Bug #1497184 “Kernel-panic with 3.13.0-64.104 generic kernel (BU...” : Bugs : linux package : Ubuntu

Revision history for this message

Ioann (yanunim95) wrote on 2015-09-18:

#1

18092015.jpg Edit (421.7 KiB, image/jpeg)
AlsaInfo.txt Edit (26.2 KiB, text/plain; charset="utf-8")
BootDmesg.txt Edit (63.0 KiB, text/plain; charset="utf-8")
Dependencies.txt Edit (3.3 KiB, text/plain; charset="utf-8")
IwConfig.txt Edit (252 bytes, text/plain; charset="utf-8")
Lspci.txt Edit (12.9 KiB, text/plain; charset="utf-8")
Lsusb.txt Edit (551 bytes, text/plain; charset="utf-8")
ProcCpuinfo.txt Edit (3.3 KiB, text/plain; charset="utf-8")
ProcEnviron.txt Edit (319 bytes, text/plain; charset="utf-8")
ProcInterrupts.txt Edit (2.1 KiB, text/plain; charset="utf-8")
ProcModules.txt Edit (3.6 KiB, text/plain; charset="utf-8")
PulseList.txt Edit (18.1 KiB, text/plain; charset="utf-8")
RfKill.txt Edit (180 bytes, text/plain; charset="utf-8")
UdevDb.txt Edit (147.5 KiB, text/plain; charset="utf-8")
UdevLog.txt Edit (335.6 KiB, text/plain; charset="utf-8")
WifiSyslog.txt Edit (159.3 KiB, text/plain; charset="utf-8")

Revision history for this message

Ioann (yanunim95) wrote on 2015-09-18:

#2

18092015(001).jpg Edit (329.4 KiB, image/jpeg)

Here is second part of screen photo of panic.

Revision history for this message

Brad Figg (brad-figg) wrote on 2015-09-18: Status changed to Confirmed

#3

This change was made by a bot.

Changed in linux (Ubuntu):
status:	New → Confirmed

Andy Whitcroft (apw) on 2015-09-18

summary:	- Kernel-panic with 3.13-64 generic kernel + Kernel-panic with 3.13-64 generic kernel (BUG at net/core/skbuff:1290
summary:	- Kernel-panic with 3.13-64 generic kernel (BUG at net/core/skbuff:1290 + Kernel-panic with 3.13-64 generic kernel (BUG at net/core/skbuff:1290)
summary:	- Kernel-panic with 3.13-64 generic kernel (BUG at net/core/skbuff:1290) + Kernel-panic with 3.130-64.104 generic kernel (BUG at + net/core/skbuff:1290)

Andy Whitcroft (apw) on 2015-09-18

tags:

added: regression-proposed

Revision history for this message

Luis Henriques (henrix) wrote on 2015-09-18:

#4

I suspect the issue is related with commit

commit 738ac1ebb96d02e0d23bc320302a6ea94c612dec
Author: Herbert Xu <email address hidden>
Date: Mon Jul 13 16:04:13 2015 +0800

net: Clone skb before setting peeked flag

This commit was included in Trusty 3.13.0-64.104, and introduces a use-after-free bug, fixed with upstream commit

commit a0a2a6602496a45ae838a96db8b8173794b5d398
Author: Herbert Xu <email address hidden>
Date: Tue Aug 4 15:42:47 2015 +0800

net: Fix skb_set_peeked use-after-free bug

which is not in Trusty yet.

I've built a test kernel that includes this commit here: http://people.canonical.com/~henrix/lp1497184/amd64/
Could you please try to reproduce the issue using this kernel? Thanks

summary:

- Kernel-panic with 3.130-64.104 generic kernel (BUG at
+ Kernel-panic with 3.13.0-64.104 generic kernel (BUG at
net/core/skbuff:1290)

Andy Whitcroft (apw) on 2015-09-18

Changed in linux (Ubuntu Trusty):
status:	New → Confirmed
Changed in linux (Ubuntu Vivid):
status:	New → Confirmed
Changed in linux (Ubuntu):
importance:	Undecided → High
Changed in linux (Ubuntu Trusty):
importance:	Undecided → High
Changed in linux (Ubuntu Vivid):
importance:	Undecided → High

penalvch (penalvch) on 2015-09-19

tags:

added: bios-outdated-3.50

Revision history for this message

Ioann (yanunim95) wrote on 2015-09-20:

#5

panic.tar.gz Edit (1.9 MiB, application/x-tar)

Hi. Got panic again. New panic messages are in attach.
It was direct while router updated my IP address.

Revision history for this message

Arjen Lentz (arjen-lentz) wrote on 2015-09-21:

#6

Hi henrix - I'm trying your patched kernel, will update soon with results.
I too get the kernel panics in 3.13.0-64, but not in -63.
In -64 they are very frequent, so it shouldn't take long to see one again it re-occurs anyway with your patch in place.

Revision history for this message

Ioann (yanunim95) wrote on 2015-09-21:

#7

henrix.

Now I'm using you kerenel. It made 24 hours uptime. So your patch is working.

Revision history for this message

Arjen Lentz (arjen-lentz) wrote on 2015-09-21:

#8

I concur with loann, although mine has only been up for 2h20. With the unpatched kernel it would've long panicked.

