调试工具（二）：crash（未完结）

sudo apt-get install build-essential

git clone https://github.com/crash-utility/crash.git

make target=ARM

configure: error: no termcap library found

./configure

make

make install

/usr/bin/ld: skipping incompatible /usr/lib/gcc/x86_64-linux-gnu/7/libgcc.a when searching for -lgcc

/usr/bin/ld: cannot find -lgcc

/usr/bin/ld: skipping incompatible /usr/lib/gcc/x86_64-linux-gnu/7/libgcc_s.so.1 when searching for libgcc_s.so.1

/usr/bin/ld: cannot find libgcc_s.so.1

sudo apt-get install gcc-multilib

/usr/bin/ld: cannot find libncurses.so.5

sudo apt-get install lib32ncurses5-dev

/usr/bin/ld: skipping incompatible //usr/lib/x86_64-linux-gnu/libz.so when searching for -lz

/usr/bin/ld: skipping incompatible //usr/lib/x86_64-linux-gnu/libz.a when searching for -lz

/usr/bin/ld: cannot find -lz

sudo apt-get install lib32z1-dev

tj@tj-X230:~/tools/crash$ ./crash --version

crash 7.2.8++

Copyright (C) 2002-2020 Red Hat, Inc.

Copyright (C) 2004, 2005, 2006, 2010 IBM Corporation

Copyright (C) 1999-2006 Hewlett-Packard Co

Copyright (C) 2005, 2006, 2011, 2012 Fujitsu Limited

Copyright (C) 2006, 2007 VA Linux Systems Japan K.K.

Copyright (C) 2005, 2011 NEC Corporation

Copyright (C) 1999, 2002, 2007 Silicon Graphics, Inc.

Copyright (C) 1999, 2000, 2001, 2002 Mission Critical Linux, Inc.

This program is free software, covered by the GNU General Public License,

and you are welcome to change it and/or distribute copies of it under

certain conditions. Enter "help copying" to see the conditions.

This program has absolutely no warranty. Enter "help warranty" for details.

GNU gdb (GDB) 7.6

Copyright (C) 2013 Free Software Foundation, Inc.

License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>

This is free software: you are free to change and redistribute it.

There is NO WARRANTY, to the extent permitted by law. Type "show copying"

and "show warranty" for details.

This GDB was configured as "--host=x86_64-unknown-linux-gnu --target=arm-elf-linux".

[hupu@HUC /mnt/hgfs]$ hexdump OCIMEM.BIN | grep dead

0012800 beef dead 0000 0000 0000 0000 0000 0000

0037120 ff5f 1991 c766 ae0f f0f7 ff05 bc72 dead

003f6d0 4ead dead
0000 c460 001a 0000 8c20 9834

003fb10 0000 0000 d00d dead 0232 95e0 6ec7 54ad

[hupu@HUC /mnt/hgfs]$ hexdump -e '16/4 "%08x " "\n"' -s 0x03f6d4 -n 8 OCIMEM.BIN

c4600000 0000001a

self.imem_start = 0x14680000

self.kaslr_addr = 0x146bf6d0

self.imem_file_name = 'OCIMEM.BIN'

[hupu@HUC /mnt/hgfs]$ ls DDRCS*

DDRCS0_0.BIN DDRCS0_1.BIN DDRCS1_0.BIN DDRCS1_1.BIN

[hupu@HUC /mnt/hgfs]$ grep DDRCS dump_info.txt -nr

48: 1 0x0000000080000000 0000002147483648 DDR CS0 part0 Memo DDRCS0_0.BIN

49: 1 0x0000000100000000 0000002147483648 DDR CS0 part1 Memo DDRCS0_1.BIN

50: 1 0x0000000180000000 0000002147483648 DDR CS1 part0 Memo DDRCS1_0.BIN

51: 1 0x0000000200000000 0000002147483648 DDR CS1 part1 Memo DDRCS1_1.BIN

crash_arm64 vmlinux DDRCS0_0.BIN@0x0000000080000000,DDRCS0_1.BIN@0x0000000100000000,DDRCS1_0.BIN@0x0000000180000000,DDRCS1_1.BIN@0x0000000200000000 --kaslr=0x0000001ac4600000

crash [OPTION]... NAMELIST MEMORY-IMAGE[@ADDRESS] (用来分析dumpfile文件)

crash [OPTION]... [NAMELIST] (用来分析正在运行的系统)

选项

说明

mapfile

当分析正在运行的内核的时候，如果NAMELIST文件与当前正在运行的内核不一致，或者分析dumpfile的时候，NAMELIST与产生dumpfile的内核不一致，那么原始内核的System.map文件需要在命令行指定

-h [option]/

--help [option]

不带有option的时候，展示crash工具的帮助，如果option是carsh工具的命令名字，那么会展示对应的帮助。另外option也可以是"input"、"output"或者"all"

-s

静默处理到"crash>"，不会展示版本信息、初始化过程等

-i file

在展示"crash>"之前，执行file文件中的命令

-d num

设置debug level，数值越高，crash在初始化和运行的时候就会展示越多的信息

-S

使用/boot/System.map作为mapfile

-t

展示系统crash的事件戳并推出

-c tty-device

使用tty-device作为调试信息的控制台

-p page-size

如果处理器的分页大小不能通过dumpfile判断出来，并且不能使用处理器的默认值，那么可以通过这个选项来指定

-o filename

使用MEMORY-IMAGE@ADDRESS形式的原始RAM的dumpfile时候，这个选项可以用来创建一个独立的ELF vmcore，以备将来使用

-x

自动的从一个指定目录加载扩展模块。环境变量CRASH_EXTENSIONS可以用来指定加载目录

--active

仅跟踪每个cpu上正在运行的task

--buildinfo

展示crash的build信息

--memory_module modname

使用modname作为crash.ko的替代模块来创建/dev/crash设备

--memory_device device

使用device代替/dev/crash、/dev/mem或者/proc/kcore

--smp

指定分析的系统是smp内核

-v

展示crash的版本信息

--cpus number

指定smp系统的cpu数目

--more/--less

指定输出工具

--hex/--dec

指定命令输出的进制

crash_arm64> help

* extend log rd task

alias files mach repeat timer

ascii foreach mod runq tree

bpf fuser mount search union

bt gdb net set vm

btop help p sig vtop

dev ipcs ps struct waitq

dis irq pte swap whatis

eval kmem ptob sym wr

exit list ptov sys q

crash_arm64 version: 7.3.0 gdb version: 7.6

For help on any command above, enter "help <command>".

For help on input options, enter "help input".

For help on output options, enter "help output".

crash_arm64> help help

NAME

help - get help

SYNOPSIS

help [command | all] [-<option>]

DESCRIPTION

When entered with no argument, a list of all currently available crash_arm64

commands is listed. If a name of a crash_arm64 command is entered, a man-like

page for the command is displayed. If "all" is entered, help pages

for all commands will be displayed. If neither of the above is entered,

the argument string will be passed on to the gdb help command.

A number of internal debug, statistical, and other dumpfile related

data is available with the following options:

-a - alias data

-b - shared buffer data

-B - build data

-c - numargs cache

-d - device table

-D - dumpfile contents/statistics

-e - extension table data

-f - filesys table

-g - gdb data

-h - hash_table data

-H - hash_table data (verbose)

-k - kernel_table

-K - kernel_table (verbose)

-L - LKCD page cache environment

-M <num> machine specific

-m - machdep_table

-N - net_table

-n - dumpfile contents/statistics

-o - offset_table and size_table

-p - program_context

-r - dump registers from dumpfile header

-s - symbol table data

-t - task_table

-T - task_table plus context_array

-v - vm_table

-V - vm_table (verbose)

-x - text cache

-z - help options

alias [alias] [command string]

# 查看系统中的所有别名

crash_arm64> alias

ORIGIN ALIAS COMMAND

builtin man help

builtin ? help

builtin quit q

builtin sf set scroll off

builtin sn set scroll on

builtin hex set radix 16

builtin dec set radix 10

builtin g gdb

builtin px p -x

builtin pd p -d

builtin for foreach

builtin size *

builtin dmesg log

builtin lsmod mod

builtin last ps -l

# 创建一个别名

crash_arm64> alias kp kmem -p

ORIGIN ALIAS COMMAND

runtime kp kmem -p

# 创建一个带重定向的别名要使用引号

crash_arm64> alias ksd "kmem -p | grep slab | grep DMA"

ORIGIN ALIAS COMMAND

runtime ksd kmem -p | grep slab | grep DMA

# 移除一个别名

crash_arm64> alias kp ""

alias deleted: kp

# 将十六进制raw数据转化为字符串

crash_arm64> ascii 62696c2f7273752f

62696c2f7273752f: /usr/lib

# 查看ascii码表

crash_arm64> ascii

0 1 2 3 4 5 6 7

+-------------------------------

0 | NUL DLE SP 0 @ P ' p

1 | SOH DC1 ! 1 A Q a q

2 | STX DC2 " 2 B R b r

3 | ETX DC3 # 3 C S c s

4 | EOT DC4 $ 4 D T d t

5 | ENQ NAK % 5 E U e u

6 | ACK SYN & 6 F V f v

7 | BEL ETB ` 7 G W g w

8 | BS CAN ( 8 H X h x

9 | HT EM ) 9 I Y i y

A | LF SUB * : J Z j z

B | VT ESC + ; K [ k {

C | FF FS , < L \ l |

D | CR GS _ = M ] m }

E | SO RS . > N ^ n ~

F | SI US / ? O - o DEL

bt [-a|-c cpu(s)|-g|-r|-t|-T|-l|-e|-E|-f|-F|-o|-O|-v|-p] [-R ref] [-s [-x|d]]

[-I ip] [-S sp] [pid | task]

crash_arm64> bt -a

PID: 0 TASK: ffffff9acf4ee280 CPU: 0 COMMAND: "swapper/0"

bt: WARNING: cannot determine starting stack frame for task ffffff9acf4ee280

PID: 278 TASK: ffffffdd57625ec0 CPU: 1 COMMAND: "kworker/u16:6"

bt: WARNING: cannot determine starting stack frame for task ffffffdd57625ec0

PID: 0 TASK: ffffffdc3fdf3f40 CPU: 2 COMMAND: "swapper/2"

bt: WARNING: cannot determine starting stack frame for task ffffffdc3fdf3f40

PID: 0 TASK: ffffffdc3fdf0040 CPU: 3 COMMAND: "swapper/3"

bt: WARNING: cannot determine starting stack frame for task ffffffdc3fdf0040

PID: 0 TASK: ffffffdc3fe6dec0 CPU: 4 COMMAND: "swapper/4"

bt: WARNING: cannot determine starting stack frame for task ffffffdc3fe6dec0

PID: 0 TASK: ffffffdc3fe69fc0 CPU: 5 COMMAND: "swapper/5"

bt: WARNING: cannot determine starting stack frame for task ffffffdc3fe69fc0

PID: 16709 TASK: ffffffdda4de3f40 CPU: 6 COMMAND: "sh"

bt: WARNING: cannot determine starting stack frame for task ffffffdda4de3f40

PID: 0 TASK: ffffffdc3fe68040 CPU: 7 COMMAND: "swapper/7"

bt: WARNING: cannot determine starting stack frame for task ffffffdc3fe68040

crash_arm64> bt -c 1

PID: 278 TASK: ffffffdd57625ec0 CPU: 1 COMMAND: "kworker/u16:6"

bt: WARNING: cannot determine starting stack frame for task ffffffdd57625ec0

crash_arm64> bt -c 1,3-5

PID: 278 TASK: ffffffdd57625ec0 CPU: 1 COMMAND: "kworker/u16:6"

bt: WARNING: cannot determine starting stack frame for task ffffffdd57625ec0

PID: 0 TASK: ffffffdc3fdf0040 CPU: 3 COMMAND: "swapper/3"

bt: WARNING: cannot determine starting stack frame for task ffffffdc3fdf0040

PID: 0 TASK: ffffffdc3fe6dec0 CPU: 4 COMMAND: "swapper/4"

bt: WARNING: cannot determine starting stack frame for task ffffffdc3fe6dec0

PID: 0 TASK: ffffffdc3fe69fc0 CPU: 5 COMMAND: "swapper/5"

bt: WARNING: cannot determine starting stack frame for task ffffffdc3fe69fc0

crash_arm64>

#显示这个进程下所有线程的栈信息，group leader最先显示

crash_arm64> bt -g

PID: 1235 TASK: ffffff809dcf53c0 CPU: 5 COMMAND: "surfaceflinger"

#0 [ffffffc0164dbb90] __switch_to at ffffffe4fb6af5ec

#1 [ffffffc0164dbbf0] __schedule at ffffffe4fc97a260

#2 [ffffffc0164dbc50] schedule at ffffffe4fc97a598

#3 [ffffffc0164dbcd0] schedule_hrtimeout_range_clock at ffffffe4fc97f2c4

#4 [ffffffc0164dbd70] do_epoll_wait at ffffffe4fb98dbcc

#5 [ffffffc0164dbdd0] __se_sys_epoll_pwait at ffffffe4fb98b4d8

#6 [ffffffc0164dbe10] __arm64_sys_epoll_pwait at ffffffe4fb98b47c

#7 [ffffffc0164dbe20] oplus_invoke_syscall at ffffffe4fb6d0500

#8 [ffffffc0164dbe70] el0_svc_common at ffffffe4fb6c2ec4

#9 [ffffffc0164dbeb0] el0_svc_handler at ffffffe4fb6c2e04

#10 [ffffffc0164dbff0] el0_svc at ffffffe4fb484e84

PC: 00000076109d04a8 LR: 00000076119edad0 SP: 0000007fc42df120

X29: 0000007fc42df270 X28: 0000000000000000 X27: 0000000000000000

X26: 0000000000000000 X25: 00000076133a8000 X24: 0000000000000000

X23: b4000075900510e0 X22: 00000000ffffffff X21: 00000000ffffffff

X20: b400007590051188 X19: b4000075900510e0 X18: 000000761366c000

X17: 000000761099276c X16: 00000076119f0db0 X15: 0000000034155555

X14: 0000000000000000 X13: 000000757b035740 X12: 000000759000d888

X11: b400000000000000 X10: 00000000000001d0 X9: b79a1c55bdc51541

X8: 0000000000000016 X7: 000000757b035860 X6: 000000758ec18520

X5: 0000000000000008 X4: 0000000000000000 X3: 00000000ffffffff

X2: 0000000000000010 X1: 0000007fc42df160 X0: 0000000000000009

ORIG_X0: 0000000000000009 SYSCALLNO: 16 PSTATE: 60001000

PID: 1316 TASK: ffffff809e2953c0 CPU: 0 COMMAND: "Binder:1235_1"

#0 [ffffffc01658b9e0] __switch_to at ffffffe4fb6af5ec

#1 [ffffffc01658ba40] __schedule at ffffffe4fc97a260

#2 [ffffffc01658baa0] schedule at ffffffe4fc97a598

#3 [ffffffc01658bbd0] binder_thread_read at ffffffe4fc3a62ec

#4 [ffffffc01658bc70] binder_ioctl_write_read at ffffffe4fc3a2ff4

#5 [ffffffc01658bd00] binder_ioctl$f42ae93cc7b62da6c06eb3ca54df1c12 at ffffffe4fc39e6e4

#6 [ffffffc01658bda0] do_vfs_ioctl at ffffffe4fb940ba8

#7 [ffffffc01658bde0] __arm64_sys_ioctl at ffffffe4fb9417e8

#8 [ffffffc01658be20] oplus_invoke_syscall at ffffffe4fb6d0500

#9 [ffffffc01658be70] el0_svc_common at ffffffe4fb6c2ec4

#10 [ffffffc01658beb0] el0_svc_handler at ffffffe4fb6c2e04

#11 [ffffffc01658bff0] el0_svc at ffffffe4fb484e84

PC: 00000076109cf4e8 LR: 000000761098bdbc SP: 0000007612ec6900

X29: 0000007612ec69e0 X28: 0000007612dce000 X27: 00000000000fc000

X26: 0000007612ec6ff8 X25: 0000000000000000 X24: 0000007612ec7000

X23: 0000000000000100 X22: 00000000fffffff7 X21: b40000758ec0d120

X20: b40000758ec0d000 X19: 0000007612ec7000 X18: 000000758f7a0000

X17: 000000761098bd1c X16: 00000076117ad538 X15: 0000000034155555

X14: 00000076109f19e2 X13: 0000000000000000 X12: ffffff80ffffffd0

X11: 0000007612ec6980 X10: 0000007612ec69b0 X9: 0000007612ec69b0

X8: 000000000000001d X7: 0000000000000000 X6: 0000000000000000

X5: 0000000000000000 X4: 0000000000000000 X3: 0000000000000000

X2: 0000007612ec6a00 X1: 00000000c0306201 X0: 0000000000000005

ORIG_X0: 0000000000000005 SYSCALLNO: 1d PSTATE: 80001000

#也可指定进程查看

crash_arm64> bt -g 4460

PID: 4460 TASK: ffffff82d376d3c0 CPU: 5 COMMAND: "ndroid.launcher"

#0 [ffffffc029723b90] __switch_to at ffffffe4fb6af5ec

#1 [ffffffc029723bf0] __schedule at ffffffe4fc97a260

#2 [ffffffc029723c50] schedule at ffffffe4fc97a598

#3 [ffffffc029723cd0] schedule_hrtimeout_range_clock at ffffffe4fc97f2c4

#4 [ffffffc029723d70] do_epoll_wait at ffffffe4fb98dbcc

#5 [ffffffc029723dd0] __se_sys_epoll_pwait at ffffffe4fb98b4d8

#6 [ffffffc029723e10] __arm64_sys_epoll_pwait at ffffffe4fb98b47c

#7 [ffffffc029723e20] oplus_invoke_syscall at ffffffe4fb6d0500

#8 [ffffffc029723e70] el0_svc_common at ffffffe4fb6c2eac

#9 [ffffffc029723eb0] el0_svc_handler at ffffffe4fb6c2e04

#10 [ffffffc029723ff0] el0_svc at ffffffe4fb484e84

PC: 000000709190f4a8 LR: 000000709032cad0 SP: 0000007ff83df7d0

X29: 0000007ff83df920 X28: 000000006fdc3ed8 X27: 000000006fdcd218

X26: b40000700f020240 X25: 00000070957e4000 X24: 000000007fffffff

X23: b40000700f0890c0 X22: 00000000ffffffff X21: 00000000ffffffff

X20: b40000700f089168 X19: b40000700f0890c0 X18: 000000709596a000

X17: 00000070918d176c X16: 000000709032fdb0 X15: 0000000034155555

X14: 003b315da2864000 X13: 000000015f34ccce X12: 000000700f00d888

X11: b400000000000000 X10: 0000000000000026 X9: e06b960998e9cab4

X8: 0000000000000016 X7: 0000000000000000 X6: 0000000000000001

X5: 0000000000000008 X4: 0000000000000000 X3: 00000000ffffffff

X2: 0000000000000010 X1: 0000007ff83df810 X0: 000000000000003f

ORIG_X0: 000000000000003f SYSCALLNO: 16 PSTATE: 60001000

PID: 4490 TASK: ffffff82d2193240 CPU: 1 COMMAND: "Signal Catcher"

#0 [ffffffc029b43bd0] __switch_to at ffffffe4fb6af5ec

#1 [ffffffc029b43c30] __schedule at ffffffe4fc97a260

#2 [ffffffc029b43c90] schedule at ffffffe4fc97a598

#3 [ffffffc029b43d10] schedule_hrtimeout_range_clock at ffffffe4fc97f2c4

#4 [ffffffc029b43d60] do_sigtimedwait at ffffffe4fb6f7354

#5 [ffffffc029b43e00] __arm64_sys_rt_sigtimedwait at ffffffe4fb6f48d8

#6 [ffffffc029b43e20] oplus_invoke_syscall at ffffffe4fb6d0500

#7 [ffffffc029b43e70] el0_svc_common at ffffffe4fb6c2eac

#8 [ffffffc029b43eb0] el0_svc_handler at ffffffe4fb6c2e04

#9 [ffffffc029b43ff0] el0_svc at ffffffe4fb484e84

PC: 000000709190eee8 LR: 00000070918cfdd4 SP: 0000006fff465b10

X29: 0000006fff465b20 X28: 0000006fff466000 X27: 000000700d3b0000

X26: 0000006fff466000 X25: 0000006fff465cc0 X24: 0000006fff465cc0

X23: 000000700cdb6207 X22: 0000000080000204 X21: 0000006fff466000

X20: b400006ffcc37800 X19: 0000006fff465b6c X18: 0000006ff9936000

X17: 00000070918cfd8c X16: 000000700d3aa310 X15: 0000000000000000

X14: 000000700ce374fc X13: 000000700ce3749c X12: 0000000000000001

crash_arm64> bt -r

PID: 1235 TASK: ffffff809dcf53c0 CPU: 5 COMMAND: "surfaceflinger"

ffffffc0164d8000: 0000000057ac6e9d 0000000000000000

ffffffc0164d8010: 0000000000000000 0000000000000000

ffffffc0164d8020: 0000000000000000 0000000000000000

ffffffc0164d8030: 0000000000000000 0000000000000000

ffffffc0164d8040: 0000000000000000 0000000000000000

ffffffc0164d8050: 0000000000000000 0000000000000000

ffffffc0164d8060: 0000000000000000 0000000000000000

ffffffc0164d8070: 0000000000000000 0000000000000000

ffffffc0164d8080: 0000000000000000 0000000000000000

ffffffc0164d8090: 0000000000000000 0000000000000000

ffffffc0164d80a0: 0000000000000000 0000000000000000

ffffffc0164d80b0: 0000000000000000 0000000000000000

ffffffc0164d80c0: 0000000000000000 0000000000000000

ffffffc0164d80d0: 0000000000000000 0000000000000000

ffffffc0164d80e0: 0000000000000000 0000000000000000

ffffffc0164d80f0: 0000000000000000 0000000000000000

ffffffc0164d8100: 0000000000000000 0000000000000000

crash_arm64> bt

PID: 1235 TASK: ffffff809dcf53c0 CPU: 5 COMMAND: "surfaceflinger"

#0 [ffffffc0164dbb90] __switch_to at ffffffe4fb6af5ec

#1 [ffffffc0164dbbf0] __schedule at ffffffe4fc97a260

#2 [ffffffc0164dbc50] schedule at ffffffe4fc97a598

#3 [ffffffc0164dbcd0] schedule_hrtimeout_range_clock at ffffffe4fc97f2c4

#4 [ffffffc0164dbd70] do_epoll_wait at ffffffe4fb98dbcc

#5 [ffffffc0164dbdd0] __se_sys_epoll_pwait at ffffffe4fb98b4d8

#6 [ffffffc0164dbe10] __arm64_sys_epoll_pwait at ffffffe4fb98b47c

#7 [ffffffc0164dbe20] oplus_invoke_syscall at ffffffe4fb6d0500

#8 [ffffffc0164dbe70] el0_svc_common at ffffffe4fb6c2ec4

#9 [ffffffc0164dbeb0] el0_svc_handler at ffffffe4fb6c2e04

#10 [ffffffc0164dbff0] el0_svc at ffffffe4fb484e84

PC: 00000076109d04a8 LR: 00000076119edad0 SP: 0000007fc42df120

X29: 0000007fc42df270 X28: 0000000000000000 X27: 0000000000000000

X26: 0000000000000000 X25: 00000076133a8000 X24: 0000000000000000

X23: b4000075900510e0 X22: 00000000ffffffff X21: 00000000ffffffff

X20: b400007590051188 X19: b4000075900510e0 X18: 000000761366c000

X17: 000000761099276c X16: 00000076119f0db0 X15: 0000000034155555

X14: 0000000000000000 X13: 000000757b035740 X12: 000000759000d888

X11: b400000000000000 X10: 00000000000001d0 X9: b79a1c55bdc51541

X8: 0000000000000016 X7: 000000757b035860 X6: 000000758ec18520

X5: 0000000000000008 X4: 0000000000000000 X3: 00000000ffffffff

X2: 0000000000000010 X1: 0000007fc42df160 X0: 0000000000000009

ORIG_X0: 0000000000000009 SYSCALLNO: 16 PSTATE: 60001000

crash_arm64> bt -t

PID: 1235 TASK: ffffff809dcf53c0 CPU: 5 COMMAND: "surfaceflinger"

START: __switch_to at ffffffe4fb6af5f0

[ffffffc0164dbb78] __switch_to at ffffffe4fb6af4e8

[ffffffc0164dbb88] __schedule at ffffffe4fc97a104

[ffffffc0164dbb98] __schedule at ffffffe4fc97a264

[ffffffc0164dbbf8] schedule at ffffffe4fc97a59c

[ffffffc0164dbc58] schedule_hrtimeout_range_clock at ffffffe4fc97f2c8

[ffffffc0164dbcd8] do_epoll_wait at ffffffe4fb98dbd0

[ffffffc0164dbd38] autoremove_wake_function.cfi_jt at ffffffe4fc99d5c0

[ffffffc0164dbd78] __se_sys_epoll_pwait at ffffffe4fb98b4dc

[ffffffc0164dbda0] __arm64_sys_epoll_pwait.cfi_jt at ffffffe4fc9a9c8c

[ffffffc0164dbdd8] __arm64_sys_epoll_pwait at ffffffe4fb98b480

[ffffffc0164dbe18] oplus_invoke_syscall at ffffffe4fb6d0504

[ffffffc0164dbe28] el0_svc_common at ffffffe4fb6c2ec8

[ffffffc0164dbe78] el0_svc_handler at ffffffe4fb6c2e08

[ffffffc0164dbeb8] el0_svc at ffffffe4fb484e88

crash_arm64> bt -T

PID: 1235 TASK: ffffff809dcf53c0 CPU: 5 COMMAND: "surfaceflinger"

[ffffffc0164da7a8] perf_output_begin_forward at ffffffe4fb87a5c4

[ffffffc0164da8a8] update_rq_clock_task at ffffffe4fb71a63c

[ffffffc0164da8d8] update_rq_clock at ffffffe4fb71a580

[ffffffc0164da8e8] update_rq_clock at ffffffe4fb71a598

[ffffffc0164da8f8] update_blocked_averages at ffffffe4fb72c6d0

[ffffffc0164da928] update_blocked_averages at ffffffe4fb72c6f8

[ffffffc0164da938] update_sd_lb_stats at ffffffe4fb732400

[ffffffc0164da958] update_sd_lb_stats at ffffffe4fb732c88

[ffffffc0164da968] update_sd_lb_stats at ffffffe4fb732c64

[ffffffc0164daa58] perf_event_output_forward at ffffffe4fb8695e0

[ffffffc0164daa68] find_busiest_group at ffffffe4fb731670

[ffffffc0164daae8] __perf_event_overflow at ffffffe4fb86b4e8

[ffffffc0164dabb8] update_curr_rt$c8e64db50a637c5c2b38997a086ae425 at ffffffe4fb737218

[ffffffc0164dac08] ktime_get_mono_fast_ns at ffffffe4fb799978

[ffffffc0164dac98] vsnprintf at ffffffe4fc96e784

[ffffffc0164dad08] complete at ffffffe4fb73ed54

[ffffffc0164dad38] complete at ffffffe4fb73ed60

[ffffffc0164dad48] ipc_log_write at ffffffe4fb8258b4

[ffffffc0164dad68] ipc_log_write at ffffffe4fb8258cc

[ffffffc0164dadd8] trace_call_bpf at ffffffe4fb813158

[ffffffc0164dade8] trace_call_bpf at ffffffe4fb8130bc

[ffffffc0164dadf8] perf_trace_run_bpf_submit at ffffffe4fb86b908

[ffffffc0164dae08] __typeid__ZTSFvPvbP11task_structS1_E_global_addr at ffffffe4fc99e10c

[ffffffc0164dae58] perf_trace_sched_switch$ee860aa0ac644f155aca91f42de065c2 at ffffffe4fb71570c

[ffffffc0164dae68] __schedule at ffffffe4fc97a038

[ffffffc0164dae78] __switch_to at ffffffe4fb6af390

[ffffffc0164dae88] fpsimd_thread_switch at ffffffe4fb6ad5f8

[ffffffc0164daec8] finish_task_switch at ffffffe4fb71e3e4

[ffffffc0164daed8] __schedule at ffffffe4fc97a268

[ffffffc0164daf38] schedule at ffffffe4fc97a59c

[ffffffc0164daf48] try_to_del_timer_sync at ffffffe4fb794ed4

[ffffffc0164daf58] try_to_del_timer_sync at ffffffe4fb795054

[ffffffc0164daf68] list_sort_add at ffffffe4fb921720

[ffffffc0164daf78] rmqueue_bulk at ffffffe4fb8edb74

[ffffffc0164db2a8] perf_output_begin_forward at ffffffe4fb87a5c4

[ffffffc0164db398] context_struct_compute_av at ffffffe4fbb56620

[ffffffc0164db3e8] qcom_cpufreq_get_cpu_cycle_counter$0e7f515b8f5a5edf9a06e988b2019484 at ffffffe4fc287440

[ffffffc0164db3f8] qcom_cpufreq_get_cpu_cycle_counter$0e7f515b8f5a5edf9a06e988b2019484 at ffffffe4fc2874d4

[ffffffc0164db408] update_task_rq_cpu_cycles at ffffffe4fb741280

[ffffffc0164db428] qcom_cpufreq_get_cpu_cycle_counter$0e7f515b8f5a5edf9a06e988b2019484.cfi_jt at ffffffe4fc99e3b4

[ffffffc0164db438] drop_ux_task_cpus at ffffffe4fb883f38

[ffffffc0164db468] update_sd_lb_stats at ffffffe4fb732c88

[ffffffc0164db478] ktime_get at ffffffe4fb79a094

[ffffffc0164db4a8] gic_raise_softirq$d736f6d6e8dd18ba2d62d944fce32704 at ffffffe4fbc2d9b4

[ffffffc0164db4b8] smp_send_reschedule at ffffffe4fb6c259c

[ffffffc0164db4f8] qcom_cpufreq_get_cpu_cycle_counter$0e7f515b8f5a5edf9a06e988b2019484 at ffffffe4fc287440

[ffffffc0164db508] qcom_cpufreq_get_cpu_cycle_counter$0e7f515b8f5a5edf9a06e988b2019484 at ffffffe4fc2874d4

[ffffffc0164db518] update_task_rq_cpu_cycles at ffffffe4fb741280

[ffffffc0164db538] qcom_cpufreq_get_cpu_cycle_counter$0e7f515b8f5a5edf9a06e988b2019484.cfi_jt at ffffffe4fc99e3b4

[ffffffc0164db568] ttwu_do_wakeup at ffffffe4fb725480

[ffffffc0164db578] walt_update_task_ravg at ffffffe4fb73f1c4

[ffffffc0164db5a8] gic_raise_softirq$d736f6d6e8dd18ba2d62d944fce32704 at ffffffe4fbc2d9b4

[ffffffc0164db5b8] arch_irq_work_raise at ffffffe4fb6c1dcc

[ffffffc0164db600] __typeid__ZTSFvPK7cpumaskjE_global_addr at ffffffe4fc9906e4

[ffffffc0164db618] irq_work_queue at ffffffe4fb827498

[ffffffc0164db628] fixup_busy_time at ffffffe4fb740908

[ffffffc0164db668] fixup_busy_time at ffffffe4fb740c44

[ffffffc0164db678] update_load_avg at ffffffe4fb732f7c

[ffffffc0164db6b8] sched_update_nr_prod at ffffffe4fb746ba0

[ffffffc0164db6d8] task_fits_max at ffffffe4fb72adb0

[ffffffc0164db6e8] sched_update_nr_prod at ffffffe4fb746d1c

[ffffffc0164db6f8] enqueue_task_fair$b601a1dbcc3b38bc5b22cc81fa26794b at ffffffe4fb72db20

[ffffffc0164db718] ktime_get_mono_fast_ns at ffffffe4fb799978

[ffffffc0164db728] update_curr_rt$c8e64db50a637c5c2b38997a086ae425 at ffffffe4fb737218

[ffffffc0164db7a8] activate_task at ffffffe4fb71b604

[ffffffc0164db7b8] update_rq_clock at ffffffe4fb71a598

[ffffffc0164db7e8] load_balance at ffffffe4fb72cd24

[ffffffc0164db7f8] load_balance at ffffffe4fb72cd2c

[ffffffc0164db878] update_curr_rt$c8e64db50a637c5c2b38997a086ae425 at ffffffe4fb737218

[ffffffc0164db8c8] ktime_get_mono_fast_ns at ffffffe4fb799978

[ffffffc0164db968] __slab_free at ffffffe4fb901244

[ffffffc0164db978] __schedule at ffffffe4fc97a038

[ffffffc0164db9c8] kfree at ffffffe4fb8fee54

[ffffffc0164dba18] qcom_cpufreq_get_cpu_cycle_counter$0e7f515b8f5a5edf9a06e988b2019484 at ffffffe4fc287440

[ffffffc0164dba28] qcom_cpufreq_get_cpu_cycle_counter$0e7f515b8f5a5edf9a06e988b2019484 at ffffffe4fc2874d4

