Bug ID 1212839
Summary LTP test cve-2021-22555 setsockopt08.c fails with ENOENT
Classification openSUSE
Product openSUSE Tumbleweed
Version Current
Hardware Other
OS Other
Status NEW
Severity Normal
Priority P5 - None
Component Kernel
Assignee kernel-bugs@opensuse.org
Reporter petr.vorel@suse.com
QA Contact qa-bugs@suse.de
Target Milestone ---
Found By ---
Blocker ---

LTP test cve-2021-22555 setsockopt08.c fails with ENOENT [1], but it expects
EINVAL on mostly all archs on Tumbleweed (all but s390x, i.e. aarch64, ppc64le,
x86_64 and x86_64 compiled as 32bit).

The test has been failing for very long time (our history goes to 6.3.2
20230517, but it's failing on my VM with 6.2.12-1-default 20230502).

When test run more times (200x with -i200 [3]) it fails only on first time, the
rest happily have EINVAL. And indeed, when verifying manually on VM, only first
run fails

dmesg on affected archs contains:
[ 1514.789118][T28992] x_tables: ip_tables: state.0 match: invalid size 8
(kernel) != (user) 776
[ 1514.792200][T28992] x_tables: ip_tables: state.0 match: invalid size 8
(kernel) != (user) 776
[ 1514.795209][T28992] x_tables: ip_tables: state.0 match: invalid size 8
(kernel) != (user) 776
[ 1514.798209][T28992] x_tables: ip_tables: state.0 match: invalid size 8
(kernel) != (user) 776
[ 1514.801190][T28992] x_tables: ip_tables: state.0 match: invalid size 8
(kernel) != (user) 776
[ 1514.804092][T28992] x_tables: ip_tables: state.0 match: invalid size 8
(kernel) != (user) 776
[ 1514.807159][T28992] x_tables: ip_tables: state.0 match: invalid size 8
(kernel) != (user) 776
[ 1514.810210][T28992] x_tables: ip_tables: state.0 match: invalid size 8
(kernel) != (user) 776
[ 1514.813257][T28992] x_tables: ip_tables: state.0 match: invalid size 8
(kernel) != (user) 776
[ 1514.816227][T28992] x_tables: ip_tables: state.0 match: invalid size 8
(kernel) != (user) 776

But when running manually I see on first (failing):
[  208.455124] bpfilter: Loaded bpfilter_umh pid 1223
[  208.456650] Started bpfilter

(this is also in openQA jobs, but earlier, triggered by setsockopt03.c, which
runs earlier). And x_tables run is reported on later (successful run):
[  221.292549] x_tables: ip_tables: state.0 match: invalid size 8 (kernel) !=
(user) 776
=> Maybe there is a problem with loading x_tables on these 3 archs

Interestingly x_tables is loaded on all archs, including s390x (which does not
fail) and the same dmesg [4]

FYI we stop and disable firewall in openQA install_ltp job (this qcow is then
used for LTP tests) [5]:

systemctl --no-pager disable firewalld
Removed "/etc/systemd/system/multi-user.target.wants/firewalld.service".
Removed "/etc/systemd/system/dbus-org.fedoraproject.FirewallD1.service".
systemctl --no-pager stop firewalld

[1] https://openqa.opensuse.org/tests/3390125#step/setsockopt08/7
[2]
https://github.com/linux-test-project/ltp/blob/a564d3e1672e9cd7ac302d597ffa21bf189457dd/testcases/kernel/syscalls/setsockopt/setsockopt08.c#L141
[3] https://openqa.opensuse.org/tests/3391862#step/cve-2021-22555/7
[4] https://openqa.opensuse.org/tests/3380876/file/shutdown_ltp-dmesg.txt
[5] https://openqa.opensuse.org/tests/3391842/file/serial_terminal.txt


You are receiving this mail because: