From nobody Fri Sep 25 12:05:33 2026 Received: from smtp.kernel.org (aws-us-west-2-korg-mail-alma10-1.taild15c8.ts.net [100.103.45.18]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 45A9B377034; Sun, 13 Sep 2026 02:35:10 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=100.103.45.18 ARC-Seal: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1789266913; cv=none; b=L+7+eKxM/AGo5RP9F75E5VoMIVjd9JcXM5R0meJfYed9xdSUIc/SSbSxQylEmk3nm2pTVX2bjZDOx2wSf+6LShNQs9sPopo9RyGhlpVmE/D2GRGI6myaU2F5YEMG8tA8A5KvjEvCXSAy4ltiUwiltfGYebQXz1i+FS7y5kL6E0E= ARC-Message-Signature: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1789266913; c=relaxed/simple; bh=V56pcjVbjnrgiT4Lt3i6Nlu4CZC5Vrc81Cs1aDymu7k=; h=From:To:Cc:Subject:Date:Message-ID:In-Reply-To:References: MIME-Version; b=adJyuvMVr+JvrZ8X6Tp6U2srniXHE7RIffaqJYaf067y82/4EySywmzuwTqOiKjqXHG3+tgQeB7zCpes9KMtz2Crttc9m7hL2RKDk9sXWHGvsebX+rI62bUh1BQoja0R/pJc5D3Z9WM7gP9n+PBuGRmQzTuaeLc49a5G8WjWZ0o= ARC-Authentication-Results: i=1; smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org header.b=cCsRJOSZ; arc=none smtp.client-ip=100.103.45.18 Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org header.b="cCsRJOSZ" Received: by smtp.kernel.org (Postfix) with ESMTPSA id 9AAE21F00893; Sun, 13 Sep 2026 02:35:06 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=kernel.org; s=k20260515; t=1789266909; bh=40PpvyNz+FTvCz0PJ/eeZnY/X6I0+eLUGCvJDO1X3XQ=; h=From:To:Cc:Subject:Date:In-Reply-To:References; b=cCsRJOSZm4GI6feyOC0ZEGGxDHoXU48laBb0QhJtJk48iNsAKPbchyOjQtLritFZv TcdAYrP67+3WUlRH9FEHbg4Np0y9621OZhww3GBvjoyNxlPB4uYRCwq1oxGmhb25uS vaPLWTMb1tN5q0Idt+NZYwNO23Qm2+hyRbHvohDblCoV8FySP0iueNsPVV1JU7hXUu nkiEdbO468bArYFskNTgslKTsQ+Kl2I6ZGjKuce1ljnN+/2TE+XzGutbb934QL8mrK HcAmQcB3PulLD8dr6xW6PDCzEtFTW0KOp/V0cyzAv7YTkxricxxDIt6mWCVaib9pVR scvWxFX0SLvKQ== From: Arnaldo Carvalho de Melo To: Namhyung Kim Cc: Ingo Molnar , Thomas Gleixner , James Clark , Jiri Olsa , Ian Rogers , Adrian Hunter , Clark Williams , linux-kernel@vger.kernel.org, linux-perf-users@vger.kernel.org, Arnaldo Carvalho de Melo Subject: [PATCH v1 1/8] perf test: Skip data_type_profiling when the PMU cannot record memory events Date: Sat, 12 Sep 2026 23:34:52 -0300 Message-ID: <20260913023459.112654-2-acme@kernel.org> X-Mailer: git-send-email 2.55.0 In-Reply-To: <20260913023459.112654-1-acme@kernel.org> References: <20260913023459.112654-1-acme@kernel.org> Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8" From: Arnaldo Carvalho de Melo The test records with 'perf mem record' in per-thread mode and its only guard matches one specific message: perf mem record -o /dev/null -- true 2>&1 | \ grep -q "failed: no PMU supports the memory events" && exit 2 A PMU that has memory events but refuses them per-thread falls through it, and AMD IBS does: $ perf mem record -o /dev/null -- true Error: Failure to open event 'ibs_op/ldlat=3D0/u' on PMU 'ibs_op' which will be = removed. Invalid event (ibs_op/ldlat=3D0/u) in per-thread mode, enable system wide= with '-a'. Error: Failure to open any events for recording. What follows is not a skip either. The script runs under 'set -e', so the bare 'perf mem record' in test_basic_annotate() aborts it through the EXIT trap, which reports a signal that never happened and exits 1: Basic Rust perf annotate test Unexpected signal in test_basic_annotate so 'perf test' turns "this PMU cannot record these events" into a test failure: $ perf test "data type profiling" 87: perf data type profiling tests : FAILED! The 'if [ "x$?" !=3D "x0" ]' right below the record was meant to report "[Failed: perf record]" and carry on with the other cases, but under 'set -e' it is dead code: the shell is gone before it is reached. The same goes for the 'perf annotate' call below it. Skip when a trivial per-thread 'perf mem record' fails, and put both commands in the condition of an 'if', where 'set -e' leaves them alone, so that the reporting works for the cases where only one workload cannot be recorded or annotated: $ perf test "data type profiling" 87: perf data type profiling tests : Skip and, with just the new skip guard disabled on the same box, every case reports its failure instead of the first one aborting the run: Basic Rust perf annotate test Basic annotate [Failed: perf record] Pipe Rust perf annotate test Pipe annotate [Failed: perf record] Basic C perf annotate test Basic annotate [Failed: perf record] Pipe C perf annotate test Pipe annotate [Failed: perf record] Assisted-by: LLM Signed-off-by: Arnaldo Carvalho de Melo --- tools/perf/tests/shell/data_type_profiling.sh | 46 +++++++++++++++---- 1 file changed, 36 insertions(+), 10 deletions(-) diff --git a/tools/perf/tests/shell/data_type_profiling.sh b/tools/perf/tes= ts/shell/data_type_profiling.sh index eca694600a0478d2..a916c410274aa888 100755 --- a/tools/perf/tests/shell/data_type_profiling.sh +++ b/tools/perf/tests/shell/data_type_profiling.sh @@ -19,6 +19,15 @@ perfout=3D$(mktemp /tmp/__perf_test.perf.out.XXXXX) perf mem record -o /dev/null -- true 2>&1 | \ grep -q "failed: no PMU supports the memory events" && exit 2 =20 +# Skip if per-thread mem record is not supported on this PMU (e.g. AMD IBS +# needs system-wide '-a'): it is what the test records with below, and a +# failing record must not be reported as a test failure. +if ! perf mem record -o /dev/null -- true 2>/dev/null +then + echo "Skip: cannot record memory events on this PMU" + exit 2 +fi + cleanup() { rm -rf "${perfdata}" "${perfout}" rm -rf "${perfdata}".old @@ -52,25 +61,42 @@ test_basic_annotate() { index=3D1 ;; esac =20 + # Under 'set -e' a bare failing command aborts the script through the EX= IT + # trap, so the commands that report a failure have to be the condition of + # an 'if' for that reporting to ever happen. if [ "x${mode}" =3D=3D "xBasic" ] then - perf mem record -o "${perfdata}" ${testprogs[$index]} 2> /dev/null + if ! perf mem record -o "${perfdata}" ${testprogs[$index]} 2> /dev/null + then + echo "${mode} annotate [Failed: perf record]" + err=3D1 + return + fi else - perf mem record -o - ${testprogs[$index]} 2> /dev/null > "${perfdata}" - fi - if [ "x$?" !=3D "x0" ] - then - echo "${mode} annotate [Failed: perf record]" - err=3D1 - return + if ! perf mem record -o - ${testprogs[$index]} 2> /dev/null > "${perfd= ata}" + then + echo "${mode} annotate [Failed: perf record]" + err=3D1 + return + fi fi =20 # Generate the annotated output file if [ "x${mode}" =3D=3D "xBasic" ] then - perf annotate --code-with-type -i "${perfdata}" --stdio --percent-limi= t 1 2> /dev/null > "${perfout}" + if ! perf annotate --code-with-type -i "${perfdata}" --stdio --percent= -limit 1 2> /dev/null > "${perfout}" + then + echo "${mode} annotate [Failed: perf annotate]" + err=3D1 + return + fi else - perf annotate --code-with-type -i - --stdio 2> /dev/null --percent-lim= it 1 < "${perfdata}" > "${perfout}" + if ! perf annotate --code-with-type -i - --stdio 2> /dev/null --percen= t-limit 1 < "${perfdata}" > "${perfout}" + then + echo "${mode} annotate [Failed: perf annotate]" + err=3D1 + return + fi fi =20 # check if it has the target data type --=20 2.55.0 From nobody Fri Sep 25 12:05:33 2026 Received: from smtp.kernel.org (aws-us-west-2-korg-mail-alma10-1.taild15c8.ts.net [100.103.45.18]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id B8337377AAD; Sun, 13 Sep 2026 02:35:14 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=100.103.45.18 ARC-Seal: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1789266916; cv=none; b=rtazghv7PigkRxiN/LW6HUOcoZAcj8PmlRLQ3oL+Ye9cU14l6UmX/rUHa0Qhp1SnCJk6t3Sgz/Pj2avovPzUNZXnswn6/ZYLy6ZzNkZPRa8xVj8o++O0Vqztk9nAyMsVvhVww6igOPJel6EJOrckTnrUAwqHLdrcPwJiWIf6u1o= ARC-Message-Signature: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1789266916; c=relaxed/simple; bh=0Kw5c/Ef2VOMKNkznl7gEqTVKVPPQ3+x6DEcq5TdD/g=; h=From:To:Cc:Subject:Date:Message-ID:In-Reply-To:References: MIME-Version; b=VLKNEiNRJy4lFmKWRhUYThJ3G2pBaTMHd0x98AronzaCoARal1TFd/fEPFSKxF9ausnFyMrYkrRGltREWrPbC3ekzr4PgVBHOt6/PtU0GW7tjg/k1hSSF+vDeuN2WFitcda1EWgNFMJOwBRcxXsyUJn4pS/cXZ0prd+77q5kttI= ARC-Authentication-Results: i=1; smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org header.b=RKTzn+zu; arc=none smtp.client-ip=100.103.45.18 Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org header.b="RKTzn+zu" Received: by smtp.kernel.org (Postfix) with ESMTPSA id 73A5F1F000FF; Sun, 13 Sep 2026 02:35:10 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=kernel.org; s=k20260515; t=1789266914; bh=nYpBDvQOfe+G/O4OkQ/+MFAO+g+JcImd/0blQj3xZPQ=; h=From:To:Cc:Subject:Date:In-Reply-To:References; b=RKTzn+zu38copCgaH3u5CZtuCb9JUQ6h56c0++j56sIUMmKWNijZMXrjiZD9caxMy BzzQvLcKmf1CkaQRT1Atkw+Ugd2sYXV4FrVdgOOBSa843rPC0ZL41lxck44PJAeNax 8lJ+Y+9/370nM1d/X7t0ItocjL8ZnZLBdrrkGgPa8ccaafpTRtWs61+Adl+CFbQ0sg sYMOrp8yTCRcM+9/qbtz5IrddxQBo5qP1Ko40ykh+hUC675iggjLEeXpUmSThLnV/C 3vV24id/Hxx6Qnju8VZd5Y6H1n5ZH8pyew8rXZRQHJoes59LYIaC8xV3iBYyUBKUts Q+N3qXrZpuopA== From: Arnaldo Carvalho de Melo To: Namhyung Kim Cc: Ingo Molnar , Thomas Gleixner , James Clark , Jiri Olsa , Ian Rogers , Adrian Hunter , Clark Williams , linux-kernel@vger.kernel.org, linux-perf-users@vger.kernel.org, Arnaldo Carvalho de Melo Subject: [PATCH v1 2/8] perf debuginfo: Fetch debuginfo keyed by build ID using debuginfod Date: Sat, 12 Sep 2026 23:34:53 -0300 Message-ID: <20260913023459.112654-3-acme@kernel.org> X-Mailer: git-send-email 2.55.0 In-Reply-To: <20260913023459.112654-1-acme@kernel.org> References: <20260913023459.112654-1-acme@kernel.org> Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8" From: Arnaldo Carvalho de Melo perf already uses debuginfod to fetch source files when annotating (via probe-finder.c) and 'perf probe' has open_from_debuginfod(), which queries debuginfo keyed by build ID when a module's debuginfo isn't found locally, largely the same thing this adds; eventually that one could be moved over to the new helper. For the analysis tools there was no way to obtain the debuginfo for a DSO in a profile when it isn't available locally under the name the DSO was opened with, for instance the vmlinux for the kernel a profile was recorded on when processing it on another machine, or after the kernel and its debuginfo package got upgraded in between. Add debuginfo__find_build_id(), that uses the debuginfod client to locate a debuginfo file keyed by the build ID, checking its local cache first and then querying the servers in DEBUGINFOD_URLS, and debuginfo__new_build_id(), that opens the DWARF in the file it finds. The debuginfod client fails when DEBUGINFOD_URLS isn't set even when what it wants is in its local cache, and the distro setup scripts that populate it from /etc/debuginfod don't reach cron jobs, systemd services and other environments that don't source the profile scripts, so also set it from the .urls files in /etc/debuginfod when not set. Querying servers, possibly third party ones, sends off-box the build IDs of the binaries being analysed and a fetch can take a while, so this is opt-out: on by default, off with --no-debuginfod, with core.debuginfod=3Dfalse, per tool with report.debuginfod and top.debuginfod, and, since users that set buildid.dir to /dev/null (e.g. Linus) or otherwise turn the local build-id cache off clearly don't want fetched files stored on the box, off too in that case. When a fetch is in progress in a terminal, stdio, the way it prints progress is how one gets out of it: 's' aborts the current fetch via the debuginfod client's progress callback protocol, 'd' additionally disables debuginfod for the rest of the session and points at 'perf config core.debuginfod=3Dfalse' to make that permanent -- rewriting the user's ~/.perfconfig from a keypress would silently drop its comments -- and SIGINT/SIGTERM are intercepted while the terminal is in raw mode, so that it is restored and the signal is re-raised when the user interrupts a fetch. Make dso__debuginfo() use debuginfo__new_build_id() as a fallback, keyed by the build ID recorded in the perf.data file, so that consumers such as the data type profiler can resolve the types of DSOs whose debuginfo can be fetched this way. Do the fetch outside dso__lock and remember the build IDs that were a miss, so that consumers revisiting a set of DSOs repeatedly, such as the data type profiler on every hist entry DSO switch, don't pay server round trips per attempt, a user cancelled search isn't recorded as a miss. debuginfo__new_build_id() needs libdw to open the DWARF, so it lives in debuginfo.o, built only with CONFIG_LIBDW, while the libdebuginfod feature check is independent of NO_LIBDW; keep the new build ID prototypes under HAVE_LIBDW_SUPPORT too, with stubs otherwise, so that make NO_LIBDW=3D1 on a system that has the debuginfod client keeps linking. Assisted-by: LLM Signed-off-by: Arnaldo Carvalho de Melo --- tools/perf/Documentation/perf-annotate.txt | 10 + tools/perf/Documentation/perf-config.txt | 19 ++ tools/perf/Documentation/perf-report.txt | 15 + tools/perf/Documentation/perf-top.txt | 14 + tools/perf/builtin-annotate.c | 2 + tools/perf/builtin-report.c | 6 + tools/perf/builtin-top.c | 6 + tools/perf/util/config.c | 3 + tools/perf/util/debuginfo.c | 372 +++++++++++++++++++++ tools/perf/util/debuginfo.h | 36 ++ tools/perf/util/dso.c | 19 ++ tools/perf/util/symbol.c | 2 + tools/perf/util/symbol_conf.h | 1 + 13 files changed, 505 insertions(+) diff --git a/tools/perf/Documentation/perf-annotate.txt b/tools/perf/Docume= ntation/perf-annotate.txt index 1a90b09a12d5abb1..25af1d166dc4c877 100644 --- a/tools/perf/Documentation/perf-annotate.txt +++ b/tools/perf/Documentation/perf-annotate.txt @@ -58,6 +58,16 @@ OPTIONS --ignore-vmlinux:: Ignore vmlinux files. =20 +--debuginfod:: +--no-debuginfod:: + Fetch debuginfo keyed by build ID from the debuginfod servers + configured in DEBUGINFOD_URLS, checking the local debuginfod + client cache first, when it is not available locally, on for + these commands by default. See the --debuginfod option of + 'perf report' for how to turn it off, including the 's' and + 'd' keys that skip a fetch in progress while 'perf' is + waiting for it. + --itrace:: Options for decoding instruction tracing data. The options are: =20 diff --git a/tools/perf/Documentation/perf-config.txt b/tools/perf/Document= ation/perf-config.txt index 9b223f8928299945..688306abe847a0df 100644 --- a/tools/perf/Documentation/perf-config.txt +++ b/tools/perf/Documentation/perf-config.txt @@ -216,6 +216,14 @@ core.