Revision history for this message

Andy Whitcroft (apw) wrote on 2015-09-21:

#10

@Arjen -- this package has not been released into the LTS it is only in -proposed for testing. This is exactly why we build and publish these kernels into -proposed and why they sit there for some time before being released into -updates. In this case the kernel carries a regression, one which has been detected before release to the general population. It would not be recommended to run any kernel from -proposed on a production system, though testing on less critical systems is always appreciated.

Revision history for this message

Arjen Lentz (arjen-lentz) wrote on 2015-09-22:

#11

@apw / @henrix - ah, that's good. No worries.
That explains why only my laptop has had the issue, as indeed I do pull in updates from proposed there and that's fine - happy to help catch stuff early. So, all is as it should be! awesome. thanks!

Luis Henriques (henrix) on 2015-09-22

Changed in linux (Ubuntu Vivid):
status:	Confirmed → Fix Committed
Changed in linux (Ubuntu Trusty):
status:	Confirmed → Fix Committed
Changed in linux (Ubuntu):
status:	Confirmed → Invalid

Revision history for this message

aleandro (aleandrodasilva) wrote on 2015-09-26:

#12

Hello. I updated with the proposed updates my ununtu 14.04 and installed the 3.13.0-64.104 kernel on the 24 of september. I got a first kernel panic after many hours of work and after reboot even after about an hour. I removed this kernel and installed the 3.13.0-65.-generic which was in the repositories of ubuntu. I hope this new one is not affected by that bug.

Revision history for this message

Launchpad Janitor (janitor) wrote on 2015-09-28:

#13

Download full text (5.4 KiB)

This bug was fixed in the package linux - 3.13.0-65.105

---------------
linux (3.13.0-65.105) trusty; urgency=low

[ Brad Figg ]

* Release Tracking Bug
- LP: #1498108

[ Upstream Kernel Changes ]

* net: Fix skb_set_peeked use-after-free bug
- LP: #1497184

linux (3.13.0-64.104) trusty; urgency=low

[ Luis Henriques ]

* Release Tracking Bug
- LP: #1493803

[ Chris J Arges ]

* [Config] DEFAULT_IOSCHED="deadline" for ppc64el
- LP: #1469829

[ Upstream Kernel Changes ]

  * tcp: fix recv with flags MSG_WAITALL | MSG_PEEK
    - LP: #1486146
  * libceph: abstract out ceph_osd_request enqueue logic
    - LP: #1488035
  * libceph: resend lingering requests with a new tid
    - LP: #1488035
  * n_tty: Refactor input_available_p() by call site
    - LP: #1397976
  * tty: Fix pty master poll() after slave closes v2
    - LP: #1397976
  * md: use kzalloc() when bitmap is disabled
    - LP: #1493305
  * ata: pmp: add quirk for Marvell 4140 SATA PMP
    - LP: #1493305
  * libata: add ATA_HORKAGE_BROKEN_FPDMA_AA quirk for HP 250GB SATA disk
    VB0250EAVER
    - LP: #1493305
  * libata: add ATA_HORKAGE_NOTRIM
    - LP: #1493305
  * libata: force disable trim for SuperSSpeed S238
    - LP: #1493305
  * libata: increase the timeout when setting transfer mode
    - LP: #1493305
  * libata: Do not blacklist M510DC
    - LP: #1493305
  * mac80211: clear subdir_stations when removing debugfs
    - LP: #1493305
  * ALSA: hda - Add new GPU codec ID 0x10de007d to snd-hda
    - LP: #1493305
  * drm: Stop resetting connector state to unknown
    - LP: #1493305
  * usb: dwc3: Reset the transfer resource index on SET_INTERFACE
    - LP: #1493305
  * usb: xhci: Bugfix for NULL pointer deference in xhci_endpoint_init()
    function
    - LP: #1493305
  * xhci: Calculate old endpoints correctly on device reset
    - LP: #1493305
  * xhci: report U3 when link is in resume state
    - LP: #1493305
  * xhci: prevent bus_suspend if SS port resuming in phase 1
    - LP: #1493305
  * xhci: do not report PLC when link is in internal resume state
    - LP: #1493305
  * USB: OHCI: Fix race between ED unlink and URB submission
    - LP: #1493305
  * usb-storage: ignore ZTE MF 823 card reader in mode 0x1225
    - LP: #1493305
  * blkcg: fix gendisk reference leak in blkg_conf_prep()
    - LP: #1493305
  * tile: use free_bootmem_late() for initrd
    - LP: #1493305
  * Input: usbtouchscreen - avoid unresponsive TSC-30 touch screen
    - LP: #1493305
  * md/raid1: fix test for 'was read error from last working device'.
    - LP: #1493305
  * mmc: omap_hsmmc: Fix DTO and DCRC handling
    - LP: #1493305
  * isdn/gigaset: reset tty->receive_room when attaching ser_gigaset
    - LP: #1493305
  * mmc: sdhci-pxav3: fix platform_data is not initialized
    - LP: #1493305
  * mmc: block: Add missing mmc_blk_put() in power_ro_lock_show()
    - LP: #1493305
  * mmc: sdhci-esdhc: Make 8BIT bus work
    - LP: #1493305
  * bonding: correctly handle bonding type change on enslave failure
    - LP: #1493305
  * net: Clone skb before setting peeked flag
    - LP: #1493305
  * bridge: mdb: fix double add notification
    - LP: #1493305
  * usb: gadget: mv_udc_c...