[ffffffc0164dba38] update_task_rq_cpu_cycles at ffffffe4fb741280

[ffffffc0164dba98] trace_call_bpf at ffffffe4fb813158

[ffffffc0164dbaa8] trace_call_bpf at ffffffe4fb8130bc

[ffffffc0164dbab8] perf_trace_run_bpf_submit at ffffffe4fb86b908

[ffffffc0164dbac8] __typeid__ZTSFvPvbP11task_structS1_E_global_addr at ffffffe4fc99e10c

[ffffffc0164dbb18] perf_trace_sched_switch$ee860aa0ac644f155aca91f42de065c2 at ffffffe4fb71570c

[ffffffc0164dbb28] __schedule at ffffffe4fc97a038

[ffffffc0164dbb38] __switch_to at ffffffe4fb6af390

[ffffffc0164dbb48] fpsimd_thread_switch at ffffffe4fb6ad5f8

[ffffffc0164dbb78] __switch_to at ffffffe4fb6af4e8

[ffffffc0164dbb88] __schedule at ffffffe4fc97a104

[ffffffc0164dbb98] __schedule at ffffffe4fc97a264

[ffffffc0164dbbf8] schedule at ffffffe4fc97a59c

[ffffffc0164dbc58] schedule_hrtimeout_range_clock at ffffffe4fc97f2c8

[ffffffc0164dbcd8] do_epoll_wait at ffffffe4fb98dbd0

[ffffffc0164dbd38] autoremove_wake_function.cfi_jt at ffffffe4fc99d5c0

[ffffffc0164dbd78] __se_sys_epoll_pwait at ffffffe4fb98b4dc

[ffffffc0164dbda0] __arm64_sys_epoll_pwait.cfi_jt at ffffffe4fc9a9c8c

[ffffffc0164dbdd8] __arm64_sys_epoll_pwait at ffffffe4fb98b480

[ffffffc0164dbe18] oplus_invoke_syscall at ffffffe4fb6d0504

[ffffffc0164dbe28] el0_svc_common at ffffffe4fb6c2ec8

[ffffffc0164dbe78] el0_svc_handler at ffffffe4fb6c2e08

[ffffffc0164dbeb8] el0_svc at ffffffe4fb484e88

crash_arm64>

#正常查看panic的进程的栈信息是查看不出来的

crash_arm64> bt -p

PID: 5758 TASK: ffffff82b41b3240 CPU: 6 COMMAND: "Binder:2238_13"

bt: WARNING: cannot determine starting stack frame for task ffffff82b41b3240

#使用-T方式能够查看这个task的栈中所有的函数调用

crash_arm64> bt -pT

PID: 5758 TASK: ffffff82b41b3240 CPU: 6 COMMAND: "Binder:2238_13"

bt: WARNING: cannot determine starting stack frame for task ffffff82b41b3240

[ffffffc02d3cae18] set_ux_task_to_prefer_cpu at ffffffe4fb8848fc

[ffffffc02d3cb4b8] qcom_cpufreq_get_cpu_cycle_counter$0e7f515b8f5a5edf9a06e988b2019484 at ffffffe4fc2874d4

[ffffffc02d3cb4c8] find_energy_efficient_cpu at ffffffe4fb7298fc

[ffffffc02d3cb508] find_energy_efficient_cpu at ffffffe4fb72993c

[ffffffc02d3cb518] update_stats_enqueue_sleeper at ffffffe4fb733a3c

[ffffffc02d3cb538] update_stats_enqueue_sleeper at ffffffe4fb733a50

[ffffffc02d3cb568] update_stats_enqueue_sleeper at ffffffe4fb733a64

[ffffffc02d3cb588] enqueue_entity at ffffffe4fb7333bc

[ffffffc02d3cb598] qcom_cpufreq_get_cpu_cycle_counter$0e7f515b8f5a5edf9a06e988b2019484 at ffffffe4fc287440

[ffffffc02d3cb5a8] qcom_cpufreq_get_cpu_cycle_counter$0e7f515b8f5a5edf9a06e988b2019484 at ffffffe4fc2874d4

[ffffffc02d3cb5b8] update_task_rq_cpu_cycles at ffffffe4fb741280

[ffffffc02d3cb5c8] ohm_schedstats_record at ffffffe4fbd46ff8

[ffffffc02d3cb5d8] qcom_cpufreq_get_cpu_cycle_counter$0e7f515b8f5a5edf9a06e988b2019484.cfi_jt at ffffffe4fc99e3b4

[ffffffc02d3cb608] update_load_avg at ffffffe4fb732f60

[ffffffc02d3cb618] update_task_pred_demand at ffffffe4fb741020

[ffffffc02d3cb648] walt_update_task_ravg at ffffffe4fb73fd00

[ffffffc02d3cb6b8] ktime_get at ffffffe4fb79a094

[ffffffc02d3cb6c8] __schedule at ffffffe4fc97a2c8

[ffffffc02d3cb718] ktime_get_mono_fast_ns at ffffffe4fb799978

[ffffffc02d3cb7a8] _raw_spin_unlock_irqrestore at ffffffe4fc97ff60

[ffffffc02d3cb7c8] set_user_nice at ffffffe4fb71faa8

[ffffffc02d3cb7f8] binder_do_set_priority at ffffffe4fc3b0360

[ffffffc02d3cb808] has_capability_noaudit at ffffffe4fb6eb2e0

[ffffffc02d3cb838] binder_free_transaction at ffffffe4fc3ae82c

[ffffffc02d3cb948] __schedule at ffffffe4fc97a268

[ffffffc02d3cb968] __typeid__ZTSFvPvbP11task_structS1_E_global_addr at ffffffe4fc99e10c

[ffffffc02d3cb980] finish_task_switch at ffffffe4fb71e3e4

[ffffffc02d3cb990] _raw_spin_unlock_irq at ffffffe4fc97ff80

[ffffffc02d3cb9c8] _raw_spin_unlock_irq at ffffffe4fc97ff80

[ffffffc02d3cb9d8] finish_task_switch at ffffffe4fb71e3e4

[ffffffc02d3cb9e8] __schedule at ffffffe4fc97a268

[ffffffc02d3cba48] schedule at ffffffe4fc97a59c

[ffffffc02d3cbaa8] binder_thread_read at ffffffe4fc3a62f0

[ffffffc02d3cbab8] binder_thread_read at ffffffe4fc3a62b0

[ffffffc02d3cbb80] autoremove_wake_function.cfi_jt at ffffffe4fc99d5c0

[ffffffc02d3cbb98] avc_has_extended_perms at ffffffe4fbb3a5e0

[ffffffc02d3cbbd8] binder_ioctl_write_read at ffffffe4fc3a2ff8

[ffffffc02d3cbc78] binder_ioctl$f42ae93cc7b62da6c06eb3ca54df1c12 at ffffffe4fc39e6e8

[ffffffc02d3cbcf0] __arm64_sys_ioctl.cfi_jt at ffffffe4fc9a9e4c

[ffffffc02d3cbd08] do_vfs_ioctl at ffffffe4fb940bac

[ffffffc02d3cbd50] binder_ioctl$f42ae93cc7b62da6c06eb3ca54df1c12.cfi_jt at ffffffe4fc9aa7cc

[ffffffc02d3cbd78] security_file_ioctl at ffffffe4fbb343f0

[ffffffc02d3cbda8] __arm64_sys_ioctl at ffffffe4fb9417ec

[ffffffc02d3cbde8] oplus_invoke_syscall at ffffffe4fb6d0504

[ffffffc02d3cbdf0] __arm64_sys_ioctl.cfi_jt at ffffffe4fc9a9e4c

[ffffffc02d3cbe28] el0_svc_common at ffffffe4fb6c2eb0

[ffffffc02d3cbe38] el0_svc_common at ffffffe4fb6c2e94

[ffffffc02d3cbe78] el0_svc_handler at ffffffe4fb6c2e08

[ffffffc02d3cbeb8] el0_svc at ffffffe4fb484e88

crash_arm64>

crash_arm64> bt -l

PID: 1235 TASK: ffffff809dcf53c0 CPU: 5 COMMAND: "surfaceflinger"

#0 [ffffffc0164dbb90] __switch_to at ffffffe4fb6af5ec

/work/code/master/user/20210809013330-sm8350-11-2021080805170126-user-1628474006440/source/android/kernel/msm-5.4/arch/arm64/kernel/process.c: 572

#1 [ffffffc0164dbbf0] __schedule at ffffffe4fc97a260

/work/code/master/user/20210809013330-sm8350-11-2021080805170126-user-1628474006440/source/android/kernel/msm-5.4/kernel/sched/core.c: 3652

#2 [ffffffc0164dbc50] schedule at ffffffe4fc97a598

/work/code/master/user/20210809013330-sm8350-11-2021080805170126-user-1628474006440/source/android/kernel/msm-5.4/kernel/sched/core.c: 4501

#3 [ffffffc0164dbcd0] schedule_hrtimeout_range_clock at ffffffe4fc97f2c4

/work/code/master/user/20210809013330-sm8350-11-2021080805170126-user-1628474006440/source/android/kernel/msm-5.4/kernel/time/hrtimer.c: 2162

#4 [ffffffc0164dbd70] do_epoll_wait at ffffffe4fb98dbcc

/work/code/master/user/20210809013330-sm8350-11-2021080805170126-user-1628474006440/source/android/kernel/msm-5.4/kernel/time/hrtimer.c: 2216

#5 [ffffffc0164dbdd0] __se_sys_epoll_pwait at ffffffe4fb98b4d8

/work/code/master/user/20210809013330-sm8350-11-2021080805170126-user-1628474006440/source/android/kernel/msm-5.4/fs/eventpoll.c: 2334

#6 [ffffffc0164dbe10] __arm64_sys_epoll_pwait at ffffffe4fb98b47c

/work/code/master/user/20210809013330-sm8350-11-2021080805170126-user-1628474006440/source/android/kernel/msm-5.4/fs/eventpoll.c: 2320

#7 [ffffffc0164dbe20] oplus_invoke_syscall at ffffffe4fb6d0500

/work/code/master/user/20210809013330-sm8350-11-2021080805170126-user-1628474006440/source/android/kernel/msm-5.4/arch/arm64/kernel/secureguard/rootguard/oplus_hook_syscall.c: 61

#8 [ffffffc0164dbe70] el0_svc_common at ffffffe4fb6c2ec4

/work/code/master/user/20210809013330-sm8350-11-2021080805170126-user-1628474006440/source/android/kernel/msm-5.4/arch/arm64/kernel/syscall.c: 124

#9 [ffffffc0164dbeb0] el0_svc_handler at ffffffe4fb6c2e04

/work/code/master/user/20210809013330-sm8350-11-2021080805170126-user-1628474006440/source/android/kernel/msm-5.4/arch/arm64/kernel/syscall.c: 172

#10 [ffffffc0164dbff0] el0_svc at ffffffe4fb484e84

/work/code/master/user/20210809013330-sm8350-11-2021080805170126-user-1628474006440/source/android/kernel/msm-5.4/arch/arm64/kernel/entry.S: 1031

PC: 00000076109d04a8 LR: 00000076119edad0 SP: 0000007fc42df120

X29: 0000007fc42df270 X28: 0000000000000000 X27: 0000000000000000

X26: 0000000000000000 X25: 00000076133a8000 X24: 0000000000000000

X23: b4000075900510e0 X22: 00000000ffffffff X21: 00000000ffffffff

X20: b400007590051188 X19: b4000075900510e0 X18: 000000761366c000

X17: 000000761099276c X16: 00000076119f0db0 X15: 0000000034155555

X14: 0000000000000000 X13: 000000757b035740 X12: 000000759000d888

X11: b400000000000000 X10: 00000000000001d0 X9: b79a1c55bdc51541

X8: 0000000000000016 X7: 000000757b035860 X6: 000000758ec18520

X5: 0000000000000008 X4: 0000000000000000 X3: 00000000ffffffff

X2: 0000000000000010 X1: 0000007fc42df160 X0: 0000000000000009

ORIG_X0: 0000000000000009 SYSCALLNO: 16 PSTATE: 60001000

crash_arm64>

#还是啥也看不了

crash_arm64> bt -p

PID: 5758 TASK: ffffff82b41b3240 CPU: 6 COMMAND: "Binder:2238_13"

bt: WARNING: cannot determine starting stack frame for task ffffff82b41b3240

#搜索异常帧

crash_arm64> bt -pe

PID: 5758 TASK: ffffff82b41b3240 CPU: 6 COMMAND: "Binder:2238_13"

KERNEL-MODE EXCEPTION FRAME AT: ffffffc02d3cb518

PC: ffffffe4fb741020 [update_task_pred_demand+168]

LR: ffffffe4fb732f60 [update_load_avg+244]

SP: ffffffc02d3cb650 PSTATE: 00000004

X29: ffffffc02d3cb640 X28: ffffff82b41b3240 X27: 0000000000000004

X26: 0000000000000000 X25: 0000000000000006 X24: ffffffe4fc99e3b4

X23: ffffff82f25b5ac0 X22: ffffffe4fbd46ff8 X21: 00000045d963f05f

X20: ffffffe4fb741280 X19: ffffffc02d3cb610 X18: ffffffe4fc2874d4

X17: ffffffc02d3cb5b0 X16: ffffffe4fc287440 X15: ffffffc02d3cb5b0

X14: ffffffe4fb7333bc X13: ffffffc02d3cb5e0 X12: 0000000000000005

X11: 00000044e603188a X10: ffffffe4fb733a64 X9: ffffffc02d3cb580

X8: 000000000004ebf8 X7: ffffff82f2539ac0 X6: ffffff829b4f2240

X5: ffffff829b4f2240 X4: ffffffe4fb733a50 X3: ffffffc02d3cb580

X2: 0000000000000080 X1: 00000045d95f35d7 X0: ffffffe4fb733a3c

KERNEL-MODE EXCEPTION FRAME AT: ffffffc02d3cb890

PC: ffffffe4fc97ff80 [_raw_spin_unlock_irq+28]

LR: ffffffe4fb71e3e4 [finish_task_switch+216]

SP: ffffffc02d3cb9d0 PSTATE: 60400005

X29: ffffffc02d3cb9d0 X28: ffffffe4fd5421c0 X27: ffffffe4fc99e10c

X26: ffffff8083763258 X25: ffffff82b41b3240 X24: 0000000000000000

X23: ffffffe4fc97a268 X22: ffffff82b41b3240 X21: 0000000000000000

X20: ffffff829e6e3240 X19: ffffff82f25b5ac0 X18: ffffffc027d55060

X17: 00000000000003e7 X16: 00000000000a6025 X15: 000000000000002a

X14: 0000000000000010 X13: 0000000000000004 X12: 0000000000000000

X11: ffffffe4fd53bbb4 X10: 0000000000000c80 X9: ffffff829e6e32a0

X8: 00000000000000e0 X7: 0000000000000001 X6: 0000000000000000

X5: ffffff82f25955b8 X4: 0000000000000000 X3: 0b3e00010b991001

X2: 0b3e0000a23e0001 X1: ffffff82b41b3240 X0: ffffff82f25b5ac0

USER-MODE EXCEPTION FRAME AT: ffffffc02d3cbec0

PC: 000000709190e4e8 LR: 00000070918cadbc SP: 0000006e25773890

X29: 0000006e25773970 X28: 0000006e2567b000 X27: 00000000000fc000

X26: 0000006e25773ff8 X25: 0000000000000000 X24: 0000006e25774000

X23: 0000000000000100 X22: 00000000fffffff7 X21: b400006e770f7920

X20: b400006e770f7800 X19: 0000006e25774000 X18: 0000006e255ba000

X17: 00000070918cad1c X16: 0000007094724538 X15: 0000000000000000

X14: ffffffffff000000 X13: 0000000000000000 X12: ffffff80ffffffd0

X11: 0000006e25773910 X10: 0000006e25773940 X9: 0000006e25773940

X8: 000000000000001d X7: 0000000000000000 X6: 0000000000000000

X5: 0000000000000000 X4: 0000000000000000 X3: 0000000000000000

X2: 0000006e25773990 X1: 00000000c0306201 X0: 000000000000003d

ORIG_X0: 000000000000003d SYSCALLNO: 1d PSTATE: 80001000

crash_arm64>

#正常啥也看不到

crash_arm64> bt -p

PID: 5758 TASK: ffffff82b41b3240 CPU: 6 COMMAND: "Binder:2238_13"

bt: WARNING: cannot determine starting stack frame for task ffffff82b41b3240

#加参数后甚至可以定位出问题函数，牛逼

crash_arm64> bt -pE

CPU 0 IRQ STACK:

KERNEL-MODE EXCEPTION FRAME AT: ffffffc010003a98

PC: ffffffe4fb483c04 [el1_ia+28]

LR: ffffffe4fb48150c [do_mem_abort+100]

SP: ffffffc010003d00 PSTATE: 80400085

X29: ffffffc010003b90 X28: 0000000096000006 X27: ffffffc010003bd0

X26: 0000000000000064 X25: 0000000000000006 X24: ffffffe4fd540ac0

X23: 0000000000000025 X22: ffffffe4fdc7f568 X21: ffffffe4fd955018

X20: ffffff82f2417780 X19: ffffff82abb96480 X18: ffffffe4fc98218c

X17: ffffffc010003b80 X16: 708d18da9ba1a800 X15: 0000000000000000

X14: 0000000000000064 X13: 0000000096000006 X12: ffffffc010003bd0

X11: ffffff80a2623fc0 X10: ffffffe4fc982248 X9: ffffffc010003b20

X8: 0000000000000064 X7: ffffffc010003bd0 X6: 0000000096000006

X5: 0000000000000025 X4: ffffffe4fb6d0edc X3: ffffffc010003ae0

X2: ffffffc010003bd0 X1: 0000000096000006 X0: 0000000000000064

KERNEL-MODE EXCEPTION FRAME AT: ffffffc010003bd0

PC: ffffffe4fb9dc5bc [jankinfo_update_time_info+872]

LR: ffffffe4fb727b34 [account_process_tick+376]

SP: ffffffc010003d10 PSTATE: 80400085

X29: ffffffc010003d10 X28: 0000000000000001 X27: ffffff82f2417780

X26: ffffffe4fd955018 X25: ffffffe4fdc7f568 X24: ffffffe4fc9a71d8

X23: ffffffe4fe28f000 X22: ffffffe4fd987ac0 X21: ffffff82f2441ac0

X20: 0000000000000001 X19: ffffff82abb96480 X18: ffffffc010005050

X17: 0000000000000000 X16: fffffc181dcd6500 X15: 000000000000000f

X14: 000003e7e2329b00 X13: 0000000000000001 X12: 0000000000000000

X11: ffffff80bb1e8008 X10: ffffff80bb1e8000 X9: 0000000000000000

X8: 0000000000000064 X7: 0000000000000000 X6: ffffff82f242d118

X5: 0000000000000000 X4: 0000000000000008 X3: 006c6f6f70206461

X2: 0000000000000008 X1: ffffff82abb96ca8 X0: ffffff82abb96480

CPU 1 IRQ STACK:(none found)

CPU 2 IRQ STACK:(none found)

CPU 3 IRQ STACK:(none found)

CPU 4 IRQ STACK:(none found)

CPU 5 IRQ STACK:(none found)

CPU 6 IRQ STACK:

KERNEL-MODE EXCEPTION FRAME AT: ffffffc010033a98

PC: ffffffe4fb483c04 [el1_ia+28]

LR: ffffffe4fb48150c [do_mem_abort+100]

SP: ffffffc010033d00 PSTATE: 80400085

X29: ffffffc010033b90 X28: 0000000096000006 X27: ffffffc010033bd0

X26: 0000000000000064 X25: 0000000000000006 X24: ffffffe4fd540ac0

X23: 0000000000000025 X22: ffffffe4fdc7f568 X21: ffffffe4fd955018

X20: ffffff82f258b780 X19: ffffff82b41b3240 X18: ffffffe4fc98218c

X17: ffffffc010033b80 X16: 708d18da9ba1a800 X15: 0000000000000000

X14: 0000000000000064 X13: 0000000096000006 X12: ffffffc010033bd0

X11: ffffff80a2621e00 X10: ffffffe4fc982248 X9: ffffffc010033b20

X8: 0000000000000064 X7: ffffffc010033bd0 X6: 0000000096000006

X5: 0000000000000025 X4: ffffffe4fb6d0edc X3: ffffffc010033ae0

X2: ffffffc010033bd0 X1: 0000000096000006 X0: 0000000000000064

KERNEL-MODE EXCEPTION FRAME AT: ffffffc010033bd0

PC: ffffffe4fb9dc5bc [jankinfo_update_time_info+872]        #异常

LR: ffffffe4fb727b34 [account_process_tick+376]

SP: ffffffc010033d10 PSTATE: 80400085

X29: ffffffc010033d10 X28: 0000000000000001 X27: ffffff82f258b780

X26: ffffffe4fd955018 X25: ffffffe4fdc7f568 X24: ffffffe4fc9a71d8

X23: ffffffe4fe28f000 X22: ffffffe4fd987ac0 X21: ffffff82f25b5ac0

X20: 0000000000000000 X19: ffffff82b41b3240 X18: ffffffc010035050

X17: 000000000000001f X16: fffffc180baeb900 X15: 000000000000000f

X14: 000003e7f4514700 X13: 0000000000000001 X12: 0000000000000000

X11: ffffff80bb1e8668 X10: ffffff80bb1e8660 X9: 0000000000000006

X8: 0000000000000064 X7: 0000000000000000 X6: ffffff82f25a3548

X5: ffffff82f25955b8 X4: 0000000000000008 X3: 000033315f383332

X2: 0000000000000008 X1: ffffff82b41b3a68 X0: ffffff82b41b3240

CPU 7 IRQ STACK:

KERNEL-MODE EXCEPTION FRAME AT: ffffffc01003b068

PC: ffffffe4fbd46ff8 [ohm_schedstats_record+212]

LR: ffffffe4fc287440 [qcom_cpufreq_get_cpu_cycle_counter$0e7f515b8f5a5edf9a06e988b2019484+72]

SP: ffffffc01003b180 PSTATE: 00000009

X29: ffffffc01003b170 X28: ffffff80bdc2d900 X27: 0000000000000000

X26: ffffff82f25c2d48 X25: ffffff809e6610c0 X24: ffffffe4fb7298fc

X23: ffffffc01003b240 X22: ffffffe4fc287440 X21: 708d18da9ba1a800

X20: 000000000000000f X19: 00000000000000ff X18: fffffffff25c2d48

X17: ffffff809e6610c0 X16: 0000000000000001 X15: 0000000000000002

X14: 0000000000000002 X13: 0000000000000007 X12: 0000000700000070

X11: 000000000000001e X10: 0000000000000003 X9: 000000007fffffff

X8: 0000000100000001 X7: ffffffc01003b200 X6: ffffff82f25c2d48

X5: 0000000000000145 X4: 0000000000000004 X3: 0000000000000000

X2: 00000000ffffffff X1: 0000000000000000 X0: 0000000000000000

crash_arm64>

#只显示调用关系

crash_arm64> bt

PID: 1235 TASK: ffffff809dcf53c0 CPU: 5 COMMAND: "surfaceflinger"

#0 [ffffffc0164dbb90] __switch_to at ffffffe4fb6af5ec

#1 [ffffffc0164dbbf0] __schedule at ffffffe4fc97a260

#2 [ffffffc0164dbc50] schedule at ffffffe4fc97a598

#3 [ffffffc0164dbcd0] schedule_hrtimeout_range_clock at ffffffe4fc97f2c4

#4 [ffffffc0164dbd70] do_epoll_wait at ffffffe4fb98dbcc

#5 [ffffffc0164dbdd0] __se_sys_epoll_pwait at ffffffe4fb98b4d8

#6 [ffffffc0164dbe10] __arm64_sys_epoll_pwait at ffffffe4fb98b47c

#7 [ffffffc0164dbe20] oplus_invoke_syscall at ffffffe4fb6d0500

#8 [ffffffc0164dbe70] el0_svc_common at ffffffe4fb6c2ec4

#9 [ffffffc0164dbeb0] el0_svc_handler at ffffffe4fb6c2e04

#10 [ffffffc0164dbff0] el0_svc at ffffffe4fb484e84

PC: 00000076109d04a8 LR: 00000076119edad0 SP: 0000007fc42df120

X29: 0000007fc42df270 X28: 0000000000000000 X27: 0000000000000000

X26: 0000000000000000 X25: 00000076133a8000 X24: 0000000000000000

X23: b4000075900510e0 X22: 00000000ffffffff X21: 00000000ffffffff

X20: b400007590051188 X19: b4000075900510e0 X18: 000000761366c000

X17: 000000761099276c X16: 00000076119f0db0 X15: 0000000034155555

X14: 0000000000000000 X13: 000000757b035740 X12: 000000759000d888

X11: b400000000000000 X10: 00000000000001d0 X9: b79a1c55bdc51541

X8: 0000000000000016 X7: 000000757b035860 X6: 000000758ec18520

X5: 0000000000000008 X4: 0000000000000000 X3: 00000000ffffffff

X2: 0000000000000010 X1: 0000007fc42df160 X0: 0000000000000009

ORIG_X0: 0000000000000009 SYSCALLNO: 16 PSTATE: 60001000

#将每一个栈帧都显示出来

crash_arm64> bt -f

PID: 1235 TASK: ffffff809dcf53c0 CPU: 5 COMMAND: "surfaceflinger"

#0 [ffffffc0164dbb90] __switch_to at ffffffe4fb6af5ec

ffffffc0164dbb90: ffffffc0164dbbf0 ffffffe4fc97a264

ffffffc0164dbba0: ffffffe4fdd7a508 ffffffe4fdd7a508

ffffffc0164dbbb0: ffffff82d38c90c0 ffffff80a1e75dc0

ffffffc0164dbbc0: ffffff809dcf53c0 ffffff82f2577ac0

ffffffc0164dbbd0: 00000001164dbc00 0000000000000000

ffffffc0164dbbe0: 0000000000000004 708d18da9ba1a800

#1 [ffffffc0164dbbf0] __schedule at ffffffe4fc97a260

ffffffc0164dbbf0: ffffffc0164dbc50 ffffffe4fc97a59c

ffffffc0164dbc00: ffffff809d752b68 ffffff809d752b30

ffffffc0164dbc10: ffffff809d752b30 ffffffc0164dbd40

ffffffc0164dbc20: ffffff809d752b00 ffffff809e29a8c1

ffffffc0164dbc30: ffffff809d752b58 ffffff809dcf53c0

ffffffc0164dbc40: 0000007fc42df160 ffffff809dcf53c0

#2 [ffffffc0164dbc50] schedule at ffffffe4fc97a598

ffffffc0164dbc50: ffffffc0164dbcd0 ffffffe4fc97f2c8

ffffffc0164dbc60: 0000000000000010 ffffff809d752b68

ffffffc0164dbc70: ffffffc0164dbca0 0000000000000000

ffffffc0164dbc80: 0000000000000000 0000000000000000

ffffffc0164dbc90: 0000000000000000 0000000000000000

ffffffc0164dbca0: 0000000000000000 0000000000000000

ffffffc0164dbcb0: 0000000000000000 0000000000000000

ffffffc0164dbcc0: 0000000000000000 708d18da9ba1a800

#3 [ffffffc0164dbcd0] schedule_hrtimeout_range_clock at ffffffe4fc97f2c4

ffffffc0164dbcd0: ffffffc0164dbd70 ffffffe4fb98dbd0

ffffffc0164dbce0: ffffff809dcf53c0 ffffff809dcf53c0

ffffffc0164dbcf0: 0000007fc42df160 0000000000000010

ffffffc0164dbd00: 0000000000000000 0000000000000000

ffffffc0164dbd10: ffffff809e29a8c1 ffffff809e29a8c0

ffffffc0164dbd20: 0000000000000000 0000000000000001

ffffffc0164dbd30: ffffff809dcf53c0 ffffffe4fc99d5c0

ffffffc0164dbd40: ffffff809d752b30 ffffff809d752b30

ffffffc0164dbd50: 0000000000000001 0000007fc42df160

ffffffc0164dbd60: 0000000000000000 708d18da9ba1a800

#4 [ffffffc0164dbd70] do_epoll_wait at ffffffe4fb98dbcc

ffffffc0164dbd70: ffffffc0164dbdd0 ffffffe4fb98b4dc

ffffffc0164dbd80: ffffff809dcf53c0 0000000000000000

ffffffc0164dbd90: 0000000000000000 ffffff809dcf53c0

ffffffc0164dbda0: ffffffe4fc9a9c8c 0000000000000009

ffffffc0164dbdb0: 0000007fc42df160 0000000000000010

ffffffc0164dbdc0: 00000000ffffffff 0000000000000000

#5 [ffffffc0164dbdd0] __se_sys_epoll_pwait at ffffffe4fb98b4d8

ffffffc0164dbdd0: ffffffc0164dbe10 ffffffe4fb98b480

ffffffc0164dbde0: 00000000000003e8 ffffff80cee95b00

ffffffc0164dbdf0: 00000000000003e8 0000000000000016

ffffffc0164dbe00: 00000000000003e8 ffffffc0164dbec0

#6 [ffffffc0164dbe10] __arm64_sys_epoll_pwait at ffffffe4fb98b47c

ffffffc0164dbe10: ffffffc0164dbe20 ffffffe4fb6d0504

#7 [ffffffc0164dbe20] oplus_invoke_syscall at ffffffe4fb6d0500

ffffffc0164dbe20: ffffffc0164dbe70 ffffffe4fb6c2ec8

ffffffc0164dbe30: 0000000056000000 0000000004000008

ffffffc0164dbe40: 0000000000000015 0000000004000000

ffffffc0164dbe50: ffffff809dcf53c0 0000000000000016

ffffffc0164dbe60: ffffffe4fd53a688 ffffffc0164dbec0

#8 [ffffffc0164dbe70] el0_svc_common at ffffffe4fb6c2ec4

ffffffc0164dbe70: ffffffc0164dbeb0 ffffffe4fb6c2e08

ffffffc0164dbe80: 0000000060001000 0000000056000000

ffffffc0164dbe90: 00000076109d04a8 00000000ffffffff

ffffffc0164dbea0: ffffff9df4bf0000 0000000004000000

#9 [ffffffc0164dbeb0] el0_svc_handler at ffffffe4fb6c2e04

ffffffc0164dbeb0: ffffffc0164dbff0 ffffffe4fb484e88

ffffffc0164dbec0: 0000000000000009 0000007fc42df160

ffffffc0164dbed0: 0000000000000010 00000000ffffffff

ffffffc0164dbee0: 0000000000000000 0000000000000008

ffffffc0164dbef0: 000000758ec18520 000000757b035860

ffffffc0164dbf00: 0000000000000016 b79a1c55bdc51541

ffffffc0164dbf10: 00000000000001d0 b400000000000000

ffffffc0164dbf20: 000000759000d888 000000757b035740

ffffffc0164dbf30: 0000000000000000 0000000034155555

ffffffc0164dbf40: 00000076119f0db0 000000761099276c

ffffffc0164dbf50: 000000761366c000 b4000075900510e0

ffffffc0164dbf60: b400007590051188 00000000ffffffff

ffffffc0164dbf70: 00000000ffffffff b4000075900510e0

ffffffc0164dbf80: 0000000000000000 00000076133a8000

ffffffc0164dbf90: 0000000000000000 0000000000000000

ffffffc0164dbfa0: 0000000000000000 0000007fc42df270

ffffffc0164dbfb0: 00000076119edad0 0000007fc42df120

ffffffc0164dbfc0: 00000076109d04a8 0000000060001000

ffffffc0164dbfd0: 0000000000000009 0000000000000016

ffffffc0164dbfe0: 0000000000000000 0000000000000000

#10 [ffffffc0164dbff0] el0_svc at ffffffe4fb484e84

PC: 00000076109d04a8 LR: 00000076119edad0 SP: 0000007fc42df120

X29: 0000007fc42df270 X28: 0000000000000000 X27: 0000000000000000

X26: 0000000000000000 X25: 00000076133a8000 X24: 0000000000000000

X23: b4000075900510e0 X22: 00000000ffffffff X21: 00000000ffffffff

X20: b400007590051188 X19: b4000075900510e0 X18: 000000761366c000

X17: 000000761099276c X16: 00000076119f0db0 X15: 0000000034155555

X14: 0000000000000000 X13: 000000757b035740 X12: 000000759000d888

X11: b400000000000000 X10: 00000000000001d0 X9: b79a1c55bdc51541

X8: 0000000000000016 X7: 000000757b035860 X6: 000000758ec18520

X5: 0000000000000008 X4: 0000000000000000 X3: 00000000ffffffff

X2: 0000000000000010 X1: 0000007fc42df160 X0: 0000000000000009

ORIG_X0: 0000000000000009 SYSCALLNO: 16 PSTATE: 60001000

crash_arm64>

crash_arm64> bt -F

PID: 1235 TASK: ffffff809dcf53c0 CPU: 5 COMMAND: "surfaceflinger"