*:: addr2line-timeout:: Sets a timeout (in milliseconds) for parsing 'addr2line' output. The default timeout is 5s. + debuginfod:: + When set to 'false', disable fetching debuginfo keyed by + build ID from the debuginfod servers configured in + DEBUGINFOD_URLS. It is on by default, can be overridden per + tool with the 'report.debuginfod' and 'top.debuginfod' + options and per invocation with --no-debuginfod; it is off + too when the local build-id cache is disabled, e.g. + 'buildid.dir' set to /dev/null. =20 tui.*, gtk.*:: Subcommands that can be configured here are 'top', 'report' and 'annotate= '. @@ -562,6 +570,14 @@ report.*:: This option can change default stat behavior with empty results. If it's set true, 'perf report --stat' will not show 0 stats. =20 + report.debuginfod:: + Fetch debuginfo keyed by build ID from the debuginfod + servers configured in DEBUGINFOD_URLS, checking the local + debuginfod client cache first, when it is not available + locally. On by default, set to 'false' to disable it for + 'perf report', globally with 'core.debuginfod=3Dfalse' or per + invocation with --no-debuginfod. + top.*:: top.children:: Same as 'report.children'. So if it is enabled, the output of 'top' @@ -569,6 +585,9 @@ top.*:: column by default. The default is 'true'. =20 + top.debuginfod:: + Same as 'report.debuginfod', for 'perf top'. + top.call-graph:: This is identical to 'call-graph.record-mode', except it is applicable only for 'top' subcommand. This option ONLY setup diff --git a/tools/perf/Documentation/perf-report.txt b/tools/perf/Document= ation/perf-report.txt index ae68ca402d0b4f0e..fed6af128ff07e4c 100644 --- a/tools/perf/Documentation/perf-report.txt +++ b/tools/perf/Documentation/perf-report.txt @@ -366,6 +366,21 @@ OPTIONS --ignore-vmlinux:: Ignore vmlinux files. =20 +--debuginfod:: +--no-debuginfod:: + Fetch debuginfo keyed by build ID from the debuginfod servers + configured in DEBUGINFOD_URLS, checking the local debuginfod + client cache first, when it is not available locally, on for + these commands by default. It can be turned off per invocation + with --no-debuginfod, per tool with the "report.debuginfod" + config option or globally with "core.debuginfod" set to false. + While a fetch is in progress in the stdio interface, 's' skips + the current fetch and 'd' skips it and disables debuginfod for + the rest of the session, pointing at 'perf config' to make that + permanent. It is disabled as well when the local build-id cache + is turned off, e.g. "buildid.dir" set to /dev/null, as that + asks for fetched files not to be kept on the box. + --kallsyms=3D:: kallsyms pathname =20 diff --git a/tools/perf/Documentation/perf-top.txt b/tools/perf/Documentati= on/perf-top.txt index 2da2a16bbf260685..8bcb7b0ac4a2407a 100644 --- a/tools/perf/Documentation/perf-top.txt +++ b/tools/perf/Documentation/perf-top.txt @@ -83,6 +83,20 @@ Default is to monitor all CPUS. --ignore-vmlinux:: Ignore vmlinux files. =20 +--debuginfod:: +--no-debuginfod:: + Fetch debuginfo keyed by build ID from the debuginfod servers + configured in DEBUGINFOD_URLS, checking the local debuginfod + client cache first, when it is not available locally, on for + these commands by default. Turn it off per invocation with + --no-debuginfod, with the "top.debuginfod" config option or + globally with "core.debuginfod" set to false. While a fetch is + in progress in the stdio interface, 's' skips the current fetch + and 'd' skips it and disables debuginfod for the rest of the + session, pointing at 'perf config' to make that permanent. + Disabled as well when the build-id cache is off, e.g. + "buildid.dir" set to /dev/null. + --kallsyms=3D:: kallsyms pathname =20 diff --git a/tools/perf/builtin-annotate.c b/tools/perf/builtin-annotate.c index 4638e6fdc39bb6b7..d14ae7d1c345cb79 100644 --- a/tools/perf/builtin-annotate.c +++ b/tools/perf/builtin-annotate.c @@ -733,6 +733,8 @@ int cmd_annotate(int argc, const char **argv) OPT_BOOLEAN(0, "stdio2", &annotate.use_stdio2, "Use the stdio interface"), OPT_BOOLEAN(0, "ignore-vmlinux", &symbol_conf.ignore_vmlinux, "don't load vmlinux even if found"), + OPT_BOOLEAN(0, "debuginfod", &symbol_conf.debuginfod, + "fetch debuginfo keyed by build ID from the debuginfod= servers, on by default, use --no-debuginfod to turn off"), OPT_STRING('k', "vmlinux", &symbol_conf.vmlinux_name, "file", "vmlinux pathname"), OPT_BOOLEAN('m', "modules", &symbol_conf.use_modules, diff --git a/tools/perf/builtin-report.c b/tools/perf/builtin-report.c index b280ff9ff45e6485..4d3383d1daae2ed9 100644 --- a/tools/perf/builtin-report.c +++ b/tools/perf/builtin-report.c @@ -134,6 +134,10 @@ static int report__config(const char *var, const char = *value, void *cb) symbol_conf.event_group =3D perf_config_bool(var, value); return 0; } + if (!strcmp(var, "report.debuginfod")) { + symbol_conf.debuginfod =3D perf_config_bool(var, value); + return 0; + } if (!strcmp(var, "report.percent-limit")) { double pcnt =3D strtof(value, NULL); =20 @@ -1346,6 +1350,8 @@ int cmd_report(int argc, const char **argv) "file", "vmlinux pathname"), OPT_BOOLEAN(0, "ignore-vmlinux", &symbol_conf.ignore_vmlinux, "don't load vmlinux even if found"), + OPT_BOOLEAN(0, "debuginfod", &symbol_conf.debuginfod, + "fetch debuginfo keyed by build ID from the debuginfod= servers, on by default, use --no-debuginfod to turn off"), OPT_STRING(0, "kallsyms", &symbol_conf.kallsyms_name, "file", "kallsyms pathname"), OPT_BOOLEAN('f', "force", &symbol_conf.force, "don't complain, do it"), diff --git a/tools/perf/builtin-top.c b/tools/perf/builtin-top.c index c2562d49be46a9a1..aed45167d95005dd 100644 --- a/tools/perf/builtin-top.c +++ b/tools/perf/builtin-top.c @@ -1436,6 +1436,10 @@ static int perf_top_config(const char *var, const ch= ar *value, void *cb __maybe_ symbol_conf.cumulate_callchain =3D perf_config_bool(var, value); return 0; } + if (!strcmp(var, "top.debuginfod")) { + symbol_conf.debuginfod =3D perf_config_bool(var, value); + return 0; + } =20 return 0; } @@ -1508,6 +1512,8 @@ int cmd_top(int argc, const char **argv) "file", "vmlinux pathname"), OPT_BOOLEAN(0, "ignore-vmlinux", &symbol_conf.ignore_vmlinux, "don't load vmlinux even if found"), + OPT_BOOLEAN(0, "debuginfod", &symbol_conf.debuginfod, + "fetch debuginfo keyed by build ID from the debuginfod= servers, on by default, use --no-debuginfod to turn off"), OPT_STRING(0, "kallsyms", &symbol_conf.kallsyms_name, "file", "kallsyms pathname"), OPT_BOOLEAN('K', "hide_kernel_symbols", &top.hide_kernel_symbols, diff --git a/tools/perf/util/config.c b/tools/perf/util/config.c index b2972c35c1eca68c..31c6618d3b3daf22 100644 --- a/tools/perf/util/config.c +++ b/tools/perf/util/config.c @@ -470,6 +470,9 @@ static int perf_default_core_config(const char *var, co= nst char *value) if (!strcmp(var, "core.addr2line-disable-warn")) symbol_conf.addr2line_disable_warn =3D perf_config_bool(var, value); =20 + if (!strcmp(var, "core.debuginfod")) + symbol_conf.debuginfod =3D perf_config_bool(var, value); + /* Add other config variables here. */ return 0; } diff --git a/tools/perf/util/debuginfo.c b/tools/perf/util/debuginfo.c index 84a78b30ceac1066..82158750318defd9 100644 --- a/tools/perf/util/debuginfo.c +++ b/tools/perf/util/debuginfo.c @@ -7,17 +7,26 @@ =20 #include #include +#include +#include +#include +#include #include #include #include +#include #include +#include #include +#include =20 #include "build-id.h" #include "dso.h" #include "debug.h" #include "debuginfo.h" +#include "mutex.h" #include "symbol.h" +#include "term.h" =20 #ifdef HAVE_DEBUGINFOD_SUPPORT #include @@ -139,6 +148,369 @@ struct debuginfo *debuginfo__new(const char *path) return __debuginfo__new(buf); } =20 +#ifdef HAVE_DEBUGINFOD_SUPPORT +/* + * Set with the use_browser variable in ui/ui.h, not included here to + * avoid pulling in the UI headers: when the TUI is in use, printing to + * stderr would garble its display. + */ +extern int use_browser; + +static bool debuginfod_progress_started; +static bool debuginfod_fetch_cancelled; + +/* + * A fetch can be interrupted with Ctrl-C/SIGTERM while stdin is in raw + * mode: the handler only records the signal, the progress callback + * aborts the query, and debuginfo__find_build_id() restores the + * terminal and raises the signal again, so that the terminal is never + * left in raw mode when perf dies mid-fetch. + */ +static volatile sig_atomic_t debuginfod_signal; + +static void debuginfod_signal_handler(int sig) +{ + debuginfod_signal =3D sig; +} + +/* + * 's': skip this fetch, the query is aborted by returning a non-zero + * value from the progress callback, as the debuginfod client docs + * prescribe. 'd': also disable debuginfod for the rest of the session, + * telling how to make that permanent: rewriting the user's ~/.perfconfig + * from here would drop its comments, so point at 'perf config' instead. + */ +static void debuginfod__poll_cancel_keys(void) +{ + char ch; + + while (read(STDIN_FILENO, &ch, 1) =3D=3D 1) { + if (ch =3D=3D 's' || ch =3D=3D 'S') { + debuginfod_fetch_cancelled =3D true; + fputs("\nSkipping this debuginfod fetch, press 'd' to also disable it f= or this session\n", stderr); + } else if (ch =3D=3D 'd' || ch =3D=3D 'D') { + debuginfod_fetch_cancelled =3D true; + symbol_conf.debuginfod =3D false; + fputs("\nSkipping this debuginfod fetch and disabling debuginfod for th= is session, run 'perf config core.debuginfod=3Dfalse' to also disable it pe= rmanently\n", stderr); + } + } +} + +/* + * Print a warning and a progress indicator when the debuginfod client + * ends up fetching a file, which can be big, such as the vmlinux for a + * kernel profiled on another machine or before it got upgraded, so that + * users know perf is not stuck, and let them bail out: 's' skips this + * fetch, 'd' also disables debuginfod for the rest of the session. The + * client only invokes this once it committed to a server, so 'a' is the + * number of bytes fetched so far, 'b' the total size when the server + * tells it, -1 otherwise. + */ +static int debuginfod_progress_fn(debuginfod_client *c __maybe_unused, + long a, long b) +{ + if (!isatty(STDERR_FILENO) || use_browser) + return 0; + + if (debuginfod_signal) + return 1; + + if (isatty(STDIN_FILENO)) { + debuginfod__poll_cancel_keys(); + if (debuginfod_fetch_cancelled) + return 1; + } + + if (!debuginfod_progress_started) { + fprintf(stderr, "Fetching debuginfo by build ID from the debuginfod serv= ers, this may take a while for large files such as the vmlinux, press 's' t= o skip, 'd' to skip and disable\n"); + debuginfod_progress_started =3D true; + } + + if (a >=3D 0) { + if (b > 0) + fprintf(stderr, " %ld/%ld MiB fetched\r", a >> 20, b >> 20); + else + fprintf(stderr, " %ld MiB fetched\r", a >> 20); + } + + return 0; +} + +/* + * The debuginfod client checks its local cache only as part of the + * server query flow, so with no servers configured it fails even when + * the artifact is in the client cache. Distro setup scripts, e.g. + * /etc/profile.d/99-debuginfod.sh, export DEBUGINFOD_URLS from the + * .urls files in /etc/debuginfod, but that doesn't reach environments + * that don't source the profile scripts, such as cron jobs, systemd + * services and CI, so do it here when the variable isn't set. An + * explicitly empty DEBUGINFOD_URLS is an opt-out, matching the + * perf_debuginfod_setup() handling, and is left alone. + */ +static void debuginfod__setup_urls_env(void) +{ + char *urls =3D NULL; + DIR *dir; + struct dirent *dent; + + if (getenv("DEBUGINFOD_URLS") !=3D NULL) + return; + + dir =3D opendir("/etc/debuginfod"); + if (dir =3D=3D NULL) + return; + + while ((dent =3D readdir(dir)) !=3D NULL) { + char *content =3D NULL; + char *new_urls; + char path[PATH_MAX]; + size_t len =3D strlen(dent->d_name), i, size; + int n; + + if (len < 5 || strcmp(dent->d_name + len - 5, ".urls")) + continue; + + snprintf(path, sizeof(path), "/etc/debuginfod/%s", dent->d_name); + if (filename__read_str(path, &content, &size) < 0) + continue; + + for (i =3D 0; i < size; i++) + if (content[i] =3D=3D '\n' || content[i] =3D=3D '\r') + content[i] =3D ' '; + + if (urls =3D=3D NULL) { + urls =3D strdup(content); + } else { + n =3D asprintf(&new_urls, "%s %s", urls, content); + if (n < 0) { + free(content); + continue; + } + free(urls); + urls =3D new_urls; + } + free(content); + } + closedir(dir); + + if (urls !