port-evbmips/51219: TLB miss panic in in_cksum

[tls%NetBSD.ORG@localhost]

>Number:         51219
>Category:       port-evbmips
>Synopsis:       TLB miss panic in in_cksum triggered by piping gzip through ssh.
>Confidential:   no
>Severity:       critical
>Priority:       high
>Responsible:    port-evbmips-maintainer
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Sun Jun 05 22:50:01 +0000 2016
>Originator:     tls%NetBSD.ORG@localhost
>Release:        NetBSD 7.99.30
>Organization:
	The NetBSD Foundation, Inc.
>Environment:
	
	
System: NetBSD 7.99.30 NetBSD 7.99.30 (ERLITE.201606051010Z) evbmips
Architecture: mips64eb
Machine: evbmips
>Description:
# dd if=/dev/rsd0c bs=64k | gzip -1 | ssh root@192.168.100.1 dd bs=128k of=/diskless-mips64eb/erlite-factory.dd.gz
The authenticity of host '192.168.100.1 (192.168.100.1)' can't be established.
ECDSA key fingerprint is SHA256:u54QRuCPUUI+WZ6P1cQIz/bQawAjq6IVK4FAugd/nXo.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '192.168.100.1' (ECDSA) to the list of known hosts.
root@192.168.100.1's password: 
pid 0(system): trap: cpu0, TLB miss (load or instr. fetch) in kernel mode
status=0x80fc83, cause=0x208, epc=0xffffffff8045cb98, vaddr=0xc00000000e5e4844
tf=0x9800000410003800 ksp=0x9800000410003940 ra=0xffffffff8025cf38 ppl=0
kernel: TLB miss (load or instr. fetch) trap
Stopped in pid 0.3 (system) at  netbsd:cpu_in_cksum+0x128:      lwu     a6,-60(v
0)
db> trace
0x9800000410003940: cpu_in_cksum+128 (568,2c7e3a000,2785ba000,c8e4a832) ra fffff
fff8025cf38 sz 48
0x9800000410003970: in_delayed_cksum+40 (568,2c7e3a000,2785ba000,c8e4a832) ra ff
ffffff8025e760 sz 48
0x98000004100039a0: ip_output+f68 (980000000fee6400,2c7e3a000,2785ba000,c8e4a832
) ra ffffffff802697d4 sz 192
0x9800000410003a60: tcp_output+14e4 (980000000fee6400,2c7e3a000,2785ba000,c8e4a8
32) ra ffffffff80265b90 sz 320
0x9800000410003ba0: tcp_input+dc0 (980000000fee6400,14,6,20) ra ffffffff8025b8a0
 sz 512
0x9800000410003da0: ipintr+9f0 (980000000fee6400,14,6,20) ra ffffffff803a0fc4 sz
 160
0x9800000410003e40: softint_dispatch+114 (980000000fee6400,14,6,20) ra ffffffff8
0200244 sz 96
0x9800000410003ea0: softint_fast_dispatch+7c (0,14,6,20) ra 0 sz 32
User-level: pid 0.3
db>
>How-To-Repeat:
	Boot the ERLITE kernel.  Try to back up the factory image using
	dd if=/dev/rsd0c bs=64k | gzip -1 | ssh somehost dd of=img.dd.gz

	Wham.
>Fix:
	Unknown

>Unformatted: