bridge-timer-fix.patch for F19

Tue Jul 9 03:55:23 UTC 2013

On Tue, Jul 09, 2013 at 02:46:33AM +0200, poma wrote:
> On 08.07.2013 13:39, Josh Boyer wrote:
> > On Mon, Jul 08, 2013 at 10:05:55AM +0200, poma wrote:
> >> On 07.07.2013 15:21, poma wrote:
> >>> On 06.07.2013 14:16, Josh Boyer wrote:
> >>>> On Sat, Jul 6, 2013 at 2:05 AM, poma <pomidorabelisima at gmail.com> wrote:
> >>>>>
> >>>>> Please don't forget us at Schrödinger’s Caffè.
> >>>>> F17 & F18 already have it.
> >>>>
> >>>> It's already committed in the F19 branch.
> >>>>
> >>>> josh
> >>>>
> >>>
> >>> OK, thanks.
> >>> These are some data regarding.
> >>>
> >>> Results of testing the system stability due to domain reset
> >>> - KVM & virtio_net
> >>>
> >>> Recompiled & patched - kernel-3.9.9-302.fc19.src.rpm:
> >>> - kernel-3.9.9-502.fc19.x86_64 - PASSED/RUNNING
> >>>   bridge-timer-fix-complete.patch(br_multicast.c & br_mdb.c) [1]
> >>>
> >>> Recompiled & patched - kernel-3.10.0-1.fc20.src.rpm:
> >>> - kernel-3.10.0-303.fc19.x86_64 - FAILED/FREEZE
> >>>   bridge-timer-fix.patch(br_multicast.c)
> >>> - kernel-3.10.0-505.fc19.x86_64 - FAILED/FREEZE
> >>>   bridge-timer-fix-complete.patch(br_multicast.c & br_mdb.c) [1]
> >> …
> >>> [1]
> >>> http://git.kernel.org/cgit/linux/kernel/git/davem/net-next.git/commit/?id=c7e8e8a8f7a70b343ca1e0f90a31e35ab2d16de1
> >>
> >> To conclude,
> >>
> >> Built with config-3.10.0-505.fc19.x86_64
> >> - net-next kernel-3.10.0-net-next.fc19.x86_64 - FAILED/FREEZE
> >>   net-next.git commit c7e8e8a8f7a70b343ca1e0f90a31e35ab2d16de1(last) [1]
> > 
> > I believe both your 3.10.0-303 and 3.10.0-505 commits are missing a
> > use-after-free fix in the vhost-net driver.  The fixed upstream version
> > was sent yesterday and still isn't applied to any tree that I can see.
> 
> OK, thanks.
> 
> With 'vhost-net-fix-use-after-free-in-vhost_net_flush_v3.patch'[1],
> - kernel-3.10.0-707.fc19.x86_64 - PASSED
> - kernel-3.10.0-net-next_v3.fc19.x86_64 - PASSED
> 
> Gentlemen, thank you very much.
> 
> 
> poma
> 
> 
> [1] http://marc.info/?l=linux-netdev&m=137319638714659

Is this thread related to kernel crashes with the following backtrace?
I was getting these on the latest F17 kernel, then upgraded to F19
where I still see the same crash.  Is there a fix I can try?

Thanks.