=3D NULL) { + setenv("DEBUGINFOD_URLS", urls, 1); + pr_debug("Set DEBUGINFOD_URLS from /etc/debuginfod: %s\n", urls); + } + free(urls); +} + +/* + * Users can disable the local build-id/.debug cache by setting + * buildid.dir to /dev/null, meaning they don't want fetched + * binaries/debuginfo stored on the box; the debuginfod client keeps + * its own cache in ~/.cache/debuginfod_client, so honour that intent + * and don't fetch at all in that case. + */ +static bool debuginfod__cache_disabled(void) +{ + return !strcmp(buildid_dir, "/dev/null"); +} + +/* + * Build IDs already searched for on the debuginfod servers without + * success, so that callers that see the same DSO over and over, such as + * the data type profiler switching between DSOs on every hist entry, + * don't pay a server round trip again for each miss. The cache of + * successes is the debuginfod client's own, in the local filesystem. + */ +struct debuginfod_miss { + struct list_head node; + struct build_id bid; +}; + +static LIST_HEAD(debuginfod__misses); +static struct mutex debuginfod__missed_lock; + +static void debuginfod__missed_lock_setup(void) +{ + mutex_init(&debuginfod__missed_lock); +} + +static void debuginfod__missed_lock_init(void) +{ + static pthread_once_t once =3D PTHREAD_ONCE_INIT; + + pthread_once(&once, debuginfod__missed_lock_setup); +} + +static bool debuginfod__missed(const struct build_id *bid) +{ + struct debuginfod_miss *miss; + bool found =3D false; + + debuginfod__missed_lock_init(); + mutex_lock(&debuginfod__missed_lock); + list_for_each_entry(miss, &debuginfod__misses, node) { + if (miss->bid.size =3D=3D bid->size && + !memcmp(miss->bid.data, bid->data, bid->size)) { + found =3D true; + break; + } + } + mutex_unlock(&debuginfod__missed_lock); + + return found; +} + +static void debuginfod__miss_add(const struct build_id *bid) +{ + struct debuginfod_miss *miss =3D zalloc(sizeof(*miss)); + + if (miss =3D=3D NULL) + return; + + miss->bid =3D *bid; + + debuginfod__missed_lock_init(); + mutex_lock(&debuginfod__missed_lock); + list_add(&miss->node, &debuginfod__misses); + mutex_unlock(&debuginfod__missed_lock); +} + +/* + * Find a debuginfo file keyed by the build ID, using the debuginfod + * client, which checks its local cache first and then queries the + * servers in DEBUGINFOD_URLS. Used when the debuginfo is not available + * locally under the name the DSO was opened with, for instance the + * vmlinux for the kernel the profile was recorded on, when processing + * the profile on another machine or after the kernel or its debuginfo + * package got upgraded in between. + * + * Querying servers, possibly third party, sends the build IDs of the + * binaries being analysed off the box, so this is opt-out: on by + * default, switchable off with --no-debuginfod, with + * core.debuginfod=3Dfalse (what the 'd' key below writes), with the + * per-tool report.debuginfod/top.debuginfod, and it is off too when + * the user disabled the local build-id/.debug cache, e.g. with + * buildid.dir =3D /dev/null, as is the case for users that don't want + * any of this stored locally. + * + * On success the path is stored in *@path and must be freed by the + * caller, the file remains available in the debuginfod client cache. + */ +int debuginfo__find_build_id(const struct build_id *bid, char **path) +{ + char sbuild_id[SBUILD_ID_SIZE]; + struct termios orig_termios; + struct sigaction sa, orig_sigint, orig_sigterm; + bool term_set =3D false, sigint_set =3D false, sigterm_set =3D false; + debuginfod_client *c; + int fd; + + *path =3D NULL; + + if (!build_id__is_defined(bid) || !symbol_conf.debuginfod) + return -1; + + if (debuginfod__cache_disabled()) { + pr_debug("Build-id cache disabled (buildid dir is '%s'), not using debug= infod\n", + buildid_dir); + return -1; + } + + if (debuginfod__missed(bid)) { + build_id__snprintf(bid, sbuild_id, sizeof(sbuild_id)); + pr_debug("Not searching build ID %s in debuginfod again, it was a miss e= arlier\n", + sbuild_id); + return -1; + } + + debuginfod__setup_urls_env(); + + c =3D debuginfod_begin(); + if (c =3D=3D NULL) + return -1; + + debuginfod_set_progressfn(c, debuginfod_progress_fn); + + debuginfod_fetch_cancelled =3D false; + debuginfod_signal =3D 0; + + /* + * Make stdin deliver keypresses without waiting for a newline, + * the progress callback above polls it for the 's'/'d' keys, + * only in the stdio case with both stdin and stderr being a + * terminal, the TUI/pipe cases have no business being poked + * here. Intercept SIGINT/SIGTERM so that the terminal is + * restored before the process dies, the handler only records + * the signal and the callback aborts the query. + */ + if (isatty(STDIN_FILENO) && isatty(STDERR_FILENO) && !use_browser) { + set_term_quiet_input(&orig_termios); + term_set =3D true; + + memset(&sa, 0, sizeof(sa)); + sa.sa_handler =3D debuginfod_signal_handler; + sigemptyset(&sa.sa_mask); + if (sigaction(SIGINT, &sa, &orig_sigint) =3D=3D 0) + sigint_set =3D true; + if (sigaction(SIGTERM, &sa, &orig_sigterm) =3D=3D 0) + sigterm_set =3D true; + } + + fd =3D debuginfod_find_debuginfo(c, bid->data, bid->size, path); + + if (term_set) + tcsetattr(STDIN_FILENO, TCSANOW, &orig_termios); + if (sigint_set) + sigaction(SIGINT, &orig_sigint, NULL); + if (sigterm_set) + sigaction(SIGTERM, &orig_sigterm, NULL); + + debuginfod_end(c); + if (debuginfod_progress_started) { + fputc('\n', stderr); + debuginfod_progress_started =3D false; + } + if (fd < 0) { + build_id__snprintf(bid, sbuild_id, sizeof(sbuild_id)); + if (debuginfod_fetch_cancelled || debuginfod_signal) { + pr_debug("debuginfod search for build ID %s cancelled by the user\n", + sbuild_id); + /* + * The terminal is restored, die as the user asked; + * the original dispositions are back in place. + */ + if (debuginfod_signal) + raise(debuginfod_signal); + return -1; + } + pr_debug("No debuginfo found for build ID %s in debuginfod\n", + sbuild_id); + debuginfod__miss_add(bid); + return -1; + } + + close(fd); + return 0; +} + +struct debuginfo *debuginfo__new_build_id(const struct build_id *bid) +{ + char sbuild_id[SBUILD_ID_SIZE]; + char *path =3D NULL; + struct debuginfo *dbg; + + if (debuginfo__find_build_id(bid, &path)) + return NULL; + + dbg =3D __debuginfo__new(path); + if (dbg =3D=3D NULL) { + build_id__snprintf(bid, sbuild_id, sizeof(sbuild_id)); + pr_debug("Failed to open DWARF in debuginfo fetched for build ID %s: %s\= n", + sbuild_id, path); + } + free(path); + return dbg; +} +#endif /* HAVE_DEBUGINFOD_SUPPORT */ + void debuginfo__delete(struct debuginfo *dbg) { if (dbg) { diff --git a/tools/perf/util/debuginfo.h b/tools/perf/util/debuginfo.h index a52d69932815cd72..43b211a0dec174f5 100644 --- a/tools/perf/util/debuginfo.h +++ b/tools/perf/util/debuginfo.h @@ -5,6 +5,8 @@ #include #include =20 +struct build_id; + #ifdef HAVE_LIBDW_SUPPORT =20 #include "dwarf-aux.h" @@ -54,6 +56,28 @@ static inline int debuginfo__get_text_offset(struct debu= ginfo *dbg __maybe_unuse #ifdef HAVE_DEBUGINFOD_SUPPORT int get_source_from_debuginfod(const char *raw_path, const char *sbuild_id, char **new_path); + +/* + * Finding a debuginfo file keyed by build ID uses the debuginfod client, + * but opening the DWARF in it needs libdw, i.e. these live in + * debuginfo.o, which is only built with CONFIG_LIBDW. + */ +#ifdef HAVE_LIBDW_SUPPORT +int debuginfo__find_build_id(const struct build_id *bid, char **path); +struct debuginfo *debuginfo__new_build_id(const struct build_id *bid); +#else +static inline int debuginfo__find_build_id(const struct build_id *bid __ma= ybe_unused, + char **path __maybe_unused) +{ + return -ENOTSUP; +} + +static inline struct debuginfo * +debuginfo__new_build_id(const struct build_id *bid __maybe_unused) +{ + return NULL; +} +#endif /* HAVE_LIBDW_SUPPORT */ #else /* HAVE_DEBUGINFOD_SUPPORT */ static inline int get_source_from_debuginfod(const char *raw_path __maybe_= unused, const char *sbuild_id __maybe_unused, @@ -61,6 +85,18 @@ static inline int get_source_from_debuginfod(const char = *raw_path __maybe_unused { return -ENOTSUP; } + +static inline int debuginfo__find_build_id(const struct build_id *bid __ma= ybe_unused, + char **path __maybe_unused) +{ + return -ENOTSUP; +} + +static inline struct debuginfo * +debuginfo__new_build_id(const struct build_id *bid __maybe_unused) +{ + return NULL; +} #endif /* HAVE_DEBUGINFOD_SUPPORT */ =20 #endif /* _PERF_DEBUGINFO_H */ diff --git a/tools/perf/util/dso.c b/tools/perf/util/dso.c index 42bfe30a3b518e80..fe7c3b0265ba633a 100644 --- a/tools/perf/util/dso.c +++ b/tools/perf/util/dso.c @@ -32,6 +32,7 @@ #include "string2.h" #include "vdso.h" #include "annotate-data.h" +#include "debuginfo.h" #include "libdw.h" =20 static const char * const debuglink_paths[] =3D { @@ -2073,5 +2074,23 @@ struct debuginfo *dso__debuginfo(struct dso *dso) =20 mutex_unlock(dso__lock(dso)); free(name); + + /* + * The debuginfo for a DSO in the profile may not be installed + * locally, for instance the vmlinux for the kernel the profile was + * recorded on when processing it on another machine, or after the + * kernel and its debuginfo got upgraded in between. Fall back to + * fetching it keyed by the build ID recorded in the perf.data file, + * using the debuginfod client, which checks its local cache first. + * + * Do it outside dso__lock, a fetch from a remote debuginfod server + * can take a while and would otherwise block anything else using + * this dso, and honour the opt-out, the user may have asked for + * no debuginfod via --no-debuginfod, core.debuginfod=3Dfalse or by + * disabling the build-id cache. + */ + if (dinfo =3D=3D NULL) + dinfo =3D debuginfo__new_build_id(dso__bid(dso)); + return dinfo; } diff --git a/tools/perf/util/symbol.c b/tools/perf/util/symbol.c index 3587ad243159074f..b1a2684c813c5d8d 100644 --- a/tools/perf/util/symbol.c +++ b/tools/perf/util/symbol.c @@ -76,6 +76,8 @@ struct symbol_conf symbol_conf =3D { .inline_name =3D true, .res_sample =3D 0, .addr2line_timeout_ms =3D 5 * 1000, + /* Fetching debuginfo by build ID, off via --no-debuginfod, etc */ + .debuginfod =3D true, }; =20 struct map_list_node { diff --git a/tools/perf/util/symbol_conf.h b/tools/perf/util/symbol_conf.h index 71f60081a85bb18d..a56b1d2d843b9ff1 100644 --- a/tools/perf/util/symbol_conf.h +++ b/tools/perf/util/symbol_conf.h @@ -45,6 +45,7 @@ struct symbol_conf { force, ignore_vmlinux, ignore_vmlinux_buildid, + debuginfod, show_kernel_path, use_modules, allow_aliases, --=20 2.55.0 From nobody Fri Sep 25 12:05:33 2026 Received: from smtp.kernel.org (aws-us-west-2-korg-mail-alma10-1.taild15c8.ts.net [100.103.45.18]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 742CC377018; Sun, 13 Sep 2026 02:35:19 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=100.103.45.18 ARC-Seal: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1789266920; cv=none; b=j6wcctCA7V0TzbtBmgD3CKns0pXJkvtTCJtlNNNFfH1563fAOSLIGDmELYKWaCicj/1o2h7sAEdhxYZeRX+FNDeJQQ9QWBoSyhxOkWZ1lQm+qGrJcmWRJFKIFQOsHCb7peKQuR0ylqtK7ockUWS5XQRZyhJeN4rM7k+VAxun38o= ARC-Message-Signature: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1789266920; c=relaxed/simple; bh=umCP/qgrVnxyElaKvm3al8FhdPn6/FsWKk5qdK2SIjo=; h=From:To:Cc:Subject:Date:Message-ID:In-Reply-To:References: MIME-Version; b=V/DdekJ2wLOHigX+CosAqYEv3onM7RsXlZI5/9QvX+rwjlxEFKqgR0hpU6l2d/1wAWlVCoyV84SBWrshrV0KPB318FNdvXUU1MCn8/GyVMxQLrEtI8gaNpmN8D9stjoeqpU3YUIGEp55vqUGWmR1opwRUlLFe9mConiKSt8xx9A= ARC-Authentication-Results: i=1; smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org header.b=JuPe4v7U; arc=none smtp.client-ip=100.103.45.18 Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org header.b="JuPe4v7U" Received: by smtp.kernel.org (Postfix) with ESMTPSA id EF5631F00893; Sun, 13 Sep 2026 02:35:14 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=kernel.org; s=k20260515; t=1789266919; bh=u5GMt6vY0jglGlXzwWD2zIuvcCVQLm23wFgQR0bYX08=; h=From:To:Cc:Subject:Date:In-Reply-To:References; b=JuPe4v7ULZ3hvzwxE01lpO7DYApktSJ8lRprbOU7Bhdr0Fbzxd0v0va/C0+bJlA4e 05oscKPIHjMSQziySQHU4GQg4vKI3gDL5h4Yrm9wkeKjNHIpeFlxbkFa5KYPP+QY1j BbCEHrWoEoHbxIjpWwNr3sd9rOUsoHxaFDcQ0D5n/DKeNqIi1/0pJ6S9YHw/pRbmwO aZFHiMbKpTfeBut7617rqbFeP9rTmpoIzSSUWXc/EizQN0YDQuwsz8AbMu313zcujj Q3AW2PW+CbynMzm8DWE2FmO+JpTv6PeD0bEXbv+W8X2LcKWB9ZmbRJss2cR8RRCtul e7ts5jTMBYonw== From: Arnaldo Carvalho de Melo To: Namhyung Kim Cc: Ingo Molnar , Thomas Gleixner , James Clark , Jiri Olsa , Ian Rogers , Adrian Hunter , Clark Williams , linux-kernel@vger.kernel.org, linux-perf-users@vger.kernel.org, Arnaldo Carvalho de Melo Subject: [PATCH v1 3/8] perf symbol: Fall back to fetching the vmlinux by build ID Date: Sat, 12 Sep 2026 23:34:54 -0300 Message-ID: <20260913023459.112654-4-acme@kernel.org> X-Mailer: git-send-email 2.55.0 In-Reply-To: <20260913023459.112654-1-acme@kernel.org> References: <20260913023459.112654-1-acme@kernel.org> Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8" From: Arnaldo Carvalho de Melo A profile recorded on a kernel that is no longer installed, be it because the machine was rebooted into a new kernel or because the profile is being processed on another machine, can't have its kernel symbols resolved: /proc/kallsyms matches the running kernel, not the one in the profile, and is refused when restricted, e.g. with kernel.perf_event_paranoid > 1, while the build-id cache may carry just a kallsyms copy with zeroed addresses. With no kernel symbols the kernel samples can't be annotated, so they all end up in the '(unknown)' data type and the kernel is missing from the data type profile JSON "dsos" entry. As a last resort, when the kernel symbols can't be found locally and the user didn't specify a kallsyms file, fetch the vmlinux keyed by the kernel build ID recorded in the perf.data file using the debuginfod client and use it for symbols, which also provides the DWARF debuginfo needed for data type profiling. Like the other vmlinux sources this honors --ignore-vmlinux and --ignore-vmlinux_buildid: a fetched vmlinux is still a vmlinux, and the fetch is keyed by the build ID, so both flags skip it, keeping 'perf record' and 'perf probe', that set ignore_vmlinux_buildid internally, away from it. The fetch itself follows the opt-out controls added in the previous patch, --no-debuginfod, core.debuginfod=3Dfalse and the build-id-cache-is-off case, and can be skipped with the 's'/'d' keys while it runs. Build IDs that were a miss are remembered, not queried again on every dso__load() retry. With a profile recorded on a system running kernel 7.1.10, later processed after it was upgraded to 7.1.13, 'perf report -s type ' went from having all 24.91% of the kernel samples as '(unknown)' data types to resolving struct task_struct, struct rq, struct tty_struct, struct qspinlock, etc, with the kernel DSO, keyed by its build ID, appearing in the data type profile JSON. Assisted-by: LLM Signed-off-by: Arnaldo Carvalho de Melo --- tools/perf/util/symbol.c | 38 +++++++++++++++++++++++++++++++++++++- 1 file changed, 37 insertions(+), 1 deletion(-) diff --git a/tools/perf/util/symbol.c b/tools/perf/util/symbol.c index b1a2684c813c5d8d..034e11e75bb94999 100644 --- a/tools/perf/util/symbol.c +++ b/tools/perf/util/symbol.c @@ -20,6 +20,7 @@ #include "cap.h" #include "cpumap.h" #include "debug.h" +#include "debuginfo.h" #include "demangle-cxx.h" #include "demangle-java.h" #include "demangle-ocaml.h" @@ -2191,12 +2192,35 @@ static char *dso__find_kallsyms(struct dso *dso, st= ruct map *map) return strdup(path); } =20 +/* + * Last resort when the symbols for the kernel the profile was recorded + * on can't be found locally: fetch the vmlinux keyed by the build ID + * recorded in the perf.data file using the debuginfod client, which + * checks its local cache first, e.g. when processing the profile on + * another machine or after the kernel and its debuginfo package got + * upgraded in between. + */ +static int dso__load_vmlinux_build_id(struct dso *dso, struct map *map) +{ + char *path =3D NULL; + + if (!dso__has_build_id(dso)) + return -1; + + if (debuginfo__find_build_id(dso__bid(dso), &path)) + return -1; + + /* Takes ownership of 'path' even when it fails */ + return dso__load_vmlinux(dso, map, path, true); +} + static int dso__load_kernel_sym(struct dso *dso, struct map *map) { int err; const char *kallsyms_filename =3D NULL; char *kallsyms_allocated_filename =3D NULL; char *filename =3D NULL; + bool user_kallsyms =3D false; =20 /* * Step 1: if the user specified a kallsyms or vmlinux filename, use @@ -2215,6 +2239,7 @@ static int dso__load_kernel_sym(struct dso *dso, stru= ct map *map) */ if (symbol_conf.kallsyms_name !