定义一个内核panic问题

出现问题时的反汇编为：

/usr/src/debug/kernel-4.1.44-.aarch64/net/core/dev.c: 1780
0xffff800000860724 <__netif_receive_skb_core+420>: ldr x0, [x1,x0]
0xffff800000860728 <__netif_receive_skb_core+424>: str x0, [x29,#128]
0xffff80000086072c <__netif_receive_skb_core+428>: ldr x20, [x29,#128]
0xffff800000860730 <__netif_receive_skb_core+432>: cmp x25, x20
0xffff800000860734 <__netif_receive_skb_core+436>: sub x20, x20, #0x28
0xffff800000860738 <__netif_receive_skb_core+440>: b.eq 0xffff800000860760 <__netif_receive_skb_core+480>
/usr/src/debug/kernel-4.1.44-.aarch64/net/core/dev.c: 1781
0xffff80000086073c <__netif_receive_skb_core+444>: ldrh w0, [x20]

代码为：

static inline void deliver_ptype_list_skb(struct sk_buff *skb,
                      struct packet_type **pt,
                      struct net_device *orig_dev,
                      __be16 type,
                      struct list_head *ptype_list)
{
    struct packet_type *ptype, *pt_prev = *pt;

1780    list_for_each_entry_rcu(ptype, ptype_list, list) {
1781        if (ptype->type != type)
            continue;
        if (pt_prev)
            deliver_skb(skb, pt_prev, orig_dev);
        pt_prev = ptype;
    }
    *pt = pt_prev;
}

list_for_each_entry_rcu函数为：

#define list_for_each_entry_rcu(pos, head, member) \
    for (pos = list_entry_rcu((head)->next, typeof(*pos), member); \
        &pos->member != (head); \
        pos = list_entry_rcu(pos->member.next, typeof(*pos), member))

list_entry_rcu为：

#define list_entry_rcu(ptr, type, member) \
({ \
    typeof(*ptr) __rcu *__ptr = (typeof(*ptr) __rcu __force *)ptr; \
    container_of((typeof(ptr))rcu_dereference_raw(__ptr), type, member); \
})

container_of

#define container_of(ptr, type, member) ({            \
    const typeof( ((type *))->member ) *__mptr = (ptr);    \
    (type *)( (char *)__mptr - offsetof(type,member) );})