Hi. Here's git bisect log:
git bisect log git bisect start # status: waiting for both good and bad commits # good: [8a243ecde1f6447b8e237f2c1c67c0bb67d16d67] Linux 6.12.57 git bisect good 8a243ecde1f6447b8e237f2c1c67c0bb67d16d67 # status: waiting for bad commit, 1 good commit known # bad: [567bd8cbc2fe6b28b78864cbbbc41b0d405eb83c] Linux 6.12.63 git bisect bad 567bd8cbc2fe6b28b78864cbbbc41b0d405eb83c # good: [850c7f0537cc5a37ed012592907920637cc548b6] x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev git bisect good 850c7f0537cc5a37ed012592907920637cc548b6 # good: [ad396a05d9851c0198f6246377a52b56733800cc] smack: always "instantiate" inode in smack_inode_init_security() git bisect good ad396a05d9851c0198f6246377a52b56733800cc # good: [630f2ce9c7cc6797eeed06174675d295f87686a9] drm/msm/a6xx: Flush LRZ cache before PT switch git bisect good 630f2ce9c7cc6797eeed06174675d295f87686a9 # bad: [7c3ba62a4d29fbafd2f4f0dfe8437fcdedec6428] net: stmmac: fix rx limit check in stmmac_rx_zc() git bisect bad 7c3ba62a4d29fbafd2f4f0dfe8437fcdedec6428 # good: [96eab6610cb3abfbc8abdae3008984e0621e0da0] um: Don't rename vmap to kernel_vmap git bisect good 96eab6610cb3abfbc8abdae3008984e0621e0da0 # good: [094e8f78c6335318c9ee0862cc0d4fafa8c7c2ef] of: Skip devicetree kunit tests when RISCV+ACPI doesn't populate root node git bisect good 094e8f78c6335318c9ee0862cc0d4fafa8c7c2ef # good: [5cc0fd103918c358464b1618d63736d947ad4248] ARM: dts: samsung: universal_c210: turn off SDIO WLAN chip during system suspend git bisect good 5cc0fd103918c358464b1618d63736d947ad4248 # good: [9a15982a2c099b25924b539e8727cfc39dbf1682] resource: replace open coded resource_intersection() git bisect good 9a15982a2c099b25924b539e8727cfc39dbf1682 # good: [9f953b045886c9e9add6b0e89aae555517782fa7] netfilter: flowtable: check for maximum number of encapsulations in bridge vlan git bisect good 9f953b045886c9e9add6b0e89aae555517782fa7 # bad: [b29ddccf36946a90323486221f39e9f88cc01b8e] netfilter: nft_connlimit: update the count if add was skipped git bisect bad b29ddccf36946a90323486221f39e9f88cc01b8e # good: [3558faee8aace3541189c3a2ca45c7e85e144b44] netfilter: nf_conncount: rework API to use sk_buff directly git bisect good 3558faee8aace3541189c3a2ca45c7e85e144b44 # first bad commit: [b29ddccf36946a90323486221f39e9f88cc01b8e] netfilter: nft_connlimit: update the count if add was skipped Cheers. On Wed, 2026-03-11 at 11:15 +0100, Salvatore Bonaccorso wrote: > Control: tags -1 + moreinfo upstream > > Hi > > On Wed, Mar 11, 2026 at 11:02:42AM +0100, Alejandro Olivan Alvarez > wrote: > > Package: linux-image-6.12.73+deb13-amd64 > > Version: 6.12.73-1 > > Severity: normal > > X-Debbugs-Cc: [email protected] > > > > Dear Maintainer, > > > > * What led up to the situation? > > apt-get dist-upgrade > > > > * What exactly did you do (or not do) that was effective (or > > ineffective)? > > reboot to previous linux-image-6.12.41+deb13-amd64 makes > > networking > > work again. > > > > * What was the outcome of this action? > > > > Seems like TCP connections do not work beyond the first > > connection. > > For example, two apt-get update commands fail on the second > > one: > > > > root@marcamalaga:~# uname -r > > 6.12.73+deb13-amd64 > > root@marcamalaga:~# date > > Wed Mar 11 10:22:19 AM CET 2026 > > root@marcamalaga:~# apt-get update > > Get:1 http://security.debian.org/debian-security trixie-security > > InRelease > > [43.4 kB] > > Hit:2 http://ftp.es.debian.org/debian trixie InRelease > > Get:3 http://ftp.es.debian.org/debian