=3D NULL) { kallsyms_filename =3D symbol_conf.kallsyms_name; + user_kallsyms =3D true; goto do_kallsyms; } =20 @@ -2257,7 +2282,18 @@ static int dso__load_kernel_sym(struct dso *dso, str= uct map *map) pr_debug("Using %s for symbols\n", kallsyms_filename); free(kallsyms_allocated_filename); =20 - if (err > 0 && !dso__is_kcore(dso)) { + /* + * The kallsyms may be unavailable or restricted, e.g. + * /proc/kallsyms with kernel.perf_event_paranoid > 1, try to fetch + * the vmlinux keyed by the build ID using debuginfod as a last + * resort, honoring --ignore-vmlinux and --ignore-vmlinux_buildid + * like the other vmlinux sources above. + */ + if (err <=3D 0 && !user_kallsyms && + !symbol_conf.ignore_vmlinux && + !symbol_conf.ignore_vmlinux_buildid) { + err =3D dso__load_vmlinux_build_id(dso, map); + } else if (err > 0 && !dso__is_kcore(dso)) { struct maps *kmaps =3D map__kmaps(map); =20 dso__set_binary_type(dso, DSO_BINARY_TYPE__KALLSYMS); --=20 2.55.0 From nobody Fri Sep 25 12:05:33 2026 Received: from smtp.kernel.org (aws-us-west-2-korg-mail-alma10-1.taild15c8.ts.net [100.103.45.18]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 327ED376BC1; Sun, 13 Sep 2026 02:35:23 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=100.103.45.18 ARC-Seal: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1789266925; cv=none; b=ba4Hz5HCHu6wc1x8KT64Fx7t0qPGy0PPFNMPNBPLHTTlS+/nw9fUH/17/3Xd0tFLvUDBdIopdPXuQZAntkuUb3Hryd9we+LhdtfCpBrm+gOvyctRlUhCjRsFMVHiUxC/iBfT7qTbZmHqZwil2wL9D+iVlhmk3D4BbiLtMDg8H1M= ARC-Message-Signature: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1789266925; c=relaxed/simple; bh=LD44ceqeITQpbtntVg3pm1whLRB9tUKm10aR4jYBJN4=; h=From:To:Cc:Subject:Date:Message-ID:In-Reply-To:References: MIME-Version; b=sLmu2gxYSmaFQPUlIK9lsnAC9t1ZjkhMY+APze9tif9uPj808A0F9F66WSDVaV8ch96qYo4d6wB1LE+/rKNBZKKfEWJCER7R72EkhPpaKdqdmb3qMAiaGOrZt2xiwld/wqX6YMrxlo/8GO/AuKK2f3XJuj1iEvN9k41a9xmK53E= ARC-Authentication-Results: i=1; smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org header.b=S8U994tj; arc=none smtp.client-ip=100.103.45.18 Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org header.b="S8U994tj" Received: by smtp.kernel.org (Postfix) with ESMTPSA id AA47C1F000FF; Sun, 13 Sep 2026 02:35:19 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=kernel.org; s=k20260515; t=1789266923; bh=DAmmexN09NZh2SAdn0o7GQKbbFwny4ZHYv/wL/UNfNk=; h=From:To:Cc:Subject:Date:In-Reply-To:References; b=S8U994tjKtV8kbS57HigAeSXEbzpxWrEpHnhY4Tn++BC4ppYlrMOke0PGpZbM+qmL wAZi7EPdkbGS6sNkIHUw7dGhiPOtSgWQ7Qa02EvUPCx6+Sz+pwBlHdwYGJdmHQMUp/ i+xHwUwWWm8GEKF84rCb6gFMtfh+8aG4zJr7F1e+4DxvoYJ/FXXX/2hYKupP5oHMlf sxPWHOuT7mEnUU8Y6Reh9zI9GNT4WCTXSTPQUIhvUtKOnxleu5yhEPd7YRke3rvKd8 DtlyyfbCPYf05DOc1nYssp6T98U8vQ0GCENLABr+d5ku9YvveXCkiThxFjnX2SHso4 q0jBdeUBO+4uw== From: Arnaldo Carvalho de Melo To: Namhyung Kim Cc: Ingo Molnar , Thomas Gleixner , James Clark , Jiri Olsa , Ian Rogers , Adrian Hunter , Clark Williams , linux-kernel@vger.kernel.org, linux-perf-users@vger.kernel.org, Arnaldo Carvalho de Melo Subject: [PATCH v1 4/8] perf annotate-data: Show the sample count in the data-type browser Date: Sat, 12 Sep 2026 23:34:55 -0300 Message-ID: <20260913023459.112654-5-acme@kernel.org> X-Mailer: git-send-email 2.55.0 In-Reply-To: <20260913023459.112654-1-acme@kernel.org> References: <20260913023459.112654-1-acme@kernel.org> Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8" From: Arnaldo Carvalho de Melo The data-type browser has a samples view, selected with -n (or with annotate.show_nr_samples), in which browser__write_overhead() prints a local nr_samples variable that is initialized to zero and never updated, so every member is listed as having no samples while the period and percent columns for the same entry are filled in. Print the histogram entry's own count instead. This predates the load/store counter split, so fix it ahead of that patch: the split then only has to adapt a line that is already correct, and this fix can be picked on its own. Fixes: d001c7a7f4736743 ("perf annotate-data: Add hist_entry__annotate_data= _tui()") Assisted-by: LLM Signed-off-by: Arnaldo Carvalho de Melo --- tools/perf/ui/browsers/annotate-data.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tools/perf/ui/browsers/annotate-data.c b/tools/perf/ui/browser= s/annotate-data.c index aa8c89fe2e82c1c5..1080ed1a40d2609a 100644 --- a/tools/perf/ui/browsers/annotate-data.c +++ b/tools/perf/ui/browsers/annotate-data.c @@ -370,7 +370,7 @@ static void browser__write_overhead(struct ui_browser *= uib, u64 period =3D hist->period; double percent =3D total->period ? (100.0 * period / total->period) : 0; bool current =3D ui_browser__is_current_entry(uib, row); - int nr_samples =3D 0; + int nr_samples =3D hist->nr_samples; =20 ui_browser__set_percent_color(uib, percent, current); =20 --=20 2.55.0 From nobody Fri Sep 25 12:05:33 2026 Received: from smtp.kernel.org (aws-us-west-2-korg-mail-alma10-1.taild15c8.ts.net [100.103.45.18]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id E3B01376BC1; Sun, 13 Sep 2026 02:35:28 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=100.103.45.18 ARC-Seal: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1789266930; cv=none; b=VIfZABErzC8ezceNMf3LtagcZEWCDhKn7q/tYHwV3/gbjGYQkYQOQEReG6p1I3+mGWo0DqO+PrNycZM6HBggJZF1baLMguhP5xolm/L/3KY+3yC4J+92rDadFweNHCRWVqNW6iRQh7eKXU3RnKvHTaSgBuqF5ktW/DRTEPy0PtY= ARC-Message-Signature: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1789266930; c=relaxed/simple; bh=hHKqDX15ha1edPflLQf0ChV0VAhvPLFHo2M24bkRqF8=; h=From:To:Cc:Subject:Date:Message-ID:In-Reply-To:References: MIME-Version:Content-Type; b=PbBReXQONz9wdlJQnPa9IWq1owur6Oa3gXKKPCqg1L81LT/xYcrSUujJyoES+cQeUqWW11UTS45lHXILgIlhlo/fB7kUEX8YcWlg/3dSx0wqyNMeYoSbxO3lozAZ6I93WfosumRJYw7XRYCFEX7jZ+JZZUkhZoTF8qh+6LFN0V8= ARC-Authentication-Results: i=1; smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org header.b=dJHa3183; arc=none smtp.client-ip=100.103.45.18 Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org header.b="dJHa3183" Received: by smtp.kernel.org (Postfix) with ESMTPSA id 628F21F00893; Sun, 13 Sep 2026 02:35:24 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=kernel.org; s=k20260515; t=1789266928; bh=4qC3aoPPMABZF49CiFc3Z28XJKr/g0WGuUlY2e5KcfQ=; h=From:To:Cc:Subject:Date:In-Reply-To:References; b=dJHa3183hxUe+z52elmHveFZjFToDhuTBYMsC9PBI4SeaBkyPwYXgAmtv/sVvIdip K+7LuU880nzxgTHCTiFT0GPhcDiOcYaIMdt+XgRHWkymahl85qDaiUDYvMHvBn74ZC ti/pFqPgy+8JXnV95hjmKiMXbet+8e+4fUiw9W4v4sUI2lbXrGej8udoqDc0o9wk4S 2IaBhfgt4KOuiPrXMDmOGkN76HjcyS67+iojwhbONXZzoe0ow95MSIQle3HUgxXz18 879+9MjMmWB08A59rWTpUMgQc5Jvow+wUse3Or4H5HvZwPnyAiT24WrRHZEIdiEJwd BrwfI0k0ZwNiQ== From: Arnaldo Carvalho de Melo To: Namhyung Kim Cc: Ingo Molnar , Thomas Gleixner , James Clark , Jiri Olsa , Ian Rogers , Adrian Hunter , Clark Williams , linux-kernel@vger.kernel.org, linux-perf-users@vger.kernel.org, Arnaldo Carvalho de Melo Subject: [PATCH v1 5/8] perf report: Add --progress option Date: Sat, 12 Sep 2026 23:34:56 -0300 Message-ID: <20260913023459.112654-6-acme@kernel.org> X-Mailer: git-send-email 2.55.0 In-Reply-To: <20260913023459.112654-1-acme@kernel.org> References: <20260913023459.112654-1-acme@kernel.org> Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable From: Arnaldo Carvalho de Melo Processing a large data type profiling session, e.g. an AMD IBS one, can take a long time and, when using the stdio output, 'perf report' gives no feedback about which phase it is in nor about how far along it is: the TUI has a progress bar for that, but in the stdio case the ui_progress updates, that are already there, are dropped on the floor. Add a --progress option that installs a stdio backend for ui_progress, ui/stdio/progress.c, printing the phase title, the percentage done and the current/total counts to stderr: Processing events... [ 42.3%] 317M / 746M Merging related events... [ 61.0%] 309026 / 506686 Sorting events for output... [ 98.2%] 14132 / 14387 The first one is the perf.data file size based progress already kept while reading events, sized with the same unit_number__scnprintf() used by the TUI progress bar title; the other two are the hist entry based ones for the hist entry merging (collapse) and output sorting phases, that print raw counts. Steps are 1% of the phase total, the default (total / 16) is tuned for the character cell based TUI bar, and the last update normally stops short of the total, so finishing a phase prints it as complete. When stderr is a tty the line is updated in place, with each phase getting a line of its own, otherwise one line is printed per update, so that redirecting stderr to a file leaves a readable log of the phases. Phases can be nested, e.g. the ordered events flushes that take place while the "Processing events..." phase is still in progress, so the backend keeps track of the ones started so far to be able to complete the right one when a phase finishes, as ui_progress__finish() gets no arguments. That bookkeeping requires ui_progress__init() and ui_progress__finish() to be paired, and a few callers had paths returning early without the finish: do_flush() in ordered-events.c on session_done() and on deliver() errors, and the ENOMEM paths right after the init in __perf_session__process_pipe_events() and __perf_session__process_dir_event= s(). Fix those, with a backend that kept the stale entries it would print through dangling pointers to returned stack frames, and have the update() method ignore anything that doesn't match the innermost running phase, printing nothing is better than printing another phase's numbers or reading the stack array with index -1. Committer testing: =E2=AC=A2 [acme@toolbx perf-tools-next]$ perf record -o perf.data.small -= - sleep 0.2 [ perf record: Woken up 2 times to write data ] [ perf record: Captured and wrote 0.002 MB perf.data.small (7 samples) ] =E2=AC=A2 [acme@toolbx perf-tools-next]$ perf report --progress -i perf.d= ata.small > /dev/null Processing events... [ 0.0%] 0B / 2K Processing events... [ 99.6%] 2040B / 2K Processing time ordered events... [100.0%] 13 / 13 Processing events... [100.0%] 2K / 2K Sorting events for output... [100.0%] 5 / 5 =E2=AC=A2 [acme@toolbx perf-tools-next]$ Nothing goes to stderr without --progress: =E2=AC=A2 [acme@toolbx perf-tools-next]$ perf report --stdio -i perf.data= .small > /dev/null 2> stderr.txt =E2=AC=A2 [acme@toolbx perf-tools-next]$ wc -c stderr.txt 0 stderr.txt =E2=AC=A2 [acme@toolbx perf-tools-next]$ With a 321 MB perf.data (perf mem record, i7-14700K): =E2=AC=A2 [acme@toolbx perf-tools-next]$ perf report --progress -i perf.d= ata.i7 > /dev/null Processing events... [ 0.0%] 0B / 306M [...] Sorting events for output... [100.0%] 29996 / 29996 =E2=AC=A2 [acme@toolbx perf-tools-next]$ Which is what prompted this: an AMD IBS data type profile session hangs in the DWARF type resolution done when merging hist entries, with --progress it now is visible that it is not the event loading that is stuck, but the merging, at a specific hist entry: =E2=AC=A2 [acme@toolbx perf-tools-next]$ perf report --progress -s type -= i perf.data.ibs > /dev/null Processing events... [ 0.0%] 0B / 746M [...] Processing events... [100.0%] 746M / 746M Merging related events... [ 58.0%] 293828 / 506686 Merging related events... [ 59.0%] 298894 / 506686 Merging related events... [ 60.0%] 303960 / 506686 Merging related events... [ 61.0%] 309026 / 506686 =E2=AC=A2 [acme@toolbx perf-tools-next]$ gdb -p $(pidof perf) -batch -ex = 'bt 6' -ex detach #0 0x0000000000773f31 in die_get_pointer_type () #1 0x000000000077b817 in find_data_type () #2 0x0000000000636f20 in __hist_entry__get_data_type () #3 0x0000000000639c65 in hist_entry__get_data_type () #4 0x00000000006e57a8 in sort__type_collapse () #5 0x00000000006ef0ee in hists__collapse_resort () =E2=AC=A2 [acme@toolbx perf-tools-next]$ The report related entries in 'perf test' pass: =E2=AC=A2 [acme@toolbx perf-tools-next]$ perf test 17 27 30 31 85 88 17: Match and link multiple hists : Ok 27: Filter hist entries : Ok 30: Sort output of hist entries : Ok 31: Cumulate child hist entries : Ok 85: Test that perf report includes file offsets and event type names in d= iagnostic messages. : Skip 88: Test that perf report handles truncated perf.data gracefully (no cras= h, no segfault =E2=80=94 clean error exit).: Ok =E2=AC=A2 [acme@toolbx perf-tools-next]$ Assisted-by: LLM Signed-off-by: Arnaldo Carvalho de Melo --- tools/perf/Documentation/perf-report.txt | 13 ++ tools/perf/builtin-report.c | 11 ++ tools/perf/ui/Build | 1 + tools/perf/ui/progress.h | 2 + tools/perf/ui/stdio/progress.c | 162 +++++++++++++++++++++++ tools/perf/util/ordered-events.c | 17 ++- tools/perf/util/session.c | 12 +- 7 files changed, 211 insertions(+), 7 deletions(-) create mode 100644 tools/perf/ui/stdio/progress.c diff --git a/tools/perf/Documentation/perf-report.txt b/tools/perf/Document= ation/perf-report.txt index fed6af128ff07e4c..2db4b069546130f0 100644 --- a/tools/perf/Documentation/perf-report.txt +++ b/tools/perf/Documentation/perf-report.txt @@ -29,6 +29,19 @@ OPTIONS --quiet:: Do not show any warnings or messages. (Suppress -v) =20 +--progress:: + Show progress for each of the processing phases, printing the + percentage done and the current/total counts: the first phase + counts the bytes of the perf.data file processed so far, the + merge and sort phases count hist entries, e.g.: + + Processing events... [ 42.3%] 4G / 10G + Merging related events... [ 7.1%] 1024 / 14387 + Sorting events for output... [ 98.2%] 14132 / 14387 + + It is a no-op when using the TUI or GTK browsers, that already + present progress information. + -n:: --show-nr-samples:: Show the number of samples for each symbol diff --git a/tools/perf/builtin-report.c b/tools/perf/builtin-report.c index 4d3383d1daae2ed9..fe59a429b9d6eef9 100644 --- a/tools/perf/builtin-report.c +++ b/tools/perf/builtin-report.c @@ -87,6 +87,7 @@ struct report { bool use_gtk; #endif bool use_stdio; + bool progress; bool show_full_info; bool show_threads; bool inverted_callchain; @@ -1373,6 +1374,8 @@ int cmd_report(int