[Bug 1203380] New: Starting ss without option fails to request raw sockets
http://bugzilla.opensuse.org/show_bug.cgi?id=1203380 Bug ID: 1203380 Summary: Starting ss without option fails to request raw sockets Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: 64bit OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: Network Assignee: screening-team-bugs@suse.de Reporter: sddrossy@aol.com QA Contact: qa-bugs@suse.de Found By: --- Blocker: --- On two TW installs starting ss without option fails, printing "Killed" in console and in dmesg: [ 63.215947] BUG: unable to handle page fault for address: ffffffffffffffc8 [ 63.215957] #PF: supervisor read access in kernel mode [ 63.215960] #PF: error_code(0x0000) - not-present page [ 63.215963] PGD 165615067 P4D 165615067 PUD 165617067 PMD 0 [ 63.215970] Oops: 0000 [#1] PREEMPT SMP PTI [ 63.215974] CPU: 0 PID: 2540 Comm: ss Tainted: G O 5.19.8-1-default #1 openSUSE Tumbleweed cfee37eadc5a540a2720ec5a9e55d8deb9565ab8 [ 63.215981] Hardware name: Dell Inc. Precision WorkStation T7500 /06FW8P, BIOS A18 10/15/2018 [ 63.215985] RIP: 0010:raw_diag_dump+0x104/0x200 [raw_diag] [ 63.215991] Code: 89 c5 49 8b 5e 08 89 dd 83 e5 01 0f 85 ff 00 00 00 4c 89 74 24 08 45 89 e6 89 14 24 eb 0c 48 8b 1b f6 c3 01 0f 85 80 00 00 00 <4c> 3b 7b c8 75 ee 44 39 f5 7c 6a 41 0f b6 45 00 66 39 43 a8 75 5f [ 63.215997] RSP: 0018:ffffb4f38368b9a0 EFLAGS: 00010246 [ 63.216001] RAX: ffff8fcb60245810 RBX: 0000000000000000 RCX: ffff8fccb0fc9348 [ 63.216004] RDX: 0000000000000000 RSI: ffffffffb0278ec0 RDI: ffffffffb0278ec0 [ 63.216008] RBP: 0000000000000000 R08: ffffffffaf667cc0 R09: 0000000000000006 [ 63.216011] R10: ffffdcfcc648f800 R11: 0000000000000090 R12: 0000000000000000 [ 63.216014] R13: ffff8fcb60245810 R14: 0000000000000000 R15: ffffffffb026fdc0 [ 63.216018] FS: 00007f522d85c800(0000) GS:ffff8fd03ee00000(0000) knlGS:0000000000000000 [ 63.216022] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.216026] CR2: ffffffffffffffc8 CR3: 000000023096e002 CR4: 00000000000206f0 [ 63.216030] Call Trace: [ 63.216033] <TASK> [ 63.216038] __inet_diag_dump+0x3c/0xb0 [inet_diag 6e5a23768fff3f0f8fbb1d3bede71750b73bbc75] [ 63.216045] netlink_dump+0x123/0x310 [ 63.216052] __netlink_dump_start+0x1b6/0x2f0 [ 63.216057] inet_diag_handler_cmd+0xb7/0xe0 [inet_diag 6e5a23768fff3f0f8fbb1d3bede71750b73bbc75] [ 63.216063] ? inet_diag_dump_start_compat+0x10/0x10 [inet_diag 6e5a23768fff3f0f8fbb1d3bede71750b73bbc75] [ 63.216069] ? inet_diag_dump_compat+0xc0/0xc0 [inet_diag 6e5a23768fff3f0f8fbb1d3bede71750b73bbc75] [ 63.216075] ? inet_diag_unregister+0x40/0x40 [inet_diag 6e5a23768fff3f0f8fbb1d3bede71750b73bbc75] [ 63.216082] sock_diag_rcv_msg+0x114/0x140 [ 63.216089] ? sock_diag_bind+0x50/0x50 [ 63.216093] netlink_rcv_skb+0x51/0x100 [ 63.216098] sock_diag_rcv+0x24/0x40 [ 63.216102] netlink_unicast+0x239/0x380 [ 63.216106] netlink_sendmsg+0x250/0x4c0 [ 63.216110] sock_sendmsg+0x5f/0x70 [ 63.216117] ____sys_sendmsg+0x22e/0x270 [ 63.216121] ? import_iovec+0x17/0x20 [ 63.216126] ? sendmsg_copy_msghdr+0x7b/0xa0 [ 63.216131] ___sys_sendmsg+0x80/0xc0 [ 63.216136] ? __rseq_handle_notify_resume+0x362/0x480 [ 63.216143] ? __sys_recvmsg+0x54/0xa0 [ 63.216147] __sys_sendmsg+0x57/0xa0 [ 63.216152] do_syscall_64+0x5b/0x80 [ 63.216158] ? do_syscall_64+0x67/0x80 [ 63.216162] ? syscall_exit_to_user_mode+0x17/0x40 [ 63.216167] ? do_syscall_64+0x67/0x80 [ 63.216171] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 63.216177] RIP: 0033:0x7f522da29524 [ 63.216181] Code: ff eb b7 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 90 90 80 3d 7d c4 0d 00 00 74 13 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 54 c3 0f 1f 00 48 83 ec 28 89 54 24 1c 48 89 [ 63.216187] RSP: 