trixie-updates InRelease > > [47.3 kB] > > Hit:4 https://www.deb-multimedia.org trixie InRelease > > Fetched 90.7 kB in 1s (152 kB/s) > > Reading package lists... Done > > root@marcamalaga:~# > > root@marcamalaga:~# date > > Wed Mar 11 10:22:28 AM CET 2026 > > root@marcamalaga:~# > > root@marcamalaga:~# apt-get update > > Hit:1 http://security.debian.org/debian-security trixie-security > > InRelease > > Hit:2 http://ftp.es.debian.org/debian trixie InRelease > > Hit:3 http://ftp.es.debian.org/debian trixie-updates InRelease > > Ign:4 https://www.deb-multimedia.org trixie InRelease > > Ign:4 https://www.deb-multimedia.org trixie InRelease > > Ign:4 https://www.deb-multimedia.org trixie InRelease > > Err:4 https://www.deb-multimedia.org trixie InRelease > > Cannot initiate the connection to www.deb-multimedia.org:443 > > (2607:5300:120:e71::1). - connect (101: Network is unreachable) > > Could not > > connect to www.deb-multimedia.org:443 (158.69.254.113), connection > > timed out > > Cannot initiate the connection to www.deb-multimedia.org:443 > > (2607:5300:120:e71::1). - connect (101: Network is unreachable) > > Reading package lists... Done > > W: Failed to fetch > > https://www.deb-multimedia.org/dists/trixie/InRelease > > Cannot initiate the connection to www.deb-multimedia.org:443 > > (2607:5300:120:e71::1). - connect (101: Network is unreachable) > > W: Some index files failed to download. They have been ignored, or > > old ones > > used instead. > > root@marcamalaga:~# > > > > Similarly, for illustration, here two probes of an HTTP > > stream, works > > only once: > > > > administrator@marcamalaga:~$ uname -r > > 6.12.73+deb13-amd64 > > administrator@marcamalaga:~$ date > > Wed Mar 11 10:19:23 AM CET 2026 > > administrator@marcamalaga:~$ ffprobe > > http://10.20.10.80:8130/malagafmmobile > > ffprobe version 7.1.3 Copyright (c) 2007-2025 the FFmpeg developers > > built with gcc 14 (Debian 14.2.0-19) > > configuration: --disable-decoder=amrnb --disable-gnutls -- > > disable-liblensfun > > --disable-libopencv --disable-podpages --disable-sndio --disable- > > stripping > > --disable-omx --enable-avfilter --enable-chromaprint --enable- > > frei0r --enable- > > gcrypt --enable-gpl --enable-ladspa --enable-libaom --enable- > > libaribb24 > > --enable-libass --enable-libbluray --enable-libbs2b --enable- > > libcaca --enable- > > libcdio --enable-libcodec2 --enable-libdav1d --enable-libdavs2 -- > > enable- > > libdc1394 --enable-libdrm --enable-libdvdnav --enable-libdvdread -- > > enable- > > libfdk-aac --enable-libflite --enable-libfontconfig --enable- > > libfreetype > > --enable-libfribidi --enable-libgme --enable-libgsm --enable- > > libharfbuzz > > --enable-libiec61883 --enable-libilbc --enable-libjack --enable- > > libjxl > > --enable-libklvanc --enable-libkvazaar --enable-libmp3lame -- > > enable-libmysofa > > --enable-libopencore-amrnb --enable-libopencore-amrwb --enable- > > libopenh264 > > --enable-libopenjpeg --enable-libopenmpt --enable-libopus --enable- > > libplacebo > > --enable-libpulse --enable-librabbitmq --enable-librist --enable- > > librsvg > > --enable-librubberband --enable-libshine --enable-libsmbclient -- > > enable- > > libsnappy --enable-libsoxr --enable-libspeex --enable-libsrt -- > > enable-libsvtav1 > > --enable-libtesseract --enable-libtheora --enable-libtwolame -- > > enable- > > libvidstab --enable-libvmaf --enable-libvo-amrwbenc --enable- > > libvorbis > > --enable-libvpx --enable-libwebp --enable-libwebp --enable-libx264 > > --enable- > > libx265 --enable-libxavs2 --enable-libxml2 --enable-libxvid -- > > enable-libzimg > > --enable-libzmq --enable-libzvbi --enable-lv2 --enable-nonfree -- > > enable-openal > > --enable-opencl --enable-opengl --enable-openssl --enable-postproc > > --enable- > > pthreads --enable-shared --enable-version3 -- > > incdir=/usr/include/x86_64-linux- > > gnu --libdir=/usr/lib/x86_64-linux-gnu --prefix=/usr -- > > toolchain=hardened > > --enable-vaapi --enable-libvpl --cc=x86_64-linux-gnu-gcc -- > > cxx=x86_64-linux- > > gnu-g++ --disable-altivec --shlibdir=/usr/lib/x86_64-linux-gnu > > libavutil 59. 39.100 / 59. 39.100 > > libavcodec 61. 19.101 / 61. 19.101 > > libavformat 61. 7.100 / 61. 7.100 > > libavdevice 61. 3.100 / 61. 3.100 > > libavfilter 10. 4.100 / 10. 4.100 > > libswscale 8. 3.100 / 8. 3.100 > > libswresample 5. 3.100 / 5. 3.100 > > libpostproc 58. 3.100 / 58. 3.100 > > Input #0, mp3, from 'http://10.20.10.80:8130/malagafmmobile': > > Metadata: > > icy-br : 170 > > icy-description : : Radio MARCA MA : > > icy-genre : Sport Radio > > icy-name : : Radio MARCA MA : > > icy-pub : 1 > > icy-url : www.radiomarca.com > > StreamTitle : > > Duration: N/A, start: 0.000000, bitrate: 191 kb/s > > Stream #0:0: Audio: mp3 (mp3float), 44100 Hz, stereo, fltp, 191 > > kb/s > > administrator@marcamalaga:~$ > > administrator@marcamalaga:~$ > > administrator@marcamalaga:~$ date > > Wed Mar 11 10:19:44 AM CET 2026 > > administrator@marcamalaga:~$ ffprobe > > http://10.20.10.80:8130/malagafmmobile > > ffprobe version 7.1.3 Copyright (c) 2007-2025 the FFmpeg developers > > built with gcc 14 (Debian 14.2.0-19) > > configuration: --disable-decoder=amrnb --disable-gnutls -- > > disable-liblensfun > > --disable-libopencv --disable-podpages --disable-sndio --disable- > > stripping > > --disable-omx --enable-avfilter --enable-chromaprint --enable- > > frei0r --enable- > > gcrypt --enable-gpl --enable-ladspa --enable-libaom --enable- > > libaribb24 > > --enable-libass --enable-libbluray --enable-libbs2b --enable- > > libcaca --enable- > > libcdio --enable-libcodec2 --enable-libdav1d --enable-libdavs2 -- > > enable- > > libdc1394 --enable-libdrm --enable-libdvdnav --enable-libdvdread -- > > enable- > > libfdk-aac --enable-libflite --enable-libfontconfig --enable- > > libfreetype > > --enable-libfribidi --enable-libgme --enable-libgsm --enable- > > libharfbuzz > > --enable-libiec61883 --enable-libilbc --enable-libjack --enable- > > libjxl > > --enable-libklvanc --enable-libkvazaar --enable-libmp3lame -- > > enable-libmysofa > > --enable-libopencore-amrnb --enable-libopencore-amrwb --enable- > > libopenh264 > > --enable-libopenjpeg --enable-libopenmpt --enable-libopus --enable- > > libplacebo > > --enable-libpulse --enable-librabbitmq --enable-librist --enable- > > librsvg > > --enable-librubberband --enable-libshine --enable-libsmbclient -- > > enable- > > libsnappy --enable-libsoxr --enable-libspeex --enable-libsrt -- > > enable-libsvtav1 > > --enable-libtesseract --enable-libtheora --enable-libtwolame -- > > enable- > > libvidstab --enable-libvmaf --enable-libvo-amrwbenc --enable- > > libvorbis > > --enable-libvpx --enable-libwebp --enable-libwebp --enable-libx264 > > --enable- > > libx265 --enable-libxavs2 --enable-libxml2 --enable-libxvid -- > > enable-libzimg > > --enable-libzmq --enable-libzvbi --enable-lv2 --enable-nonfree -- > > enable-openal > > --enable-opencl --enable-opengl --enable-openssl --enable-postproc > > --enable- > > pthreads --enable-shared --enable-version3 -- > > incdir=/usr/include/x86_64-linux- > > gnu --libdir=/usr/lib/x86_64-linux-gnu --prefix=/usr -- > > toolchain=hardened > > --enable-vaapi --enable-libvpl --cc=x86_64-linux-gnu-gcc -- > > cxx=x86_64-linux- > > gnu-g++ --disable-altivec --shlibdir=/usr/lib/x86_64-linux-gnu > > libavutil 59. 