pcpu_timer_process_oncpu+0x82 0xffffffff8065b242 splz_timer() at splz_timer+0x13 0xffffffff80bca404 sysctl_root.isra.5() at sysctl_root.isra.5+0x166 0xffffffff80683d06 userland_sysctl() at userland_sysctl+0x111 0xffffffff806840a1 sys___sysctl() at sys___sysctl+0x74 0xffffffff80684204 Debugger("panic") CPU4 stopping CPUs: 0x0000002f stopped Stopped at Debugger+0x7c: movb $0,0xbdaf09(%rip) db>