From: "Barry K. Nathan" <barryn@pobox.com>
To: Sasha Levin <sashal@kernel.org>,
Greg Kroah-Hartman <gregkh@linuxfoundation.org>,
stable@vger.kernel.org, Kuniyuki Iwashima <kuniyu@google.com>,
Eric Dumazet <edumazet@google.com>
Cc: patches@lists.linux.dev, linux-kernel@vger.kernel.org,
torvalds@linux-foundation.org, akpm@linux-foundation.org,
linux@roeck-us.net, shuah@kernel.org, patches@kernelci.org,
lkft-triage@lists.linaro.org, pavel@nabladev.com,
jonathanh@nvidia.com, f.fainelli@gmail.com,
sudipm.mukherjee@gmail.com, rwarsow@gmx.de, conor@kernel.org,
hargar@microsoft.com, broonie@kernel.org, achill@achill.org,
sr@sladewatkins.com
Subject: Re: [PATCH 6.12 0000/1102] 6.12.111-rc1 review
Date: Sat, 19 Sep 2026 23:29:26 -0700 [thread overview]
Message-ID: <98538a44-63c3-455e-96f3-00124a825f9f@pobox.com> (raw)
In-Reply-To: <ce4ba85b47cf4c2e8f7def41@kernel.org>
On 9/19/26 10:07 AM, Sasha Levin wrote:
> On Sat, Sep 19, 2026 at 03:54:25AM -0700, Barry K. Nathan wrote:
>>> [ 98.363843] RTNL: assertion failed at net/ipv6/mcast.c (1014)
>>> [ 98.363896] WARNING: CPU: 6 PID: 961 at net/ipv6/mcast.c:1014 __ipv6_dev_mc_dec+0x17b/0x190 [ipv6]
>
>> I bisected it to this patch:
>> ipv6-mcast-don-t-hold-rtnl-for-ipv6_drop_membership-.patch.
>
> Your bisect is right, and thanks for chasing it all the way down --
> the splat is real and the patch you landed on is the trigger.
>
> I've dropped the ipv6 mcast RTNL conversion patches from the 6.12, 6.6
> and 5.15 queues.
>
>> If I take 6.12.110, apply the current stable-queue (as of commit
>> 01b20bb84b994fdcda64fd07a66ba84c85d0168f), then revert the
>> following patches:
>>
>> ipv6-mcast-don-t-hold-rtnl-for-ipv6_drop_membership-.patch
>> ipv6-mcast-don-t-hold-rtnl-for-mcast_-socket-options.patch
>> ipv6-mcast-use-copy-on-write-rcu-updates-in-ip6_mc_s.patch
>>
>> then the resulting kernel no longer shows these warnings at all.
>
> The root cause is a prerequisite we never picked up, rather than anything wrong
> with the patches themselves. Upstream commit e01b193e0b50a ("ipv6: mcast: Use
> in6_dev_get() in ipv6_dev_mc_dec().") is the commit in that series which
> deletes the now-stale ASSERT_RTNL() from __ipv6_dev_mc_dec(), and it was never
> backported to 6.12.y, 6.6.y or 5.15.y. So we took the patches that stop holding
> RTNL across the setsockopt paths while the assertion they were meant to retire
> was still sitting there -- hence net/ipv6/mcast.c:1014 firing on every
> IPV6_DROP_MEMBERSHIP. The queued patches are byte-identical cherry-picks of the
> upstream commits; this is a series-ordering gap on our side, not a botched
> backport.
>
> 7.2 and 6.18 carry the whole series, including e01b193e0b50a, so they
> are not affected and keep their copies.
>
> One difference from your experiment: I removed four patches rather than the
> three you reverted. The extra one is 1767bb2d47b7 ("ipv6: mcast: Don't hold
> RTNL for IPV6_ADD_MEMBERSHIP and MCAST_JOIN_GROUP."), which is a pure refactor
> of the join path and was only ever queued as a dependency of the others. It is
> harmless on its own so consistent with you not needing to revert it, but with
> the rest gone there is no reason to keep it, and dropping it keeps the series
> intact for a clean requeue.
>
> The plan is to requeue the complete ordered set, e01b193e0b50a included,
> once this RC is out.
Thanks for taking care of this!
I have now retested with 6.12.110 + stable-queue as of commit
afa3d2e7536e9034a4917d4b6e228a99d5bd7aa6 on my ThinkPad T14 Gen 1. I can
no longer reproduce this kernel warning (as expected with the patches
being dropped for now), and it's working well, and I have not observed
any other regressions.
Tested-by: Barry K. Nathan <barryn@pobox.com>
--
-Barry K. Nathan <barryn@pobox.com>
next prev parent reply other threads:[~2026-09-20 6:29 UTC|newest]
Thread overview: 23+ messages / expand[flat|nested] mbox.gz Atom feed top
2026-09-17 14:59 Greg Kroah-Hartman
2026-09-17 16:57 ` Florian Fainelli
2026-09-17 19:11 ` Peter Schneider
2026-09-17 20:21 ` Pavel Machek
2026-09-18 15:54 ` Sasha Levin
2026-09-17 19:35 ` Brett A C Sheffield
2026-09-17 20:19 ` Peter Schneider
2026-09-18 5:49 ` Peter Schneider
2026-09-18 15:54 ` Sasha Levin
2026-09-18 20:45 ` Peter Schneider
2026-09-18 15:54 ` Sasha Levin
2026-09-18 15:54 ` Sasha Levin
2026-09-17 20:18 ` Pavel Machek
2026-09-18 11:27 ` Jon Hunter
2026-09-18 15:54 ` Sasha Levin
2026-09-18 15:54 ` Sasha Levin
2026-09-18 7:16 ` [PATCH 6.18 0000/1250] 6.18.53-rc1 review Wentao Guan
2026-09-19 7:00 ` [PATCH 6.12 0000/1102] 6.12.111-rc1 review Barry K. Nathan
2026-09-19 10:54 ` Barry K. Nathan
2026-09-19 17:07 ` Sasha Levin
2026-09-20 6:29 ` Barry K. Nathan [this message]
2026-09-20 17:50 ` Sasha Levin
2026-09-19 12:18 ` Miguel Ojeda
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=98538a44-63c3-455e-96f3-00124a825f9f@pobox.com \
--to=barryn@pobox.com \
--cc=achill@achill.org \
--cc=akpm@linux-foundation.org \
--cc=broonie@kernel.org \
--cc=conor@kernel.org \
--cc=edumazet@google.com \
--cc=f.fainelli@gmail.com \
--cc=gregkh@linuxfoundation.org \
--cc=hargar@microsoft.com \
--cc=jonathanh@nvidia.com \
--cc=kuniyu@google.com \
--cc=linux-kernel@vger.kernel.org \
--cc=linux@roeck-us.net \
--cc=lkft-triage@lists.linaro.org \
--cc=patches@kernelci.org \
--cc=patches@lists.linux.dev \
--cc=pavel@nabladev.com \
--cc=rwarsow@gmx.de \
--cc=sashal@kernel.org \
--cc=shuah@kernel.org \
--cc=sr@sladewatkins.com \
--cc=stable@vger.kernel.org \
--cc=sudipm.mukherjee@gmail.com \
--cc=torvalds@linux-foundation.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox
all inboxes | Powered by JetHome®