从零开始理解Linux中断架构（19）--中断线程化irq_thread

最新推荐文章于 2024-08-21 23:59:55 发布
最新推荐文章于 2024-08-21 23:59:55 发布
阅读量673 收藏 1
点赞数
CC 4.0 BY-SA版权
分类专栏： Linux中断系统 文章标签： linux 中断线程化
版权声明：本文为博主原创文章，遵循 CC 4.0 BY-SA 版权协议，转载请附上原文出处链接和本声明。
本文链接：https://blog.youkuaiyun.com/maxleng/article/details/131232714
本文介绍了Linux中断处理的另一种方式——中断线程化。通过设置thread_fn，中断处理程序可以在内核线程中运行，而不是在hard_irq上下文。当CONFIG_IRQ_FORCED_THREADING配置启用时，中断Action会被强制线程化。中断线程化时，主handler仅唤醒对应的irq_thread线程，由irq_default_primary_handler触发。这种机制提供了更灵活的中断处理环境。

摘要生成于 C知道 ，由 DeepSeek-R1 满血版支持， 前往体验 >

        前面一节讲到的中断流处理流程是在hard_irq 流程上，工作在中断堆栈上。还有一种情况是使用中断线程的情形。request_threaded_irq参数中有两个处理函数handler,thread_fn是有区别的。handler主中断处理例程，运行hard_irq 流程上。而如果驱动程序填写thread_fn了，系统就会建立一个内核线程来运行thread_fn,这个中断处理函数运行在thread堆栈上。这个就是你在ps 可以看到诸如此类：

  649 root         0 SW   [irq/19-gpio-key]

   650 root         0 SW   [irq/18-gpio-key]

   编译时如果定义了CONFIG_IRQ_FORCED_THREADING，参数irqflags不包含IRQF_NO_THREAD中断Action都将强制线程化处理。