This bug was fixed in the package linux - 3.13.0-65.105

---------------
linux (3.13.0-65.105) trusty; urgency=low

[ Brad Figg ]

* Release Tracking Bug
    - LP: #1498108

[ Upstream Kernel Changes ]

* net: Fix skb_set_peeked use-after-free bug
      - LP: #1497184

linux (3.13.0-64.104) trusty; urgency=low

[ Luis Henriques ]

* Release Tracking Bug
    - LP: #1493803

[ Chris J Arges ]

* [Config] DEFAULT_IOSCHED="deadline" for ppc64el
    - LP: #1469829

[ Upstream Kernel Changes ]

* tcp: fix recv with flags MSG_WAITALL | MSG_PEEK
    - LP: #1486146
  * libceph: abstract out ceph_osd_request enqueue logic
    - LP: #1488035
  * libceph: resend lingering requests with a new tid
    - LP: #1488035
  * n_tty: Refactor input_available_p() by call site
    - LP: #1397976
  * tty: Fix pty master poll() after slave closes v2
    - LP: #1397976
  * md: use kzalloc() when bitmap is disabled
    - LP: #1493305
  * ata: pmp: add quirk for Marvell 4140 SATA PMP
    - LP: #1493305
  * libata: add ATA_HORKAGE_BROKEN_FPDMA_AA quirk for HP 250GB SATA disk
    VB0250EAVER
    - LP: #1493305
  * libata: add ATA_HORKAGE_NOTRIM
    - LP: #1493305
  * libata: force disable trim for SuperSSpeed S238
    - LP: #1493305
  * libata: increase the timeout when setting transfer mode
    - LP: #1493305
  * libata: Do not blacklist M510DC
    - LP: #1493305
  * mac80211: clear subdir_stations when removing debugfs
    - LP: #1493305
  * ALSA: hda - Add new GPU codec ID 0x10de007d to snd-hda
    - LP: #1493305
  * drm: Stop resetting connector state to unknown
    - LP: #1493305
  * usb: dwc3: Reset the transfer resource index on SET_INTERFACE
    - LP: #1493305
  * usb: xhci: Bugfix for NULL pointer deference in xhci_endpoint_init()
    function
    - LP: #1493305
  * xhci: Calculate old endpoints correctly on device reset
    - LP: #1493305
  * xhci: report U3 when link is in resume state
    - LP: #1493305
  * xhci: prevent bus_suspend if SS port resuming in phase 1
    - LP: #1493305
  * xhci: do not report PLC when link is in internal resume state
    - LP: #1493305
  * USB: OHCI: Fix race between ED unlink and URB submission
    - LP: #1493305
  * usb-storage: ignore ZTE MF 823 card reader in mode 0x1225
    - LP: #1493305
  * blkcg: fix gendisk reference leak in blkg_conf_prep()
    - LP: #1493305
  * tile: use free_bootmem_late() for initrd
    - LP: #1493305
  * Input: usbtouchscreen - avoid unresponsive TSC-30 touch screen
    - LP: #1493305
  * md/raid1: fix test for 'was read error from last working device'.
    - LP: #1493305
  * mmc: omap_hsmmc: Fix DTO and DCRC handling
    - LP: #1493305
  * isdn/gigaset: reset tty->receive_room when attaching ser_gigaset
    - LP: #1493305
  * mmc: sdhci-pxav3: fix platform_data is not initialized
    - LP: #1493305
  * mmc: block: Add missing mmc_blk_put() in power_ro_lock_show()
    - LP: #1493305
  * mmc: sdhci-esdhc: Make 8BIT bus work
    - LP: #1493305
  * bonding: correctly handle bonding type change on enslave failure
    - LP: #1493305
  * net: Clone skb before setting peeked flag
    - LP: #1493305
  * bridge: mdb: fix double add notification
    - LP: #1493305
  * usb: gadget: mv_udc_core: fix phy_regs I/O memory leak
    - LP: #1493305
  * inet: frags: fix defragmented packet's IP header for af_packet
    - LP: #1493305
  * bonding: fix destruction of bond with devices different from
    arphrd_ether
    - LP: #1493305
  * ARM: OMAP2+: hwmod: Fix _wait_target_ready() for hwmods without sysc
    - LP: #1493305
  * ASoC: pcm1681: Fix setting de-emphasis sampling rate selection
    - LP: #1493305
  * iscsi-target: Fix use-after-free during TPG session shutdown
    - LP: #1493305
  * iscsi-target: Fix iscsit_start_kthreads failure OOPs
    - LP: #1493305
  * iscsi-target: Fix iser explicit logout TX kthread leak
    - LP: #1493305
  * ALSA: hda - Apply fixup for another Toshiba Satellite S50D
    - LP: #1493305
  * vhost: actually track log eventfd file
    - LP: #1493305
  * xfs: remote attributes need to be considered data
    - LP: #1493305
  * ALSA: usb-audio: add dB range mapping for some devices
    - LP: #1493305
  * drm/radeon/combios: add some validation of lvds values
    - LP: #1493305
  * x86/efi: Use all 64 bit of efi_memmap in setup_e820()
    - LP: #1493305
  * ipr: Fix locking for unit attention handling
    - LP: #1493305
  * ipr: Fix incorrect trace indexing
    - LP: #1493305
  * ipr: Fix invalid array indexing for HRRQ
    - LP: #1493305
  * ALSA: hda - Fix MacBook Pro 5,2 quirk
    - LP: #1493305
  * x86/xen: Probe target addresses in set_aliased_prot() before the
    hypercall
    - LP: #1493305
  * netfilter: ctnetlink: put back references to master ct and expect
    objects
    - LP: #1493305
  * bridge: mdb: fix delmdb state in the notification
    - LP: #1493305
  * ipvs: fix crash with sync protocol v0 and FTP
    - LP: #1493305
  * act_pedit: check binding before calling tcf_hash_release()
    - LP: #1493305
  * netfilter: nf_conntrack: Support expectations in different zones
    - LP: #1493305
  * ipvs: do not use random local source address for tunnels
    - LP: #1493305
  * ALSA: hda - fix cs4210_spdif_automute()
    - LP: #1493305
  * niu: don't count tx error twice in case of headroom realloc fails
    - LP: #1493305
  * net/mlx4_core: Fix wrong index in propagating port change event to VFs
    - LP: #1493305
  * ipvs: fix crash if scheduler is changed
    - LP: #1493305
  * Linux 3.13.11-ckt26
    - LP: #1493305