#0 [ffffffc0164dbb90] __switch_to at ffffffe4fb6af5ec

ffffffc0164dbb90: ffffffc0164dbbf0 __schedule+1572

ffffffc0164dbba0: event_sched_switch event_sched_switch

ffffffc0164dbbb0: [task_struct] [mm_struct]

ffffffc0164dbbc0: [task_struct] ffffff82f2577ac0

ffffffc0164dbbd0: 00000001164dbc00 0000000000000000

ffffffc0164dbbe0: 0000000000000004 708d18da9ba1a800

#1 [ffffffc0164dbbf0] __schedule at ffffffe4fc97a260

ffffffc0164dbbf0: ffffffc0164dbc50 schedule+140

ffffffc0164dbc00: [kmalloc-256] [kmalloc-256]

ffffffc0164dbc10: [kmalloc-256] ffffffc0164dbd40

ffffffc0164dbc20: [kmalloc-256] [filp]

ffffffc0164dbc30: [kmalloc-256] [task_struct]

ffffffc0164dbc40: 0000007fc42df160 [task_struct]

#2 [ffffffc0164dbc50] schedule at ffffffe4fc97a598

ffffffc0164dbc50: ffffffc0164dbcd0 schedule_hrtimeout_range_clock+204

ffffffc0164dbc60: 0000000000000010 [kmalloc-256]

ffffffc0164dbc70: ffffffc0164dbca0 0000000000000000

ffffffc0164dbc80: 0000000000000000 0000000000000000

ffffffc0164dbc90: 0000000000000000 0000000000000000

ffffffc0164dbca0: 0000000000000000 0000000000000000

ffffffc0164dbcb0: 0000000000000000 0000000000000000

ffffffc0164dbcc0: 0000000000000000 708d18da9ba1a800

#3 [ffffffc0164dbcd0] schedule_hrtimeout_range_clock at ffffffe4fc97f2c4

ffffffc0164dbcd0: ffffffc0164dbd70 do_epoll_wait+1000

ffffffc0164dbce0: [task_struct] [task_struct]

ffffffc0164dbcf0: 0000007fc42df160 0000000000000010

ffffffc0164dbd00: 0000000000000000 0000000000000000

ffffffc0164dbd10: [filp] [filp]

ffffffc0164dbd20: 0000000000000000 0000000000000001

ffffffc0164dbd30: [task_struct] autoremove_wake_function.cfi_jt

ffffffc0164dbd40: [kmalloc-256] [kmalloc-256]

ffffffc0164dbd50: 0000000000000001 0000007fc42df160

ffffffc0164dbd60: 0000000000000000 708d18da9ba1a800

#4 [ffffffc0164dbd70] do_epoll_wait at ffffffe4fb98dbcc

ffffffc0164dbd70: ffffffc0164dbdd0 __se_sys_epoll_pwait+80

ffffffc0164dbd80: [task_struct] 0000000000000000

ffffffc0164dbd90: 0000000000000000 [task_struct]

ffffffc0164dbda0: __arm64_sys_epoll_pwait.cfi_jt 0000000000000009

ffffffc0164dbdb0: 0000007fc42df160 0000000000000010

ffffffc0164dbdc0: 00000000ffffffff 0000000000000000

#5 [ffffffc0164dbdd0] __se_sys_epoll_pwait at ffffffe4fb98b4d8

ffffffc0164dbdd0: ffffffc0164dbe10 __arm64_sys_epoll_pwait+32

ffffffc0164dbde0: 00000000000003e8 [kmalloc-128]

ffffffc0164dbdf0: 00000000000003e8 0000000000000016

ffffffc0164dbe00: 00000000000003e8 ffffffc0164dbec0

#6 [ffffffc0164dbe10] __arm64_sys_epoll_pwait at ffffffe4fb98b47c

ffffffc0164dbe10: ffffffc0164dbe20 oplus_invoke_syscall+124

#7 [ffffffc0164dbe20] oplus_invoke_syscall at ffffffe4fb6d0500

ffffffc0164dbe20: ffffffc0164dbe70 el0_svc_common+156

ffffffc0164dbe30: 0000000056000000 0000000004000008

ffffffc0164dbe40: 0000000000000015 0000000004000000

ffffffc0164dbe50: [task_struct] 0000000000000016

ffffffc0164dbe60: sys_call_table ffffffc0164dbec0

#8 [ffffffc0164dbe70] el0_svc_common at ffffffe4fb6c2ec4

ffffffc0164dbe70: ffffffc0164dbeb0 el0_svc_handler+116

ffffffc0164dbe80: 0000000060001000 0000000056000000

ffffffc0164dbe90: 00000076109d04a8 00000000ffffffff

ffffffc0164dbea0: ffffff9df4bf0000 0000000004000000

#9 [ffffffc0164dbeb0] el0_svc_handler at ffffffe4fb6c2e04

ffffffc0164dbeb0: ffffffc0164dbff0 el0_svc+8

ffffffc0164dbec0: 0000000000000009 0000007fc42df160

ffffffc0164dbed0: 0000000000000010 00000000ffffffff

ffffffc0164dbee0: 0000000000000000 0000000000000008

ffffffc0164dbef0: 000000758ec18520 000000757b035860

ffffffc0164dbf00: 0000000000000016 b79a1c55bdc51541

ffffffc0164dbf10: 00000000000001d0 b400000000000000

ffffffc0164dbf20: 000000759000d888 000000757b035740

ffffffc0164dbf30: 0000000000000000 0000000034155555

ffffffc0164dbf40: 00000076119f0db0 000000761099276c

ffffffc0164dbf50: 000000761366c000 b4000075900510e0

ffffffc0164dbf60: b400007590051188 00000000ffffffff

ffffffc0164dbf70: 00000000ffffffff b4000075900510e0

ffffffc0164dbf80: 0000000000000000 00000076133a8000

ffffffc0164dbf90: 0000000000000000 0000000000000000

ffffffc0164dbfa0: 0000000000000000 0000007fc42df270

ffffffc0164dbfb0: 00000076119edad0 0000007fc42df120

ffffffc0164dbfc0: 00000076109d04a8 0000000060001000

ffffffc0164dbfd0: 0000000000000009 0000000000000016

ffffffc0164dbfe0: 0000000000000000 0000000000000000

#10 [ffffffc0164dbff0] el0_svc at ffffffe4fb484e84

PC: 00000076109d04a8 LR: 00000076119edad0 SP: 0000007fc42df120

X29: 0000007fc42df270 X28: 0000000000000000 X27: 0000000000000000

X26: 0000000000000000 X25: 00000076133a8000 X24: 0000000000000000

X23: b4000075900510e0 X22: 00000000ffffffff X21: 00000000ffffffff

X20: b400007590051188 X19: b4000075900510e0 X18: 000000761366c000

X17: 000000761099276c X16: 00000076119f0db0 X15: 0000000034155555

X14: 0000000000000000 X13: 000000757b035740 X12: 000000759000d888

X11: b400000000000000 X10: 00000000000001d0 X9: b79a1c55bdc51541

X8: 0000000000000016 X7: 000000757b035860 X6: 000000758ec18520

X5: 0000000000000008 X4: 0000000000000000 X3: 00000000ffffffff

X2: 0000000000000010 X1: 0000007fc42df160 X0: 0000000000000009

ORIG_X0: 0000000000000009 SYSCALLNO: 16 PSTATE: 60001000

crash_arm64> bt -FF

PID: 1235 TASK: ffffff809dcf53c0 CPU: 5 COMMAND: "surfaceflinger"

#0 [ffffffc0164dbb90] __switch_to at ffffffe4fb6af5ec

ffffffc0164dbb90: ffffffc0164dbbf0 __schedule+1572

ffffffc0164dbba0: event_sched_switch event_sched_switch

ffffffc0164dbbb0: [ffffff82d38c90c0:task_struct] [ffffff80a1e75dc0:mm_struct]

ffffffc0164dbbc0: [ffffff809dcf53c0:task_struct] ffffff82f2577ac0

ffffffc0164dbbd0: 00000001164dbc00 0000000000000000

ffffffc0164dbbe0: 0000000000000004 708d18da9ba1a800

#1 [ffffffc0164dbbf0] __schedule at ffffffe4fc97a260

ffffffc0164dbbf0: ffffffc0164dbc50 schedule+140

ffffffc0164dbc00: [ffffff809d752b68:kmalloc-256] [ffffff809d752b30:kmalloc-256]

ffffffc0164dbc10: [ffffff809d752b30:kmalloc-256] ffffffc0164dbd40

ffffffc0164dbc20: [ffffff809d752b00:kmalloc-256] [ffffff809e29a8c1:filp]

ffffffc0164dbc30: [ffffff809d752b58:kmalloc-256] [ffffff809dcf53c0:task_struct]

ffffffc0164dbc40: 0000007fc42df160 [ffffff809dcf53c0:task_struct]

#2 [ffffffc0164dbc50] schedule at ffffffe4fc97a598

ffffffc0164dbc50: ffffffc0164dbcd0 schedule_hrtimeout_range_clock+204

ffffffc0164dbc60: 0000000000000010 [ffffff809d752b68:kmalloc-256]

ffffffc0164dbc70: ffffffc0164dbca0 0000000000000000

ffffffc0164dbc80: 0000000000000000 0000000000000000

ffffffc0164dbc90: 0000000000000000 0000000000000000

ffffffc0164dbca0: 0000000000000000 0000000000000000

ffffffc0164dbcb0: 0000000000000000 0000000000000000

ffffffc0164dbcc0: 0000000000000000 708d18da9ba1a800

#3 [ffffffc0164dbcd0] schedule_hrtimeout_range_clock at ffffffe4fc97f2c4

ffffffc0164dbcd0: ffffffc0164dbd70 do_epoll_wait+1000

ffffffc0164dbce0: [ffffff809dcf53c0:task_struct] [ffffff809dcf53c0:task_struct]

ffffffc0164dbcf0: 0000007fc42df160 0000000000000010

ffffffc0164dbd00: 0000000000000000 0000000000000000

ffffffc0164dbd10: [ffffff809e29a8c1:filp] [ffffff809e29a8c0:filp]

ffffffc0164dbd20: 0000000000000000 0000000000000001

ffffffc0164dbd30: [ffffff809dcf53c0:task_struct] autoremove_wake_function.cfi_jt

ffffffc0164dbd40: [ffffff809d752b30:kmalloc-256] [ffffff809d752b30:kmalloc-256]

ffffffc0164dbd50: 0000000000000001 0000007fc42df160

ffffffc0164dbd60: 0000000000000000 708d18da9ba1a800

#4 [ffffffc0164dbd70] do_epoll_wait at ffffffe4fb98dbcc

ffffffc0164dbd70: ffffffc0164dbdd0 __se_sys_epoll_pwait+80

ffffffc0164dbd80: [ffffff809dcf53c0:task_struct] 0000000000000000

ffffffc0164dbd90: 0000000000000000 [ffffff809dcf53c0:task_struct]

ffffffc0164dbda0: __arm64_sys_epoll_pwait.cfi_jt 0000000000000009

ffffffc0164dbdb0: 0000007fc42df160 0000000000000010

ffffffc0164dbdc0: 00000000ffffffff 0000000000000000

#5 [ffffffc0164dbdd0] __se_sys_epoll_pwait at ffffffe4fb98b4d8

ffffffc0164dbdd0: ffffffc0164dbe10 __arm64_sys_epoll_pwait+32

ffffffc0164dbde0: 00000000000003e8 [ffffff80cee95b00:kmalloc-128]

ffffffc0164dbdf0: 00000000000003e8 0000000000000016

ffffffc0164dbe00: 00000000000003e8 ffffffc0164dbec0

#6 [ffffffc0164dbe10] __arm64_sys_epoll_pwait at ffffffe4fb98b47c

ffffffc0164dbe10: ffffffc0164dbe20 oplus_invoke_syscall+124

#7 [ffffffc0164dbe20] oplus_invoke_syscall at ffffffe4fb6d0500

ffffffc0164dbe20: ffffffc0164dbe70 el0_svc_common+156

ffffffc0164dbe30: 0000000056000000 0000000004000008

ffffffc0164dbe40: 0000000000000015 0000000004000000

ffffffc0164dbe50: [ffffff809dcf53c0:task_struct] 0000000000000016

ffffffc0164dbe60: sys_call_table ffffffc0164dbec0

#8 [ffffffc0164dbe70] el0_svc_common at ffffffe4fb6c2ec4

ffffffc0164dbe70: ffffffc0164dbeb0 el0_svc_handler+116

ffffffc0164dbe80: 0000000060001000 0000000056000000

ffffffc0164dbe90: 00000076109d04a8 00000000ffffffff

ffffffc0164dbea0: ffffff9df4bf0000 0000000004000000

#9 [ffffffc0164dbeb0] el0_svc_handler at ffffffe4fb6c2e04

ffffffc0164dbeb0: ffffffc0164dbff0 el0_svc+8

ffffffc0164dbec0: 0000000000000009 0000007fc42df160

ffffffc0164dbed0: 0000000000000010 00000000ffffffff

ffffffc0164dbee0: 0000000000000000 0000000000000008

ffffffc0164dbef0: 000000758ec18520 000000757b035860

ffffffc0164dbf00: 0000000000000016 b79a1c55bdc51541

ffffffc0164dbf10: 00000000000001d0 b400000000000000

ffffffc0164dbf20: 000000759000d888 000000757b035740

ffffffc0164dbf30: 0000000000000000 0000000034155555

ffffffc0164dbf40: 00000076119f0db0 000000761099276c

ffffffc0164dbf50: 000000761366c000 b4000075900510e0

ffffffc0164dbf60: b400007590051188 00000000ffffffff

ffffffc0164dbf70: 00000000ffffffff b4000075900510e0

ffffffc0164dbf80: 0000000000000000 00000076133a8000

ffffffc0164dbf90: 0000000000000000 0000000000000000

ffffffc0164dbfa0: 0000000000000000 0000007fc42df270

ffffffc0164dbfb0: 00000076119edad0 0000007fc42df120

ffffffc0164dbfc0: 00000076109d04a8 0000000060001000

ffffffc0164dbfd0: 0000000000000009 0000000000000016

ffffffc0164dbfe0: 0000000000000000 0000000000000000

#10 [ffffffc0164dbff0] el0_svc at ffffffe4fb484e84

PC: 00000076109d04a8 LR: 00000076119edad0 SP: 0000007fc42df120

X29: 0000007fc42df270 X28: 0000000000000000 X27: 0000000000000000

X26: 0000000000000000 X25: 00000076133a8000 X24: 0000000000000000

X23: b4000075900510e0 X22: 00000000ffffffff X21: 00000000ffffffff

X20: b400007590051188 X19: b4000075900510e0 X18: 000000761366c000

X17: 000000761099276c X16: 00000076119f0db0 X15: 0000000034155555

X14: 0000000000000000 X13: 000000757b035740 X12: 000000759000d888

X11: b400000000000000 X10: 00000000000001d0 X9: b79a1c55bdc51541

X8: 0000000000000016 X7: 000000757b035860 X6: 000000758ec18520

X5: 0000000000000008 X4: 0000000000000000 X3: 00000000ffffffff

X2: 0000000000000010 X1: 0000007fc42df160 X0: 0000000000000009

ORIG_X0: 0000000000000009 SYSCALLNO: 16 PSTATE: 60001000

crash_arm64>

crash_arm64> bt -v

bt: invalid kernel virtual address: 0 type: "stack overflow check"

No stack overflows detected

crash_arm64> bt -v

PID: 5823 TASK: ffff88102aae0040 CPU: 1 COMMAND: "flush-253:0"

possible stack overflow: thread_info.task: 102efb5adc0 != ffff88102aae0040

possible stack overflow: 40ffffffff != STACK_END_MAGIC

crash_arm64> ps | grep surface

1235 1 5 ffffff809dcf53c0 IN 0.4 2793532 56744 surfaceflinger

1317 1 4 ffffff809e292180 IN 0.4 2793532 56744 surfaceflinger

1490 1 6 ffffff82c5850000 IN 0.4 2793532 56744 surfaceflinger

1491 1 0 ffffff80876cb240 IN 0.4 2793532 56744 surfaceflinger

1494 1 4 ffffff82c5ac0000 IN 0.4 2793532 56744 surfaceflinger

1495 1 5 ffffff82c5ac2180 IN 0.4 2793532 56744 surfaceflinger

1497 1 6 ffffff82c5ac6480 IN 0.4 2793532 56744 surfaceflinger

1498 1 4 ffffff82c5ac53c0 IN 0.4 2793532 56744 surfaceflinger

crash_arm64> set 1235

PID: 1235

COMMAND: "surfaceflinger"

TASK: ffffff809dcf53c0 [THREAD_INFO: ffffff809dcf53c0]

CPU: 5

STATE: TASK_INTERRUPTIBLE

crash_arm64> bt

PID: 1235 TASK: ffffff809dcf53c0 CPU: 5 COMMAND: "surfaceflinger"