<
了解本专栏 订阅专栏 解锁全文 超级会员免费看
从零开始理解Linux中断架构（9）---异常执行流与调度
maxleng的专栏
06-26 861
线程的管理在内核中有显式的管理实体（task_struct object），但是对于el0_irq,el0_sync,el1_irq,el1_sync这类handler就没有显式的管理，如下图的el1_irq，代码看起来比较好理解，但是深入了解后，会发现在这函数里经历了很多的堆栈切换，但是el1_irq的存续并没有一个专门的内存结构去存储他的状态，被当成了当前线程的延伸段去处理，把上下文存储在了当前任务的cpu_conext,这就会造成理解的困难。如果需要调度，调度器会选择下一个进程，并且进行进程的切换。
从零开始理解Linux中断架构（23)中断运行临界区和占先调度
maxleng的专栏
07-29 961
只需要判断in_interrupt()，看看这个中断运行临界区是否被占领，如果已经被占领了，说明前一个软中断处理处于被打断状态，后面的就不进去了，就可以保证__do_softirq()不会在同一Core嵌套调用。前面的中断临界区相关的函数：in_interrupt,in_irq等都使用到了preempt_count，这个preempt到底是个什么东西呢？in_interrupt在驱动中使用频率最高的函数了，in_interrupt（）就是指示Core是否正在中断处理中，包含了硬中断，软中断运行临界区。
linux中断线程化分析
若海人生的专栏
04-21 9778
最近在为3.8版本的Linux内核打RT_PREEMPT补丁，并且优化系统实时性，
linux的中断线程化实现
weixin_34337265的博客
02-09 132
2.6.25.8内核实现了中断线程化，内核为每一个中断向量建立了一个中断线程，具体就是在结构irq_desc中增加了一个task_struct来代表这个线程： struct irq_desc { 转载于:https://blog.51cto.com/dog250/1274036...
linux 中断线程化
viewsky11的专栏
05-27 7302
为什么要进行中断线程化? 在 Linux 中，中断具有最高的优先级。不论在任何时刻，只要产生中断事件，内核将立即执行相应的中断处理程序，等到所有挂起的中断和软中断处理完毕后才能执行正常的任务，因此有可能造成实时任务得不到及时的处理。中断线程化之后，中断将作为内核线程运行而且被赋予不同的实时优先级，实时任务可以有比中断线程更高的优先级。这样，具有最高优先级的实时任务就能得到优先处理，即使在严重负载下
linux中断线程化
jiav_net的专栏
04-11 155
引用网址： http://edu.codepub.com/2010/0209/20378.phplinux的中断线程化实现 http://www.ibm.com/developerworks/cn/linux/l-cn-linuxkernelint/index.html Linux内核中断内幕 中断线程化介绍（InterruptThreads） 在嵌入式领域，业界...
Linux 中断机制（一）之中断和异常
热门推荐
Projectsauron 的博客
08-12 4万+
中断（interrupt）是指在 CPU 正常运行期间， 由外部或内部事件引起的一种机制。当中断发生时，CPU 会停止当前正在执行的程序，并转而执行触发该中断的中断处理程序。处理完中断处理程序后，CPU 会返回到中断发生的地方， 继续执行被中断的程序。中断机制允许 CPU 在实时响应外部或内部事件的同时，保持对其他任务的处理能力。
从零开始理解Linux中断架构（18）--中断流处理
maxleng的专栏
07-08 321
④在全局中段描述符树irq_desc_tree中找的77对应的中断描述符：irq_desc[77]。kernel初始化中断控制器（gic v3）时，调用set_handle_irq(gic_handle_irq)，将gic_handle_irq赋予handle_arch_irq，为中断处理进入C语言第一跳建立了跳板。handler代表的是主Handler，运行在硬中断流程上，thread_fn代表的是要创建的中断线程的入口函数，thread_fn如果不为NULL，系统会创建一个内核线程来处理该中断。
Linux内核中断处理的irq_thread机制
u011673554的博客
09-02 1967
中断不能睡眠的原因:睡眠会导致进程的调度，使得从中断切换到别的进程执行。但是由于Linux内核的调度器是基于进程进行调度的，也就是说，调度的实体是基于task_struct的，而中断处理程序执行的时候，并没有这个实体，即没有所谓的进程上下文，所以从中断调度别的进程运行时，便无法再回到该中断继续执行。所以在中断处理程序中不能睡眠(表述的不好，请见谅╮(╯-╰)╭)。 因而内核为中断处理提供了另一种机
Linux Thread IRQ
12-20 281
一. Linux下半部机制的种类 There are 4 bottom half mechanisms are available in Linux: Workqueue– Executed in a process context. Threaded IRQs Softirqs– Executed in an atomic context. Tasklets– Executed in an atomic context. 二. Linux中的Thread IRQ If you see i...
linux 线程 虚拟内存,linux 中断线程化
weixin_42139252的博客
04-30 152
一、原理中断处理是由内核执行的最敏感的任务之一，当内核正打算往做一些别的事情时，中断随时会到来，中断当前的任务进而执行中断处理程序。因此内核的目标就是让中断尽可能快的处理完，尽其所能把更多的处理工作向后推迟。为此Linux把中断的处理分成上半部分和下半部分。上半部分立即执行，下半部分将 唤醒相应的和中断处理相关的进程稍后执行。固然这种机制使得中断处理变得更加高效和易于维护，但是对于系统假如有严重的...
Linux下的内核线程threaded irq机制分析与应用
m0_46217142的博客
11-02 1504
⭐Linux发烧友????threaded irq的引入☁️使用哪一个中断函数⌛内核机制实现♐编程要点分析????完整驱动代码演示????基础应用层代码演示 ????threaded irq的引入 我们知道，工作队列可以用来处理中断的一些耗时的事情，但是他又一个缺点，就是如果有多个事件同时放入工作队列中，如果前面的事件处理得太久，那么就会影响到后面的事件的执行，因为内核线程事一个个依次执行的，如果一个事件真的非常耗时间，那么我们可以用 threaded irq来处理，大概意思就是中断上半部不变，中断的下半
Linux学习笔记（17.10）—— 按键的中断线程化处理
glen_cao的博客
03-12 1449
本文主要参考韦东山老师视频及文档 Linux中断处理流程 中断系统中相关数据结构 ​ 每一个irq_desc数组项中都有一个函数：handle_irq，还有一个action链表。要理解它们，需要先看中断结构图： ​ 外部设备1、外部设备n共享一个GPIO中断B，多个GPIO中断汇聚到GIC(通用中断控制器)的A号中断，GIC再去中断CPU。那么软件处理时就是反过来，先读取GIC获得中断号A，再细分出GPIO中断B，最后判断是哪一个外部芯片发生了中断。 ​ 所以，中断的处
Linux 中断处理与内核线程化——以触摸屏中断为例
Beihai_Van的博客
08-21 1080
本文探讨了 Linux 中断处理的传统模型与中断线程化的理念，以及在触摸屏驱动中为何使用线程化的中断处理。
Linux驱动开发基础__中断的线程化处理
cumtchw
02-08 3307
Linux驱动开发基础__中断的线程化处理
慢慢欣赏linux 中断线程化
shipinsky的博客
12-15 502
硬中断的内容退化成关中断，唤醒中断线程 中断线程包括硬中断+软中断 spin lock 退化成 metux lock
我重新整理了一下报错内容 #include <malloc.h> #include <time.h> #include <sched.h> #include <errno.h> #include <string.h> #include <pthread.h> #include “test.h” #define THREAD_MAX_N 8 #define SIZE_ALIGN (4 * sizeof(size_t)) #define MMAP_THRESHOLD 131052 #define FREE_CYCLE 16 #define THRESHOLD (MMAP_THRESHOLD / 16) #define ITER_TIME 80 #define NANOSEC_PER_SEC 1e9 #define MALLOC_TIME (ITER_TIME * (THRESHOLD / (SIZE_ALIGN + 1))) void free_all(void **ptr) { for (int j = 0; j < FREE_CYCLE; j++) { if(ptr[j]){ free(ptr[j]); ptr[j]=NULL; } } } void *func(void *arg) { int *val = (int *)arg; cpu_set_t mask; struct timespec ts[2]; int num = 0; void *ptr[FREE_CYCLE]; CPU_ZERO(&mask); CPU_SET(0, &mask); if (sched_setaffinity(0, sizeof(mask), &mask) < 0) { t_error("Set CPU affinity of thread %d failure, ERROR:%s\n", *val, strerror(errno)); return NULL; } for (int i = 0; i < ITER_TIME; ++i) { for (size_t size = 0; size < THRESHOLD; size += SIZE_ALIGN + 1) { if (num == FREE_CYCLE) { free_all(ptr); num = 0; } ptr[num] = malloc(size); if (!ptr[num]) { t_error("Thread %d malloc failed for size %u\n", *val, size); *val = errno; return NULL; } num++; } } *val = 0; return NULL; } int main(int argc, char *argv[]) { printf(“start\n”); struct timespec ts[2]; pthread_attr_t attr; pthread_t tids[THREAD_MAX_N]; int t_result[THREAD_MAX_N] = {0}; int flag = 0; int ret; int i; ret = pthread_attr_init(&attr); if (ret < 0) { t_error("Init pthread attribute failed: %s\n", strerror(errno)); return -1; } clock_gettime(CLOCK_REALTIME, ts); for (i = 0; i < THREAD_MAX_N; ++i) { t_result[i] = i; ret = pthread_create(&tids[i], &attr, func, &t_result[i]); if (ret < 0) { t_error("Create pthread %u failed: %s\n", i, strerror(errno)); flag = -1; break; } } for (i = 0; i < THREAD_MAX_N; ++i) { ret = pthread_join(tids[i], NULL); if (ret < 0) { t_error("Join thread %u failed: %s\n", i, strerror(errno)); } } clock_gettime(CLOCK_REALTIME, ts + 1); (void)pthread_attr_destroy(&attr); double cost = (ts[1].tv_sec - ts[0].tv_sec) * NANOSEC_PER_SEC + (ts[1].tv_nsec - ts[0].tv_nsec); if (!flag) { t_printf("Malloc and free %d threads %d times cost %lf s\n", THREAD_MAX_N, MALLOC_TIME, cost / NANOSEC_PER_SEC); t_status = 0; } return t_status; } 这是openharmony中的一个测试程序，产生了以下内核崩溃，openharmony4.1，linux内核版本5.15.74 第一个内核崩溃日志 [ 309.609779][T14@C0] BUG: KFENCE: use-after-free read in rcu_cblist_dequeue+0x28/0x48 [ 309.609779][T14@C0] [ 309.619642][T14@C0] Use-after-free read at 0x00000000da8dbea8 (in kfence-#60): [ 309.626824][T14@C0] rcu_cblist_dequeue+0x28/0x48 [ 309.631497][T14@C0] rcu_core+0x210/0x58c [ 309.635476][T14@C0] rcu_core_si+0x20/0x30 [ 309.639544][T14@C0] __do_softirq+0x170/0x5c8 [ 309.643867][T14@C0] run_ksoftirqd+0x50/0xac [ 309.648111][T14@C0] smpboot_thread_fn+0x2d4/0x3d8 [ 309.652868][T14@C0] kthread+0x170/0x1d4 [ 309.656761][T14@C0] ret_from_fork+0x10/0x20 [ 309.661001][T14@C0] [ 309.663166][T14@C0] kfence-#60: 0x00000000da8dbea8-0x0000000007d404e2, size=232, cache=vm_area_struct [ 309.663166][T14@C0] [ 309.674502][T14@C0] allocated by task 2266 on cpu 0 at 309.577745s: [ 309.680741][T14@C0] vm_area_dup+0x34/0x104 [ 309.684887][T14@C0] __split_vma+0x78/0x260 [ 309.689041][T14@C0] __do_munmap+0xf8/0x724 [ 309.693195][T14@C0] __vm_munmap.llvm.15742267499309760575+0x94/0x180 [ 309.699600][T14@C0] __arm64_sys_munmap+0x50/0x68 [ 309.704276][T14@C0] invoke_syscall+0x6c/0x15c [ 309.708688][T14@C0] el0_svc_common.llvm.9499517201915720397+0xd4/0x120 [ 309.715262][T14@C0] do_el0_svc+0x34/0xac [ 309.719242][T14@C0] el0_svc+0x2c/0x94 [ 309.722963][T14@C0] el0t_64_sync_handler+0x8c/0xf0 [ 309.727809][T14@C0] el0t_64_sync+0x1b4/0x1b8 [ 309.732137][T14@C0] [ 309.734300][T14@C0] freed by task 14 on cpu 0 at 309.594072s: [ 309.740017][T14@C0] __vm_area_free+0xa0/0xe0 [ 309.744343][T14@C0] rcu_do_batch+0x2ac/0x8f4 [ 309.748669][T14@C0] rcu_core+0x210/0x58c [ 309.752649][T14@C0] rcu_core_si+0x20/0x30 [ 309.756717][T14@C0] __do_softirq+0x170/0x5c8 [ 309.761043][T14@C0] run_ksoftirqd+0x50/0xac [ 309.765284][T14@C0] smpboot_thread_fn+0x2d4/0x3d8 [ 309.770041][T14@C0] kthread+0x170/0x1d4 [ 309.773938][T14@C0] ret_from_fork+0x10/0x20 [ 309.778176][T14@C0] [ 309.780345][T14@C0] CPU: 0 PID: 14 Comm: ksoftirqd/0 Tainted: G W O 5.15.74 #1 [ 309.788651][T14@C0] Hardware name: Unisoc UIS7885 Board (DT) [ 309.794276][T14@C0] ================================================================== [ 309.802149][T14@C0] irqsoff_warn: C0 T:<14>ksoftirqd/0 D:200.198ms F:309.601950s E:199.878ms [ 309.810555][T14@C0] irqsoff_warn: C0 disabled IRQ at: [ 309.810555][T14@C0] trace_hardirqs_off+0x190/0x1bc [ 309.810555][T14@C0] _raw_spin_lock_irqsave+0x98/0xc8 [ 309.810555][T14@C0] kfence_handle_page_fault+0xc4/0x320 [ 309.810555][T14@C0] __do_kernel_fault+0x1a0/0x2f4 [ 309.810555][T14@C0] do_bad_area+0x40/0x100 [ 309.839200][T14@C0] irqsoff_warn: C0 enabled IRQ at: [ 309.839200][T14@C0] trace_hardirqs_on+0x19c/0x1c8 [ 309.839200][T14@C0] _raw_spin_unlock_irqrestore+0x38/0x70 [ 309.839200][T14@C0] kfence_handle_page_fault+0x2a8/0x320 [ 309.839200][T14@C0] __do_kernel_fault+0x1a0/0x2f4 [ 309.839200][T14@C0] do_bad_area+0x40/0x100 [ 314.997853][T2080@C0] p->addr = 0x0000000013c9adbe, pc = 0xffffffc0081de8f8, pstate = 0x20400005 [ 315.007246][T2080@C0] sprd_serror_debug: panic hook handler [ 315.007298][T2080@C0] Kernel panic - not syncing: CFI failure (target: 0x7fb3780000) [ 315.020480][T2080@C0] CPU: 0 PID: 2080 Comm: irq/128-dwc3 Tainted: G B W O 5.15.74 #1 [ 315.029220][T2080@C0] Hardware name: Unisoc UIS7885 Board (DT) [ 315.035018][T2080@C0] Call trace: [ 315.038305][T2080@C0] dump_backtrace.cfi_jt+0x0/0x8 [ 315.043236][T2080@C0] show_stack+0x28/0x38 [ 315.047392][T2080@C0] dump_stack_lvl+0x84/0xcc [ 315.051892][T2080@C0] panic+0x180/0x444 [ 315.055787][T2080@C0] __cfi_slowpath_diag+0x1e4/0x230 [ 315.060894][T2080@C0] rcu_do_batch+0x36c/0x8f4 [ 315.065392][T2080@C0] rcu_core+0x210/0x58c [ 315.069547][T2080@C0] rcu_core_si+0x20/0x30 [ 315.073786][T2080@C0] __do_softirq+0x170/0x5c8 [ 315.078287][T2080@C0] do_softirq+0x78/0xf0 [ 315.082441][T2080@C0] __local_bh_enable_ip+0xec/0x138 [ 315.087544][T2080@C0] local_bh_enable+0x28/0x38 [ 315.092134][T2080@C0] dwc3_thread_interrupt+0x12bc/0x15d0 [ 315.097580][T2080@C0] irq_thread_fn+0x54/0xe4 [ 315.101999][T2080@C0] irq_thread+0x1c8/0x3b8 [ 315.106326][T2080@C0] kthread+0x170/0x1d4 [ 315.110392][T2080@C0] ret_from_fork+0x10/0x20 [ 315.114804][T2080@C0] SMP: stopping secondary CPUs [ 315.119802][ T0@C3] unisoc-dump-info: CPU3: stopping… [ 315.125327][ T0@C2] unisoc-dump-info: CPU2: stopping… [ 315.130842][ T0@C1] unisoc-dump-info: CPU1: stopping… [ 315.136368][ T0@C6] unisoc-dump-info: CPU6: stopping… [ 315.142057][ T0@C5] unisoc-dump-info: CPU5: stopping… [ 315.147740][ T0@C4] unisoc-dump-info: CPU4: stopping… [ 315.153429][ T0@C7] unisoc-dump-info: CPU7: stopping… [ 315.159266][T2080@C0] ddr_cur_freq: 3 [ 315.172415][T2080@C0] sysdump: (sysdump_panic_event) ------ in (0) [ 315.178677][T2080@C0] unisoc-mailbox smsg_senddie mailbox send die smsg [ 315.185210][T2080@C0] unisoc-mailbox smsg_senddie mailbox send die smsg [ 316.191817][T2080@C0] sysdump: [ 316.194858][T2080@C0] sysdump: ***************************************************** [ 316.202560][T2080@C0] sysdump: * * [ 316.210263][T2080@C0] sysdump: * Sysdump enter, preparing debug info to dump … * [ 316.217965][T2080@C0] sysdump: * * [ 316.225666][T2080@C0] sysdump: ***************************************************** [ 316.233367][T2080@C0] sysdump: [ 316.236505][T2080@C0] sysdump: reason: CFI failure (target: 0x7fb3780000), sprd_sysdump_info->crash_key: 0 [ 316.246187][T2080@C0] sysdump: [ 316.249230][T2080@C0] sysdump: ***************************************************** [ 316.256931][T2080@C0] sysdump: * * [ 316.264632][T2080@C0] sysdump: * Preparing debug info done … * [ 316.272335][T2080@C0] sysdump: * * [ 316.280036][T2080@C0] sysdump: ***************************************************** [ 316.287738][T2080@C0] sysdump: [ 317.291051][T2080@C0] Kernel Offset: 0x80000 from 0xffffffc008000000 [ 317.297312][T2080@C0] PHYS_OFFSET: 0x80000000 [ 317.301635][T2080@C0] CPU features: 0x2,00000b83,23300e42 [ 317.307000][T2080@C0] Memory Limit: none 第二个内核崩溃日志 [ 2060.258228][T3311@C0] ------------[ cut here ]------------ [ 2060.263654][T3311@C0] kernel BUG at mm/mmap.c:721! [ 2060.268431][T3311@C0] Internal error: Oops - BUG: 0 [#1] PREEMPT SMP [ 2060.274774][T3311@C0] —Die flow print cache!