-- Brad Figg <brad.figg@canonical.com>  Mon, 21 Sep 2015 10:16:41 -0700

Changed in linux (Ubuntu Trusty):
status:	Fix Committed → Fix Released

Revision history for this message

Launchpad Janitor (janitor) wrote on 2015-09-28:

#14

Download full text (13.2 KiB)

This bug was fixed in the package linux - 3.19.0-30.33

---------------
linux (3.19.0-30.33) vivid; urgency=low

[ Brad Figg ]

  * Release Tracking Bug
    - LP: #1498065
  * Revert "[Config]
    MFD_INTEL_LPSS/MFD_INTEL_LPSS_ACPI/MFD_INTEL_LPSS_PCI=m"
    - LP: #1498137
  * [Config] Disable the MFD_INTEL_LPSS* driver

linux (3.19.0-30.32) vivid; urgency=low

[ Brad Figg ]

* Release Tracking Bug
- LP: #1498065

[ Upstream Kernel Changes ]

* net: Fix skb_set_peeked use-after-free bug
- LP: #1497184

linux (3.19.0-29.31) vivid; urgency=low

[ Luis Henriques ]

* Release Tracking Bug
- LP: #1493902

[ Ander Conselvan de Oliveira ]

* SAUCE: i915_bpo: Set ddi_pll_sel in DP MST path
- LP: #1483320

[ Chris J Arges ]

* [Config] DEFAULT_IOSCHED="deadline" for ppc64el
- LP: #1469829

[ Chris Wilson ]

  * SAUCE: i915_bpo: drm/i915: Flag the execlists context object as dirty
    after every use
    - LP: #1489501

[ Daniel Vetter ]

* SAUCE: i915_bpo: drm/i915: Only dither on 6bpc panels
- LP: #1489501

[ David Henningsson ]

  * SAUCE: drm/i915: Add audio pin sense / ELD callback
    - LP: #1490895
  * SAUCE: drm/i915: Call audio pin/ELD notify function
    - LP: #1490895
  * SAUCE: ubuntu/i915: Call audio pin/ELD notify function
    - LP: #1490895
  * SAUCE: ALSA: hda - Add "hdac_acomp" global variable
    - LP: #1490895
  * SAUCE: ALSA: hda - allow codecs to access the i915 pin/ELD callback
    - LP: #1490895
  * SAUCE: ALSA: hda - Wake the codec up on pin/ELD notify events
    - LP: #1490895

[ Jani Nikula ]

  * SAUCE: i915_bpo: Revert "drm/i915: Allow parsing of variable size child
    device entries from VBT"
    - LP: #1489501

[ Maarten Lankhorst ]

  * SAUCE: i915_bpo: drm/i915: calculate primary visibility changes instead
    of calling from set_config
    - LP: #1489501
  * SAUCE: i915_bpo: drm/i915: Commit planes on each crtc separately.
    - LP: #1489501

[ Thulasimani,Sivakumar ]

  * SAUCE: i915_bpo: Revert "drm/i915: Add eDP intermediate frequencies for
    CHV"
    - LP: #1489501
  * SAUCE: i915_bpo: drm/i915: remove HBR2 from chv supported list
    - LP: #1489501
  * SAUCE: i915_bpo: drm/i915: Avoid TP3 on CHV
    - LP: #1489501

[ Timo Aaltonen ]

  * Revert "SAUCE: i915_bpo: drm/i915: Allow parsing of variable size child
    device entries from VBT, addendum v2"
    - LP: #1489501
  * SAUCE: Migrate Broadwell to i915_bpo.
    - LP: #1483320

[ Upstream Kernel Changes ]

  * tcp: fix recv with flags MSG_WAITALL | MSG_PEEK
    - LP: #1486146
  * powerpc/powernv: Fix the overflow of OPAL message notifiers head array
    - LP: #1487085
  * xhci: call BIOS workaround to enable runtime suspend on Intel Braswell
    - LP: #1489292
  * PM / QoS: Make it possible to expose device latency tolerance to
    userspace
    - LP: #1488395
  * ACPI / PM: Attach ACPI power domain only once
    - LP: #1488395
  * Driver core: wakeup the parent device before trying probe
    - LP: #1488395
  * klist: implement klist_prev()
    - LP: #1488395
  * driver core: implement device_for_each_child_reverse()
    - LP: #1488395
  * mfd: make mfd_remove_devices() iterate in reverse order
    ...

This bug was fixed in the package linux - 3.19.0-30.33

---------------
linux (3.19.0-30.33) vivid; urgency=low

[ Brad Figg ]

* Release Tracking Bug
    - LP: #1498065
  * Revert "[Config]
    MFD_INTEL_LPSS/MFD_INTEL_LPSS_ACPI/MFD_INTEL_LPSS_PCI=m"
    - LP: #1498137
  * [Config] Disable the MFD_INTEL_LPSS* driver

linux (3.19.0-30.32) vivid; urgency=low

[ Brad Figg ]

* Release Tracking Bug
    - LP: #1498065

[ Upstream Kernel Changes ]

* net: Fix skb_set_peeked use-after-free bug
    - LP: #1497184

linux (3.19.0-29.31) vivid; urgency=low

[ Luis Henriques ]

* Release Tracking Bug
    - LP: #1493902

[ Ander Conselvan de Oliveira ]

* SAUCE: i915_bpo: Set ddi_pll_sel in DP MST path
    - LP: #1483320

[ Chris J Arges ]

* [Config] DEFAULT_IOSCHED="deadline" for ppc64el
    - LP: #1469829

[ Chris Wilson ]

* SAUCE: i915_bpo: drm/i915: Flag the execlists context object as dirty
    after every use
    - LP: #1489501

[ Daniel Vetter ]

* SAUCE: i915_bpo: drm/i915: Only dither on 6bpc panels
    - LP: #1489501

[ David Henningsson ]

* SAUCE: drm/i915: Add audio pin sense / ELD callback
    - LP: #1490895
  * SAUCE: drm/i915: Call audio pin/ELD notify function
    - LP: #1490895
  * SAUCE: ubuntu/i915: Call audio pin/ELD notify function
    - LP: #1490895
  * SAUCE: ALSA: hda - Add "hdac_acomp" global variable
    - LP: #1490895
  * SAUCE: ALSA: hda - allow codecs to access the i915 pin/ELD callback
    - LP: #1490895
  * SAUCE: ALSA: hda - Wake the codec up on pin/ELD notify events
    - LP: #1490895

[ Jani Nikula ]

* SAUCE: i915_bpo: Revert "drm/i915: Allow parsing of variable size child
    device entries from VBT"
    - LP: #1489501

[ Maarten Lankhorst ]

* SAUCE: i915_bpo: drm/i915: calculate primary visibility changes instead
    of calling from set_config
    - LP: #1489501
  * SAUCE: i915_bpo: drm/i915: Commit planes on each crtc separately.
    - LP: #1489501

[ Thulasimani,Sivakumar ]

* SAUCE: i915_bpo: Revert "drm/i915: Add eDP intermediate frequencies for
    CHV"
    - LP: #1489501
  * SAUCE: i915_bpo: drm/i915: remove HBR2 from chv supported list
    - LP: #1489501
  * SAUCE: i915_bpo: drm/i915: Avoid TP3 on CHV
    - LP: #1489501

[ Timo Aaltonen ]

* Revert "SAUCE: i915_bpo: drm/i915: Allow parsing of variable size child
    device entries from VBT, addendum v2"
    - LP: #1489501
  * SAUCE: Migrate Broadwell to i915_bpo.
    - LP: #1483320

[ Upstream Kernel Changes ]