#0 [ffffffc0164dbb90] __switch_to at ffffffe4fb6af5ec

#1 [ffffffc0164dbbf0] __schedule at ffffffe4fc97a260

#2 [ffffffc0164dbc50] schedule at ffffffe4fc97a598

#3 [ffffffc0164dbcd0] schedule_hrtimeout_range_clock at ffffffe4fc97f2c4

#4 [ffffffc0164dbd70] do_epoll_wait at ffffffe4fb98dbcc

#5 [ffffffc0164dbdd0] __se_sys_epoll_pwait at ffffffe4fb98b4d8

#6 [ffffffc0164dbe10] __arm64_sys_epoll_pwait at ffffffe4fb98b47c

#7 [ffffffc0164dbe20] oplus_invoke_syscall at ffffffe4fb6d0500

#8 [ffffffc0164dbe70] el0_svc_common at ffffffe4fb6c2ec4

#9 [ffffffc0164dbeb0] el0_svc_handler at ffffffe4fb6c2e04

#10 [ffffffc0164dbff0] el0_svc at ffffffe4fb484e84

PC: 00000076109d04a8 LR: 00000076119edad0 SP: 0000007fc42df120

X29: 0000007fc42df270 X28: 0000000000000000 X27: 0000000000000000

X26: 0000000000000000 X25: 00000076133a8000 X24: 0000000000000000

X23: b4000075900510e0 X22: 00000000ffffffff X21: 00000000ffffffff

X20: b400007590051188 X19: b4000075900510e0 X18: 000000761366c000

X17: 000000761099276c X16: 00000076119f0db0 X15: 0000000034155555

X14: 0000000000000000 X13: 000000757b035740 X12: 000000759000d888

X11: b400000000000000 X10: 00000000000001d0 X9: b79a1c55bdc51541

X8: 0000000000000016 X7: 000000757b035860 X6: 000000758ec18520

X5: 0000000000000008 X4: 0000000000000000 X3: 00000000ffffffff

X2: 0000000000000010 X1: 0000007fc42df160 X0: 0000000000000009

ORIG_X0: 0000000000000009 SYSCALLNO: 16 PSTATE: 60001000

crash_arm64> bt -p

PID: 5758 TASK: ffffff82b41b3240 CPU: 6 COMMAND: "Binder:2238_13"

bt: WARNING: cannot determine starting stack frame for task ffffff82b41b3240

crash_arm64>

crash_arm64> bt

PID: 1235 TASK: ffffff809dcf53c0 CPU: 5 COMMAND: "surfaceflinger"

#0 [ffffffc0164dbb90] __switch_to at ffffffe4fb6af5ec

#1 [ffffffc0164dbbf0] __schedule at ffffffe4fc97a260

#2 [ffffffc0164dbc50] schedule at ffffffe4fc97a598

#3 [ffffffc0164dbcd0] schedule_hrtimeout_range_clock at ffffffe4fc97f2c4

#4 [ffffffc0164dbd70] do_epoll_wait at ffffffe4fb98dbcc

#5 [ffffffc0164dbdd0] __se_sys_epoll_pwait at ffffffe4fb98b4d8

#6 [ffffffc0164dbe10] __arm64_sys_epoll_pwait at ffffffe4fb98b47c

#7 [ffffffc0164dbe20] oplus_invoke_syscall at ffffffe4fb6d0500

#8 [ffffffc0164dbe70] el0_svc_common at ffffffe4fb6c2ec4

#9 [ffffffc0164dbeb0] el0_svc_handler at ffffffe4fb6c2e04

#10 [ffffffc0164dbff0] el0_svc at ffffffe4fb484e84

PC: 00000076109d04a8 LR: 00000076119edad0 SP: 0000007fc42df120

X29: 0000007fc42df270 X28: 0000000000000000 X27: 0000000000000000

X26: 0000000000000000 X25: 00000076133a8000 X24: 0000000000000000

X23: b4000075900510e0 X22: 00000000ffffffff X21: 00000000ffffffff

X20: b400007590051188 X19: b4000075900510e0 X18: 000000761366c000

X17: 000000761099276c X16: 00000076119f0db0 X15: 0000000034155555

X14: 0000000000000000 X13: 000000757b035740 X12: 000000759000d888

X11: b400000000000000 X10: 00000000000001d0 X9: b79a1c55bdc51541

X8: 0000000000000016 X7: 000000757b035860 X6: 000000758ec18520

X5: 0000000000000008 X4: 0000000000000000 X3: 00000000ffffffff

X2: 0000000000000010 X1: 0000007fc42df160 X0: 0000000000000009

ORIG_X0: 0000000000000009 SYSCALLNO: 16 PSTATE: 60001000

crash_arm64> bt -s

PID: 1235 TASK: ffffff809dcf53c0 CPU: 5 COMMAND: "surfaceflinger"

#0 [ffffffc0164dbb90] __switch_to+772 at ffffffe4fb6af5ec

#1 [ffffffc0164dbbf0] __schedule+1568 at ffffffe4fc97a260

#2 [ffffffc0164dbc50] schedule+136 at ffffffe4fc97a598

#3 [ffffffc0164dbcd0] schedule_hrtimeout_range_clock+200 at ffffffe4fc97f2c4

#4 [ffffffc0164dbd70] do_epoll_wait+996 at ffffffe4fb98dbcc

#5 [ffffffc0164dbdd0] __se_sys_epoll_pwait+76 at ffffffe4fb98b4d8

#6 [ffffffc0164dbe10] __arm64_sys_epoll_pwait+28 at ffffffe4fb98b47c

#7 [ffffffc0164dbe20] oplus_invoke_syscall+120 at ffffffe4fb6d0500

#8 [ffffffc0164dbe70] el0_svc_common+152 at ffffffe4fb6c2ec4

#9 [ffffffc0164dbeb0] el0_svc_handler+112 at ffffffe4fb6c2e04

#10 [ffffffc0164dbff0] el0_svc+4 at ffffffe4fb484e84

PC: 00000076109d04a8 LR: 00000076119edad0 SP: 0000007fc42df120

X29: 0000007fc42df270 X28: 0000000000000000 X27: 0000000000000000

X26: 0000000000000000 X25: 00000076133a8000 X24: 0000000000000000

X23: b4000075900510e0 X22: 00000000ffffffff X21: 00000000ffffffff

X20: b400007590051188 X19: b4000075900510e0 X18: 000000761366c000

X17: 000000761099276c X16: 00000076119f0db0 X15: 0000000034155555

X14: 0000000000000000 X13: 000000757b035740 X12: 000000759000d888

X11: b400000000000000 X10: 00000000000001d0 X9: b79a1c55bdc51541

X8: 0000000000000016 X7: 000000757b035860 X6: 000000758ec18520

X5: 0000000000000008 X4: 0000000000000000 X3: 00000000ffffffff

X2: 0000000000000010 X1: 0000007fc42df160 X0: 0000000000000009

ORIG_X0: 0000000000000009 SYSCALLNO: 16 PSTATE: 60001000

crash_arm64>

crash_arm64> ps | grep surface

1235 1 5 ffffff809dcf53c0 IN 0.4 2793532 56744 surfaceflinger

1317 1 4 ffffff809e292180 IN 0.4 2793532 56744 surfaceflinger

1490 1 6 ffffff82c5850000 IN 0.4 2793532 56744 surfaceflinger

1491 1 0 ffffff80876cb240 IN 0.4 2793532 56744 surfaceflinger

1494 1 4 ffffff82c5ac0000 IN 0.4 2793532 56744 surfaceflinger

1495 1 5 ffffff82c5ac2180 IN 0.4 2793532 56744 surfaceflinger

1497 1 6 ffffff82c5ac6480 IN 0.4 2793532 56744 surfaceflinger

1498 1 4 ffffff82c5ac53c0 IN 0.4 2793532 56744 surfaceflinger

#通过pid指定task

crash_arm64> bt 1235

PID: 1235 TASK: ffffff809dcf53c0 CPU: 5 COMMAND: "surfaceflinger"

#0 [ffffffc0164dbb90] __switch_to at ffffffe4fb6af5ec

#1 [ffffffc0164dbbf0] __schedule at ffffffe4fc97a260

#2 [ffffffc0164dbc50] schedule at ffffffe4fc97a598

#3 [ffffffc0164dbcd0] schedule_hrtimeout_range_clock at ffffffe4fc97f2c4

#4 [ffffffc0164dbd70] do_epoll_wait at ffffffe4fb98dbcc

#5 [ffffffc0164dbdd0] __se_sys_epoll_pwait at ffffffe4fb98b4d8

#6 [ffffffc0164dbe10] __arm64_sys_epoll_pwait at ffffffe4fb98b47c

#7 [ffffffc0164dbe20] oplus_invoke_syscall at ffffffe4fb6d0500

#8 [ffffffc0164dbe70] el0_svc_common at ffffffe4fb6c2ec4

#9 [ffffffc0164dbeb0] el0_svc_handler at ffffffe4fb6c2e04

#10 [ffffffc0164dbff0] el0_svc at ffffffe4fb484e84

PC: 00000076109d04a8 LR: 00000076119edad0 SP: 0000007fc42df120

X29: 0000007fc42df270 X28: 0000000000000000 X27: 0000000000000000

X26: 0000000000000000 X25: 00000076133a8000 X24: 0000000000000000

X23: b4000075900510e0 X22: 00000000ffffffff X21: 00000000ffffffff

X20: b400007590051188 X19: b4000075900510e0 X18: 000000761366c000

X17: 000000761099276c X16: 00000076119f0db0 X15: 0000000034155555

X14: 0000000000000000 X13: 000000757b035740 X12: 000000759000d888

X11: b400000000000000 X10: 00000000000001d0 X9: b79a1c55bdc51541

X8: 0000000000000016 X7: 000000757b035860 X6: 000000758ec18520

X5: 0000000000000008 X4: 0000000000000000 X3: 00000000ffffffff

X2: 0000000000000010 X1: 0000007fc42df160 X0: 0000000000000009

ORIG_X0: 0000000000000009 SYSCALLNO: 16 PSTATE: 60001000

#通过task_struct结构的地址指定task

crash_arm64> bt ffffff809dcf53c0

PID: 1235 TASK: ffffff809dcf53c0 CPU: 5 COMMAND: "surfaceflinger"

#0 [ffffffc0164dbb90] __switch_to at ffffffe4fb6af5ec

#1 [ffffffc0164dbbf0] __schedule at ffffffe4fc97a260

#2 [ffffffc0164dbc50] schedule at ffffffe4fc97a598

#3 [ffffffc0164dbcd0] schedule_hrtimeout_range_clock at ffffffe4fc97f2c4

#4 [ffffffc0164dbd70] do_epoll_wait at ffffffe4fb98dbcc

#5 [ffffffc0164dbdd0] __se_sys_epoll_pwait at ffffffe4fb98b4d8

#6 [ffffffc0164dbe10] __arm64_sys_epoll_pwait at ffffffe4fb98b47c

#7 [ffffffc0164dbe20] oplus_invoke_syscall at ffffffe4fb6d0500

#8 [ffffffc0164dbe70] el0_svc_common at ffffffe4fb6c2ec4

#9 [ffffffc0164dbeb0] el0_svc_handler at ffffffe4fb6c2e04

#10 [ffffffc0164dbff0] el0_svc at ffffffe4fb484e84

PC: 00000076109d04a8 LR: 00000076119edad0 SP: 0000007fc42df120

X29: 0000007fc42df270 X28: 0000000000000000 X27: 0000000000000000

X26: 0000000000000000 X25: 00000076133a8000 X24: 0000000000000000

X23: b4000075900510e0 X22: 00000000ffffffff X21: 00000000ffffffff

X20: b400007590051188 X19: b4000075900510e0 X18: 000000761366c000

X17: 000000761099276c X16: 00000076119f0db0 X15: 0000000034155555

X14: 0000000000000000 X13: 000000757b035740 X12: 000000759000d888

X11: b400000000000000 X10: 00000000000001d0 X9: b79a1c55bdc51541

X8: 0000000000000016 X7: 000000757b035860 X6: 000000758ec18520

X5: 0000000000000008 X4: 0000000000000000 X3: 00000000ffffffff

X2: 0000000000000010 X1: 0000007fc42df160 X0: 0000000000000009

ORIG_X0: 0000000000000009 SYSCALLNO: 16 PSTATE: 60001000

crash_arm64>

#已知地址，确定其所属的页

crash_arm64> btop ffffff801b8c3e60

ffffff801b8c3e60: ffffff801b8c3

#已知页编号，确定这个页的起始地址

crash_arm64> ptob ffffff801b8c3

ffffff801b8c3: ffffff801b8c3000

dev [-i | -p | -d | -D ] [-V | -v index [file]]

#显示所有块设备和字符设备

crash_arm64> dev

CHRDEV NAME CDEV OPERATIONS

1 mem f79b83c0 memory_fops

4 /dev/vc/0 c07bc560 console_fops

4 tty f7af5004 tty_fops

4 ttyS f7b02204 tty_fops

5 /dev/tty c07bc440 tty_fops

5 /dev/console c07bc4a0 console_fops

5 /dev/ptmx c07bc500 ptmx_fops

6 lp c5797e40 lp_fops

7 vcs f7b03d40 vcs_fops

10 misc f7f68640 misc_fops

13 input f79b8840 input_fops

21 sg f7f12840 sg_fops

29 fb f7f8c640 fb_fops

128 ptm f7b02604 tty_fops

136 pts f7b02404 tty_fops

162 raw c0693e40 raw_fops

180 usb f79b8bc0 usb_fops

189 usb_device c06a0300 usbfs_device_file_operations

216 rfcomm f5961a04 tty_fops

254 pcmcia f79b82c0 ds_fops

BLKDEV NAME GENDISK OPERATIONS

1 ramdisk f7b23480 rd_bd_op

8 sd f7cab280 sd_fops

9 md f7829b80 md_fops

11 sr f75c24c0 sr_bdops

65 sd (none)

66 sd (none)

67 sd (none)

68 sd (none)

69 sd (none)

70 sd (none)

71 sd (none)

128 sd (none)

129 sd (none)

130 sd (none)

131 sd (none)

132 sd (none)

133 sd (none)

134 sd (none)

135 sd (none)

253 device-mapper c57a0ac0 dm_blk_dops

254 mdp (none)

crash_arm64> dev -i

RESOURCE RANGE NAME

c03036d4 0000-ffff PCI IO

c0302594 0000-001f dma1

c03025b0 0020-003f pic1

c03025cc 0040-005f timer

c03025e8 0060-006f keyboard

c0302604 0080-008f dma page reg

c0302620 00a0-00bf pic2

c030263c 00c0-00df dma2

c0302658 00f0-00ff fpu

c122ff20 0170-0177 ide1

c122f240 0213-0213 isapnp read

c122ff40 02f8-02ff serial(auto)

c122ff00 0376-0376 ide1

c03186e8 03c0-03df vga+

c122ff60 03f8-03ff serial(auto)

c123851c 0800-083f Intel Corporation 82371AB PIIX4 ACPI

c1238538 0840-085f Intel Corporation 82371AB PIIX4 ACPI

c122f220 0a79-0a79 isapnp write

c122f200 0cf8-0cff PCI conf1

c1238858 dc00-dc7f 3Com Corporation 3c905B 100BaseTX [Cyclone]

c122fc00 dc00-dc7f 00:11.0

c12380c8 dce0-dcff Intel Corporation 82371AB PIIX4 USB

c1238d1c e000-efff PCI Bus #02

c1237858 e800-e8ff Adaptec AIC-7880U

c1237458 ec00-ecff Adaptec AHA-2940U2/W / 7890

c1239cc8 ffa0-ffaf Intel Corporation 82371AB PIIX4 IDE

RESOURCE RANGE NAME

c03036f0 00000000-ffffffff PCI mem

c0004000 00000000-0009ffff System RAM

c03026ac 000a0000-000bffff Video RAM area

c03026fc 000c0000-000c7fff Video ROM

c0302718 000c9800-000cdfff Extension ROM

c0302734 000ce000-000ce7ff Extension ROM

c0302750 000ce800-000cffff Extension ROM

c03026e0 000f0000-000fffff System ROM

c0004040 00100000-07ffdfff System RAM

c0302674 00100000-0028682b Kernel code

c0302690 0028682c-0031c63f Kernel data

c0004060 07ffe000-07ffffff reserved

c1239058 ec000000-efffffff Intel Corporation 440BX/ZX - 82443BX/ZX Host bridge

c1238d54 f1000000-f1ffffff PCI Bus #02

c1239554 f2000000-f5ffffff PCI Bus #01

c1237074 f4000000-f5ffffff nVidia Corporation Riva TnT2 [NV5]

c1238d38 fa000000-fbffffff PCI Bus #02

c1237874 faffe000-faffefff Adaptec AIC-7880U

c127ec40 faffe000-faffefff aic7xxx

c1237474 fafff000-faffffff Adaptec AHA-2940U2/W / 7890

c127eec0 fafff000-faffffff aic7xxx

c1239538 fc000000-fdffffff PCI Bus #01

c1237058 fc000000-fcffffff nVidia Corporation Riva TnT2 [NV5]

c1238874 fe000000-fe00007f 3Com Corporation 3c905B 100BaseTX [Cyclone]

c0004080 fec00000-fec0ffff reserved

c00040a0 fee00000-fee0ffff reserved

c00040c0 ffe00000-ffffffff reserved

crash_arm64> dev -p

ROOT BUS BUSNAME

ffffffdbeb2a9480 0000:00

PCI DEV DO:BU:SL.FN CLASS PCI_ID TYPE

ffffffdbeb012480 0000:00:00.0 0604 17cb:10b ROOT_PORT [BRIDGE]