— [ 2060.279467][T3311@C0] [ 2060.281812][T3311@C0] C0 X0: 0xffffff809453cd18: [ 2060.286423][T3311@C0] C0 cd18 95fbf448 ffffff80 00000003 00000000 9453cd28 f fffff80 9453cd28 ffffff80 [ 2060.295724][T3311@C0] C0 cd38 00000000 00000000 0a526818 ffffffc0 00000001 0 0000000 94363a40 ffffff80 [ 2060.305022][T3311@C0] C0 cd58 00000000 00000000 00000000 00000000 00000000 0 0000000 00000000 00000000 [ 2060.314323][T3311@C0] C0 cd78 00000000 00000000 00000000 00000000 00000000 0 0000000 00000000 00000000 [ 2060.323624][T3311@C0] C0 cd98 8a6e0000 0000007f 8a6e8000 0000007f 95410740 f fffff80 93184f68 ffffff80 [ 2060.332925][T3311@C0] C0 cdb8 93184db9 ffffff80 00000000 00000000 93184f88 f fffff80 00000000 00000000 [ 2060.342225][T3311@C0] C0 cdd8 9885e400 ffffff80 00000fc3 00600000 00100073 0 0000000 950c2900 ffffff80 [ 2060.351530][T3311@C0] C0 cdf8 00000000 00000000 00000000 00000000 00000000 0 0000000 947d4810 ffffff80 [ 2060.360828][T3311@C0] [ 2060.363172][T3311@C0] C0 X1: 0xffffff8092fcd278: [ 2060.367784][T3311@C0] C0 d278 00000001 00000002 92fcd230 ffffff80 989d47e0 f fffff80 989d47e0 ffffff80 [ 2060.377084][T3311@C0] C0 d298 747131fc 192c0676 92fcd2a0 ffffff80 00000001 0 0000000 93f90000 ffffff80 [ 2060.386385][T3311@C0] C0 d2b8 00000000 00000000 92fcd2c0 ffffff80 92fcd2c0 f fffff80 00000000 00000000 [ 2060.395684][T3311@C0] C0 d2d8 00000000 00000000 00000000 00000000 00000001 0 0000003 92fcd2a0 ffffff80 [ 2060.404987][T3311@C0] C0 d2f8 947d4860 ffffff80 947d4860 ffffff80 747131fc 8 92d0676 92fcd310 ffffff80 [ 2060.414286][T3311@C0] C0 d318 00000000 00000000 00000000 00000000 00000000 0 0000000 92fcd330 ffffff80 [ 2060.423588][T3311@C0] C0 d338 92fcd330 ffffff80 00000000 00000000 00000000 0 0000000 00000000 00000000 [ 2060.432887][T3311@C0] C0 d358 00000000 00000000 92fcd310 ffffff80 00000000 0 0000000 00000000 00000000 [ 2060.442188][T3311@C0] [ 2060.444532][T3311@C0] C0 X4: 0xffffff8091b9c320: [ 2060.449144][T3311@C0] C0 c320 00000000 00000000 0000000a 00000000 91b9c330 f fffff80 91b9c330 ffffff80 [ 2060.458443][T3311@C0] C0 c340 00000000 00000000 0a526818 ffffffc0 00000000 0 0000000 965d1540 ffffff80 [ 2060.467744][T3311@C0] C0 c360 00000000 00000000 00000000 00000000 00000000 0 0000000 00000000 00000000 [ 2060.477045][T3311@C0] C0 c380 00000000 00000000 00000000 00000000 00000000 0 0000000 00000000 00000000 [ 2060.486344][T3311@C0] C0 c3a0 00000000 00000000 8a6e0000 0000007f 00000000 0 0000000 00000000 00000000 [ 2060.495645][T3311@C0] C0 c3c0 93184db9 ffffff80 00000000 00000000 93184f88 f fffff80 00000000 00000000 [ 2060.504947][T3311@C0] C0 c3e0 9885e400 ffffff80 00000fc3 00600000 00100073 0 0000000 950c2900 ffffff80 [ 2060.514247][T3311@C0] C0 c400 00000000 00000000 00000000 00000000 00000000 0 0000000 947d4850 ffffff80 [ 2060.523548][T3311@C0] [ 2060.525893][T3311@C0] C0 X21: 0xffffff808102ce20: [ 2060.530588][T3311@C0] C0 ce20 93a55150 ffffff80 0a526818 ffffffc0 00000023 0 0000000 89da97c0 ffffff80 [ 2060.539890][T3311@C0] C0 ce40 00000000 00000000 00000000 00000000 00000000 0 0000000 00000000 00000000 [ 2060.549190][T3311@C0] C0 ce60 00000000 00000000 00000000 00000000 00000000 0 0000000 00000000 00000000 [ 2060.558491][T3311@C0] C0 ce80 8a4c0000 0000007f 8a4ca000 0000007f 8102ded0 f fffff80 91b9dc18 ffffff80 [ 2060.567791][T3311@C0] C0 cea0 97c62cd0 ffffff80 91ebe678 ffffff80 95402020 f fffff80 008c56a8 ffffff01 [ 2060.577094][T3311@C0] C0 cec0 9885e400 ffffff80 00000fc3 00600000 00000071 0 0000000 966d6d08 ffffff80 [ 2060.586394][T3311@C0] C0 cee0 00000000 00000000 00000000 00000000 00000009 0 0000000 8102cef8 ffffff80 [ 2060.595694][T3311@C0] C0 cf00 8102cef8 ffffff80 00000000 00000000 0a526818 f fffffc0 00000000 00000000 [ 2060.604994][T3311@C0] [ 2060.607339][T3311@C0] C0 X23: 0xffffff8092fcd220: [ 2060.612036][T3311@C0] C0 d220 947d4ba0 ffffff80 7471301c a92c0676 92fcd230 f fffff80 00000000 00000000 [ 2060.621335][T3311@C0] C0 d240 00000000 00000000 00000000 00000000 92fcd250 f fffff80 92fcd250 ffffff80 [ 2060.630640][T3311@C0] C0 d260 00000000 00000000 00000000 00000000 00000000 0 0000000 00000001 00000002 [ 2060.639938][T3311@C0] C0 d280 92fcd230 ffffff80 989d47e0 ffffff80 989d47e0 f fffff80 747131fc 192c0676 [ 2060.649241][T3311@C0] C0 d2a0 92fcd2a0 ffffff80 00000001 00000000 93f90000 f fffff80 00000000 00000000 [ 2060.658542][T3311@C0] C0 d2c0 92fcd2c0 ffffff80 92fcd2c0 ffffff80 00000000 0 0000000 00000000 00000000 [ 2060.667839][T3311@C0] C0 d2e0 00000000 00000000 00000001 00000003 92fcd2a0 f fffff80 947d4860 ffffff80 [ 2060.677141][T3311@C0] C0 d300 947d4860 ffffff80 747131fc 892d0676 92fcd310 f fffff80 00000000 00000000 [ 2060.686439][T3311@C0] [ 2060.688786][T3311@C0] C0 X25: 0xffffff809453cd18: [ 2060.693483][T3311@C0] C0 cd18 95fbf448 ffffff80 00000003 00000000 9453cd28 f fffff80 9453cd28 ffffff80 [ 2060.702782][T3311@C0] C0 cd38 00000000 00000000 0a526818 ffffffc0 00000001 0 0000000 94363a40 ffffff80 [ 2060.712085][T3311@C0] C0 cd58 00000000 00000000 00000000 00000000 00000000 0 0000000 00000000 00000000 [ 2060.721387][T3311@C0] C0 cd78 00000000 00000000 00000000 00000000 00000000 0 0000000 00000000 00000000 [ 2060.730685][T3311@C0] C0 cd98 8a6e0000 0000007f 8a6e8000 0000007f 95410740 f fffff80 93184f68 ffffff80 [ 2060.739988][T3311@C0] C0 cdb8 93184db9 ffffff80 00000000 00000000 93184f88 f fffff80 00000000 00000000 [ 2060.749288][T3311@C0] C0 cdd8 9885e400 ffffff80 00000fc3 00600000 00100073 0 0000000 950c2900 ffffff80 [ 2060.758590][T3311@C0] C0 cdf8 00000000 00000000 00000000 00000000 00000000 0 0000000 947d4810 