39.100 / 59. 39.100 > > libavcodec 61. 19.101 / 61. 19.101 > > libavformat 61. 7.100 / 61. 7.100 > > libavdevice 61. 3.100 / 61. 3.100 > > libavfilter 10. 4.100 / 10. 4.100 > > libswscale 8. 3.100 / 8. 3.100 > > libswresample 5. 3.100 / 5. 3.100 > > libpostproc 58. 3.100 / 58. 3.100 > > [tcp @ 0x561036562fc0] Connection to tcp://10.20.10.80:8130 failed: > > Connection > > timed out > > http://10.20.10.80:8130/malagafmmobile: Connection timed out > > > > The problem happens on VIRTUAL MACHINES (PROXMOX 9 guests) > > using virtio > > drivers. > > I have experienced same behaviour on dist-upgraded Bookworm > > VMs with > > latest kernel. > > All VMs worked as expected and are inproduction without any > > issues > > before dist-upgrading them. > > Machines still not dist-upgraded work flawless. > > The problem is fully consistent with kernel upgrade... just > > reboot to > > previous kernel to resume work. > > > > * What outcome did you expect instead? > > Regular operation of the networking stack > > I suspect this then depends on the underlaying virtualisation, > otherwise we would have I think more such reports. As you have a > fairly straightforward reproducer, can you please bisect the changes > between 6.12.41 and 6.12.73? (Ideally you test first the kernels > inbetween up to 6.12.69-1 so we have a closer range, you can get > other > images earlier in the archive from the snapshots service. This should > be done as first step, because there were a a couple of releases in > Debian between 6.12.41-1 and 6.12.73-1). So assume you have 6.12.69-1 > which is good, and 6.12.73-1 which is not anymore, bisecting would > involve: > > git clone --single-branch -b linux-6.12.y > https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git > cd linux-stable > git checkout v6.12.69 > cp /boot/config-$(uname -r) .config > yes '' | make localmodconfig > make savedefconfig > mv defconfig arch/x86/configs/my_defconfig > > # test 6.12.69 to ensure this is "good" > make my_defconfig > make -j $(nproc) bindeb-pkg > ... install the resulting .deb package and confirm problem does > not exist > > # test 6.12.73 to ensure this is "bad" > git checkout v6.12.73 > make my_defconfig > make -j $(nproc) bindeb-pkg > ... install the resulting .deb package and confirm the problem > exists. > > With that confirmed, the bisection can start: > > git bisect start > git bisect good v6.12.69 > git bisect bad v6.12.73 > > In each bisection step git checks out a state between the oldest > known-bad and the newest known-good commit. In each step test using: > > make my_defconfig > make -j $(nproc) bindeb-pkg > ... install, verify if problem exists > > and if the problem is hit run: > > git bisect bad > > and if the problem doesn't trigger run: > > git bisect good > > . Please pay attention to always select the just built kernel for > booting, it won't always be the default kernel picked up by grub. > > Iterate until git announces to have identified the first bad commit. > > Then provide the output of > > git bisect log > > In the course of the bisection you might have to uninstall previous > kernels again to not exhaust the disk space in /boot. Also in the end > uninstall all self-built kernels again. > > Regards, > Salvatore