argc, const char **argv) "Use the stdio interface"), OPT_BOOLEAN(0, "weights", &symbol_conf.annotate_weight, "Show or hide weight columns in annotation. Default show if non-zero."), + OPT_BOOLEAN(0, "progress", &report.progress, + "Show progress while processing the perf.data file"), OPT_BOOLEAN(0, "header", &report.header, "Show data header."), OPT_BOOLEAN(0, "header-only", &report.header_only, "Show only data header."), @@ -1765,6 +1768,14 @@ int cmd_report(int argc, const char **argv) else use_browser =3D 0; =20 + /* + * The TUI/GTK browsers already show progress, this is for the stdio + * case, where we print the percentage of the perf.data file that was + * processed so far, for each of the processing phases. + */ + if (report.progress && use_browser =3D=3D 0) + stdio_progress__init(); + if (report.data_type && use_browser =3D=3D 1) { symbol_conf.annotate_data_member =3D true; symbol_conf.annotate_data_sample =3D true; diff --git a/tools/perf/ui/Build b/tools/perf/ui/Build index 6005f813c9e3990c..a7b1740d51c80f23 100644 --- a/tools/perf/ui/Build +++ b/tools/perf/ui/Build @@ -4,6 +4,7 @@ perf-ui-y +=3D progress.o perf-ui-y +=3D util.o perf-ui-y +=3D hist.o perf-ui-y +=3D stdio/hist.o +perf-ui-y +=3D stdio/progress.o =20 CFLAGS_setup.o +=3D -DLIBDIR=3D"BUILD_STR($(LIBDIR))" =20 diff --git a/tools/perf/ui/progress.h b/tools/perf/ui/progress.h index 4f52c37b2f099a82..03f1a8bb260ba076 100644 --- a/tools/perf/ui/progress.h +++ b/tools/perf/ui/progress.h @@ -23,6 +23,8 @@ void __ui_progress__init(struct ui_progress *p, u64 total, =20 void ui_progress__update(struct ui_progress *p, u64 adv); =20 +void stdio_progress__init(void); + struct ui_progress_ops { void (*init)(struct ui_progress *p); void (*update)(struct ui_progress *p); diff --git a/tools/perf/ui/stdio/progress.c b/tools/perf/ui/stdio/progress.c new file mode 100644 index 0000000000000000..1d1eddd192777f9d --- /dev/null +++ b/tools/perf/ui/stdio/progress.c @@ -0,0 +1,162 @@ +// SPDX-License-Identifier: GPL-2.0 +/* + * Progress feedback for the stdio (non-TUI/GTK) case, enabled via + * 'perf report --progress': the perf.data file size based progress for + * the event processing phase, plus the hist entry based ones for the + * merging and sorting phases. + */ +#include +#include +#include +#include +#include "../../util/debug.h" +#include "../../util/units.h" +#include "../progress.h" + +/* + * Phases can be nested, e.g. the ordered events flushes that take place + * while the "Processing events..." phase is still in progress, so keep + * track of the ones started so far to be able to complete the right one + * when a phase finishes, as ui_progress__finish() gets no arguments. The + * bookkeeping of what was last printed is per phase: when the nested one + * finishes, the outer one must still know that its own last line was + * already the complete one, else it would be printed again at finish time. + */ +#define STDIO_PROGRESS__MAX_DEPTH 8 + +struct stdio_progress_phase { + struct ui_progress *p; + u64 last_printed; + size_t last_len; +}; + +static struct stdio_progress_phase stdio_progress__stack[STDIO_PROGRESS__M= AX_DEPTH]; +static int stdio_progress__depth; +static bool stdio_progress__is_tty; + +static void stdio_progress__print_phase(struct stdio_progress_phase *phase, + u64 curr) +{ + struct ui_progress *p =3D phase->p; + char buf_cur[20], buf_tot[20], buf[128]; + double percent =3D p->total ? 100.0 * (double)curr / (double)p->total : 0= .0; + size_t len; + + /* + * Only the completion line shows 100.0%: a 99.99% progress would + * round up to it in the display, making the line printed at finish + * time look like a duplicate. + */ + if (curr < p->total && percent > 99.9) + percent =3D 99.9; + + if (p->size) { + unit_number__scnprintf(buf_cur, sizeof(buf_cur), curr); + unit_number__scnprintf(buf_tot, sizeof(buf_tot), p->total); + len =3D scnprintf(buf, sizeof(buf), "%s [%5.1f%%] %s / %s", + p->title, percent, buf_cur, buf_tot); + } else { + len =3D scnprintf(buf, sizeof(buf), "%s [%5.1f%%] %" PRIu64 " / %" PRIu6= 4, + p->title, percent, curr, p->total); + } + + if (!stdio_progress__is_tty) { + fprintf(stderr, "%s\n", buf); + goto out; + } + + /* Pad to the length of the previous line to erase its leftovers. */ + fprintf(stderr, "\r%s%*s", buf, + (int)(len < phase->last_len ? phase->last_len - len : 0), ""); + phase->last_len =3D len; +out: + phase->last_printed =3D curr; + fflush(stderr); +} + +static void stdio_progress__finish(void); + +static void __stdio_progress__init(struct ui_progress *p) +{ + /* + * The default step (total / 16) is meant for the TUI progress + * bar, for stdio, where a percentage is printed, use 1% steps. + */ + p->next =3D p->step =3D p->total / 100 ?: 1; + + if (stdio_progress__depth =3D=3D STDIO_PROGRESS__MAX_DEPTH) { + pr_warning("progress phases nested deeper than %d, completing %s\n", + STDIO_PROGRESS__MAX_DEPTH, + stdio_progress__stack[stdio_progress__depth - 1].p->title); + stdio_progress__finish(); + } + + /* Start a nested phase in a line of its own. */ + if (stdio_progress__depth && stdio_progress__is_tty) + fputc('\n', stderr); + + stdio_progress__stack[stdio_progress__depth++] =3D + (struct stdio_progress_phase) { + .p =3D p, + .last_printed =3D 0, + .last_len =3D 0, + }; + + stdio_progress__print_phase(&stdio_progress__stack[stdio_progress__depth = - 1], + p->curr); +} + +static void stdio_progress__update(struct ui_progress *p) +{ + /* + * Phases are started/finished via init/finish, if we get an + * update that doesn't match the innermost running phase then + * something got out of sync, print nothing rather than some + * other phase's numbers, or, with no phases at all, reading + * stdio_progress__stack[-1]. + */ + if (!stdio_progress__depth || + stdio_progress__stack[stdio_progress__depth - 1].p !=3D p) + return; + + stdio_progress__print_phase(&stdio_progress__stack[stdio_progress__depth = - 1], + p->curr); +} + +static void stdio_progress__finish(void) +{ + struct stdio_progress_phase *phase; + + if (!stdio_progress__depth) + return; + + phase =3D &stdio_progress__stack[--stdio_progress__depth]; + + /* + * As we print only at 1% steps, the last line printed may have + * stopped short of the total, so close this phase showing it as + * complete, unless that was what got printed already. + */ + if (phase->last_printed !=3D phase->p->total) + stdio_progress__print_phase(phase, phase->p->total); + + phase->last_printed =3D 0; + phase->last_len =3D 0; + + if (stdio_progress__is_tty) + fputc('\n', stderr); + + fflush(stderr); +} + +static struct ui_progress_ops stdio_progress__ops =3D { + .init =3D __stdio_progress__init, + .update =3D stdio_progress__update, + .finish =3D stdio_progress__finish, +}; + +void stdio_progress__init(void) +{ + stdio_progress__is_tty =3D isatty(STDERR_FILENO) =3D=3D 1; + ui_progress__ops =3D &stdio_progress__ops; +} diff --git a/tools/perf/util/ordered-events.c b/tools/perf/util/ordered-eve= nts.c index a5857f9f5af2d3de..4063403d4978b45e 100644 --- a/tools/perf/util/ordered-events.c +++ b/tools/perf/util/ordered-events.c @@ -237,14 +237,16 @@ static int do_flush(struct ordered_events *oe, bool s= how_progress) ui_progress__init(&prog, oe->nr_events, "Processing time ordered events.= .."); =20 list_for_each_entry_safe(iter, tmp, head, list) { - if (session_done()) - return 0; + if (session_done()) { + ret =3D 0; + goto out_progress; + } =20 if (iter->timestamp > limit) break; ret =3D oe->deliver(oe, iter); if (ret < 0) - return ret; + goto out_progress; =20 ordered_events__delete(oe, iter); oe->last_flush =3D iter->timestamp; @@ -258,10 +260,17 @@ static int do_flush(struct ordered_events *oe, bool s= how_progress) else if (last_ts <=3D limit) oe->last =3D list_entry(head->prev, struct ordered_event, list); =20 + ret =3D 0; +out_progress: + /* + * Always pair ui_progress__init() with ui_progress__finish(), the + * stdio progress backend tracks phases on a stack and an early + * return that skipped the finish would leave the dead 'prog' on it. + */ if (show_progress) ui_progress__finish(); =20 - return 0; + return ret; } =20 static int __ordered_events__flush(struct ordered_events *oe, enum oe_flus= h how, diff --git a/tools/perf/util/session.c b/tools/perf/util/session.c index 3237870a1a34b62c..85166042e899aada 100644 --- a/tools/perf/util/session.c +++ b/tools/perf/util/session.c @@ -3146,8 +3146,12 @@ static int __perf_session__process_pipe_events(struc= t perf_session *session) cur_size =3D sizeof(union perf_event); =20 buf =3D malloc(cur_size); - if (!buf) - return -errno; + if (!buf) { + err =3D -errno; + if (update_prog) + ui_progress__finish(); + return err; + } ordered_events__set_copy_on_queue(oe, true); more: event =3D buf; @@ -3646,8 +3650,10 @@ static int __perf_session__process_dir_events(struct= perf_session *session) } =20 rd =3D calloc(nr_readers, sizeof(struct reader)); - if (!rd) + if (!rd) { + ui_progress__finish(); return -ENOMEM; + } =20 rd[0] =3D (struct reader) { .fd =3D perf_data__fd(session->data), --=20 2.55.0 From nobody Fri Sep 25 12:05:33 2026 Received: from smtp.kernel.org (aws-us-west-2-korg-mail-alma10-1.taild15c8.ts.net [100.103.45.18]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 1C96937881D; Sun, 13 Sep 2026 02:35:32 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=100.103.45.18 ARC-Seal: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1789266934; cv=none; b=X7ZwHB6rgpIcaVQl+unK2A+XPP9+xHqgwVWj9WisNvwfMhfvHv3IGcwAFStdqR9FU+KlwCOBECUYkCxMs87rTEuq/h8WUKeVT+SxTszY+KUif4pHbAM8GiNGMb7+8a7pzHQ6sR/QuHgiD+u2juEyW6jGDOoiQtzM2chO4ZHooJk= ARC-Message-Signature: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1789266934; c=relaxed/simple; bh=hKeygevbZDj/gofy3Y4K5Xvnm7BQhA1Uc1y0imOoqp8=; h=From:To:Cc:Subject:Date:Message-ID:In-Reply-To:References: MIME-Version:Content-Type; b=PXjCQQa2K3Iy5LLMiSpVEI5/5A19i9Bn+wiXmrbq1g1PD27h6yWjGUaqr9BbomzXj9fk0iSu6pbERzzgjql18cn9JndJ1qANe/gYHobn/bFiZeb7NbmrwjvsnnQs81QmS7Iw8gGRUONELYNFn2YQ8shuQrUPcVp1GkUzG/pr8Sc= ARC-Authentication-Results: i=1; smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org header.b=l26BWNh2; arc=none smtp.client-ip=100.103.45.18 Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org header.b="l26BWNh2" Received: by smtp.kernel.org (Postfix) with ESMTPSA id 340B31F000FF; Sun, 13 Sep 2026 02:35:28 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=kernel.org; s=k20260515; t=1789266932; bh=bw75LGvcX0skKZZMo0q1QXJFklSNxnYhlkvSSn20Vyk=; h=From:To:Cc:Subject:Date:In-Reply-To:References; b=l26BWNh26lyyAK9D05hN4EelHLWHLZPJXEW90Q5EhWYTkJLaKWHAT/X0quOf8rXIk dfiaOFLCk+9hkemg2e0+Al44izycvYjxfBPEBzoW4b5JMx7LvHO5AUMdQQXyJOb+CH AOgclEFNCT9u7JWxSxHrbolkld2iFvcn/IHs5kv3rPXhDoEWXw9vN110UjC9FSRePU ZKFlv3AJfZ5bD2gdRtLtK+qZaHtgvv4S4OPSSsrfUsVeTdBoJns5+mefpI00bGDSqP xmfpxEJ35/TRR9VrgtbHjdIWUsYePg3gVtHnCCnXHiEV8LME2+b1i39TS3koep9Pij YJ11ooDYLcYIg== From: Arnaldo Carvalho de Melo To: Namhyung Kim Cc: Ingo Molnar , Thomas Gleixner , James Clark , Jiri Olsa , Ian Rogers , Adrian Hunter , Clark Williams , linux-kernel@vger.kernel.org, linux-perf-users@vger.kernel.org, Arnaldo Carvalho de Melo Subject: [PATCH v1 6/8] perf scripts: Add perf-stuck, to tell where a running perf is stuck Date: Sat, 12 Sep 2026 23:34:57 -0300 Message-ID: <20260913023459.112654-7-acme@kernel.org> X-Mailer: git-send-email 2.55.0 In-Reply-To: <20260913023459.112654-1-acme@kernel.org> References: <20260913023459.112654-1-acme@kernel.org> Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable From: Arnaldo Carvalho de Melo A perf that takes forever is hard to tell apart from one that is stuck in a loop, and when it is stuck there is no way to know where without attaching gdb to it and looking around, which is what this does, from the outside, sampling /proc/ at a fixed interval: =E2=AC=A2 [acme@toolbx perf-tools-next]$ tools/perf/scripts/perf-stuck.sh= -i 15 -n 4 -l ibs.log $(pgrep -x perf) watching 2297313 (perf report --progress -s type -i perf.data.ibs) every = 15s 09:39:34 state=3DR cpu=3D+0 (0.00s) rss=3D664295kB stack=3D7ffc3ae31000-7= ffc3ae52000 size=3D132kB Merging related events... [ 39.0%] 197574 / 506686 09:39:49 state=3DR cpu=3D+1496 (14.96s) rss=3D665383kB stack=3D7ffc3ae310= 00-7ffc3ae52000 size=3D132kB stuck=3D1 Merging related events... [ 39.0%] 1= 97574 / 506686 09:40:04 state=3DR cpu=3D+1497 (14.97s) rss=3D665383kB stack=3D7ffc3ae310= 00-7ffc3ae52000 size=3D132kB stuck=3D2 Merging related events... [ 39.0%] 1= 97574 / 506686 09:40:19 state=3DR cpu=3D+1497 (14.97s) rss=3D502250kB stack=3D7ffc3ae310= 00-7ffc3ae52000 size=3D132kB stuck=3D0 Merging related events... [ 61.0%] 3= 09026 / 506686 The CPU time used grows by a whole interval on every sample while the [stack] mapping, that would be moving down if this was recursion, stays put, so that one is spinning, and the last line of the progress log of 'perf report --progress' tells in which phase. With -g it runs gdb when no progress is made for two consecutive samples, using the perf-stuck.gdb that sits next to it, which adds the perf-die-chain command used by the next patch, to print the DIE chain a DWARF type chasing loop is walking when the perf being watched is stuck in one of those. It is a prototype: this wants to become a first class 'perf stuck' command, sampling a running process from inside perf, instead of this shell script poking at /proc and shelling out to gdb. Example: =E2=AC=A2 [acme@toolbx perf-tools-next]$ tools/perf/scripts/perf-stuck.sh= -i 1 -n 3 -g $(pgrep -x sleep) watching 2342826 (sleep 45 ) every 1s 11:58:36 state=3DS cpu=3D+0 (0.00s) rss=3D492kB stack=3D7ffe21f89000-7ffe= 21faa000 size=3D132kB stuck=3D2 (no progress log) ... gdb output of 2342826 in /tmp/perf-stuck-gdb.Uz9i5p =E2=AC=A2 [acme@toolbx perf-tools-next]$ tail -4 /tmp/perf-stuck-gdb.Uz9i= 5p #3 0x0000555bc6ddc28f in main () not in a DWARF type chaser, try: bt not in find_data_type() [Inferior 1 (process 2342826) detached] =E2=AC=A2 [acme@toolbx perf-tools-next]$ Assisted-by: LLM Signed-off-by: Arnaldo Carvalho de Melo --- tools/perf/scripts/perf-stuck.gdb | 104 +++++++++++++++++++ tools/perf/scripts/perf-stuck.sh | 165 ++++++++++++++++++++++++++++++ 2 files changed, 269 insertions(+) create mode 100644 tools/perf/scripts/perf-stuck.gdb create mode 100755 tools/perf/scripts/perf-stuck.sh diff --git a/tools/perf/scripts/perf-stuck.gdb b/tools/perf/scripts/perf-st= uck.gdb new file mode 100644 