Examine Problematic Kernel Dumps
Explore how to navigate and analyze problematic Linux kernel core dumps using the crash utility. Learn to interpret logs, examine stack traces, disassemble crashing functions, and search kernel memory to diagnose faults. This lesson equips you to systematically debug kernel crashes and understand exception details.
In this lesson, we will learn how to navigate through a kernel dump that has some problems.
Loading the core dump
The first step is to load up the dump with crash to see what actually happened at the time this core dump was generated.
crash dump.202201020022 ../KSym/vmlinux-5.10.0-10-amd64
The above command will output the following to the terminal:
Let’s check the log for details.
Checking the log
We can do this in crash with the log command. We use it with the -T flag to display the message text with a human-readable timestamp:
...