ffffff80 [ 2060.767889][T3311@C0] [ 2060.770233][T3311@C0] C0 X26: 0xffffff80954106c0: [ 2060.774932][T3311@C0] C0 06c0 00000000 00000000 00000000 00000000 954106d0 f fffff80 954106d0 ffffff80 [ 2060.784230][T3311@C0] C0 06e0 00000000 00000000 00000000 00000000 07f835a5 0 0000000 00000000 00000000 [ 2060.793533][T3311@C0] C0 0700 00000000 00000000 00000000 00000000 00000000 0 0000000 00000000 00000000 [ 2060.802831][T3311@C0] C0 0720 00000000 00000000 00000000 00000000 00000000 0 0000000 00000000 00000000 [ 2060.812133][T3311@C0] C0 0740 8a6f0000 0000007f 8a6f2000 0000007f 954100e8 f fffff80 9453cd98 ffffff80 [ 2060.821433][T3311@C0] C0 0760 91ebe678 ffffff80 95402f88 ffffff80 931842d8 f fffff80 00008000 00000000 [ 2060.830735][T3311@C0] C0 0780 9885e400 ffffff80 00000f82 04600000 00100070 0 0000000 00000000 00000000 [ 2060.840035][T3311@C0] C0 07a0 00000000 00000000 00000000 00000000 00000000 0 0000000 954107b8 ffffff80 [ 2060.849335][T3311@C0] [ 2060.851680][T3311@C0] C0 X27: 0xffffff8091b9c320: [ 2060.856379][T3311@C0] C0 c320 00000000 00000000 0000000a 00000000 91b9c330 f fffff80 91b9c330 ffffff80 [ 2060.865677][T3311@C0] C0 c340 00000000 00000000 0a526818 ffffffc0 00000000 0 0000000 965d1540 ffffff80 [ 2060.874979][T3311@C0] C0 c360 00000000 00000000 00000000 00000000 00000000 0 0000000 00000000 00000000 [ 2060.884277][T3311@C0] C0 c380 00000000 00000000 00000000 00000000 00000000 0 0000000 00000000 00000000 [ 2060.893578][T3311@C0] C0 c3a0 00000000 00000000 8a6e0000 0000007f 00000000 0 0000000 00000000 00000000 [ 2060.902880][T3311@C0] C0 c3c0 93184db9 ffffff80 00000000 00000000 93184f88 f fffff80 00000000 00000000 [ 2060.912179][T3311@C0] C0 c3e0 9885e400 ffffff80 00000fc3 00600000 00100073 0 0000000 950c2900 ffffff80 [ 2060.921482][T3311@C0] C0 c400 00000000 00000000 00000000 00000000 00000000 0 0000000 947d4850 ffffff80 [ 2060.930780][T3311@C0] [ 2060.933127][T3311@C0] C0 X28: 0xffffff809453cd90: [ 2060.937822][T3311@C0] C0 cd90 00000000 00000000 8a6e0000 0000007f 8a6e8000 0 000007f 95410740 ffffff80 [ 2060.947123][T3311@C0] C0 cdb0 93184f68 ffffff80 93184db9 ffffff80 00000000 0 0000000 93184f88 ffffff80 [ 2060.956427][T3311@C0] C0 cdd0 00000000 00000000 9885e400 ffffff80 00000fc3 0 0600000 00100073 00000000 [ 2060.965726][T3311@C0] C0 cdf0 950c2900 ffffff80 00000000 00000000 00000000 0 0000000 00000000 00000000 [ 2060.975027][T3311@C0] C0 ce10 947d4810 ffffff80 947d4810 ffffff80 92fcd2a0 f fffff80 00000000 00000000 [ 2060.984326][T3311@C0] C0 ce30 0ff14dc6 00000000 00000000 00000000 00000000 0 0000000 00000000 00000000 [ 2060.993628][T3311@C0] C0 ce50 00000000 00000000 00000000 00000000 00000000 0 0000000 00000000 00000000 [ 2061.002929][T3311@C0] C0 ce70 00000000 00000000 00000000 00000000 10680000 0 000007f 106a4000 0000007f [ 2061.012233][T3311@C0] sysdump: dump_die_cb save pregs_die_g ok . [ 2061.018225][T3311@C0] Modules linked in: npu_img_vha(O) sprd_vdsp(O) vpu(O) s prdbt_tty(O) mali_kbase(O) sprd_wlan_combo(O) flash_ic_aw3641(O) chsc5xxx(O) spr d_compr_2stage_dma sprd_dmaengine_pcm snd_soc_sprd_dai snd_soc_sprd_vbc_fe snd_s oc_sprd_vbc_v4 sprd_platform_pcm_routing snd_soc_sprd_tdm snd_soc_sprd_pdm_r2p0 snd_soc_sprd_dummy_codec snd_soc_unisoc_dp_codec snd_soc_sprd_codec_ump9620 snd_ soc_sprd_codec_ump9620_power_dev snd_soc_sprd_codec_ump9620_power snd_soc_sprd_c ard snd_soc_sprd_ocp96011 snd_soc_sprd_pa_aw87390 voice_trigger_irq sprd_cp_dvfs sprd_pmic_wdt sprd_audcp_boot sprd_audcp_dvfs mcdt_hw_r2p0 audio_pipe sprd_apip e sprd_audio_usb_offload audio_dsp_dump audio_sipc audio_mem agdsp_pd [ 2061.080043][T3311@C0] CPU: 0 PID: 3311 Comm: malloc-multi-th Tainted: G W O 5.15.74 #1 [ 2061.089077][T3311@C0] Hardware name: Unisoc UIS7885 Board (DT) [ 2061.094901][T3311@C0] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS B TYPE=–) [ 2061.102723][T3311@C0] pc : __vma_adjust+0xc44/0xc78 [ 2061.107589][T3311@C0] lr : __vma_adjust+0x260/0xc78 [ 2061.112460][T3311@C0] sp : ffffffc0144d3c10 [ 2061.116630][T3311@C0] x29: ffffffc0144d3c70 x28: ffffff809453ce10 x27: ffffff 8091b9c3a0 [ 2061.124628][T3311@C0] x26: ffffff8095410740 x25: ffffff809453cd98 x24: 000000 0000000000 [ 2061.132625][T3311@C0] x23: ffffff8092fcd2a0 x22: 0000000000000000 x21: ffffff 808102cea0 [ 2061.140620][T3311@C0] x20: 0000000000000000 x19: ffffffc00ac5e000 x18: ffffff c0132f5050 [ 2061.148618][T3311@C0] x17: 0000000000000000 x16: 0000000000000000 x15: 000000 0000000008 [ 2061.156613][T3311@C0] x14: 0000000000000000 x13: 0000000000000004 x12: 000000 0c78d2bef3 [ 2061.164612][T3311@C0] x11: 0000007f8a4c0000 x10: 0000007f8a6e0000 x9 : 000000 0000000000 [ 2061.172611][T3311@C0] x8 : 0000000000000000 x7 : 0000000000000000 x6 : 000000 0000000000 [ 2061.180607][T3311@C0] x5 : 0000000000000000 x4 : ffffff8091b9c3a0 x3 : ffffff c0144d3aa0 [ 2061.188604][T3311@C0] x2 : 000000010006b6fe x1 : ffffff8092fcd2f8 x0 : ffffff 809453cd98 [ 2061.196599][T3311@C0] Call trace: [ 2061.199906][T3311@C0] __vma_adjust+0xc44/0xc78 [ 2061.204424][T3311@C0] __split_vma+0x14c/0x260 [ 2061.208855][T3311@C0] __do_munmap+0x168/0x724 [ 2061.213291][T3311@C0] __vm_munmap.llvm.15742267499309760575+0x94/0x180 [ 2061.219896][T3311@C0] __arm64_sys_munmap+0x50/0x68 [ 2061.224761][T3311@C0] invoke_syscall+0x6c/0x15c [ 2061.229369][T3311@C0] el0_svc_common.llvm.9499517201915720397+0xd4/0x120 [ 2061.236150][T3311@C0] do_el0_svc+0x34/0xac [ 2061.240324][T3311@C0] el0_svc+0x2c/0x94 [ 2061.244235][T3311@C0] el0t_64_sync_handler+0x8c/0xf0 [ 2061.249276][T3311@C0] el0t_64_sync+0x1b4/0x1b8 [ 2061.253801][T3311@C0] Code: 9400281d aa1303ea 35fffe40 17fffd49 (d4210000) [ 2061.260749][T3311@C0] —[ end trace 1949c3d540cc5187 ]— [ 2061.287887][T238@C7] [SPRD_PDBG] #---------PDBG LIGHT SLEEP START---------# [ 2061.288611][T3311@C0] p->addr = 0x00000000d7c1766e, pc = 0xffffffc008 1de8f8, pstate = 