* tcp: fix recv with flags MSG_WAITALL | MSG_PEEK
    - LP: #1486146
  * powerpc/powernv: Fix the overflow of OPAL message notifiers head array
    - LP: #1487085
  * xhci: call BIOS workaround to enable runtime suspend on Intel Braswell
    - LP: #1489292
  * PM / QoS: Make it possible to expose device latency tolerance to
    userspace
    - LP: #1488395
  * ACPI / PM: Attach ACPI power domain only once
    - LP: #1488395
  * Driver core: wakeup the parent device before trying probe
    - LP: #1488395
  * klist: implement klist_prev()
    - LP: #1488395
  * driver core: implement device_for_each_child_reverse()
    - LP: #1488395
  * mfd: make mfd_remove_devices() iterate in reverse order
    - LP: #1488395
  * mfd: Add support for Intel Sunrisepoint LPSS devices
    - LP: #1488395
  * md: use kzalloc() when bitmap is disabled
    - LP: #1493319
  * regulator: s2mps11: Fix GPIO suspend enable shift wrapping bug
    - LP: #1493319
  * iwlwifi: mvm: fix antenna selection when BT is active
    - LP: #1493319
  * HID: cp2112: fix to force single data-report reply
    - LP: #1493319
  * ata: pmp: add quirk for Marvell 4140 SATA PMP
    - LP: #1493319
  * libata: add ATA_HORKAGE_BROKEN_FPDMA_AA quirk for HP 250GB SATA disk
    VB0250EAVER
    - LP: #1493319
  * efi: Handle memory error structures produced based on old versions of
    standard
    - LP: #1493319
  * phy: berlin-usb: fix divider for BG2CD
    - LP: #1493319
  * libata: add ATA_HORKAGE_NOTRIM
    - LP: #1493319
  * libata: force disable trim for SuperSSpeed S238
    - LP: #1493319
  * libata: add ATA_HORKAGE_MAX_SEC_1024 to revert back to previous
    max_sectors limit
    - LP: #1493319
  * libata: increase the timeout when setting transfer mode
    - LP: #1493319
  * can: mcp251x: fix resume when device is down
    - LP: #1493319
  * libata: Do not blacklist M510DC
    - LP: #1493319
  * mac80211: clear subdir_stations when removing debugfs
    - LP: #1493319
  * ALSA: pcm: Fix lockdep warning with nonatomic PCM ops
    - LP: #1493319
  * iio: adc: vf610: fix the adc register read fail issue
    - LP: #1493319
  * ALSA: hda - Add headset mic support for Acer Aspire V5-573G
    - LP: #1493319
  * Subject: pinctrl: imx1-core: Fix debug output in .pin_config_set
    callback
    - LP: #1493319
  * ALSA: hda: add new AMD PCI IDs with proper driver caps
    - LP: #1493319
  * x86/mm: Add parenthesis for TLB tracepoint size calculation
    - LP: #1493319
  * x86/mpx: Do not set ->vm_ops on MPX VMAs
    - LP: #1493319
  * net: mvneta: fix refilling for Rx DMA buffers
    - LP: #1493319
  * ALSA: hda - Add new GPU codec ID 0x10de007d to snd-hda
    - LP: #1493319
  * drm/i915: Use two 32bit reads for select 64bit REG_READ ioctls
    - LP: #1493319
  * md/raid10: always set reshape_safe when initializing reshape_position.
    - LP: #1493319
  * ALSA: hda - Add headset mic pin quirk for a Dell device
    - LP: #1476987, #1493319
  * drm: Stop resetting connector state to unknown
    - LP: #1493319
  * usb: dwc3: Reset the transfer resource index on SET_INTERFACE
    - LP: #1493319
  * usb: xhci: Bugfix for NULL pointer deference in xhci_endpoint_init()
    function
    - LP: #1493319
  * xhci: Calculate old endpoints correctly on device reset
    - LP: #1493319
  * xhci: report U3 when link is in resume state
    - LP: #1493319
  * xhci: prevent bus_suspend if SS port resuming in phase 1
    - LP: #1493319
  * xhci: do not report PLC when link is in internal resume state
    - LP: #1493319
  * usb: core: lpm: set lpm_capable for root hub device
    - LP: #1493319
  * USB: OHCI: Fix race between ED unlink and URB submission
    - LP: #1493319
  * usb-storage: ignore ZTE MF 823 card reader in mode 0x1225
    - LP: #1493319
  * blkcg: fix gendisk reference leak in blkg_conf_prep()
    - LP: #1493319
  * mei: prevent unloading mei hw modules while the device is opened.
    - LP: #1493319
  * iommu/vt-d: Fix VM domain ID leak
    - LP: #1493319
  * tile: use free_bootmem_late() for initrd
    - LP: #1493319
  * Input: usbtouchscreen - avoid unresponsive TSC-30 touch screen
    - LP: #1493319
  * block: Do a full clone when splitting discard bios
    - LP: #1493319
  * md/raid1: fix test for 'was read error from last working device'.
    - LP: #1493319
  * mmc: omap_hsmmc: Fix DTO and DCRC handling
    - LP: #1493319
  * spi: imx: Fix small DMA transfers
    - LP: #1493319
  * ftrace: Fix breakage of set_ftrace_pid
    - LP: #1493319
  * isdn/gigaset: reset tty->receive_room when attaching ser_gigaset
    - LP: #1493319
  * sched: cls_bpf: fix panic on filter replace
    - LP: #1493319
  * net_sched: fix a use-after-free in sfq
    - LP: #1493319
  * serial: core: Fix crashes while echoing when closing
    - LP: #1493319
  * mmc: sdhci-pxav3: fix platform_data is not initialized
    - LP: #1493319
  * mmc: block: Add missing mmc_blk_put() in power_ro_lock_show()
    - LP: #1493319
  * mmc: sdhci-esdhc: Make 8BIT bus work
    - LP: #1493319
  * bonding: correctly handle bonding type change on enslave failure
    - LP: #1493319
  * mmc: sdhci check parameters before call dma_free_coherent
    - LP: #1493319
  * net: Clone skb before setting peeked flag
    - LP: #1493319
  * mtd: nand: Fix NAND_USE_BOUNCE_BUFFER flag conflict
