On 24/04/24 12:54, Chris Packham wrote:
> Hi Jeff, Chuck, Greg,
>
> After updating one of our builds along the 5.15.y LTS branch our
> testing caught a new kernel bug. Output below.
>
> I haven't dug into it yet but wondered if it rang any bells.
A bit more info. This is happening at "reboot" for us. Our embedded
devices use a bit of a hacked up reboot process so that they come back
faster in the case of a failure.
It doesn't happen with a proper `systemctl reboot` or with a SYSRQ+B
I can trigger it with `killall -9 nfsd` which I'm not sure is a
completely legit thing to do to kernel threads but it's probably close
to what our customized reboot does.
>
> Thanks,
> Chris
>
> [ 91.605109] ------------[ cut here ]------------
> [ 91.605122] kernel BUG at net/sunrpc/svc.c:570!
> [ 91.605129] Internal error: Oops - BUG: 00000000f2000800 [#1]
> PREEMPT SMP
> [ 91.610643] Modules linked in: mvcpss(O) platform_driver(O)
> ipifwd(O) xt_l2tp xt_hashlimit xt_conntrack xt_addrtype xt_LOG
> xt_CHECKSUM wp512 vxlan veth twofish_generic twofish_common sr9800
> smsc95xx smsc75xx smsc sm3_generic sha512_arm64 sha3_generic
> serpent_generic rtl8150 rpcsec_gss_krb5 rmd160 poly1305_generic plusb
> pegasus optee_rng nbd microchip md4 md_mod mcs7830 lrw libpoly1305
> lan78xx l2tp_ip6 l2tp_ip l2tp_eth l2tp_netlink l2tp_core udp_tunnel
> ipt_REJECT nf_reject_ipv4 ip6table_nat ip6table_mangle ip6table_filter
> ip6t_ipv6header ip6t_REJECT ip6_udp_tunnel ip6_tables dm9601 dm_zero
> dm_mirror dm_region_hash dm_log dm_mod diag tipc cuse cts
> cpufreq_powersave cpufreq_conservative chacha_generic chacha20poly1305
> chacha_neon libchacha cast6_generic cast5_generic cast_common
> camellia_generic blowfish_generic blowfish_common auth_rpcgss
> oid_registry at25 arm_smccc_trng aes_neon_blk idprom_mtd(O)
> idprom_i2c(O) epi3_boardinfo_i2c(O) x250(O) psuslot_epi3_register(O)
> psuslot_gpio_group(O)
> [ 91.610809] psuslot(O)
> [ 91.611822] watchdog: watchdog1: watchdog did not stop!
> [ 91.697065] gpiopins_boardinfo(O) idprom(O) epi3_boardinfo(O)
> boardinfo(O) i2c_gpio i2c_algo_bit i2c_mv64xxx pluggable(O)
> led_enable(O) omap_rng rng_core atl_reset(O) sbsa_gwdt uio_pdrv_genirq
> [ 91.697096] CPU: 2 PID: 1770 Comm: nfsd Kdump: loaded Tainted:
> G O 5.15.155 #1
> [ 91.697103] Hardware name: Allied Telesis x250-28XTm (DT)
> [ 91.697107] pstate: 80000005 (Nzcv daif -PAN -UAO -TCO -DIT -SSBS
> BTYPE=--)
> [ 91.697112] pc : svc_destroy+0x84/0xac
> [ 91.701202] watchdog: watchdog0: watchdog did not stop!
> [ 91.702215] lr : svc_destroy+0x2c/0xac
> [ 91.702220] sp : ffff80000bb3bde0
> [ 91.702223] x29: ffff80000bb3bde0 x28: 0000000000000000 x27:
> 0000000000000000
> [ 91.746095] x26: 0000000000000000 x25: ffff00000dbfaa40 x24:
> ffff000016c14000
> [ 91.746101] x23: ffff800008395c00 x22: ffff00000ee9f284 x21:
> ffff00000eea9e10
> [ 91.746108] x20: ffff00000eea9e00 x19: ffff00000eea9e14 x18:
> ffff800008e99000
> [ 91.769526] x17: 0000000000000006 x16: 0000000000000000 x15:
> 0000000000000001
> [ 91.776782] x14: 00000000fffffffd x13: fffffc0000000000 x12:
> ffff800076bc2000
> [ 91.784031] x11: ffff00007fba5c10 x10: ffff800076bc2000 x9 :
> ffff8000092207c0
> [ 91.784038] x8 : fffffc000055eb08 x7 : ffff00000ef6c4c0 x6 :
> fffffc0001f872c8
> [ 91.795823] x5 : 0000000000000100 x4 : ffff00007fbaeda8 x3 :
> 0000000000000000
> [ 91.801684] x2 : 0000000000000000 x1 : ffff00000d8f8018 x0 :
> ffff00000eea9e30
> [ 91.807545] Call trace:
> [ 91.810088] svc_destroy+0x84/0xac
> [ 91.813586] svc_exit_thread+0x108/0x15c
> [ 91.816998] nfsd+0x178/0x1a0
> [ 91.818673] kthread+0x150/0x160
> [ 91.820610] ret_from_fork+0x10/0x20
> [ 91.820620] Code: a94153f3 a8c27bfd d50323bf d65f03c0 (d4210000)
> [ 91.820629] SMP: stopping secondary CPUs
> [ 91.830433] Starting crashdump kernel...
> [ 91.833064] Bye!