0x604003c5 [ 2061.294790][T238@C7] [SPRD_PDBG] [SLP_STATE] deep: 0xfffffffffffffecc, light: 0xffffffffffffff20 [ 2061.304250][T3311@C0] sprd_serror_debug: panic hook handler [ 2061.304258][T3311@C0] Kernel panic - not syncing: Oops - BUG: Fatal exception [ 2061.304261][T3311@C0] SMP: stopping secondary CPUs [ 2061.304461][T238@C7] unisoc-dump-info: CPU7: stopping… [ 2061.304900][ T0@C1] unisoc-dump-info: CPU1: stopping… [ 2061.305319][ T0@C6] unisoc-dump-info: CPU6: stopping… [ 2061.305892][ T0@C2] unisoc-dump-info: CPU2: stopping… [ 2061.306313][ T0@C3] unisoc-dump-info: CPU3: stopping… [ 2061.306732][ T0@C5] unisoc-dump-info: CPU5: stopping… [ 2061.307305][ T0@C4] unisoc-dump-info: CPU4: stopping… [ 2061.307871][T3311@C0] ddr_cur_freq: 1 [ 2061.318118][T3311@C0] sysdump: (sysdump_panic_event) ------ in (0) [ 2061.318303][T3311@C0] unisoc-mailbox smsg_senddie mailbox send die smsg [ 2061.318315][T3311@C0] unisoc-mailbox smsg_senddie mailbox send die smsg [ 2062.318360][T3311@C0] sysdump: [ 2062.318362][T3311@C0] sysdump: ********************************************** ******* [ 2062.318365][T3311@C0] sysdump: * * [ 2062.318367][T3311@C0] sysdump: * Sysdump enter, preparing debug info to dump … * [ 2062.318369][T3311@C0] sysdump: * * [ 2062.318372][T3311@C0] sysdump: ********************************************** ******* [ 2062.318373][T3311@C0] sysdump: [ 2062.318392][T3311@C0] sysdump: reason: Oops - BUG: Fatal exception, sprd_sysd ump_info->crash_key: 0 [ 2062.318523][T3311@C0] sysdump: [ 2062.318527][T3311@C0] sysdump: ********************************************** ******* [ 2062.318528][T3311@C0] sysdump: * * [ 2062.318530][T3311@C0] sysdump: * Preparing debug info done … * [ 2062.318532][T3311@C0] sysdump: * * [ 2062.318535][T3311@C0] sysdump: ********************************************** ******* [ 2062.318536][T3311@C0] sysdump: [ 2063.318737][T3311@C0] Kernel Offset: 0x80000 from 0xffffffc008000000 [ 2063.318747][T3311@C0] PHYS_OFFSET: 0x80000000 [ 2063.318749][T3311@C0] CPU features: 0x2,00000b83,23300e42 [ 2063.318756][T3311@C0] Memory Limit: none static void __insert_vm_struct(struct mm_struct *mm, struct vm_area_struct *vma) { struct vm_area_struct *prev; struct rb_node **rb_link, *rb_parent; if (find_vma_links(mm, vma->vm_start, vma->vm_end, &prev, &rb_link, &rb_parent)) BUG(); __vma_link(mm, vma, prev, rb_link, rb_parent); mm->map_count++; } mmap.c 721代码如上 BUG();，如何修复这个问题 第3个内核崩溃 [ 102.427572][T14@C0] refcount_t: underflow; use-after-free. [ 102.433062][T14@C0] WARNING: CPU: 0 PID: 14 at lib/refcount.c:28 refcount_war n_saturate+0x110/0x154 [ 102.442008][T14@C0] Modules linked in: npu_img_vha(O) sprd_vdsp(O) vpu(O) spr dbt_tty(O) mali_kbase(O) sprd_wlan_combo(O) flash_ic_aw3641(O) chsc5xxx(O) sprd_ compr_2stage_dma sprd_dmaengine_pcm snd_soc_sprd_dai snd_soc_sprd_vbc_fe snd_soc _sprd_vbc_v4 sprd_platform_pcm_routing snd_soc_sprd_tdm snd_soc_sprd_pdm_r2p0 sn d_soc_sprd_dummy_codec snd_soc_unisoc_dp_codec snd_soc_sprd_codec_ump9620 snd_so c_sprd_codec_ump9620_power_dev snd_soc_sprd_codec_ump9620_power snd_soc_sprd_car d snd_soc_sprd_ocp96011 snd_soc_sprd_pa_aw87390 voice_trigger_irq sprd_cp_dvfs s prd_pmic_wdt sprd_audcp_boot sprd_audcp_dvfs mcdt_hw_r2p0 audio_pipe sprd_apipe sprd_audio_usb_offload audio_dsp_dump audio_sipc audio_mem agdsp_pd [ 102.503378][T14@C0] CPU: 0 PID: 14 Comm: ksoftirqd/0 Tainted: G W O 5.15.74 #1 [ 102.511681][T14@C0] Hardware name: Unisoc UIS7885 Board (DT) [ 102.517307][T14@C0] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTY PE=--) [ 102.524921][T14@C0] pc : refcount_warn_saturate+0x110/0x154 [ 102.530460][T14@C0] lr : refcount_warn_saturate+0x110/0x154 [ 102.535998][T14@C0] sp : ffffffc00b0bbc00 [ 102.539982][T14@C0] x29: ffffffc00b0bbc00 x28: ffffff8080352abc x27: 00000000 00000000 [ 102.547768][T14@C0] x26: ffffff8080352610 x25: ffffffc00ac37000 x24: ffffffc0 098541b0 [ 102.555557][T14@C0] x23: ffffff8080352600 x22: 0000000000000006 x21: 00000000 0000000a [ 102.563344][T14@C0] x20: ffffff817cf03dc0 x19: ffffff808bc0a658 x18: ffffffc0 0b08d048 [ 102.571132][T14@C0] x17: ffffffffffffffff x16: 0000000000000004 x15: 00000000 00000004 [ 102.578924][T14@C0] x14: 000000000000074a x13: ffffffc00abda7b0 x12: 00000000 00000003 [ 102.586709][T14@C0] x11: 000000010000574a x10: 0000000000000101 x9 : 0b06cdfe fb609000 [ 102.594498][T14@C0] x8 : 0b06cdfefb609000 x7 : 545b5d3237353732 x6 : 342e3230 3120205b [ 102.602290][T14@C0] x5 : ffffffc00aef35b4 x4 : ffffffc00b0bb9b7 x3 : 00000000 00000000 [ 102.610076][T14@C0] x2 : 0000000000000000 x1 : ffffffc00b0bb9a0 x0 : 00000000 00000026 [ 102.617865][T14@C0] Call trace: [ 102.620981][T14@C0] refcount_warn_saturate+0x110/0x154 [ 102.626174][T14@C0] __vm_area_free+0xbc/0xe0 [ 102.630498][T14@C0] rcu_do_batch+0x2ac/0x8f4 [ 102.634826][T14@C0] rcu_core+0x210/0x58c [ 102.638806][T14@C0] rcu_core_si+0x20/0x30 [ 102.642875][T14@C0] __do_softirq+0x170/0x5c8 [ 102.647203][T14@C0] run_ksoftirqd+0x50/0xac [ 102.651442][T14@C0] smpboot_thread_fn+0x2d4/0x3d8 [ 102.656202][T14@C0] kthread+0x170/0x1d4 [ 102.660096][T14@C0] ret_from_fork+0x10/0x20 [ 102.664338][T14@C0] ---[ end trace 4990effe52f21971 ]--- [ 102.669634][T14@C0] irqsoff_warn: C0 T:<14>ksoftirqd/0 D:236.601ms F:102.4330 31s E:236.193ms [ 102.678027][T14@C0] irqsoff_warn: C0 disabled IRQ at: [ 102.678027][T14@C0] trace_hardirqs_off_finish+0x22c/0x270 [ 102.678027][T14@C0] arm64_enter_el1_dbg+0x54/0x70 [ 102.678027][T14@C0] el1_dbg+0x2c/0x68 [ 102.678027][T14@C0] el1h_64_sync_handler+0x48/0xa4 [ 102.678027][T14@C0] el1h_64_sync+0x7c/0x80 [ 102.705538][T14@C0] irqsoff_warn: C0 enabled IRQ at: [ 102.705538][T14@C0] trace_hardirqs_on+0x19c/0x1c8 [ 102.705538][T14@C0] exit_to_kernel_mode+0x48/0x5c [ 102.705538][T14@C0] exit_el1_irq_or_nmi+0x18/0x28 [ 102.705538][T14@C0] el1_interrupt+0x54/0x68 [ 102.705538][T14@C0] el1h_64_irq_handler+0x20/0x30 [ 103.157689][T2335@C0] Unable to handle kernel paging request at virtual addre ss ff95d29bb82a9843 [ 103.166489][T2335@C0] Mem abort info: [ 103.170056][T2335@C0] ESR = 0x96000004 [ 103.174117][T2335@C0] EC = 0x25: DABT (current EL), IL = 32 bits [ 103.180298][T2335@C0] SET = 0, FnV = 0 [ 103.184276][T2335@C0] EA = 0, S1PTW = 0 [ 103.188287][T2335@C0] FSC = 0x04: level 0 translation fault [ 103.194013][T2335@C0] Data abort info: [ 103.197724][T2335@C0] ISV = 0, ISS = 0x00000004 [ 103.202388][T2335@C0] CM = 0, WnR = 0 [ 103.206187][T2335@C0] [ff95d29bb82a9843] address between user and kernel addr ess ranges [ 103.214172][T2335@C0] Internal error: Oops: 96000004 [#1] PREEMPT SMP [ 103.220514][T2335@C0] ---Die flow print cache!