    - LP: #1493319
  * bridge: mdb: fix double add notification
    - LP: #1493319
  * usb: gadget: mv_udc_core: fix phy_regs I/O memory leak
    - LP: #1493319
  * net/xen-netback: off by one in BUG_ON() condition
    - LP: #1493319
  * sched: cls_flow: fix panic on filter replace
    - LP: #1493319
  * ipvlan: use rcu_deference_bh() in ipvlan_queue_xmit()
    - LP: #1493319
  * inet: frags: fix defragmented packet's IP header for af_packet
    - LP: #1493319
  * bonding: fix destruction of bond with devices different from
    arphrd_ether
    - LP: #1493319
  * fq_codel: fix a use-after-free
    - LP: #1493319
  * ASoC: dapm: Lock during userspace access
    - LP: #1493319
  * ASoC: dapm: Don't add prefix to widget stream name
    - LP: #1493319
  * ASoC: ssm4567: Keep TDM_BCLKS in ssm4567_set_dai_fmt
    - LP: #1493319
  * ARM: OMAP2+: hwmod: Fix _wait_target_ready() for hwmods without sysc
    - LP: #1493319
  * ASoC: pcm1681: Fix setting de-emphasis sampling rate selection
    - LP: #1493319
  * qla2xxx: Fix hardware lock/unlock issue causing kernel panic.
    - LP: #1493319
  * qla2xxx: release request queue reservation.
    - LP: #1493319
  * qla2xxx: Remove msleep in qlt_send_term_exchange
    - LP: #1493319
  * qla2xxx: fix command initialization in target mode.
    - LP: #1493319
  * qla2xxx: kill sessions/log out initiator on RSCN and port down events
    - LP: #1493319
  * qla2xxx: cleanup cmd in qla workqueue before processing TMR
    - LP: #1493319
  * qla2xxx: delay plogi/prli ack until existing sessions are deleted
    - LP: #1493319
  * qla2xxx: Abort stale cmds on qla_tgt_wq when plogi arrives
    - LP: #1493319
  * qla2xxx: added sess generations to detect RSCN update races
    - LP: #1493319
  * qla2xxx: disable scsi_transport_fc registration in target mode
    - LP: #1493319
  * qla2xxx: drop cmds/tmrs arrived while session is being deleted
    - LP: #1493319
  * qla2xxx: terminate exchange when command is aborted by LIO
    - LP: #1493319
  * iscsi-target: Fix use-after-free during TPG session shutdown
    - LP: #1493319
  * iscsi-target: Convert iscsi_thread_set usage to kthread.h
    - LP: #1493319
  * iscsi-target: Fix iscsit_start_kthreads failure OOPs
    - LP: #1493319
  * iscsi-target: Fix iser explicit logout TX kthread leak
    - LP: #1493319
  * ARM: dts: i.MX35: Fix can support.
    - LP: #1493319
  * ALSA: hda - Apply fixup for another Toshiba Satellite S50D
    - LP: #1493319
  * drm/nouveau/fbcon/nv11-: correctly account for ring space usage
    - LP: #1493319
  * vhost: actually track log eventfd file
    - LP: #1493319
  * arm64/efi: map the entire UEFI vendor string before reading it
    - LP: #1493319
  * xfs: remote attribute headers contain an invalid LSN
    - LP: #1493319
  * xfs: remote attributes need to be considered data
    - LP: #1493319
  * ALSA: hda - Apply a fixup to Dell Vostro 5480
    - LP: #1493319
  * ALSA: usb-audio: add dB range mapping for some devices
    - LP: #1493319
  * drm/i915: Replace WARN inside I915_READ64_2x32 with retry loop
    - LP: #1493319
  * drm/radeon/combios: add some validation of lvds values
    - LP: #1493319
  * drm/i915: Declare the swizzling unknown for L-shaped configurations
    - LP: #1493319
  * x86/efi: Use all 64 bit of efi_memmap in setup_e820()
    - LP: #1493319
  * efi: Check for NULL efi kernel parameters
    - LP: #1493319
  * ipr: Fix locking for unit attention handling
    - LP: #1493319
  * ipr: Fix incorrect trace indexing
    - LP: #1493319
  * ipr: Fix invalid array indexing for HRRQ
    - LP: #1493319
  * scsi: fix memory leak with scsi-mq
    - LP: #1493319
  * ALSA: hda - Fix MacBook Pro 5,2 quirk
    - LP: #1493319
  * x86/xen: Probe target addresses in set_aliased_prot() before the
    hypercall
    - LP: #1493319
  * packet: tpacket_snd(): fix signed/unsigned comparison
    - LP: #1493319
  * inet: frag: don't re-use chainlist for evictor
    - LP: #1493319
  * bridge: netlink: fix slave_changelink/br_setport race conditions
    - LP: #1493319
  * netfilter: ctnetlink: put back references to master ct and expect
    objects
    - LP: #1493319
  * NFS: Don't revalidate the mapping if both size and change attr are up
    to date
    - LP: #1493319
  * bridge: mdb: fix delmdb state in the notification
    - LP: #1493319
  * ipvs: skb_orphan in case of forwarding
    - LP: #1493319
  * avr32: handle NULL as a valid clock object
    - LP: #1493319
  * ipvs: fix crash with sync protocol v0 and FTP
    - LP: #1493319
  * act_pedit: check binding before calling tcf_hash_release()
    - LP: #1493319
  * netfilter: nf_conntrack: Support expectations in different zones
    - LP: #1493319
  * ipvs: do not use random local source address for tunnels
    - LP: #1493319
  * ALSA: hda - fix cs4210_spdif_automute()
    - LP: #1493319
  * niu: don't count tx error twice in case of headroom realloc fails
    - LP: #1493319
  * net: sched: fix refcount imbalance in actions
    - LP: #1493319
  * net/mlx4_core: Fix wrong index in propagating port change event to VFs
    - LP: #1493319
  * packet: missing dev_put() in packet_do_bind()
    - LP: #1493319
  * ipvs: fix crash if scheduler is changed
    - LP: #1493319
  * Linux 3.19.8-ckt6
    - LP: #1493319

