DF-2929 / panic.txt
# DF-2929 baseline panics (stock INVARIANTS kernel, stock drm.ko)
#
# [A] raw engine sequence (mode 2: systimer_init_oneshot on a queued timer)
DF2929 mode=1: reverse hops=8 seen_st=1
DF2929 mode=1: forward hops=8 seen_st=1 seen_p=1 P->next==st:1 st->prev!=P:0 => queue ok
DF2929: cleaned up. fires P=0 st=0 N=0 (st fired >1x == double-dispatch)
DF2929 mode=2: reverse hops=7 seen_st=1
DF2929 mode=2: forward hops=24 seen_st=8 seen_p=8 P->next==st:0 st->prev!=P:1 => QUEUE CORRUPT
panic: Bad link elm 0xffffffff82600400 prev->next != elm
cpuid = 0
Trace beginning at frame 0xfffff801182a7738
systimer_del() at systimer_del+0xd4 0xffffffff8065a554
systimer_del() at systimer_del+0xd4 0xffffffff8065a554
df2929_run() at df2929_run+0x20c 0xffffffff8260020c
sysctl_root.isra.5() at sysctl_root.isra.5+0x166 0xffffffff80683d06
userland_sysctl() at userland_sysctl+0x111 0xffffffff806840a1
sys___sysctl() at sys___sysctl+0x74 0xffffffff80684204
Debugger("panic")
CPU0 stopping CPUs: 0x0000003e
stopped
Stopped at Debugger+0x7c: movb $0,0xbdaf09(%rip)
db>
# [B] real in-tree wrapper path (mode 5: hrtimer_start_range_ns twice)
DF2929 mode=5: hrtimer path: hops=1 dht.st seen=1 onqueue-flag=1 => queue ok
panic: Bad link elm 0xffffffff826005c8 prev->next != elm
cpuid = 4
Trace beginning at frame 0xfffff8011963f6a8
systimer_intr() at systimer_intr+0x235 0xffffffff8065a555
systimer_intr() at systimer_intr+0x235 0xffffffff8065a555
pcpu_timer_process_oncpu() at pcpu_timer_process_oncpu+0x82 0xffffffff8065b242
splz_timer() at splz_timer+0x13 0xffffffff80bca404
sysctl_root.isra.5() at sysctl_root.isra.5+0x166 0xffffffff80683d06
userland_sysctl() at userland_sysctl+0x111 0xffffffff806840a1
sys___sysctl() at sys___sysctl+0x74 0xffffffff80684204
Debugger("panic")
CPU4 stopping CPUs: 0x0000002f
stopped
Stopped at Debugger+0x7c: movb $0,0xbdaf09(%rip)
db>