--- [ 103.225185][T2335@C0] [ 103.227520][T2335@C0] C0 X0: 0xffffff8080005c00: [ 103.232113][T2335@C0] C0 5c00 801e0d80 ffffff80 00000000 00000000 00000000 0 0000000 00000000 00000000 [ 103.241368][T2335@C0] C0 5c20 00000000 00000000 00000000 00000000 00000000 0 0000000 00000000 00000000 [ 103.250628][T2335@C0] C0 5c40 00000000 00000000 00000000 00000000 00000000 0 0000000 00000000 00000000 [ 103.259888][T2335@C0] C0 5c60 00000000 00000000 00000000 00000000 00000000 0 0000000 00000000 00000000 [ 103.269148][T2335@C0] C0 5c80 0ab6bac0 ffffffc0 44040000 00000000 00000005 0 0000000 000000e8 000000e8 [ 103.278407][T2335@C0] C0 5ca0 1a7b9612 00000701 00000070 0000001e 00010023 0 0010023 00000011 00040000 [ 103.287668][T2335@C0] C0 5cc0 00000001 00000000 00000000 00000000 000000e8 0 0000008 00000000 00000000 [ 103.296927][T2335@C0] C0 5ce0 0a41d0d1 ffffffc0 80005b68 ffffff80 80005e68 f fffff80 0a41d0d1 ffffffc0 [ 103.306184][T2335@C0] [ 103.308519][T2335@C0] C0 X10: 0xffffff808bfb9290: [ 103.313197][T2335@C0] C0 9290 00000000 00000000 00000000 00000000 00000000 0 0000000 00000000 00000000 [ 103.322454][T2335@C0] C0 92b0 00000000 00000000 00000000 00000000 00000000 0 0000000 00000000 00000000 [ 103.331716][T2335@C0] C0 92d0 00000000 00000000 00000000 00000000 00000000 0 0000000 00000000 00000000 [ 103.340975][T2335@C0] C0 92f0 00000000 00000000 00000000 00000000 00000008 0 0000000 82917000 00000000 [ 103.350235][T2335@C0] C0 9310 00000001 00000001 1388d000 ffffffc0 1388d0d8 f fffffc0 00000000 00000000 [ 103.359494][T2335@C0] C0 9330 13be8000 ffffffc0 00000001 00400040 00000000 0 0000001 00000000 00000000 [ 103.368753][T2335@C0] C0 9350 00000030 00000000 00000000 00000009 ffff3fc7 0 0000000 94d62600 ffffff80 [ 103.378012][T2335@C0] C0 9370 00000001 00000000 00000001 00000078 00000078 0 0000078 00000000 00000000 [ 103.387272][T2335@C0] [ 103.389606][T2335@C0] C0 X20: 0xffffff8080005c00: [ 103.394283][T2335@C0] C0 5c00 801e0d80 ffffff80 00000000 00000000 00000000 0 0000000 00000000 00000000 [ 103.403541][T2335@C0] C0 5c20 00000000 00000000 00000000 00000000 00000000 0 0000000 00000000 00000000 [ 103.412800][T2335@C0] C0 5c40 00000000 00000000 00000000 00000000 00000000 0 0000000 00000000 00000000 [ 103.422060][T2335@C0] C0 5c60 00000000 00000000 00000000 00000000 00000000 0 0000000 00000000 00000000 [ 103.431323][T2335@C0] C0 5c80 0ab6bac0 ffffffc0 44040000 00000000 00000005 0 0000000 000000e8 000000e8 [ 103.440581][T2335@C0] C0 5ca0 1a7b9612 00000701 00000070 0000001e 00010023 0 0010023 00000011 00040000 [ 103.449839][T2335@C0] C0 5cc0 00000001 00000000 00000000 00000000 000000e8 0 0000008 00000000 00000000 [ 103.459099][T2335@C0] C0 5ce0 0a41d0d1 ffffffc0 80005b68 ffffff80 80005e68 f fffff80 0a41d0d1 ffffffc0 [ 103.468357][T2335@C0] [ 103.470692][T2335@C0] C0 X25: 0xffffff808829f0e8: [ 103.475370][T2335@C0] C0 f0e8 00000000 00000000 94a58dc0 ffffff80 00000000 0 0000000 00000000 00000000 [ 103.484628][T2335@C0] C0 f108 00000000 00000000 00000000 00000000 00000000 0 0000000 00000000 00000000 [ 103.493887][T2335@C0] C0 f128 00000000 00000000 00000000 00000000 9e6f0000 0 000007f 9e700000 0000007f [ 103.503149][T2335@C0] C0 f148 923f81d0 ffffff80 8f6f6e80 ffffff80 8f6f6ea1 f fffff80 00000000 00000000 [ 103.512409][T2335@C0] C0 f168 00000000 00000000 0001f000 00000000 8a438000 f fffff80 00000fc3 00600000 [ 103.521669][T2335@C0] C0 f188 00100073 00000000 93c51f80 ffffff80 00000000 0 0000000 00000000 00000000 [ 103.530926][T2335@C0] C0 f1a8 00000000 00000000 93c6a5d0 ffffff80 93c6a5d0 f fffff80 978660e0 ffffff80 [ 103.540188][T2335@C0] C0 f1c8 00000000 00000000 07f9e6f0 00000000 00000000 0 0000000 00000000 00000000 [ 103.549444][T2335@C0] [ 103.551778][T2335@C0] C0 X26: 0xffffff808829f0d8: [ 103.556454][T2335@C0] C0 f0d8 00000000 00000000 0a526818 ffffffc0 00000000 0 0000000 94a58dc0 ffffff80 [ 103.565715][T2335@C0] C0 f0f8 00000000 00000000 00000000 00000000 00000000 0 0000000 00000000 00000000 [ 103.574974][T2335@C0] C0 f118 00000000 00000000 00000000 00000000 00000000 0 0000000 00000000 00000000 [ 103.584235][T2335@C0] C0 f138 9e6f0000 0000007f 9e700000 0000007f 923f81d0 f fffff80 8f6f6e80 ffffff80 [ 103.593492][T2335@C0] C0 f158 8f6f6ea1 ffffff80 00000000 00000000 00000000 0 0000000 0001f000 00000000 [ 103.602754][T2335@C0] C0 f178 8a438000 ffffff80 00000fc3 00600000 00100073 0 0000000 93c51f80 ffffff80 [ 103.612011][T2335@C0] C0 f198 00000000 00000000 00000000 00000000 00000000 0 0000000 93c6a5d0 ffffff80 [ 103.621271][T2335@C0] C0 f1b8 93c6a5d0 ffffff80 978660e0 ffffff80 00000000 0 0000000 07f9e6f0 00000000 [ 103.630531][T2335@C0] [ 103.632865][T2335@C0] C0 X28: 0xffffff808bfb9280: [ 103.637540][T2335@C0] C0 9280 00000000 00000000 00000000 00000000 00000000 0 0000000 00000000 00000000 [ 103.646800][T2335@C0] C0 92a0 00000000 00000000 00000000 00000000 00000000 0 0000000 00000000 00000000 [ 103.656061][T2335@C0] C0 92c0 00000000 00000000 00000000 00000000 00000000 0 0000000 00000000 00000000 [ 103.665320][T2335@C0] C0 92e0 00000000 00000000 00000000 00000000 00000000 0 0000000 00000000 00000000 [ 103.674580][T2335@C0] C0 9300 00000008 00000000 82917000 00000000 00000001 0 0000001 1388d000 ffffffc0 [ 103.683840][T2335@C0] C0 9320 1388d0d8 ffffffc0 00000000 00000000 13be8000 f fffffc0 00000001 00400040 [ 103.693101][T2335@C0] C0 9340 00000000 00000001 00000000 00000000 00000030 0 0000000 00000000 00000009 [ 103.702359][T2335@C0] C0 9360 ffff3fc7 00000000 94d62600 ffffff80 00000001 0 0000000 00000001 00000078 [ 103.711621][T2335@C0] sysdump: dump_die_cb save pregs_die_g ok . [ 103.717589][T2335@C0] Modules linked in: npu_img_vha(O) sprd_vdsp(O) vpu(O) s prdbt_tty(O) mali_kbase(O) sprd_wlan_combo(O) flash_ic_aw3641(O) chsc5xxx(O) spr d_compr_2stage_dma sprd_dmaengine_pcm snd_soc_sprd_dai snd_soc_sprd_vbc_fe snd_s oc_sprd_vbc_v4 sprd_platform_pcm_routing snd_soc_sprd_tdm snd_soc_sprd_pdm_r2p0 snd_soc_sprd_dummy_codec snd_soc_unisoc_dp_codec snd_soc_sprd_codec_ump9620 snd_ soc_sprd_codec_ump9620_power_dev snd_soc_sprd_codec_ump9620_power snd_soc_sprd_c ard snd_soc_sprd_ocp96011 snd_soc_sprd_pa_aw87390 voice_trigger_irq sprd_cp_dvfs sprd_pmic_wdt sprd_audcp_boot sprd_audcp_dvfs mcdt_hw_r2p0 audio_pipe sprd_apip e sprd_audio_usb_offload audio_dsp_dump audio_sipc audio_mem agdsp_pd [ 103.779131][T2335@C0] CPU: 0 PID: 2335 Comm: malloc-multi-th Tainted: G W O 5.15.74 #1 [ 103.788124][T2335@C0] Hardware name: Unisoc UIS7885 Board (DT) [ 103.793924][T2335@C0] pstate: a0400005 (NzCv daif +PAN -UAO -TCO -DIT -SSBS B TYPE=--) [ 103.801712][T2335@C0] pc : kmem_cache_alloc+0x128/0x3dc [ 103.806904][T2335@C0] lr : vm_area_alloc+0x34/0xac [ 103.811664][T2335@C0] sp : ffffffc013bebb60 [ 103.815818][T2335@C0] x29: ffffffc013bebb70 x28: ffffff808bfb9300 x27: ffffff c00aec4000 [ 103.823780][T2335@C0] x26: ffffff808829f158 x25: ffffff808829f168 x24: ec95d2 9bb82a97d3 [ 103.831741][T2335@C0] x23: ffffffc0081d7e6c x22: 0000000000000000 x21: ffffff c0081d7e6c [ 103.839702][T2335@C0] x20: ffffff8080005c80 x19: 0000000000000cc0 x18: ffffff c01388d060 [ 103.847663][T2335@C0] x17: 0000000000000000 x16: ffffffc009828428 x15: ffffff c00a871000 [ 103.855629][T2335@C0] x14: 0000000000000001 x13: 0000000000000004 x12: ac2a12 1038d5682c [ 103.863587][T2335@C0] x11: 000000009fdd27de x10: ffffff808bfb9310 x9 : ff95d2 9bb82a9843 [ 103.871549][T2335@C0] x8 : 00000000006087c0 x7 : 0000000007f9e6e9 x6 : 000000 0000000000 [ 103.879511][T2335@C0] x5 : 0000000000000000 x4 : 0000000007f9e6f0 x3 : 000000 00006087e0 [ 103.887472][T2335@C0] x2 : 0000000000000000 x1 : 0000000000000cc0 x0 : ffffff 8080005c80 [ 103.895435][T2335@C0] Call trace: [ 103.898722][T2335@C0] kmem_cache_alloc+0x128/0x3dc [ 103.903569][T2335@C0] vm_area_alloc+0x34/0xac [ 103.907981][T2335@C0] mmap_region+0x268/0x728 [ 103.912394][T2335@C0] do_mmap+0x3d4/0x540 [ 103.916462][T2335@C0] vm_mmap_pgoff+0xd0/0x234 [ 103.920962][T2335@C0] ksys_mmap_pgoff+0xbc/0x108 [ 103.925634][T2335@C0] __arm64_sys_mmap+0x44/0x54 [ 103.930309][T2335@C0] invoke_syscall+0x6c/0x15c [ 103.934897][T2335@C0] el0_svc_common.llvm.9499517201915720397+0xd4/0x120 [ 103.941644][T2335@C0] do_el0_svc+0x34/0xac [ 103.945800][T2335@C0] el0_svc+0x2c/0x94 [ 103.949694][T2335@C0] el0t_64_sync_handler+0x8c/0xf0 [ 103.954712][T2335@C0] el0t_64_sync+0x1b4/0x1b8 [ 103.959217][T2335@C0] Code: f9406e8c 91008103 8b8a2129 9100438a (f940012b) [ 103.966137][T2335@C0] ---[ end trace 4990effe52f21972 ]--- [ 103.990260][T2335@C0] <panic> p->addr = 0x0000000094d0f85d, pc = 0xffffffc008 1de8f8, pstate = 0x604000c5 [ 103.999625][T2335@C0] sprd_serror_debug: panic hook handler [ 103.999632][T2335@C0] Kernel panic - not syncing: Oops: Fatal exception [ 104.011742][T2335@C0] SMP: stopping secondary CPUs [ 104.016964][ T0@C2] unisoc-dump-info: CPU2: stopping... [ 104.022517][ T0@C3] unisoc-dump-info: CPU3: stopping... [ 104.028067][ T0@C1] unisoc-dump-info: CPU1: stopping... [ 104.033611][ T0@C4] unisoc-dump-info: CPU4: stopping... [ 104.039306][ T0@C6] unisoc-dump-info: CPU6: stopping... [ 104.045004][ T0@C5] unisoc-dump-info: CPU5: stopping... [ 104.050702][ T0@C7] unisoc-dump-info: CPU7: stopping... [ 104.056541][T2335@C0] ddr_cur_freq: 1 [ 104.070830][T2335@C0] sysdump: (sysdump_panic_event) ------ in (0) [ 104.077102][T2335@C0] unisoc-mailbox smsg_senddie mailbox send die smsg [ 104.083639][T2335@C0] unisoc-mailbox smsg_senddie mailbox send die smsg [ 105.090244][T2335@C0] sysdump: [ 105.093284][T2335@C0] sysdump: ********************************************** ******* [ 105.100987][T2335@C0] sysdump: * * [ 105.108689][T2335@C0] sysdump: * Sysdump enter, preparing debug info to dump ... * [ 105.116391][T2335@C0] sysdump: * * [ 105.124093][T2335@C0] sysdump: ********************************************** ******* [ 105.131794][T2335@C0] sysdump: [ 105.134925][T2335@C0] sysdump: reason: Oops: Fatal exception, sprd_sysdump_in fo->crash_key: 0 [ 105.143524][T2335@C0] sysdump: [ 105.146569][T2335@C0] sysdump: ********************************************** ******* [ 105.154270][T2335@C0] sysdump: * * [ 105.161972][T2335@C0] sysdump: * Preparing debug info done ... * [ 105.169672][T2335@C0] sysdump: * * [ 105.177374][T2335@C0] sysdump: ********************************************** ******* [ 105.185077][T2335@C0] sysdump: [ 106.188392][T2335@C0] Kernel Offset: 0x80000 from 0xffffffc008000000 [ 106.194662][T2335@C0] PHYS_OFFSET: 0x80000000 [ 106.198981][T2335@C0] CPU features: 0x2,00000b83,23300e42 [ 106.204349][T2335@C0] Memory Limit: none
最新发布
07-04
我们面对的是一个多线程的内存分配测试程序导致的内核崩溃问题。崩溃日志显示有三种类型的问题： 1. KFENCE检测到的use-after-free（在rcu回调中） 2. mmap.c中的BUG()触发（在__insert_vm_struct函数中） 3. ...
评论
添加红包

请填写红包祝福语或标题

个

红包个数最小为10个

元

红包金额最低5元

当前余额3.43元 前往充值 >
需支付：10.00元
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付元
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明：

1.余额是钱包充值的虚拟货币，按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载，可以购买VIP、付费专栏及课程。

余额充值