[ Ville Syrjälä ]

* SAUCE: i915_bpo: drm/i915: Don't use link_bw for PLL setup
    - LP: #1483320
  * SAUCE: i915_bpo: drm/i915: Split atomic wm update to pre and post
    variants
    - LP: #1493746

[ Wen Xiong ]

* SAUCE: ipr: Byte swapping for device_id attribute in sysfs
    - LP: #1453892

[ Wen-chien Jesse Sung ]

* [Config] MFD_INTEL_LPSS/MFD_INTEL_LPSS_ACPI/MFD_INTEL_LPSS_PCI=m
    - LP: #1488395

-- Brad Figg <brad.figg@canonical.com>  Mon, 21 Sep 2015 11:57:20 -0700

Changed in linux (Ubuntu Vivid):
status:	Fix Committed → Fix Released

Revision history for this message

Matt Riedemann (mriedem) wrote on 2015-10-01:

#15

Download full text (6.5 KiB)

Ever since we started picking up the 3.13.0-65 kernel in the openstack CI system on 9/29 we've been seeing lots of random failures across 3 branches (juno/kilo/master) with ebtables, details are in:

https://bugs.launchpad.net/nova/+bug/1501558

An example failure:

http://logs.openstack.org/62/229962/1/check/gate-tempest-dsvm-full/28bb6b6/logs/screen-n-cpu.txt.gz?level=TRACE#_2015-10-01_17_39_59_1872015-10-01 17:39:59.187 6060 ERROR nova.compute.manager [instance: 79207baa-d735-401c-9f81-4f7ea75aaa4f] Traceback (most recent call last):
2015-10-01 17:39:59.187 6060 ERROR nova.compute.manager [instance: 79207baa-d735-401c-9f81-4f7ea75aaa4f] File "/opt/stack/new/nova/nova/compute/manager.py", line 2155, in _build_resources
2015-10-01 17:39:59.187 6060 ERROR nova.compute.manager [instance: 79207baa-d735-401c-9f81-4f7ea75aaa4f] yield resources
2015-10-01 17:39:59.187 6060 ERROR nova.compute.manager [instance: 79207baa-d735-401c-9f81-4f7ea75aaa4f] File "/opt/stack/new/nova/nova/compute/manager.py", line 2009, in _build_and_run_instance
2015-10-01 17:39:59.187 6060 ERROR nova.compute.manager [instance: 79207baa-d735-401c-9f81-4f7ea75aaa4f] block_device_info=block_device_info)
2015-10-01 17:39:59.187 6060 ERROR nova.compute.manager [instance: 79207baa-d735-401c-9f81-4f7ea75aaa4f] File "/opt/stack/new/nova/nova/virt/libvirt/driver.py", line 2444, in spawn
2015-10-01 17:39:59.187 6060 ERROR nova.compute.manager [instance: 79207baa-d735-401c-9f81-4f7ea75aaa4f] block_device_info=block_device_info)
2015-10-01 17:39:59.187 6060 ERROR nova.compute.manager [instance: 79207baa-d735-401c-9f81-4f7ea75aaa4f] File "/opt/stack/new/nova/nova/virt/libvirt/driver.py", line 4516, in _create_domain_and_network
2015-10-01 17:39:59.187 6060 ERROR nova.compute.manager [instance: 79207baa-d735-401c-9f81-4f7ea75aaa4f] xml, pause=pause, power_on=power_on)
2015-10-01 17:39:59.187 6060 ERROR nova.compute.manager [instance: 79207baa-d735-401c-9f81-4f7ea75aaa4f] File "/opt/stack/new/nova/nova/virt/libvirt/driver.py", line 4446, in _create_domain
2015-10-01 17:39:59.187 6060 ERROR nova.compute.manager [instance: 79207baa-d735-401c-9f81-4f7ea75aaa4f] guest.launch(pause=pause)
2015-10-01 17:39:59.187 6060 ERROR nova.compute.manager [instance: 79207baa-d735-401c-9f81-4f7ea75aaa4f] File "/opt/stack/new/nova/nova/virt/libvirt/guest.py", line 141, in launch
2015-10-01 17:39:59.187 6060 ERROR nova.compute.manager [instance: 79207baa-d735-401c-9f81-4f7ea75aaa4f] self._encoded_xml, errors='ignore')
2015-10-01 17:39:59.187 6060 ERROR nova.compute.manager [instance: 79207baa-d735-401c-9f81-4f7ea75aaa4f] File "/usr/local/lib/python2.7/dist-packages/oslo_utils/excutils.py", line 195, in __exit__
2015-10-01 17:39:59.187 6060 ERROR nova.compute.manager [instance: 79207baa-d735-401c-9f81-4f7ea75aaa4f] six.reraise(self.type_, self.value, self.tb)
2015-10-01 17:39:59.187 6060 ERROR nova.compute.manager [instance: 79207baa-d735-401c-9f81-4f7ea75aaa4f] File "/opt/stack/new/nova/nova/virt/libvirt/guest.py", line 136, in launch
2015-10-01 17:39:59.187 6060 ERROR nova.compute.manager [instance: 79207baa-d735-401c-9f81-4f7ea75aaa4f] return self._domain.cr...

Ubuntu
linux package

Kernel-panic with 3.13.0-64.104 generic kernel (BUG at net/core/skbuff:1290)

Bug Description

Other bug subscribers

Bug attachments

Remote bug watches

	Status	Importance	Assigned to
linux (Ubuntu)	Invalid	High	Unassigned
Trusty	Fix Released	High	Unassigned
Vivid	Fix Released	High	Unassigned

Ubuntulinux package

Kernel-panic with 3.13.0-64.104 generic kernel (BUG at net/core/skbuff:1290)

Bug Description

Other bug subscribers

Bug attachments

Remote bug watches

Ubuntu
linux package