Re: Easily reproducible stable/13 kernel crash

From: Herbert J. Skuhra <herbert_at_gojira.at>
Date: Fri, 11 Jun 2021 13:19:16 UTC 
On Fri, 11 Jun 2021 09:18:32 +0200, Hans Petter Selasky wrote:
>  
> Do you have the kernel backtrace of the resulting panic?

#0  get_curthread () at /usr/src/sys/arm64/include/pcpu.h:68
#1  doadump (textdump=<optimized out>) at /usr/src/sys/kern/kern_shutdown.c:399
#2  0xffff0000004b8c5c in kern_reboot (howto=260) at /usr/src/sys/kern/kern_shutdown.c:486
#3  0xffff0000004b91f0 in vpanic (fmt=<optimized out>, ap=...) at /usr/src/sys/kern/kern_shutdown.c:919
#4  0xffff0000004b8fdc in panic (fmt=0x0) at /usr/src/sys/kern/kern_shutdown.c:843
#5  0xffff0000007e86ec in data_abort (td=0xffffa00001740000, frame=0xffff0000dfbd93a0, esr=2516582406, far=<optimized out>, lower=0) at /usr/src/sys/arm64/arm64/trap.c:337
#6  <signal handler called>
#7  counter_u64_read_one (p=<optimized out>, cpu=0) at /usr/src/sys/arm64/include/counter.h:45
#8  counter_u64_fetch_inline (p=<optimized out>) at /usr/src/sys/arm64/include/counter.h:56
#9  counter_u64_fetch (c=<optimized out>) at /usr/src/sys/kern/subr_counter.c:57
#10 sysctl_handle_counter_u64 (oidp=0xffff000000b25820 <sysctl___net_inet_tcp_lro_without_m_ackcmp>, arg1=0xffff000000e4b6d8 <tcp_uncomp_total>, arg2=0, req=0xffff0000dfbd9650)
    at /usr/src/sys/kern/subr_counter.c:80
#11 0xffff0000004caef4 in sysctl_root_handler_locked (oid=oid@entry=0xffff000000b25820 <sysctl___net_inet_tcp_lro_without_m_ackcmp>, 
    arg1=arg1@entry=0xffff000000e4b6d8 <tcp_uncomp_total>, arg2=arg2@entry=0, req=req@entry=0xffff0000dfbd9650, tracker=tracker@entry=0xffff0000dfbd95d8)
    at /usr/src/sys/kern/kern_sysctl.c:184
#12 0xffff0000004ca354 in sysctl_root (oidp=<optimized out>, arg1=0xffff000000e4b6d8 <tcp_uncomp_total>, arg1@entry=0xffff0000dfbd9720, arg2=0, arg2@entry=5, req=<optimized out>, 
    req@entry=0xffff0000dfbd9650) at /usr/src/sys/kern/kern_sysctl.c:2261
#13 0xffff0000004ca948 in userland_sysctl (td=<optimized out>, td@entry=0xffffa00001740000, name=<optimized out>, name@entry=0xffff0000dfbd9720, namelen=<optimized out>, 
    old=<optimized out>, oldlenp=<optimized out>, inkernel=<optimized out>, new=<optimized out>, newlen=<optimized out>, retval=0xffff0000dfbd9718, flags=0)
    at /usr/src/sys/kern/kern_sysctl.c:2418
#14 0xffff0000004ca77c in sys___sysctl (td=0xffffa00001740000, uap=0xffffa000017403e8) at /usr/src/sys/kern/kern_sysctl.c:2291
#15 0xffff0000007e7d38 in syscallenter (td=0xffffa00001740000) at /usr/src/sys/arm64/arm64/../../kern/subr_syscall.c:189
#16 svc_handler (td=0xffffa00001740000, frame=<optimized out>) at /usr/src/sys/arm64/arm64/trap.c:187
#17 do_el0_sync (td=0xffffa00001740000, frame=<optimized out>) at /usr/src/sys/arm64/arm64/trap.c:506
#18 <signal handler called>
#19 0x00000000403d15ec in ?? ()
#20 0x0000000040353770 in ?? ()
Backtrace stopped: previous frame identical to this frame (corrupt stack?)

--
Herbert