<Mon 08 Jul 2013 11:50:01 AM EDT>[ 3796.635231] br0: port 2(vnet0) entered forwarding state
<Mon 08 Jul 2013 11:50:01 AM EDT>[ 3796.640466] br0: port 2(vnet0) entered forwarding state
<Mon 08 Jul 2013 11:50:16 AM EDT>[ 3811.680010] br0: port 2(vnet0) entered forwarding state
<Mon 08 Jul 2013 05:00:41 PM EDT>[22437.544404] ------------[ cut here ]------------
<Mon 08 Jul 2013 05:00:41 PM EDT>[22437.545398] WARNING: at lib/list_debug.c:33 __list_add+0xac/0xc0()
<Mon 08 Jul 2013 05:00:41 PM EDT>[22437.545398] Hardware name: OptiPlex 960
<Mon 08 Jul 2013 05:00:41 PM EDT>[22437.558821] list_add corruption. prev->next should be next (ffff88022c631598), but was           (null). (prev=ffff880229bd34c0).
<Mon 08 Jul 2013 05:00:42 PM EDT>[22437.558821] Modules linked in: tun arc4 md4 nls_utf8 cifs dns_resolver fscache fuse ebtable_nat xt_CHECKSUM nf_conntrack_netbios_ns nf_conntrack_broadcast ipt_MASQUERADE ip6table_nat nf_nat_ipv6 ip6table_mangle ip6t_REJECT nf_conntrack_ipv6 nf_defrag_ipv6 iptable_nat nf_nat_ipv4 nf_nat iptable_mangle bnep nf_conntrack_ipv4 nf_defrag_ipv4 xt_conntrack nf_conntrack bluetooth rfkill ebtable_filter bridge stp llc ebtables ip6table_filter ip6_tables snd_hda_codec_hdmi ppdev dell_wmi sparse_keymap snd_hda_codec_analog iTCO_wdt iTCO_vendor_support mperf coretemp snd_hda_intel snd_hda_codec tg3 e1000e kvm_intel kvm snd_hwdep snd_seq snd_seq_device snd_pcm ptp uinput dcdbas pps_core joydev tulip snd_page_alloc snd_timer snd microcode soundcore serio_raw parport_pc parport wmi lpc_ich i2c_i801 mfd_core natsemi mei dm_crypt usb_storage raid1 radeon i2c_algo_bit drm_kms_helper ttm drm ata_generic pata_acpi i2c_core
<Mon 08 Jul 2013 05:00:42 PM EDT>[22437.558821] Pid: 0, comm: swapper/3 Not tainted 3.9.9-301.fc19.x86_64 #1
<Mon 08 Jul 2013 05:00:42 PM EDT>[22437.558821] Call Trace:
<Mon 08 Jul 2013 05:00:42 PM EDT>[22437.558821]  <IRQ>  [<ffffffff81306d00>] ? __list_add+0x30/0xc0
<Mon 08 Jul 2013 05:00:42 PM EDT>[22437.558821]  [<ffffffff8105cc56>] warn_slowpath_common+0x66/0x80
<Mon 08 Jul 2013 05:00:42 PM EDT>[22437.558821]  [<ffffffff8105ccbc>] warn_slowpath_fmt+0x4c/0x50
<Mon 08 Jul 2013 05:00:42 PM EDT>[22437.558821]  [<ffffffff81571324>] ? ip_rcv_finish+0x184/0x320
<Mon 08 Jul 2013 05:00:42 PM EDT>[22437.558821]  [<ffffffff81306d7c>] __list_add+0xac/0xc0
<Mon 08 Jul 2013 05:00:42 PM EDT>[22437.558821]  [<ffffffff8106bed3>] __internal_add_timer+0x113/0x130
<Mon 08 Jul 2013 05:00:42 PM EDT>[22437.558821]  [<ffffffff8106c527>] internal_add_timer+0x17/0x40
<Mon 08 Jul 2013 05:00:42 PM EDT>[22437.558821]  [<ffffffff8106d812>] mod_timer+0x102/0x210
<Mon 08 Jul 2013 05:00:42 PM EDT>[22437.558821]  [<ffffffffa03e121b>] br_multicast_rcv+0x86b/0x1220 [bridge]
<Mon 08 Jul 2013 05:00:42 PM EDT>[22437.558821]  [<ffffffffa03d7370>] ? br_handle_local_finish+0x60/0x60 [bridge]
<Mon 08 Jul 2013 05:00:42 PM EDT>[22437.558821]  [<ffffffffa03d75ba>] br_handle_frame_finish+0x24a/0x330 [bridge]
<Mon 08 Jul 2013 05:00:42 PM EDT>[22437.558821]  [<ffffffffa03d7825>] br_handle_frame+0x185/0x270 [bridge]
<Mon 08 Jul 2013 05:00:42 PM EDT>[22437.558821]  [<ffffffff8153b232>] __netif_receive_skb_core+0x242/0x7f0
<Mon 08 Jul 2013 05:00:42 PM EDT>[22437.558821]  [<ffffffff8101a300>] ? native_read_tsc+0x20/0x20
<Mon 08 Jul 2013 05:00:42 PM EDT>[22437.558821]  [<ffffffff8153b7f8>] __netif_receive_skb+0x18/0x60
<Mon 08 Jul 2013 05:00:42 PM EDT>[22437.558821]  [<ffffffff8153b873>] netif_receive_skb+0x33/0xb0
<Mon 08 Jul 2013 05:00:42 PM EDT>[22437.558821]  [<ffffffff8153c250>] napi_gro_receive+0x80/0xb0
<Mon 08 Jul 2013 05:00:42 PM EDT>[22437.558821]  [<ffffffffa038bf93>] e1000_receive_skb+0x73/0xd0 [e1000e]
<Mon 08 Jul 2013 05:00:42 PM EDT>[22437.558821]  [<ffffffffa038d40a>] e1000_clean_rx_irq+0x24a/0x400 [e1000e]
<Mon 08 Jul 2013 05:00:42 PM EDT>[22437.558821]  [<ffffffffa0394f2d>] e1000e_poll+0x6d/0x310 [e1000e]
<Mon 08 Jul 2013 05:00:42 PM EDT>[22437.558821]  [<ffffffff8153bbe9>] net_rx_action+0x149/0x240
<Mon 08 Jul 2013 05:00:42 PM EDT>[22437.558821]  [<ffffffff81065657>] __do_softirq+0xf7/0x240
<Mon 08 Jul 2013 05:00:42 PM EDT>[22437.558821]  [<ffffffff81065925>] irq_exit+0xa5/0xb0
<Mon 08 Jul 2013 05:00:42 PM EDT>[22437.558821]  [<ffffffff81650f56>] do_IRQ+0x56/0xc0
<Mon 08 Jul 2013 05:00:42 PM EDT>[22437.558821]  [<ffffffff816471ad>] common_interrupt+0x6d/0x6d
<Mon 08 Jul 2013 05:00:42 PM EDT>[22437.558821]  <EOI>  [<ffffffff81042106>] ? native_safe_halt+0x6/0x10
<Mon 08 Jul 2013 05:00:42 PM EDT>[22437.558821]  [<ffffffff8101b54a>] default_idle+0x4a/0x100
<Mon 08 Jul 2013 05:00:42 PM EDT>[22437.558821]  [<ffffffff8101c03f>] cpu_idle+0xef/0x140
<Mon 08 Jul 2013 05:00:42 PM EDT>[22437.558821]  [<ffffffff81635f49>] start_secondary+0x249/0x24b
<Mon 08 Jul 2013 05:00:42 PM EDT>[22437.558821] ---[ end trace 93961387685c9d75 ]---