Description of problem: receive for the packet then kernel is panic. Version-Release number of selected component (if applicable): 3.9.10-200.fc18 How reproducible: sometimes. Steps to Reproduce: 1. receive for the packet. Actual results: kernel panic. Expected results: Additional info: ------------[ cut here ]------------ WARNING: at lib/list_debug.c:33 __list_add+0xbe/0xd0() Hardware name: 2012 Client Platform list_add corruption. prev->next should be next (ffffffff81ed87d8), but was (null). (prev=ffff88011c03d9c0). Modules linked in: nfsv3 nfs_acl nfsv4 auth_rpcgss nfs dns_resolver fscache vfat fat rfcomm bnep bluetooth rfkill fuse ip6table_filter ip6_tables ebtable_nat ebtables ipt_MASQUERADE iptable_nat nf_nat_ipv4 nf_nat nf_conntrack_ipv4 nf_defrag_ipv4 xt_conntrack nf_conntrack xt_CHECKSUM iptable_mangle bridge stp llc be2iscsi iscsi_boot_sysfs bnx2i cnic uio cxgb4i cxgb4 cxgb3i cxgb3 mdio libcxgbi ib_iser lockd rdma_cm ib_addr sunrpc iw_cm ib_cm ib_sa ib_mad ib_core iscsi_tcp libiscsi_tcp libiscsi scsi_transport_iscsi snd_hda_codec_hdmi snd_hda_intel snd_hda_codec snd_hwdep snd_seq snd_seq_device iTCO_wdt iTCO_vendor_support snd_pcm acpi_cpufreq mperf snd_page_alloc coretemp snd_timer snd microcode e1000e i2c_i801 soundcore ptp mei lpc_ich pps_core mfd_core vhost_net tun macvtap macvlan kvm_intel kvm uinput binfmt_misc nouveau mxm_wmi wmi i2c_algo_bit crc32_pclmul drm_kms_helper ttm crc32c_intel drm ghash_clmulni_intel usb_storage i2c_core video Pid: 0, comm: swapper/0 Tainted: G W 3.9.10-200.fc18.x86_64 #1 Call Trace: <IRQ> [<ffffffff8105efc5>] warn_slowpath_common+0x75/0xa0 [<ffffffff8105f0a6>] warn_slowpath_fmt+0x46/0x50 [<ffffffff8131463e>] __list_add+0xbe/0xd0 [<ffffffff8106e4c3>] __internal_add_timer+0x113/0x130 [<ffffffff8106ead0>] internal_add_timer+0x20/0x50 [<ffffffff8106fde4>] mod_timer+0x124/0x200 [<ffffffffa055f562>] br_multicast_rcv+0x862/0x1330 [bridge] [<ffffffff8157eea6>] ? nf_iterate+0x86/0xb0 [<ffffffffa05554a0>] ? br_handle_local_finish+0x60/0x60 [bridge] [<ffffffffa05556f2>] br_handle_frame_finish+0x252/0x330 [bridge] [<ffffffffa0555946>] br_handle_frame+0x176/0x280 [bridge] [<ffffffff81551392>] __netif_receive_skb_core+0x352/0x7f0 [<ffffffff81551851>] __netif_receive_skb+0x21/0x70 [<ffffffff81551a53>] netif_receive_skb+0x33/0xb0 [<ffffffff81552478>] napi_gro_receive+0x98/0xd0 [<ffffffffa02bb962>] e1000_receive_skb+0x82/0xf0 [e1000e] [<ffffffffa02bccbd>] e1000_clean_rx_irq+0x24d/0x430 [e1000e] [<ffffffffa02c4868>] e1000e_poll+0x78/0x320 [e1000e] [<ffffffff81552159>] net_rx_action+0x149/0x240 [<ffffffff81505e30>] ? cpufreq_frequency_table_update_policy_cpu+0x80/0x80 [<ffffffff81067678>] __do_softirq+0xe8/0x230 [<ffffffff81505e30>] ? cpufreq_frequency_table_update_policy_cpu+0x80/0x80 [<ffffffff81067945>] irq_exit+0xa5/0xb0 [<ffffffff81669c63>] do_IRQ+0x63/0xe0 [<ffffffff8165fc6d>] common_interrupt+0x6d/0x6d <EOI> [<ffffffff81506793>] ? cpuidle_wrap_enter+0x53/0xa0 [<ffffffff81506789>] ? cpuidle_wrap_enter+0x49/0xa0 [<ffffffff815067f0>] cpuidle_enter_tk+0x10/0x20 [<ffffffff815064b5>] cpuidle_idle_call+0xa5/0x1d0 [<ffffffff8101d12f>] cpu_idle+0xaf/0x120 [<ffffffff81644782>] rest_init+0x72/0x80 [<ffffffff81d02ed6>] start_kernel+0x3f2/0x3ff [<ffffffff81d028e3>] ? repair_env_string+0x5e/0x5e [<ffffffff81d025dc>] x86_64_start_reservations+0x2a/0x2c [<ffffffff81d026cf>] x86_64_start_kernel+0xf1/0x100 ---[ end trace effc2e9d7d691723 ]--- ------------[ cut here ]------------ WARNING: at lib/list_debug.c:36 __list_add+0x9c/0xd0() Hardware name: 2012 Client Platform list_add double add: new=ffff88011c03d9c0, prev=ffff88011c03d9c0, next=ffffffff81ed87d8. Modules linked in: nfsv3 nfs_acl nfsv4 auth_rpcgss nfs dns_resolver fscache vfat fat rfcomm bnep bluetooth rfkill fuse ip6table_filter ip6_tables ebtable_nat ebtables ipt_MASQUERADE iptable_nat nf_nat_ipv4 nf_nat nf_conntrack_ipv4 nf_defrag_ipv4 xt_conntrack nf_conntrack xt_CHECKSUM iptable_mangle bridge stp llc be2iscsi iscsi_boot_sysfs bnx2i cnic uio cxgb4i cxgb4 cxgb3i cxgb3 mdio libcxgbi ib_iser lockd rdma_cm ib_addr sunrpc iw_cm ib_cm ib_sa ib_mad ib_core iscsi_tcp libiscsi_tcp libiscsi scsi_transport_iscsi snd_hda_codec_hdmi snd_hda_intel snd_hda_codec snd_hwdep snd_seq snd_seq_device iTCO_wdt iTCO_vendor_support snd_pcm acpi_cpufreq mperf snd_page_alloc coretemp snd_timer snd microcode e1000e i2c_i801 soundcore ptp mei lpc_ich pps_core mfd_core vhost_net tun macvtap macvlan kvm_intel kvm uinput binfmt_misc nouveau mxm_wmi wmi i2c_algo_bit crc32_pclmul drm_kms_helper ttm crc32c_intel drm ghash_clmulni_intel usb_storage i2c_core video Pid: 0, comm: swapper/0 Tainted: G W 3.9.10-200.fc18.x86_64 #1 Call Trace: <IRQ> [<ffffffff8105efc5>] warn_slowpath_common+0x75/0xa0 [<ffffffff8105f0a6>] warn_slowpath_fmt+0x46/0x50 [<ffffffff8131461c>] __list_add+0x9c/0xd0 [<ffffffff8106e4c3>] __internal_add_timer+0x113/0x130 [<ffffffff8106ead0>] internal_add_timer+0x20/0x50 [<ffffffff8106fde4>] mod_timer+0x124/0x200 [<ffffffffa055f562>] br_multicast_rcv+0x862/0x1330 [bridge] [<ffffffff8157eea6>] ? nf_iterate+0x86/0xb0 [<ffffffffa05554a0>] ? br_handle_local_finish+0x60/0x60 [bridge] [<ffffffffa05556f2>] br_handle_frame_finish+0x252/0x330 [bridge] [<ffffffffa0555946>] br_handle_frame+0x176/0x280 [bridge] [<ffffffff81551392>] __netif_receive_skb_core+0x352/0x7f0 [<ffffffff81551851>] __netif_receive_skb+0x21/0x70 [<ffffffff81551a53>] netif_receive_skb+0x33/0xb0 [<ffffffff81552478>] napi_gro_receive+0x98/0xd0 [<ffffffffa02bb962>] e1000_receive_skb+0x82/0xf0 [e1000e] [<ffffffffa02bccbd>] e1000_clean_rx_irq+0x24d/0x430 [e1000e] [<ffffffffa02c4868>] e1000e_poll+0x78/0x320 [e1000e] [<ffffffff81552159>] net_rx_action+0x149/0x240 [<ffffffff81505e30>] ? cpufreq_frequency_table_update_policy_cpu+0x80/0x80 [<ffffffff81067678>] __do_softirq+0xe8/0x230 [<ffffffff81505e30>] ? cpufreq_frequency_table_update_policy_cpu+0x80/0x80 [<ffffffff81067945>] irq_exit+0xa5/0xb0 [<ffffffff81669c63>] do_IRQ+0x63/0xe0 [<ffffffff8165fc6d>] common_interrupt+0x6d/0x6d <EOI> [<ffffffff81506793>] ? cpuidle_wrap_enter+0x53/0xa0 [<ffffffff81506789>] ? cpuidle_wrap_enter+0x49/0xa0 [<ffffffff815067f0>] cpuidle_enter_tk+0x10/0x20 [<ffffffff815064b5>] cpuidle_idle_call+0xa5/0x1d0 [<ffffffff8101d12f>] cpu_idle+0xaf/0x120 [<ffffffff81644782>] rest_init+0x72/0x80 [<ffffffff81d02ed6>] start_kernel+0x3f2/0x3ff [<ffffffff81d028e3>] ? repair_env_string+0x5e/0x5e [<ffffffff81d025dc>] x86_64_start_reservations+0x2a/0x2c [<ffffffff81d026cf>] x86_64_start_kernel+0xf1/0x100 ---[ end trace effc2e9d7d691724 ]---
*** This bug has been marked as a duplicate of bug 980254 ***