PCI BUS PARENT BUS

ffffffdbeb335080 ffffffdbeb2a9480

PCI DEV DO:BU:SL.FN CLASS PCI_ID TYPE

ffffffdbeb012480 0000:00:00.0 0604 17cb:10b ROOT_PORT [BRIDGE]

ffffffdbeb011280 0000:01:00.0 ff00 17cb:1101 ENDPOINT

ROOT BUS BUSNAME

ffffffdc172b4680 0002:00

PCI DEV DO:BU:SL.FN CLASS PCI_ID TYPE

ffffffdc163d8080 0002:00:00.0 0604 17cb:10b ROOT_PORT [BRIDGE]

PCI BUS PARENT BUS

ffffffdc172b3c80 ffffffdc172b4680

PCI DEV DO:BU:SL.FN CLASS PCI_ID TYPE

ffffffdc163d8080 0002:00:00.0 0604 17cb:10b ROOT_PORT [BRIDGE]

ffffffdc15e7da80 0002:01:00.0 ff00 17cb:306 ENDPOINT

dis [-rfludxs][-b [num]] [address | symbol | (expression)] [count]

crash_arm64> dis -r crc16+8            # 从crc16+8处向前反汇编

0xffffff9accc78a48 <crc16>: cbz x2, 0xffffff9accc78a74

0xffffff9accc78a4c <crc16+4>: adrp x8, 0xffffff9ace38c000

0xffffff9accc78a50 <crc16+8>: add x8, x8, #0x36

crash_arm64> dis -f crc16+8        # 从crc16+8处向后反汇编，一只到函数结束

0xffffff9accc78a50 <crc16+8>: add x8, x8, #0x36

0xffffff9accc78a54 <crc16+12>: ldrb w9, [x1],#1

0xffffff9accc78a58 <crc16+16>: and x10, x0, #0xff

0xffffff9accc78a5c <crc16+20>: subs x2, x2, #0x1

0xffffff9accc78a60 <crc16+24>: eor x9, x9, x10

0xffffff9accc78a64 <crc16+28>: and w10, w0, #0xff00

0xffffff9accc78a68 <crc16+32>: ldrh w9, [x8,x9,lsl #1]

0xffffff9accc78a6c <crc16+36>: eor w0, w9, w10, lsr #8

0xffffff9accc78a70 <crc16+40>: b.ne 0xffffff9accc78a54

0xffffff9accc78a74 <crc16+44>: ret

crash_arm64> dis -f crc16+8 4            # 从crc16+8处向后反汇编，只反汇编4条

0xffffff9accc78a50 <crc16+8>: add x8, x8, #0x36

0xffffff9accc78a54 <crc16+12>: ldrb w9, [x1],#1

0xffffff9accc78a58 <crc16+16>: and x10, x0, #0xff

0xffffff9accc78a5c <crc16+20>: subs x2, x2, #0x1

crash_arm64> dis -l -f crc16+8 4        # 从crc16+8处向后反汇编，只反汇编4条，并显示行数

/work/jenkins/workspace/deploy_system_vendor_image_release/146972/code/source/android/kernel/msm-4.19/lib/crc16.c: 59

0xffffff9accc78a50 <crc16+8>: add x8, x8, #0x36

/work/jenkins/workspace/deploy_system_vendor_image_release/146972/code/source/android/kernel/msm-4.19/lib/crc16.c: 60

0xffffff9accc78a54 <crc16+12>: ldrb w9, [x1],#1

/work/jenkins/workspace/deploy_system_vendor_image_release/146972/code/source/android/kernel/msm-4.19/include/linux/crc16.h: 26

0xffffff9accc78a58 <crc16+16>: and x10, x0, #0xff

/work/jenkins/workspace/deploy_system_vendor_image_release/146972/code/source/android/kernel/msm-4.19/lib/crc16.c: 59

0xffffff9accc78a5c <crc16+20>: subs x2, x2, #0x1

crash_arm64> dis -u 81ec624 10

0x81ec624: push %ebp

0x81ec625: mov %esp,%ebp

0x81ec627: sub $0x18,%esp

0x81ec62a: movl $0x1,0x8(%ebp)

0x81ec631: mov 0x82f9040,%eax

0x81ec636: mov 0x10(%eax),%edx

0x81ec639: and $0x100,%edx

0x81ec63f: mov 0x14(%eax),%ecx

0x81ec642: and $0x0,%ecx

0x81ec645: mov %ecx,%eax

反汇编时输出的偏移地址为16进制格式，如下

crash_arm64> dis -x update_curr

...

0xffffff9acc7301f4 <update_curr+0xbc>: str x8, [x21,#88]

0xffffff9acc7301f8 <update_curr+0xc0>: ldp x11, x9, [x19,#56]

0xffffff9acc7301fc <update_curr+0xc4>: ldr x8, [x19,#40]

反汇编时输出的偏移地址为10进制格式，如下

crash_arm64> dis -d update_curr

...

0xffffff9acc7301f4 <update_curr+188>: str x8, [x21,#88]

0xffffff9acc7301f8 <update_curr+192>: ldp x11, x9, [x19,#56]

0xffffff9acc7301fc <update_curr+196>: ldr x8, [x19,#40]

crash_arm64> dis -s 0xffffff9accc78a58 4            # 显示源文件，只是我这里没有源码

FILE: /work/jenkins/workspace/deploy_system_vendor_image_release/146972/code/source/android/kernel/msm-4.19/include/linux/crc16.h

LINE: 26

dis: 0xffffff9accc78a58: source code is not available

# 下面是网上别人反汇编的源码

crash_arm64> dis -s mmput                    # 使用-s参数显示源代码

FILE: kernel/fork.c

LINE: 617

612

613 /*

614 * Decrement the use count and release all resources for an mm.

615 */

616 void mmput(struct mm_struct *mm)

* 617 {

618 might_sleep();

619

620 if (atomic_dec_and_test(&mm->mm_users)) {

621 uprobe_clear_state(mm);

622 exit_aio(mm);

623 ksm_exit(mm);

624 khugepaged_exit(mm); /* must run before exit_mmap */

625 exit_mmap(mm);

626 set_mm_exe_file(mm, NULL);

627 if (!list_empty(&mm->mmlist)) {

628 spin_lock(&mmlist_lock);

629 list_del(&mm->mmlist);

630 spin_unlock(&mmlist_lock);

631 }

632 if (mm->binfmt)

633 module_put(mm->binfmt->module);

634 mmdrop(mm);

635 }

636 }

crash_arm64> dis -s 0xffffffff811dcfb4            # 也可指定地址

FILE: fs/dcache.c

LINE: 276

271 spin_unlock(&dentry->d_lock);

272 spin_unlock(&inode->i_lock);

273 if (!inode->i_nlink)

274 fsnotify_inoderemove(inode);

275 if (dentry->d_op && dentry->d_op->d_iput)

* 276 dentry->d_op->d_iput(dentry, inode);

277 else

278 iput(inode);

279 } else {

280 spin_unlock(&dentry->d_lock);

281 }

282 }

crash_arm64> dis 0xffffff9accc78a58        # 对指定地址进行反汇编，只反汇编1条

0xffffff9accc78a58 <crc16+16>: and x10, x0, #0xff

crash_arm64> dis 0xffffff9accc78a58 4    # 对指定地址进行反汇编，连续4条

0xffffff9accc78a58 <crc16+16>: and x10, x0, #0xff

0xffffff9accc78a5c <crc16+20>: subs x2, x2, #0x1

0xffffff9accc78a60 <crc16+24>: eor x9, x9, x10

0xffffff9accc78a64 <crc16+28>: and w10, w0, #0xff00

crash_arm64> dis crc16                # 对指定函数的所有源代码进行反汇编

0xffffff9accc78a48 <crc16>: cbz x2, 0xffffff9accc78a74

0xffffff9accc78a4c <crc16+4>: adrp x8, 0xffffff9ace38c000

0xffffff9accc78a50 <crc16+8>: add x8, x8, #0x36

0xffffff9accc78a54 <crc16+12>: ldrb w9, [x1],#1

0xffffff9accc78a58 <crc16+16>: and x10, x0, #0xff

0xffffff9accc78a5c <crc16+20>: subs x2, x2, #0x1

0xffffff9accc78a60 <crc16+24>: eor x9, x9, x10

0xffffff9accc78a64 <crc16+28>: and w10, w0, #0xff00

0xffffff9accc78a68 <crc16+32>: ldrh w9, [x8,x9,lsl #1]

0xffffff9accc78a6c <crc16+36>: eor w0, w9, w10, lsr #8

0xffffff9accc78a70 <crc16+40>: b.ne 0xffffff9accc78a54

0xffffff9accc78a74 <crc16+44>: ret

crash_arm64> dis crc16+8                # 从指定函数的指定偏移地址，默认只反汇编一条

0xffffff9accc78a50 <crc16+8>: add x8, x8, #0x36

crash_arm64> dis crc16+8 6            # 从指定函数的指定偏移地址，并指定反汇编的条数

0xffffff9accc78a50 <crc16+8>: add x8, x8, #0x36

0xffffff9accc78a54 <crc16+12>: ldrb w9, [x1],#1

0xffffff9accc78a58 <crc16+16>: and x10, x0, #0xff

0xffffff9accc78a5c <crc16+20>: subs x2, x2, #0x1

0xffffff9accc78a60 <crc16+24>: eor x9, x9, x10

0xffffff9accc78a64 <crc16+28>: and w10, w0, #0xff00

eval [-b][-l] (expression) | value

+ - & | ^ * % / << >>

参数

说明

-b

在结果中显示哪些bit位被置一了

-l

结果以long型显示，即64bit

crash_arm64> eval 128m

hexadecimal: 8000000 (128MB)

decimal: 134217728

octal: 1000000000

binary: 00001000000000000000000000000000

crash_arm64> eval 128 * 1m

hexadecimal: 8000000 (128MB)

decimal: 134217728

octal: 1000000000

binary: 00001000000000000000000000000000

crash_arm64> eval (1 << 27)

hexadecimal: 8000000 (128MB)

decimal: 134217728

octal: 1000000000

binary: 00001000000000000000000000000000

crash_arm64> eval (1 << 32)

hexadecimal: 100000000 (4GB)

decimal: 4294967296

octal: 40000000000

binary: 0000000000000000000000000000000100000000000000000000000000000000

crash_arm64> eval -b 41dc065                            # 显示哪些bit被置位了

hexadecimal: 41dc065

decimal: 69058661

octal: 407340145

binary: 00000100000111011100000001100101

bits set: 26 20 19 18 16 15 14 6 5 2 0

crash_arm64> eval -lb 64g

hexadecimal: 1000000000 (64GB)

decimal: 68719476736

octal: 1000000000000

binary: 0000000000000000000000000001000000000000000000000000000000000000

bits set: 36

参数

说明

files [-d dentry] | [-p inode] | [-c] [-R reference] [pid | taskp] ...

crash_arm64> files

PID: 16709 TASK: ffffffdda4de3f40 CPU: 6 COMMAND: "sh"

ROOT: / CWD: /

FD FILE DENTRY INODE TYPE PATH

0 ffffffdd44891300 ffffffdbe2639388 ffffffdd8e123de8 CHR /dev/pts/0

1 ffffffdd69006940 ffffffdbe27715f8 ffffffddab0ec148 REG /proc/sysrq-trigger

2 ffffffdd44891300 ffffffdbe2639388 ffffffdd8e123de8 CHR /dev/pts/0

10 ffffffdd68983c40 ffffffdd4e3a04e8 ffffffdd4dfe3c08 CHR /dev/tty

11 ffffffdd44891300 ffffffdbe2639388 ffffffdd8e123de8 CHR /dev/pts/0

crash_arm64> files -d f745fd60

DENTRY INODE SUPERBLK TYPE PATH

f745fd60 f7284640 f73a3e00 REG /var/spool/lpd/lpd.lock

crash_arm64> files -p f59b90fc

INODE NRPAGES

f59b90fc 6

PAGE PHYSICAL MAPPING INDEX CNT FLAGS

ca3353e0 39a9f000 f59b91ac 0 2 82c referenced,uptodate,lru,private

ca22cb20 31659000 f59b91ac 1 2 82c referenced,uptodate,lru,private

ca220160 3100b000 f59b91ac 2 2 82c referenced,uptodate,lru,private

ca1ddde0 2eeef000 f59b91ac 3 2 82c referenced,uptodate,lru,private

ca36b300 3b598000 f59b91ac 4 2 82c referenced,uptodate,lru,private

ca202680 30134000 f59b91ac 5 2 82c referenced,uptodate,lru,private

crash_arm64> files -c 1954

PID: 1954 TASK: f7a28000 CPU: 1 COMMAND: "syslogd"

ROOT: / CWD: /

FD INODE I_MAPPING NRPAGES TYPE PATH

0 cb3ae868 cb3ae910 0 SOCK socket:/[4690]

2 f2721c5c f2721d04 461 REG /var/log/messages

3 cbda4884 cbda492c 47 REG /var/log/secure

4 e48092c0 e4809368 58 REG /var/log/maillog

5 f65192c0 f6519368 48 REG /var/log/cron

6 e4809e48 e4809ef0 0 REG /var/log/spooler

7 d9c43884 d9c4392c 0 REG /var/log/boot.log

crash_arm64> files

PID: 16709 TASK: ffffffdda4de3f40 CPU: 6 COMMAND: "sh"

ROOT: / CWD: /

FD FILE DENTRY INODE TYPE PATH

0 ffffffdd44891300 ffffffdbe2639388 ffffffdd8e123de8 CHR /dev/pts/0

1 ffffffdd69006940 ffffffdbe27715f8 ffffffddab0ec148 REG /proc/sysrq-trigger

2 ffffffdd44891300 ffffffdbe2639388 ffffffdd8e123de8 CHR /dev/pts/0

10 ffffffdd68983c40 ffffffdd4e3a04e8 ffffffdd4dfe3c08 CHR /dev/tty

11 ffffffdd44891300 ffffffdbe2639388 ffffffdd8e123de8 CHR /dev/pts/0

crash_arm64> files -R pts

PID: 16709 TASK: ffffffdda4de3f40 CPU: 6 COMMAND: "sh"

ROOT: / CWD: /

FD FILE DENTRY INODE TYPE PATH

0 ffffffdd44891300 ffffffdbe2639388 ffffffdd8e123de8 CHR /dev/pts/0

2 ffffffdd44891300 ffffffdbe2639388 ffffffdd8e123de8 CHR /dev/pts/0

11 ffffffdd44891300 ffffffdbe2639388 ffffffdd8e123de8 CHR /dev/pts/0

crash_arm64> files -R /dev

PID: 16709 TASK: ffffffdda4de3f40 CPU: 6 COMMAND: "sh"

ROOT: / CWD: /

FD FILE DENTRY INODE TYPE PATH

0 ffffffdd44891300 ffffffdbe2639388 ffffffdd8e123de8 CHR /dev/pts/0

2 ffffffdd44891300 ffffffdbe2639388 ffffffdd8e123de8 CHR /dev/pts/0

10 ffffffdd68983c40 ffffffdd4e3a04e8 ffffffdd4dfe3c08 CHR /dev/tty

11 ffffffdd44891300 ffffffdbe2639388 ffffffdd8e123de8 CHR /dev/pts/0

crash_arm64> files -R /proc

PID: 16709 TASK: ffffffdda4de3f40 CPU: 6 COMMAND: "sh"

ROOT: / CWD: /

FD FILE DENTRY INODE TYPE PATH

1 ffffffdd69006940 ffffffdbe27715f8 ffffffddab0ec148 REG /proc/sysrq-trigger

crash_arm64> ps | grep sh

16608 16607 5 ffffffdd86845ec0 IN 0.0 2124580 2728 sh

> 16709 10129 6 ffffffdda4de3f40 RU 0.0 2124580 2636 sh

16710 1 0 ffffffdda4de0040 IN 0.0 2258552 4680 shell svc 16709

crash_arm64> files 16709

PID: 16709 TASK: ffffffdda4de3f40 CPU: 6 COMMAND: "sh"