index 0000000000000000..12a3f2952a68c18a --- /dev/null +++ b/tools/perf/scripts/perf-stuck.gdb @@ -0,0 +1,104 @@ +# SPDX-License-Identifier: GPL-2.0 +# +# gdb commands for a perf that is stuck, used by perf-stuck.sh -g and usab= le +# directly: +# +# gdb -p $(pgrep -x perf) -batch -x perf-stuck.gdb -ex bt +# +# PROTOTYPE: part of the perf-stuck.sh stopgap, see the note at the start = of +# that script: this wants to move into a first class 'perf stuck' command, +# which would print these DIE chains by itself, without gdb. +# +# The settings are the ones that keep a batch attach from stopping to ask +# questions (debuginfod, pagination) and that make the output readable. +# +# The commands are for the DWARF type chasers in util/dwarf-aux.c, the +# functions a data type profiling 'perf report -s type' spins in when a +# debug info file has a type chain that got into a cycle: +# +# perf-die-chain [iterations] +# perf-die-chain-all [iterations] +# perf-dso +# +# For each iteration of the chasing loop they print the DIE address, the +# CU it came from, its offset in the debug file, its tag and its name: a +# cycle shows up as the same handful of (addr, cu) pairs repeating, and a +# CU that changes from one iteration to the next means the chase is +# hopping between a debug file and its dwz common file. + +set pagination off +set confirm off +set debuginfod enabled off +set print pretty on +set height 0 +set width 0 + +define perf-die-chain + if $argc < 2 + printf "usage: perf-die-chain [iterations]\n" + else + frame function $arg0 + if $argc =3D=3D 3 + set $perf_die_chain_n =3D $arg2 + else + set $perf_die_chain_n =3D 10 + end + set $perf_die_chain_head =3D $pc + set $perf_die_chain_i =3D 0 + while $perf_die_chain_i < $perf_die_chain_n + printf "chain[%d] die=3D%p addr=3D%p cu=3D%p off=3D0x%lx tag=3D%d na= me=3D%s\n", $perf_die_chain_i, $arg1, $arg1->addr, $arg1->cu, ((Dwarf_Off) = dwarf_dieoffset($arg1)), ((int) dwarf_tag($arg1)), ((char *) dwarf_diename(= $arg1)) + until *$perf_die_chain_head + set $perf_die_chain_i =3D $perf_die_chain_i + 1 + end + end +end + +document perf-die-chain +Print the DIE chain being walked by a DWARF type chasing loop. +usage: perf-die-chain [iterations] + perf-die-chain die_get_pointer_type type_die + perf-die-chain __die_get_real_type vr_die + perf-die-chain die_get_real_type vr_die +end + +define perf-die-chain-all + if $argc =3D=3D 0 + set $perf_die_chain_n =3D 10 + else + set $perf_die_chain_n =3D $arg0 + end + if $_any_caller_is("die_get_pointer_type", 20) + printf "stuck in die_get_pointer_type():\n" + perf-die-chain die_get_pointer_type type_die $perf_die_chain_n + else + if $_any_caller_is("__die_get_real_type", 20) + printf "stuck in __die_get_real_type():\n" + perf-die-chain __die_get_real_type vr_die $perf_die_chain_n + else + if $_any_caller_is("die_get_real_type", 20) + printf "stuck in die_get_real_type():\n" + perf-die-chain die_get_real_type vr_die $perf_die_chain_n + else + printf "not in a DWARF type chaser, try: bt\n" + end + end + end +end + +document perf-die-chain-all +Find which DWARF type chaser the process is in and print the DIE chain. +usage: perf-die-chain-all [iterations] +end + +define perf-dso + if $_any_caller_is("find_data_type", 20) + frame function find_data_type + printf "dso=3D%s ip=3D0x%lx sym=3D%s\n", dloc->ms.map->dso->name, dloc= ->ip, dloc->ms.sym->name + else + printf "not in find_data_type()\n" + end +end + +document perf-dso +Print the dso, ip and symbol of the data location being resolved. +end diff --git a/tools/perf/scripts/perf-stuck.sh b/tools/perf/scripts/perf-stu= ck.sh new file mode 100755 index 0000000000000000..8b284bcf5e31308f --- /dev/null +++ b/tools/perf/scripts/perf-stuck.sh @@ -0,0 +1,165 @@ +#!/bin/bash +# SPDX-License-Identifier: GPL-2.0 +# +# perf-stuck - tell a spinning perf apart from a blocked or recursing one +# +# Arnaldo Carvalho de Melo +# +# PROTOTYPE: this wants to become a first class 'perf stuck' command, that +# samples a running perf, or any other process, from inside perf, with the +# knowledge of the phases perf goes through and of the DWARF type chasing +# loops built in, instead of this shell script poking at /proc and shelling +# out to gdb. It is here as a stopgap, to be able to tell where a perf is +# stuck while looking at hangs such as the one 'perf report -s type' hits +# on dwz compressed debug info. +# +# Samples /proc/ at a fixed interval and prints, for each sample: +# +# the CPU time used since the previous sample, so a process burning a +# full interval's worth of ticks is spinning, while one using none is +# blocked +# +# the [stack] mapping start, which moves down as the stack grows, the +# giveaway for runaway recursion, together with its size +# +# the last line of a progress log, when one is given, e.g. the stderr +# of 'perf report --progress', to see which phase is stuck +# +# A process that burns CPU with a constant stack and no progress is in an +# unbounded loop, e.g. a die_get_pointer_type() chain that got into a +# cycle, while one whose [stack] start keeps moving down is recursing. +# +# With -g it runs gdb, using the perf-stuck.gdb that sits next to this +# script, when no progress is made for two consecutive samples, which for +# a perf in a DWARF type chasing loop prints the DIE chain it is walking. +# +# usage: perf-stuck.sh [options] + +set -u + +usage() { + cat <<-EOF + usage: perf-stuck.sh [options] + + -i sampling interval (default: 10) + -n stop after this many samples (default: watch till it exits) + -l progress log, its last line is printed with every sample + -g run gdb with perf-stuck.gdb when no progress is made for + two consecutive samples, writing the output to a temp file + -x use this gdb command file instead of perf-stuck.gdb + -h this help + EOF + exit "${1:-0}" +} + +interval=3D10 +count=3D0 +progress_log=3D +use_gdb=3D +gdb_cmds=3D + +while getopts "i:n:l:gx:h" opt; do + case "$opt" in + i) interval=3D$OPTARG ;; + n) count=3D$OPTARG ;; + l) progress_log=3D$OPTARG ;; + g) use_gdb=3D1 ;; + x) gdb_cmds=3D$OPTARG ;; + h) usage 0 ;; + *) usage 1 ;; + esac +done +shift $((OPTIND - 1)) + +[ $# -eq 1 ] || usage 1 + +if [[ "$1" =3D~ ^[0-9]+$ ]]; then + pid=3D$1 +else + pid=3D$(pgrep -x "$1" | head -1) + [ -n "$pid" ] || { echo "no process named '$1'"; exit 1; } +fi + +[ -d /proc/"$pid" ] || { echo "no process $pid"; exit 1; } + +if [ -n "$use_gdb" ] && [ -z "$gdb_cmds" ]; then + gdb_cmds=3D$(dirname "$0")/perf-stuck.gdb + [ -r "$gdb_cmds" ] || { echo "cannot read $gdb_cmds"; exit 1; } +fi + +hz=3D$(getconf CLK_TCK) +psz=3D$(getconf PAGESIZE) +prev_cpu=3D +prev_stack=3D +prev_progress=3D +stuck=3D0 +gdb_done=3D +nsample=3D0 + +echo "watching $pid ($(tr '\0' ' ' < /proc/"$pid"/cmdline)) every ${interv= al}s" + +while :; do + if [ ! -d /proc/"$pid" ]; then + echo "$(date +%T) process gone" + break + fi + + stat=3D($(awk '{print $3, $14 + $15, $24}' /proc/"$pid"/stat)) + state=3D${stat[0]} + cpu=3D${stat[1]} + # field 24 is the resident set size in pages + rss=3D$(( stat[2] * psz / 1024 )) + + stack=3D$(awk '/\[stack\]/{print $1; exit}' /proc/"$pid"/maps) + if [ -n "$stack" ]; then + stack_start=3D0x${stack%-*} + stack_size=3D$(( 0x${stack#*-} - stack_start )) + stack_txt=3D"$stack size=3D$((stack_size / 1024))kB" + else + stack_start=3D + stack_txt=3D"-" + fi + + progress=3D + [ -n "$progress_log" ] && [ -s "$progress_log" ] && progress=3D$(tail -1 = "$progress_log") + + if [ -n "$prev_cpu" ]; then + cpu_delta=3D$(( cpu - prev_cpu )) + # With a progress log, count the samples that show no progress, + # without one there is no progress to look at, so count them all: + # -g then looks at where the process is after two intervals. + if [ -z "$progress_log" ] || + { [ -n "$progress" ] && [ "$progress" =3D "$prev_progress" ]; }; then + stuck=3D$((stuck + 1)) + else + stuck=3D0 + fi + stuck_txt=3D"stuck=3D${stuck}" + [ "$stack_start" !=3D "$prev_stack" ] && stuck_txt=3D"$stuck_txt STACK" + else + cpu_delta=3D0 + stuck_txt=3D"" + fi + + printf '%s state=3D%s cpu=3D+%d (%d.%02ds) rss=3D%dkB stack=3D%s %s %s\n'= \ + "$(date +%T)" "$state" "$cpu_delta" \ + $(( cpu_delta / hz )) $(( (cpu_delta % hz) * 100 / hz )) \ + "$rss" "$stack_txt" "$stuck_txt" "${progress:-(no progress log)}" + + if [ -n "$use_gdb" ] && [ -z "$gdb_done" ] && [ "$stuck" -ge 2 ]; then + gdb_log=3D$(mktemp /tmp/perf-stuck-gdb.XXXXXX) + gdb -p "$pid" -batch -x "$gdb_cmds" -ex bt \ + -ex 'perf-die-chain-all' -ex perf-dso -ex detach > "$gdb_log" 2>&1 + gdb_done=3D1 + echo "... gdb output of $pid in $gdb_log" + fi + + prev_cpu=3D$cpu + prev_stack=3D$stack_start + prev_progress=3D$progress + + nsample=3D$((nsample + 1)) + [ "$count" -gt 0 ] && [ "$nsample" -ge "$count" ] && break + + sleep "$interval" +done --=20 2.55.0 From nobody Fri Sep 25 12:05:33 2026 Received: from smtp.kernel.org (aws-us-west-2-korg-mail-alma10-1.taild15c8.ts.net [100.103.45.18]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id BCDEC376BC1; Sun, 13 Sep 2026 02:35:37 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=100.103.45.18 ARC-Seal: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1789266939; cv=none; b=U4JPNludWwd4xsiesFsMHB0JggJZEZ8+EAAyhwrdgCGc+h252mBG0pbZ30VARe0yoU3GnfHhA2vMre8xBRSnecxymR3Gi/uKtv7tCemxsHyTRbauJ5Tpanxz7RYDPAQ958bKEXqE0X6KetpoFuXDAajmth97Wyi0Bt/Epz/kCNk= ARC-Message-Signature: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1789266939; c=relaxed/simple; bh=F4i1E530PiQ9BZhPss37RHpJT9G2nBbzhfx2pgnpkIs=; h=From:To:Cc:Subject:Date:Message-ID:In-Reply-To:References: MIME-Version:Content-Type; b=TNM0RZVBEMsRnW0WMTwinOWcDpW9FeSuUq5eOQ0DRq0Rt5AMrJUNuVdFj1ukKuERv14iRlOsj70bvDPSYlu0FzpeOTCuqf9kEszvpkDfEq++E2EsL+bGKzB1liTKAOHWYympYA1KYnI4xUuZak01xrbeQHc5jhCqKV0YPy7HpG0= ARC-Authentication-Results: i=1; smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org header.b=JVGbIHS/; arc=none smtp.client-ip=100.103.45.18 Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org header.b="JVGbIHS/" Received: by smtp.kernel.org (Postfix) with ESMTPSA id 64AE31F00893; Sun, 13 Sep 2026 02:35:33 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=kernel.org; s=k20260515; t=1789266937; bh=Zs+HEUmNnElS+rChiLca94YJcxPzka/SnqzS4rf+0jI=; h=From:To:Cc:Subject:Date:In-Reply-To:References; b=JVGbIHS/E+b/GMeF0WcOMoNuwjS0fV8aY+SgHuHcFBauFEkKll/2p/9bmCavGRUgP KuWuqR75WixIvwOMgpKdrhD005j8zGS6yyYrxjKbX3pLGj4ihSjEwkZ+krZx9ypBAG Y4iEj772NT3UYFs6S0oQpUyQ8BuhPruIPIeakGYjKMe6J/p1amZTAg0+xwH9hkqEYB Z4lCPpdR3x3QVTtS9aTez5VeI6hQ5qS0o8OmzCNeJpQBoP6Fd6sUSgeulgHKkfQBGe ocbnhvE1oucyISG7/d+pnwLDMZuygUV4toXMwoubwN6T/iJgKwX8ftEuC6emOfbFb1 LbPDHBHEyGCqQ== From: Arnaldo Carvalho de Melo To: Namhyung Kim Cc: Ingo Molnar , Thomas Gleixner , James Clark , Jiri Olsa , Ian Rogers , Adrian Hunter , Clark Williams , linux-kernel@vger.kernel.org, linux-perf-users@vger.kernel.org, Arnaldo Carvalho de Melo Subject: [PATCH v1 7/8] perf annotate-data: Resolve type DIEs in the debug file they came from Date: Sat, 12 Sep 2026 23:34:58 -0300 Message-ID: <20260913023459.112654-8-acme@kernel.org> X-Mailer: git-send-email 2.55.0 In-Reply-To: <20260913023459.112654-1-acme@kernel.org> References: <20260913023459.112654-1-acme@kernel.org> Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable From: Arnaldo Carvalho de Melo A 'perf report -s type' on a 783 MB AMD IBS data type profiling session hangs, burning all of a CPU and producing no output: =E2=AC=A2 [acme@toolbx perf-tools-next]$ perf report --progress -s type -= i perf.data.ibs > /dev/null Processing events... [100.0%] 746M / 746M Merging related events... [ 58.0%] 293828 / 506686 Merging related events... [ 59.0%] 298894 / 506686 Merging related events... [ 60.0%] 303960 / 506686 Merging related events... [ 61.0%] 309026 / 506686 [ ... nothing else, ever ... ] It is a spin and not a slow path: with perf-stuck the CPU time used grows by a whole interval on every sample, while the [stack] mapping, which would be moving down if this was recursion, stays put: =E2=AC=A2 [acme@toolbx perf-tools-next]$ tools/perf/scripts/perf-stuck.sh= -i 15 -n 4 -l ibs.log $(pgrep -x perf) watching 2297313 (perf report --progress -s type -i perf.data.ibs) every = 15s 09:39:34 state=3DR cpu=3D+0 (0.00s) rss=3D664295kB stack=3D7ffc3ae31000-7= ffc3ae52000 size=3D132kB Merging related events... [ 39.0%] 197574 / 506686 09:39:49 state=3DR cpu=3D+1496 (14.96s) rss=3D665383kB stack=3D7ffc3ae310= 00-7ffc3ae52000 size=3D132kB stuck=3D1 Merging related events... [ 39.0%] 1= 97574 / 506686 09:40:04 state=3DR cpu=3D+1497 (14.97s) rss=3D665383kB stack=3D7ffc3ae310= 00-7ffc3ae52000 size=3D132kB stuck=3D2 Merging related events... [ 39.0%] 1= 97574 / 506686 09:40:19 state=3DR cpu=3D+1497 (14.97s) rss=3D502250kB stack=3D7ffc3ae310= 00-7ffc3ae52000 size=3D132kB stuck=3D0 Merging related events... [ 61.0%] 3= 09026 / 506686 Attaching gdb and stepping the loop, printing dwarf_dieoffset() and dwarf_tag() for the DIE being chased on each trip round it, shows the chase never moving, on a typedef that refers to itself: =E2=AC=A2 [acme@toolbx perf-tools-next]$ gdb -p $(pgrep -x perf) -batch -= x tools/perf/scripts/perf-stuck.gdb -ex 'perf-die-chain die_get_pointer_typ= e type_die 8' -ex perf-dso -ex detach stuck in die_get_pointer_type(): #3 0x0000000000772421 in die_get_pointer_type (type_die=3D0x7ffc3ae4b710= , type_die@entry=3D0x7ffc3ae4b6f0, die_mem=3Ddie_mem@entry=3D0x7ffc3ae4b710= ) at util/dwarf-aux.c:327 327 type_die =3D die_get_type(type_die, die_mem); chain[0] die=3D0x7ffc3ae4b710 addr=3D0x7ff6811591ef cu=3D0x44ef0878 off= =3D0x1f tag=3D22 name=3D(null) chain[1] die=3D0x7ffc3ae4b710 addr=3D0x7ff6811591ef cu=3D0x44ef0878 off= =3D0x1f tag=3D22 name=3D(null) [ ... the very same DIE, forever ... ] dso=3D/usr/lib64/libz.so.1.3.1.zlib-ng ip=3D0xe2e sym=3Dbuild_tree The DIE is at offset 0x1f of the debug info of libz.so.1, which is zlib-ng, and is one of the dwz compressed ones: the type DIEs shared by more than one CU live in the common file, where 0x1f is a perfectly good DW_TAG_base_type: =E2=AC=A2 [acme@toolbx perf-tools-next]$ readelf --debug-dump=3Dinfo /usr= /lib/debug/.dwz/zlib-ng-2.3.3-3.fc44.x86_64 | sed -n '/Compilation Unit @ o= ffset 0:/,/Compilation Unit @ offset 0x5f:/p' Compilation Unit @ offset 0: Length: 0x5b (32-bit) Version: 5 Unit Type: DW_UT_partial (3) <0>: Abbrev Number: 1 (DW_TAG_partial_unit) [...] <1><1f>: Abbrev Number: 62 (DW_TAG_base_type) <20> DW_AT_byte_size : 4 <21> DW_AT_encoding : 5 (signed) <22> DW_AT_name : int while in the main debug file that same offset is not a DIE at all, it is the start of another unit's header: =E2=AC=A2 [acme@toolbx perf-tools-next]$ readelf --debug-dump=3Dinfo /usr= /lib/debug/usr/lib64/libz.so.1.3.1.zlib-ng-2.3.3-3.fc44.x86_64.debug | grep= 'Compilation Unit @' | head -2 Compilation Unit @ offset 0: Compilation Unit @ offset 0x1f: die_collect_vars() saves the dwarf_dieoffset() of the type DIE, which is relative to the file that DIE lives in, and update_var_state() then hands that offset to dwarf_offdie() together with the main debug file, where dwarf_offdie() parses whatever is there as a DIE, in this case the one typedef that refers to itself, which is what makes the "follow the typedefs and qualifiers until a pointer or an array type" loop in die_get_pointer_type() spin. So record, next to the offset, whether the type DIE was in the file the variable DIE came from or in the dwz common one, and resolve the offset in the file it came from, which is what the new die_get_type_die() does. Which of the two that is does not have to be guessed from what is at the offset: dwz encodes the references into its common file as DW_FORM_GNU_ref_alt, so elfutils resolves them into the alt Dwarf and the CU of the resulting type DIE belongs to that other file, so comparing the Dwarf each of the two CUs belongs to, die_same_file(), settles it exactly, for any number of hops from the variable DIE. Then bound the chases themselves: no sane chain of typedefs and qualifiers is 32 DIEs long, no sane nesting for the struct and union members that __add_member_cb() follows recursively is 8 deep, and the same recursion bound covers the type names die_get_typename_from_type() builds by following pointers and arrays, so that a debug info file broken in some other way makes perf give up on a type, telling about it with pr_debug, visible with -v, instead of looking like it hung. The member nesting bound is reported with pr_debug_dtp (visible with -vvv or -D type-profile). Cycles can't occur in member trees from valid DWARF, embedded members can't be recursive in C, so the nesting bound only ever bites legitimate depth and the member where the recursion was cut is marked 'truncated', which the JSON exporter added in a subsequent series reports to its consumers, so that they can tell a truncated tree from one that really ends there. die_get_type_die() then has no fallback to the other file: resolving an alt file offset in the main file is the misparse above, so it resolves in the file the offset was recorded as belonging to, and gives up on the type when the offset does not resolve there. The tag the type DIE had is kept as a sanity check, a mismatch means the debug info changed under perf or is broken in yet another way, and the bounds on the type chasers remain the backstop: a debug info file broken in some other way still makes perf give up on a type with a pr_debug instead of hanging. Testing: Before, on the 783 MB AMD IBS session, killed after some 8 minutes stuck at 61%: =E2=AC=A2 [acme@toolbx perf-tools-next]$ perf report --progress -s type -= i perf.data.ibs > /dev/null Processing events... [100.0%] 746M / 746M Merging related events... [ 61.0%] 309026 / 506686 =E2=AC=A2 [acme@toolbx perf-tools-next]$ After, the whole session is processed, and the zlib-ng types, from the build_tree() hist entry that used to hang it, show up: =E2=AC=A2 [acme@toolbx perf-tools-next]$ perf report --progress -s type -= i perf.data.ibs > ibs.out Processing events... [100.0%] 746M / 746M Merging related events... [100.0%] 506686 / 506686 Sorting events for output... [100.0%] 1428 / 1428 =E2=AC=A2 [acme@toolbx perf-tools-next]$ grep -E "deflate_state|inflate_s= tate|internal_state" ibs.out 0.00% deflate_state 0.00% deflate_state* 0.00% struct inflate_state 0.00% struct inflate_state* 0.00% struct internal_state =E2=AC=A2 [acme@toolbx perf-tools-next]$ perf test 17 27 30 31 85 88 17: Match and link multiple hists : Ok 27: Filter hist entries : Ok 30: Sort output of hist entries : Ok 31: Cumulate child hist entries : Ok 85: Test that perf report includes file offsets and event type names in d= iagnostic messages. : Ok 88: Test that perf report handles truncated perf.data gracefully (no cras= h, no segfault =E2=80=94 clean error exit).: Skip =E2=AC=A2 [acme@toolbx perf-tools-next]$ Requiring elfutils 0.160 for this: dwarf_cu_getdwarf(), the function that tells which Dwarf a CU belongs to, first appeared in 0.160 ("libdw: New functions dwarf_cu_getdwarf, dwarf_cu_die", elfutils NEWS), so the libdw feature test now probes for it, in tools/build/feature/test-libdw.c, and Makefile.config says 0.160 where it said 0.157. The probe takes the address instead of calling it, as that is all that is needed to make a 0.157-0.159 elfutils, from 2014 and without the symbol, disable dwarf support with the existing message rather than fail to link dwarf-aux.c. Fixes: 06b2ce75386df04b ("perf annotate-data: Maintain variable type info") Fixes: 55ee3d005d62279d ("perf annotate-data: Add a cache for global variab= le types") Assisted-by: LLM Signed-off-by: Arnaldo Carvalho de Melo --- tools/build/feature/test-libdw.c | 15 ++- tools/perf/Makefile.config | 2 +- tools/perf/util/annotate-data.c | 55 ++++++++--- tools/perf/util/annotate-data.h | 3 + tools/perf/util/dwarf-aux.c | 161 +++++++++++++++++++++++++++---- tools/perf/util/dwarf-aux.h | 33 +++++++ 6 files changed, 235 insertions(+), 34 deletions(-) diff --git a/tools/build/feature/test-libdw.c b/tools/build/feature/test-li= bdw.c index aabd63ca76b4d7e6..23e1ba6ff3466b9f 100644 --- a/tools/build/feature/test-libdw.c +++ b/tools/build/feature/test-libdw.c @@ -49,8 +49,21 @@ int test_elfutils(void) return 0; } =20 +/* + * elfutils 0.160 and later: used to tell which debug file a DIE lives in, + * the dwz alt file or the main one, see die_same_file() in + * tools/perf/util/dwarf-aux.c. Only the symbol is needed, so take its + * address instead of calling it. + */ +int test_libdw_cu_getdwarf(void) +{ + void *sym =3D (void *)dwarf_cu_getdwarf; + + return sym =3D=3D NULL; +} + int main(void) { return test_libdw() + test_libdw_unwind() + test_libdw_getlocations() + - test_libdw_getcfi() + test_elfutils(); + test_libdw_getcfi() + test_libdw_cu_getdwarf() + test_elfutils(); } diff --git a/tools/perf/Makefile.config b/tools/perf/Makefile.config index 4d5993da9f94579f..fa78f50db60179f3 100644 --- a/tools/perf/Makefile.config +++ b/tools/perf/Makefile.config @@ -470,7 +470,7 @@ else else ifneq ($(feature-libdw), 1) ifndef NO_LIBDW - $(warning No libdw.h found or old libdw.h found or elfutils is old= er than 0.157, disables dwarf support. Please install new elfutils-devel/li= bdw-dev) + $(warning No libdw.h found or old libdw.h found or elfutils is old= er than 0.160, disables dwarf support. Please install new elfutils-devel/li= bdw-dev) NO_LIBDW :=3D 1 endif endif # Dwarf support diff --git a/tools/perf/util/annotate-data.c b/tools/perf/util/annotate-dat= a.c index 4e4c587640823c81..2f552286c91c3d2c 100644 --- a/tools/perf/util/annotate-data.c +++ b/tools/perf/util/annotate-data.c @@ -221,6 +221,15 @@ static bool data_type_less(struct rb_node *node_a, con= st struct rb_node *node_b) return strcmp(a->self.type_name, b->self.type_name) < 0; } =20 +/* + * Members of struct/union members are added recursively, and the same DIE + * that is not what it looks like, the one that makes the type chasers in + * util/dwarf-aux.c spin, can make a member's type point back at one of its + * own ancestors, recursing until the stack is gone. Nothing usable comes + * out of nesting members this deep anyway. + */ +#define MAX_MEMBER_DEPTH 8 + /* Recursively add new members for struct/union */ static int __add_member_cb(Dwarf_Die *die, void *arg) { @@ -235,6 +244,16 @@ static int __add_member_cb(Dwarf_Die *die, void *arg) if (dwarf_tag(die) !=3D DW_TAG_member) return DIE_FIND_CB_SIBLING; =20 + if (__die_get_real_type(die, &member_type) =3D=3D NULL) + return DIE_FIND_CB_SIBLING; + + if (dwarf_tag(&member_type) =3D=3D DW_TAG_typedef) { + if (die_get_real_type(&member_type, &die_mem) =3D=3D NULL) + return DIE_FIND_CB_SIBLING; + } else { + die_mem =3D member_type; + } + member =3D zalloc(sizeof(*member)); if (member =3D=3D NULL) return DIE_FIND_CB_END; @@ -242,12 +261,6 @@ static int __add_member_cb(Dwarf_Die *die, void *arg) strbuf_init(&sb, 32); die_get_typename(die, &sb); =20 - __die_get_real_type(die, &member_type); - if (dwarf_tag(&member_type) =3D=3D DW_TAG_typedef) - die_get_real_type(&member_type, &die_mem); - else - die_mem =3D member_type; - if (dwarf_aggregate_size(&die_mem, &size) < 0) size =3D 0; =20 @@ -289,10 +302,19 @@ static int __add_member_cb(Dwarf_Die *die, void *arg) } member->size =3D size; member->offset =3D loc + parent->offset; + member->depth =3D parent->depth + 1; INIT_LIST_HEAD(&member->children); list_add_tail(&member->node, &parent->children); =20 tag =3D dwarf_tag(&die_mem); + if (member->depth >=3D MAX_MEMBER_DEPTH) { + /* Tell the browser and JSON consumers this isn't all */ + member->truncated =3D true; + pr_debug_dtp("member nesting limit reached at %s\n", + member->type_name ?: "(unknown type)"); + return DIE_FIND_CB_SIBLING; + } + switch (tag) { case DW_TAG_structure_type: case DW_TAG_union_type: @@ -645,6 +667,8 @@ struct global_var_entry { u64 start; u64 end; u64 die_offset; + int die_tag; + bool from_alt; /* die_offset is relative to the alt (dwz) file */ }; =20 static int global_var_cmp(const void *_key, const struct rb_node *node) @@ -682,7 +706,7 @@ static struct global_var_entry *global_var__find(struct= data_loc_info *dloc, u64 } =20 static bool global_var__add(struct data_loc_info *dloc, u64 addr, - const char *name, Dwarf_Die *type_die) + const char *name, Dwarf_Die *type_die, bool from_alt) { struct dso *dso =3D map__dso(dloc->ms->map); struct global_var_entry *gvar; @@ -704,6 +728,8 @@ static bool global_var__add(struct data_loc_info *dloc,= u64 addr, gvar->start =3D addr; gvar->end =3D addr + size; gvar->die_offset =3D dwarf_dieoffset(type_die); + gvar->die_tag =3D dwarf_tag(type_die); + gvar->from_alt =3D from_alt; =20 rb_add(&gvar->node, dso__global_vars(dso), global_var_less); return true; @@ -778,12 +804,14 @@ static void global_var__collect(struct data_loc_info = *dloc) if (pos->reg !=3D -1) continue; =20 - if (!dwarf_offdie(dwarf, pos->die_off, &type_die)) + if (!die_get_type_die(dwarf, pos->die_off, pos->die_tag, + pos->from_alt, &type_die)) continue; =20 get_global_var_info(dloc, pos->addr, &var_name, &var_offset); =20 - global_var__add(dloc, pos->addr, var_name, &type_die); + global_var__add(dloc, pos->addr, var_name, &type_die, + pos->from_alt); } =20 delete_var_types(var_types); @@ -808,7 +836,8 @@ bool get_global_var_type(Dwarf_Die *cu_die, struct data= _loc_info *dloc, =20 gvar =3D global_var__find(dloc, var_addr); if (gvar) { - if (!dwarf_offdie(dloc->di->dbg, gvar->die_offset, type_die)) + if (!die_get_type_die(dloc->di->dbg, gvar->die_offset, + gvar->die_tag, gvar->from_alt, type_die)) return false; =20 *var_offset =3D var_addr - gvar->start; @@ -838,7 +867,8 @@ bool get_global_var_type(Dwarf_Die *cu_die, struct data= _loc_info *dloc, =20 ok: /* The address should point to the start of the variable */ - global_var__add(dloc, var_addr - *var_offset, var_name, type_die); + global_var__add(dloc, var_addr - *var_offset, var_name, type_die, + !die_same_file(cu_die, type_die)); return true; } =20 @@ -893,7 +923,8 @@ static void update_var_state(struct type_state *state, = struct data_loc_info *dlo continue; } /* Get the type DIE using the offset */ - if (!dwarf_offdie(dloc->di->dbg, var->die_off, &mem_die)) + if (!die_get_type_die(dloc->di->dbg, var->die_off, + var->die_tag, var->from_alt, &mem_die)) continue; =20 if (var->reg =3D=3D DWARF_REG_FB || var->reg =3D=3D fbreg || var->reg = =3D=3D state->stack_reg) { diff --git a/tools/perf/util/annotate-data.h b/tools/perf/util/annotate-dat= a.h index c26130744260955f..d85866e83fbda69a 100644 --- a/tools/perf/util/annotate-data.h +++ b/tools/perf/util/annotate-data.h @@ -57,6 +57,9 @@ struct annotated_member { char *var_name; int offset; int size; + unsigned int depth; + /* Children not expanded because the nesting limit was reached */ + bool truncated; }; =20 /** diff --git a/tools/perf/util/dwarf-aux.c b/tools/perf/util/dwarf-aux.c index d7160f87ac7d7ab3..e35f724ea6835a8c 100644 --- a/tools/perf/util/dwarf-aux.c +++ b/tools/perf/util/dwarf-aux.c @@ -266,16 +266,35 @@ Dwarf_Die *die_get_type(Dwarf_Die *vr_die, Dwarf_Die = *die_mem) return NULL; } =20 +/* + * The chases below cross typedefs and qualifiers to get to the type that + * is actually meant, and a DIE that is not what it looks like, e.g. one + * parsed at an offset that is not the start of a DIE in the file it was + * resolved in, can have a DW_AT_type that refers back to itself, which + * makes them spin forever: 'perf report -s type' did exactly that on the + * dwz compressed debug info of zlib-ng (libz.so.1), burning all of a CPU + * with no output while resolving a hist entry in build_tree(). + * + * No sane chain is this long, so give up instead of hanging, telling about + * it so that the broken debug info can be looked at. + */ +#define MAX_TYPE_CHASE 32 + /* Get a type die, but skip qualifiers */ Dwarf_Die *__die_get_real_type(Dwarf_Die *vr_die, Dwarf_Die *die_mem) { - int tag; + int tag, chase =3D 0; =20 do { vr_die =3D die_get_type(vr_die, die_mem); if (!vr_die) - break; + return NULL; tag =3D dwarf_tag(vr_die); + if (++chase > MAX_TYPE_CHASE) { + pr_debug("DWARF: qualifier chase limit reached at DIE 0x%lx\n", + (unsigned long)dwarf_dieoffset(vr_die)); + return NULL; + } } while (tag =3D=3D DW_TAG_const_type || tag =3D=3D DW_TAG_restrict_type || tag =3D=3D DW_TAG_volatile_type || @@ -296,8 +315,15 @@ Dwarf_Die *__die_get_real_type(Dwarf_Die *vr_die, Dwar= f_Die *die_mem) */ Dwarf_Die *die_get_real_type(Dwarf_Die *vr_die, Dwarf_Die *die_mem) { + int chase =3D 0; + do { vr_die =3D __die_get_real_type(vr_die, die_mem); + if (++chase > MAX_TYPE_CHASE) { + pr_debug("DWARF: typedef chase limit reached at DIE 0x%lx\n", + vr_die ? (unsigned long)dwarf_dieoffset(vr_die) : 0); + return NULL; + } } while (vr_die && dwarf_tag(vr_die) =3D=3D DW_TAG_typedef); =20 return vr_die; @@ -314,7 +340,7 @@ Dwarf_Die *die_get_real_type(Dwarf_Die *vr_die, Dwarf_D= ie *die_mem) */ Dwarf_Die *die_get_pointer_type(Dwarf_Die *type_die, Dwarf_Die *die_mem) { - int tag; + int tag, chase =3D 0; =20 do { tag =3D dwarf_tag(type_die); @@ -324,6 +350,11 @@ Dwarf_Die *die_get_pointer_type(Dwarf_Die *type_die, D= warf_Die *die_mem) tag !=3D DW_TAG_restrict_type && tag !=3D DW_TAG_volatile_type && tag !=3D DW_TAG_shared_type) return NULL; + if (++chase > MAX_TYPE_CHASE) { + pr_debug("DWARF: pointer type chase limit reached at DIE 0x%lx\n", + (unsigned long)dwarf_dieoffset(type_die)); + return NULL; + } type_die =3D die_get_type(type_die, die_mem); } while (type_die); =20 @@ -1118,17 +1149,27 @@ Dwarf_Die *die_find_member(Dwarf_Die *st_die, const= char *name, die_mem); } =20 -/** - * die_get_typename_from_type - Get the name of given type DIE - * @type_die: a type DIE - * @buf: a strbuf for result type name - * - * Get the name of @type_die and stores it to @buf. Return 0 if succeeded. - * and Return -ENOENT if failed to find type name. - * Note that the result will stores typedef name if possible, and stores - * "*(function_type)" if the type is a function pointer. +/* + * The name of a pointer or array type is built from the name of the type + * it points to or holds, so the recursion below follows DW_AT_type; a + * garbage DIE whose DW_AT_type refers back to itself makes it recurse + * forever, just like the chases above, so it gets the same bound. */ -int die_get_typename_from_type(Dwarf_Die *type_die, struct strbuf *buf) +static int __die_get_typename_from_type(Dwarf_Die *type_die, struct strbuf= *buf, + int depth); + +static int __die_get_typename(Dwarf_Die *vr_die, struct strbuf *buf, int d= epth) +{ + Dwarf_Die type; + + if (__die_get_real_type(vr_die, &type) =3D=3D NULL) + return -ENOENT; + + return __die_get_typename_from_type(&type, buf, depth); +} + +static int __die_get_typename_from_type(Dwarf_Die *type_die, struct strbuf= *buf, + int depth) { int tag, ret; const char *tmp =3D ""; @@ -1155,7 +1196,12 @@ int die_get_typename_from_type(Dwarf_Die *type_die, = struct strbuf *buf) /* Write a base name */ return strbuf_addf(buf, "%s%s", tmp, name ?: ""); } - ret =3D die_get_typename(type_die, buf); + if (depth >=3D MAX_TYPE_CHASE) { + pr_debug("DWARF: type name recursion limit reached at DIE 0x%lx\n", + (unsigned long)dwarf_dieoffset(type_die)); + return -ENOENT; + } + ret =3D __die_get_typename(type_die, buf, depth + 1); if (ret < 0) { /* void pointer has no type attribute */ if (tag =3D=3D DW_TAG_pointer_type && ret =3D=3D -ENOENT) @@ -1166,6 +1212,21 @@ int die_get_typename_from_type(Dwarf_Die *type_die, = struct strbuf *buf) return strbuf_addstr(buf, tmp); } =20 +/** + * die_get_typename_from_type - Get the name of given type DIE + * @type_die: a type DIE + * @buf: a strbuf for result type name + * + * Get the name of @type_die and stores it to @buf. Return 0 if succeeded. + * and Return -ENOENT if failed to find type name. + * Note that the result will stores typedef name if possible, and stores + * "*(function_type)" if the type is a function pointer. + */ +int die_get_typename_from_type(Dwarf_Die *type_die, struct strbuf *buf) +{ + return __die_get_typename_from_type(type_die, buf, 0); +} + /** * die_get_typename - Get the name of given variable DIE * @vr_die: a variable DIE @@ -1178,12 +1239,7 @@ int die_get_typename_from_type(Dwarf_Die *type_die, = struct strbuf *buf) */ int die_get_typename(Dwarf_Die *vr_die, struct strbuf *buf) { - Dwarf_Die type; - - if (__die_get_real_type(vr_die, &type) =3D=3D NULL) - return -ENOENT; - - return die_get_typename_from_type(&type, buf); + return __die_get_typename(vr_die, buf, 0); } =20 /** @@ -1632,6 +1688,22 @@ Dwarf_Die *die_find_variable_by_addr(Dwarf_Die *sc_d= ie, Dwarf_Addr addr, return result; } =20 +/* + * Whether two DIEs live in the same debug file. + * + * dwarf_dieoffset() is relative to the file the DIE is in, so this is what + * tells an offset that has to be resolved in the dwz alt file, where dwz + * moved the type, from one that belongs to the main file: dwz encodes the + * references into its common file as DW_FORM_GNU_ref_alt, elfutils resolv= es + * them into the alt Dwarf and the CU of the resulting DIE belongs to that + * other file, so comparing the Dwarf each CU belongs to settles it exactl= y, + * rather than inferring it from what happens to be at the offset. + */ +bool die_same_file(Dwarf_Die *die_a, Dwarf_Die *die_b) +{ + return dwarf_cu_getdwarf(die_a->cu) =3D=3D dwarf_cu_getdwarf(die_b->cu); +} + static int __die_collect_vars_cb(Dwarf_Die *die_mem, void *arg) { struct die_var_type **var_types =3D arg; @@ -1676,6 +1748,8 @@ static int __die_collect_vars_cb(Dwarf_Die *die_mem, = void *arg) vt->is_reg_var_addr =3D true; =20 vt->die_off =3D dwarf_dieoffset(&type_die); + vt->die_tag =3D dwarf_tag(&type_die); + vt->from_alt =3D !die_same_file(die_mem, &type_die); vt->addr =3D start; vt->end =3D end; vt->has_range =3D (end !=3D 0 || start !=3D 0); @@ -1741,6 +1815,8 @@ static int __die_collect_global_vars_cb(Dwarf_Die *di= e_mem, void *arg) return DIE_FIND_CB_END; =20 vt->die_off =3D dwarf_dieoffset(&type_die); + vt->die_tag =3D dwarf_tag(&type_die); + vt->from_alt =3D !die_same_file(die_mem, &type_die); vt->addr =3D ops->number; vt->end =3D 0; vt->has_range =3D false; @@ -1752,6 +1828,51 @@ static int __die_collect_global_vars_cb(Dwarf_Die *d= ie_mem, void *arg) return DIE_FIND_CB_SIBLING; } =20 +/** + * die_get_type_die - Get a type DIE saved by die_collect_vars() + * @dbg: the main debug info + * @die_off: offset of the type DIE, from dwarf_dieoffset() + * @die_tag: tag that DIE had when the offset was saved + * @die_mem: where to store the resulting DIE + * + * See the comment in util/dwarf-aux.h: the offset is only meaningful in t= he + * file the DIE was in, which can be the dwz common file, so look at the m= ain + * file and then at the alt file, and use the one that has a DIE with the = tag + * the type had when it was collected. + */ +Dwarf_Die *die_get_type_die(Dwarf *dbg, u64 die_off, int die_tag, bool fro= m_alt, + Dwarf_Die *die_mem) +{ + Dwarf *target =3D dbg; + Dwarf_Die die; + + if (from_alt) { + /* + * Deliberately no fallback to the main file when there is + * no alt file, or when the offset does not resolve in it: + * resolving an alt file offset in the main file does not + * fail, it parses whatever is there as a DIE, and that is + * what hung 'perf report -s type', see the comment in + * util/dwarf-aux.h. + */ + target =3D dwarf_getalt(dbg); + if (target =3D=3D NULL) { + pr_debug("DWARF: no alt (dwz) debug file to resolve the type DIE at off= set 0x%lx in\n", + (unsigned long)die_off); + return NULL; + } + } + + if (dwarf_offdie(target, die_off, &die) && dwarf_tag(&die) =3D=3D die_tag= ) { + *die_mem =3D die; + return die_mem; + } + + pr_debug("DWARF: no DIE with tag %d at offset 0x%lx in the %s debug file\= n", + die_tag, (unsigned long)die_off, from_alt ? "alt" : "main"); + return NULL; +} + /** * die_collect_global_vars - Save all global variables * @cu_die: a CU DIE diff --git a/tools/perf/util/dwarf-aux.h b/tools/perf/util/dwarf-aux.h index 161f0bf980b6ee6a..149e0cbf63ccc82a 100644 --- a/tools/perf/util/dwarf-aux.h +++ b/tools/perf/util/dwarf-aux.h @@ -152,6 +152,8 @@ int die_get_scopes(Dwarf_Die *cu_die, Dwarf_Addr pc, Dw= arf_Die **scopes); struct die_var_type { struct die_var_type *next; u64 die_off; + int die_tag; + bool from_alt; /* die_off is relative to the alt (dwz) file */ u64 addr; u64 end; /* end address of location range */ int reg; @@ -183,6 +185,37 @@ Dwarf_Die *die_find_variable_by_addr(Dwarf_Die *sc_die= , Dwarf_Addr addr, /* Save all variables and parameters in this scope */ void die_collect_vars(Dwarf_Die *sc_die, struct die_var_type **var_types); =20 +/* + * Get the type DIE saved by die_collect_vars()/die_collect_global_vars(). + * + * The offsets those save are the dwarf_dieoffset() of the type DIE, which= is + * relative to the debug file that DIE lives in: the dwz common file, the = alt + * file in libdw terms, for the types shared by more than one CU, the main + * file for the rest. Resolving an alt file offset in the main file does = not + * fail: dwarf_offdie() parses whatever is at that offset there, and an of= fset + * that is a CU header in the main file reads back as a typedef whose + * DW_AT_type refers to itself, which is what hung 'perf report -s type' on + * the dwz compressed debug info of zlib-ng (libz.so.1). + * + * So @from_alt, recorded when the offset was saved, says which of the two + * files to resolve it in. It is not inferred from the DIE contents: dwz + * encodes references into the common file as DW_FORM_GNU_ref_alt, so + * elfutils resolves them into the alt Dwarf and the CU of the type DIE th= en + * belongs to that other file, which die_same_file() compares exactly. + * + * There is deliberately no fallback to the other file when the offset does + * not resolve: that fallback is the misparse above. + * + * @die_tag is then only a sanity check: the offset is of a DIE that had t= his + * tag when it was saved, so a mismatch means the debug info changed under= us, + * or is broken, and giving up on the type is the right answer. + */ +Dwarf_Die *die_get_type_die(Dwarf *dbg, u64 die_off, int die_tag, bool fro= m_alt, + Dwarf_Die *die_mem); + +/* Whether two DIEs live in the same debug file */ +bool die_same_file(Dwarf_Die *die_a, Dwarf_Die *die_b); + /* Save all global variables in this CU */ void die_collect_global_vars(Dwarf_Die *cu_die, struct die_var_type **var_= types); =20 --=20 2.55.0 From nobody Fri Sep 25 12:05:33 2026 Received: from smtp.kernel.org (aws-us-west-2-korg-mail-alma10-1.taild15c8.ts.net [100.103.45.18]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id E38973769FD; Sun, 13 Sep 2026 02:35:42 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=100.103.45.18 ARC-Seal: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1789266944; cv=none; b=LMB1OuSaARP837H4+JP2M4i/y4OsKNtH9E0UGijkF2bxDz1cWMWNQ8Nk+mQbgrrClZqJTQEfTGc5zgmUhGBNpTmMih/H1n8au2pIoloch4aWOpTnSi7EfPqUQbnaZjilnBHgq42HNXd8iqI7it1wAEhk4zIXkumMYgfUlsaCWUQ= ARC-Message-Signature: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1789266944; c=relaxed/simple; bh=apH6VZyAnmLAyezMqL9Ah7ks15w3tPV5R2LG2bJnac0=; h=From:To:Cc:Subject:Date:Message-ID:In-Reply-To:References: MIME-Version; b=OFw8ACq9QMKNtwr3tYvRN/n6XgrmZ/6jH6t4tC/7/AzU/hZgc+42SGqIiQ+sYvY0e4fqSAhuHq6LT5yI2LmBVTkCOs5bEOQoEKtlxMdJj31Ij1HTayyXOSZuMitsxRnVVicfj5Qtw9UVnyFDnY2fNqCP0iH6KNOcVxicXUVlJMQ= ARC-Authentication-Results: i=1; smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org header.b=aikoE2nr; arc=none smtp.client-ip=100.103.45.18 Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org header.b="aikoE2nr" Received: by smtp.kernel.org (Postfix) with ESMTPSA id 5069E1F000FF; Sun, 13 Sep 2026 02:35:38 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=kernel.org; s=k20260515; t=1789266942; bh=TqR2Opoff9JKJPpDA+/gIuMlr5T0eNpJWAK21U2cxek=; h=From:To:Cc:Subject:Date:In-Reply-To:References; b=aikoE2nrG+Bn8C/isHBg5WxU0wrlofxLL9xmLT/3fMsSRsGVmKPyXcffIKHiqaXnV h1MjdJDspRD92IrWzi0sU2QuVn4nzbeUsmT323k/YP3FRrC0aMyXfGxU6nOCpEZXd9 aBYGwdJCIDcwqnCTR/4Kn6t173XTTRIBSplTvtTIRjgcvAY1+Oe/5GBNm9paG3QRiq cagklcmML8JfpGog3eIBhvVgcjU/3cd7Yatz2Np3Kv8Toi9ClBjEBXWTiLQ9rTCbXd WuLNGDHeaam65HZwHitZq0Z42dw+WO8AdtQDH0mQtHXQpvd270FfFRAcyIcss2WraY TfyWsw/R478Gw== From: Arnaldo Carvalho de Melo To: Namhyung Kim Cc: Ingo Molnar , Thomas Gleixner , James Clark , Jiri Olsa , Ian Rogers , Adrian Hunter , Clark Williams , linux-kernel@vger.kernel.org, linux-perf-users@vger.kernel.org, Arnaldo Carvalho de Melo Subject: [PATCH v1 8/8] perf mem record: Request PERF_SAMPLE_CPU by default Date: Sat, 12 Sep 2026 23:34:59 -0300 Message-ID: <20260913023459.112654-9-acme@kernel.org> X-Mailer: git-send-email 2.55.0 In-Reply-To: <20260913023459.112654-1-acme@kernel.org> References: <20260913023459.112654-1-acme@kernel.org> Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8" From: Arnaldo Carvalho de Melo The data-type profiling per-sample stream keys cross-CPU contention on sample->cpu: without PERF_SAMPLE_CPU the cpu field is the (u32)-1 "no CPU info" sentinel, documented as such in perf_session__deliver_event(), and same-instance reads and writes from different cores are indistinguishable from same-CPU traffic, so pahole's false-sharing detector cannot tell them apart. builtin-record.c already defines --sample-cpu and 'perf mem record' forwards unknown options to the record parser, so passing it explicitly works today; make it the default, next to the -d (addr) and -W (weight) the command already requests, documenting it in perf-mem(1). Assisted-by: LLM Signed-off-by: Arnaldo Carvalho de Melo --- tools/perf/Documentation/perf-mem.txt | 4 ++++ tools/perf/builtin-mem.c | 9 +++++++++ 2 files changed, 13 insertions(+) diff --git a/tools/perf/Documentation/perf-mem.txt b/tools/perf/Documentati= on/perf-mem.txt index 4d164836d0943119..fe51c5e3333dc4a0 100644 --- a/tools/perf/Documentation/perf-mem.txt +++ b/tools/perf/Documentation/perf-mem.txt @@ -14,6 +14,10 @@ DESCRIPTION ----------- "perf mem record" runs a command and gathers memory operation data from it, into perf.data. Perf record options are accepted and are passed t= hrough. +It also requests the address (-d), the weight (-W, where supported) and the +CPU id (--sample-cpu) of every sampled access by default; the CPU id is wh= at +lets per-sample analysis tell reads and writes to the same data from +different cores apart from same-CPU traffic. =20 "perf mem report" displays the result. It invokes perf report with the right set of options to display a memory access profile. By default, loads diff --git a/tools/perf/builtin-mem.c b/tools/perf/builtin-mem.c index 6101a26b3a781e69..a708e2549bae4ce7 100644 --- a/tools/perf/builtin-mem.c +++ b/tools/perf/builtin-mem.c @@ -135,6 +135,15 @@ static int __cmd_record(int argc, const char **argv, s= truct perf_mem *mem, =20 rec_argv[i++] =3D "-d"; =20 + /* + * The data-type profiling per-sample stream keys cross-CPU + * contention on sample->cpu (PERF_SAMPLE_CPU); without it the cpu + * field is the (u32)-1 'no CPU info' sentinel and same-instance + * reads and writes from different cores are indistinguishable + * from same-CPU traffic. + */ + rec_argv[i++] =3D "--sample-cpu"; + if (mem->phys_addr) rec_argv[i++] =3D "--phys-data"; =20 --=20 2.55.0