ROOT: / CWD: /

FD FILE DENTRY INODE TYPE PATH

0 ffffffdd44891300 ffffffdbe2639388 ffffffdd8e123de8 CHR /dev/pts/0

1 ffffffdd69006940 ffffffdbe27715f8 ffffffddab0ec148 REG /proc/sysrq-trigger

2 ffffffdd44891300 ffffffdbe2639388 ffffffdd8e123de8 CHR /dev/pts/0

10 ffffffdd68983c40 ffffffdd4e3a04e8 ffffffdd4dfe3c08 CHR /dev/tty

11 ffffffdd44891300 ffffffdbe2639388 ffffffdd8e123de8 CHR /dev/pts/0

foreach [[pid | taskp | name | state | [kernel | user | gleader]] ...]

command [flag] [argument]

crash_arm64> foreach 661 bt

PID: 661 TASK: ffffffdd4ca2dec0 CPU: 7 COMMAND: "sh"

#0 [ffffff8022e73960] __switch_to at ffffff9acc689ee0

#1 [ffffff8022e739b0] __schedule at ffffff9acdfaf924

#2 [ffffff8022e73a10] schedule at ffffff9acdfafb94

#3 [ffffff8022e73ab0] schedule_timeout at ffffff9acdfb40e0

#4 [ffffff8022e73b20] wait_woken at ffffff9acc744c90

#5 [ffffff8022e73c20] n_tty_read at ffffff9acce2db28

#6 [ffffff8022e73c80] tty_read at ffffff9acce2c9b0

#7 [ffffff8022e73d30] __vfs_read at ffffff9acc951000

#8 [ffffff8022e73d60] vfs_read at ffffff9acc951270

#9 [ffffff8022e73db0] ksys_read at ffffff9acc95187c

#10 [ffffff8022e73de0] __arm64_sys_read at ffffff9acc9518fc

#11 [ffffff8022e73e00] oppo_invoke_syscall at ffffff9acc6abb94

#12 [ffffff8022e73e50] el0_svc_common at ffffff9acc69d140

#13 [ffffff8022e73ea0] el0_svc_handler at ffffff9acc69d080

#14 [ffffff8022e73ff0] el0_svc at ffffff9acc684d04

PC: 0000007ec304e168 LR: 0000005903bd6da4 SP: 0000007fedcfb170

X29: 0000007fedcfb170 X28: 0000005903be7420 X27: 0000005903be6000

X26: 0000000000000001 X25: 0000000000000000 X24: 0000000080000800

X23: 0000000000000018 X22: 0000007ec322b000 X21: 0000000000000000

X20: 0000007fedcfb1c4 X19: 0000000000000001 X18: 0000007ec411e000

X17: 0000007ec304e160 X16: 0000007ec306e770 X15: 000000000000002f

X14: 0000005903be6850 X13: 0000005903be6000 X12: 0000005903be6000

X11: 0000005903be6000 X10: 0000005903be6000 X9: 0000000000000200

X8: 000000000000003f X7: 00000000000042ac X6: 0000007ec4392000

X5: 0000007ec2a94dc0 X4: ffffffffffffffff X3: ffffffffffffffff

X2: 0000000000000001 X1: 0000007fedcfb1c4 X0: 0000000000000000

ORIG_X0: 0000000000000000 SYSCALLNO: 3f PSTATE: 00001000

crash_arm64> foreach ffffffdd4ca2dec0 bt

PID: 661 TASK: ffffffdd4ca2dec0 CPU: 7 COMMAND: "sh"

#0 [ffffff8022e73960] __switch_to at ffffff9acc689ee0

#1 [ffffff8022e739b0] __schedule at ffffff9acdfaf924

#2 [ffffff8022e73a10] schedule at ffffff9acdfafb94

#3 [ffffff8022e73ab0] schedule_timeout at ffffff9acdfb40e0

#4 [ffffff8022e73b20] wait_woken at ffffff9acc744c90

#5 [ffffff8022e73c20] n_tty_read at ffffff9acce2db28

#6 [ffffff8022e73c80] tty_read at ffffff9acce2c9b0

#7 [ffffff8022e73d30] __vfs_read at ffffff9acc951000

#8 [ffffff8022e73d60] vfs_read at ffffff9acc951270

#9 [ffffff8022e73db0] ksys_read at ffffff9acc95187c

#10 [ffffff8022e73de0] __arm64_sys_read at ffffff9acc9518fc

#11 [ffffff8022e73e00] oppo_invoke_syscall at ffffff9acc6abb94

#12 [ffffff8022e73e50] el0_svc_common at ffffff9acc69d140

#13 [ffffff8022e73ea0] el0_svc_handler at ffffff9acc69d080

#14 [ffffff8022e73ff0] el0_svc at ffffff9acc684d04

PC: 0000007ec304e168 LR: 0000005903bd6da4 SP: 0000007fedcfb170

X29: 0000007fedcfb170 X28: 0000005903be7420 X27: 0000005903be6000

X26: 0000000000000001 X25: 0000000000000000 X24: 0000000080000800

X23: 0000000000000018 X22: 0000007ec322b000 X21: 0000000000000000

X20: 0000007fedcfb1c4 X19: 0000000000000001 X18: 0000007ec411e000

X17: 0000007ec304e160 X16: 0000007ec306e770 X15: 000000000000002f

X14: 0000005903be6850 X13: 0000005903be6000 X12: 0000005903be6000

X11: 0000005903be6000 X10: 0000005903be6000 X9: 0000000000000200

X8: 000000000000003f X7: 00000000000042ac X6: 0000007ec4392000

X5: 0000007ec2a94dc0 X4: ffffffffffffffff X3: ffffffffffffffff

X2: 0000000000000001 X1: 0000007fedcfb1c4 X0: 0000000000000000

ORIG_X0: 0000000000000000 SYSCALLNO: 3f PSTATE: 00001000

crash_arm64> foreach msm_watchdog bt

PID: 89 TASK: ffffffdbf31b0040 CPU: 3 COMMAND: "msm_watchdog"

#0 [ffffff800d993ce0] __switch_to at ffffff9acc689ee0

#1 [ffffff800d993d30] __schedule at ffffff9acdfaf924

#2 [ffffff800d993d90] schedule at ffffff9acdfafb94

#3 [ffffff800d993e00] watchdog_kthread at ffffff9acdfae660

#4 [ffffff800d993e60] kthread at ffffff9acc6fc0f0

RU, IN, UN, ST, ZO, TR, SW, DE, WA, PA, ID or NE.

crash_arm64> foreach UN bt

PID: 80 TASK: ffffffdbf31d1fc0 CPU: 7 COMMAND: "fb_flush"

#0 [ffffff800d493d90] __switch_to at ffffff9acc689ee0

#1 [ffffff800d493de0] __schedule at ffffff9acdfaf924

#2 [ffffff800d493e40] schedule at ffffff9acdfafb94

#3 [ffffff800d493e60] kthread at ffffff9acc6fc0cc

PID: 168 TASK: ffffffdd587d5ec0 CPU: 2 COMMAND: "panic_flush"

#0 [ffffff8014033d10] __switch_to at ffffff9acc689ee0

#1 [ffffff8014033d60] __schedule at ffffff9acdfaf924

#2 [ffffff8014033dc0] schedule at ffffff9acdfafb94

#3 [ffffff8014033e20] panic_flush_thread at ffffff9acc7035c8

#4 [ffffff8014033e60] kthread at ffffff9acc6fc0f0

PID: 429 TASK: ffffffdd51f50040 CPU: 3 COMMAND: "shortc_thread"

#0 [ffffff801c8fbd50] __switch_to at ffffff9acc689ee0

#1 [ffffff801c8fbda0] __schedule at ffffff9acdfaf924

#2 [ffffff801c8fbe00] schedule at ffffff9acdfafb94

#3 [ffffff801c8fbe20] shortc_thread_main at ffffff9acdfae96c

#4 [ffffff801c8fbe60] kthread at ffffff9acc6fc0f0

PID: 467 TASK: ffffffdbe8809fc0 CPU: 2 COMMAND: "usbtemp_kthread"

#0 [ffffff801cb33bd0] __switch_to at ffffff9acc689ee0

#1 [ffffff801cb33c20] __schedule at ffffff9acdfaf924

#2 [ffffff801cb33c80] schedule at ffffff9acdfafb94

#3 [ffffff801cb33d20] schedule_timeout at ffffff9acdfb4644

#4 [ffffff801cb33d80] schedule_timeout_uninterruptible at ffffff9acdfb4810

#5 [ffffff801cb33da0] msleep at ffffff9acc7b0c54

#6 [ffffff801cb33e00] oppo_usbtemp_monitor_main at ffffff9acd478514

#7 [ffffff801cb33e60] kthread at ffffff9acc6fc0f0

PID: 530 TASK: ffffffdd50213f40 CPU: 0 COMMAND: "hdcp_2x"

#0 [ffffff8021fabcc0] __switch_to at ffffff9acc689ee0

#1 [ffffff8021fabd10] __schedule at ffffff9acdfaf924

#2 [ffffff8021fabd70] schedule at ffffff9acdfafb94

#3 [ffffff8021fabe00] sde_hdcp_2x_main at ffffff9acdb0eee0

#4 [ffffff8021fabe60] kthread at ffffff9acc6fc0f0

PID: 531 TASK: ffffffdd50211fc0 CPU: 2 COMMAND: "dp_hdcp2p2"

#0 [ffffff8021fb3ce0] __switch_to at ffffff9acc689ee0

#1 [ffffff8021fb3d30] __schedule at ffffff9acdfaf924

#2 [ffffff8021fb3d90] schedule at ffffff9acdfafb94

#3 [ffffff8021fb3e00] dp_hdcp2p2_main at ffffff9acda84948

#4 [ffffff8021fb3e60] kthread at ffffff9acc6fc0f0

fuser [pathname | inode]

参数

说明

pathname

指定文件的路径

inode

十六进制的inode地址

crash_arm64> fuser /usr/lib/libkfm.so.2.0.0

PID TASK COMM USAGE

779 c5e82000 "kwm" mmap

808 c5a8e000 "krootwm" mmap

806 c5b42000 "kfm" mmap

809 c5dde000 "kpanel" mmap

gdb command

crash_arm64> gdb print sizeof(struct task_struct)

$1 = 7680

ipcs [-smMq] [-n pid|task] [id | addr]

参数

说明

irq [[[index ...] | -u ] | -d | -b | -a | -s [-c cpu]]

crash_arm64> irq 43

IRQ IRQ_DESC/_DATA IRQACTION NAME

43 ffffffdbf2930c80 ffffffdbe8815c00 "qcom,temp-alarm"

crash_arm64> irq 43 44 45 46

IRQ IRQ_DESC/_DATA IRQACTION NAME

43 ffffffdbf2930c80 ffffffdbe8815c00 "qcom,temp-alarm"

44 ffffffdbf29d6c80 ffffffdbe88cab00 "sig-tx"

45 ffffffdbf29d6080 ffffffdbe88cb280 "sig-rx"

46 ffffffdbf29d1880 ffffffdbe88ca600 "msg-tx"

crash_arm64>

crash_arm64> irq -u

IRQ IRQ_DESC/_DATA IRQACTION NAME

1 ffffffdbc0673c80 (unused)

2 ffffffdbc0674280 (unused)

3 ffffffdbc0671280 ffffffdbc066d200 "arch_timer"

4 ffffffdbc0675480 (unused)

5 ffffffdbc0673680 ffffffdbc066ed80 "arch_mem_timer"

6 ffffffdbc0676680 (unused)

7 ffffffdbf338aa80 ffffffdbed137a00 "arm-pmu"

8 ffffffdbf338ec80 ffffffdbf1b5c080 "dcvsh-irq-0"

9 ffffffdbf3388c80 ffffffdbf1b76b00 "dcvsh-irq-4"

10 ffffffdbf338e680 ffffffdbf1b89980 "dcvsh-irq-7"

11 ffffffdbf338f280 ffffffdd50925480 "ngd_slim_irq"

12 ffffffdbf338d480 ffffffdc1e508300 "sps"

13 ffffffdbf338b080 ffffffdd55af7000 "arm_dsu_0"

14 ffffffdbf338c280 ffffffdbf2d2b500 "apps_wdog_bark"

crash> irq -d

[0] divide_error

[1] debug

[2] nmi

[3] int3

[4] overflow

[5] bounds

...

crash_arm64> irq -b

SOFTIRQ_VEC ACTION

[0] ffffff9acc6d0e98 <tasklet_hi_action>

[1] ffffff9acc7affb0 <run_timer_softirq>

[2] ffffff9acdc58398 <net_tx_action>

[3] ffffff9acdc587b8 <net_rx_action>

[4] ffffff9accc26210 <blk_done_softirq>

[6] ffffff9acc6d0e60 <tasklet_action>

[7] ffffff9acc72c5d0 <run_rebalance_domains>

[8] ffffff9acc7b4f90 <hrtimer_run_softirq>

[9] ffffff9acc79eea8 <rcu_process_callbacks>

crash_arm64> irq -a

IRQ NAME AFFINITY

3 arch_timer 0-7

5 arch_mem_timer 2

7 arm-pmu 0-7

8 dcvsh-irq-0 0

9 dcvsh-irq-4 2

10 dcvsh-irq-7 3

11 ngd_slim_irq 1

12 sps 0

13 arm_dsu_0 0

14 apps_wdog_bark 3

16 90b6400.qcom,cpu-cpu-llcc-bwmon 3

17 9091000.qcom,cpu-llcc-ddr-bwmon 0-7

20 0-7

21 1d84000.ufshc 3

22 ipcc_1 3

25 apps_rsc 3

26 pon_kpdpwr_status 0-7

27 pon_resin_status 0-7

crash_arm64> irq -s

CPU0 CPU1 CPU2 CPU3 CPU4 CPU5 CPU6 CPU7

3: 93690 91020 90378 89430 90341 92807 91941 89570 GICv3 arch_timer

5: 2918 2126 3036 3328 234 314 320 168 GICv3 arch_mem_timer

7: 176 164 163 165 171 183 184 193 GICv3 arm-pmu

8: 0 0 0 0 0 0 0 0 GICv3 dcvsh-irq-0

9: 0 0 0 0 0 0 0 0 GICv3 dcvsh-irq-4

10: 0 0 0 0 0 0 0 0 GICv3 dcvsh-irq-7

11: 11 0 0 0 0 0 0 0 GICv3 ngd_slim_irq

12: 11 0 0 0 0 0 0 0 GICv3 sps

13: 0 0 0 0 0 0 0 0 GICv3 arm_dsu_0

14: 0 0 0 0 0 0 0 0 GICv3 apps_wdog_bark

16: 3754 512 462 92 0 0 0 0 GICv3 90b6400.qcom,cpu-cpu-llcc-bwmon

17: 1370 0 0 0 0 0 0 0 GICv3 9091000.qcom,cpu-llcc-ddr-bwmon

crash_arm64> irq -s -c 1,3,5

CPU1 CPU3 CPU5

3: 91020 89430 92807 GICv3 arch_timer

5: 2126 3328 314 GICv3 arch_mem_timer

7: 164 165 183 GICv3 arm-pmu

8: 0 0 0 GICv3 dcvsh-irq-0

9: 0 0 0 GICv3 dcvsh-irq-4

10: 0 0 0 GICv3 dcvsh-irq-7

11: 0 0 0 GICv3 ngd_slim_irq

12: 0 0 0 GICv3 sps

13: 0 0 0 GICv3 arm_dsu_0

14: 0 0 0 GICv3 apps_wdog_bark

16: 512 92 0 GICv3 90b6400.qcom,cpu-cpu-llcc-bwmon

17: 0 0 0 GICv3 9091000.qcom,cpu-llcc-ddr-bwmon

20: 0 0 0 PDC

21: 96994 1878 0 GICv3 1d84000.ufshc

22: 0 922 0 GICv3 ipcc_1

25: 16144 29056 0 GICv3 apps_rsc

26: 0 0 0 pmic_arb pon_kpdpwr_status

list [[-o] offset][-e end][-[s|S] struct[.member[,member] [-l offset]] -[x|d]]

[-r|-B] [-h|-H] start

#首先我们找到一个全局变量的类型

crash_arm64> whatis file_systems

struct file_system_type *file_systems;

#我们查看这个全局变量中的链表的地址

crash_arm64> struct file_system_type.next file_systems -o

struct file_system_type {

[ffffff85e27833a0] struct file_system_type *next;

}

#打印这个链表

crash_arm64> list file_system_type.next 0xffffff85e27833a0

ffffff85e27833a0

ffffff85e2740e78

ffffff85e278e9a0

#打印这个链表上我们关注的信息

crash_arm64> list file_system_type.next -s file_system_type.name 0xffffff85e27833a0

ffffff85e27833a0

name = 0xffffff85e1f92148 "sysfs"