002b:00007fffec05efc8 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 63.216191] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00007f522da29524 [ 63.216195] RDX: 0000000000000000 RSI: 00007fffec05f0b0 RDI: 0000000000000003 [ 63.216198] RBP: 00000000000000ff R08: 0000000000000004 R09: 0000000000000001 [ 63.216201] R10: 00007fffec05ef9c R11: 0000000000000202 R12: 0000000000000003 [ 63.216205] R13: 00007fffec05f030 R14: 0000000003010014 R15: 00007fffec05f170 [ 63.216210] </TASK> [ 63.216221] Modules linked in: raw_diag inet_diag unix_diag wireguard curve25519_x86_64 libchacha20poly1305 chacha_x86_64 poly1305_x86_64 libcurve25519_generic libchacha ip6_udp_tunnel udp_tunnel af_packet nft_objref nf_conntrack_netbios_ns nf_conntrack_broadcast nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_tables ebtable_nat ebtable_broute iptable_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 libcrc32c iptable_mangle iptable_raw iptable_security rfkill ip_set nfnetlink ebtable_filter ebtables ip6_tables iptable_filter bpfilter vboxnetadp(O) vboxnetflt(O) qrtr vboxdrv(O) snd_seq_dummy snd_seq_oss snd_emu10k1_synth snd_emux_synth snd_seq_midi_emul snd_seq_virmidi snd_seq_midi snd_seq_midi_event snd_seq dmi_sysfs iTCO_wdt intel_pmc_bxt gpio_ich iTCO_vendor_support ppdev stv6110x intel_powerclamp coretemp lnbp21 dell_smm_hwmon kvm_intel kvm dell_wmi ledtrig_audio dell_smbios dcdbas [ 63.216267] irqbypass pcspkr sparse_keymap dell_wmi_descriptor wmi_bmof stv090x ddbridge dvb_core joydev mc i2c_i801 i2c_smbus snd_hda_codec_hdmi tg3 snd_hda_intel lpc_ich snd_intel_dspcfg snd_intel_sdw_acpi libphy snd_emu10k1 snd_hda_codec snd_util_mem snd_ac97_codec snd_hda_core ac97_bus snd_rawmidi snd_hwdep snd_seq_device i7core_edac snd_pcm snd_timer snd soundcore parport_pc parport tiny_power_button raid1 md_mod acpi_cpufreq mptctl fuse configfs ip_tables x_tables ext4 mbcache jbd2 hid_cherry hid_generic usbhid crct10dif_pclmul crc32_pclmul crc32c_intel ghash_clmulni_intel nouveau aesni_intel crypto_simd cryptd serio_raw mptsas xhci_pci video xhci_pci_renesas sr_mod cdrom scsi_transport_sas drm_ttm_helper xhci_hcd uhci_hcd ehci_pci ttm ehci_hcd mxm_wmi mptscsih mptbase drm_display_helper usbcore firewire_ohci cec firewire_core rc_core crc_itu_t wmi button sg dm_multipath dm_mod scsi_dh_rdac scsi_dh_emc scsi_dh_alua msr [ 63.216358] Unloaded tainted modules: pcc_cpufreq():1 pcc_cpufreq():1 pcc_cpufreq():1 pcc_cpufreq():1 pcc_cpufreq():1 pcc_cpufreq():1 pcc_cpufreq():1 pcc_cpufreq():1 pcc_cpufreq():1 pcc_cpufreq():1 pcc_cpufreq():1 pcc_cpufreq():1 pcc_cpufreq():1 pcc_cpufreq():1 pcc_cpufreq():1 pcc_cpufreq():1 pcc_cpufreq():1 pcc_cpufreq():1 pcc_cpufreq():1 pcc_cpufreq():1 pcc_cpufreq():1 pcc_cpufreq():1 pcc_cpufreq():1 pcc_cpufreq():1 pcc_cpufreq():1 pcc_cpufreq():1 pcc_cpufreq():1 pcc_cpufreq():1 pcc_cpufreq():1 pcc_cpufreq():1 pcc_cpufreq():1 pcc_cpufreq():1 [ 63.216438] CR2: ffffffffffffffc8 [ 63.216447] ---[ end trace 0000000000000000 ]--- [ 63.216455] RIP: 0010:raw_diag_dump+0x104/0x200 [raw_diag] [ 63.216465] Code: 89 c5 49 8b 5e 08 89 dd 83 e5 01 0f 85 ff 00 00 00 4c 89 74 24 08 45 89 e6 89 14 24 eb 0c 48 8b 1b f6 c3 01 0f 85 80 00 00 00 <4c> 3b 7b c8 75 ee 44 39 f5 7c 6a 41 0f b6 45 00 66 39 43 a8 75 5f [ 63.216476] RSP: 0018:ffffb4f38368b9a0 EFLAGS: 00010246 [ 63.216485] RAX: ffff8fcb60245810 RBX: 0000000000000000 RCX: ffff8fccb0fc9348 [ 63.216494] RDX: 0000000000000000 RSI: ffffffffb0278ec0 RDI: ffffffffb0278ec0 [ 63.216502] RBP: 0000000000000000 R08: ffffffffaf667cc0 R09: 0000000000000006 [ 63.216511] R10: ffffdcfcc648f800 R11: 0000000000000090 R12: 0000000000000000 [ 63.216519] R13: ffff8fcb60245810 R14: 0000000000000000 R15: ffffffffb026fdc0 [ 63.216527] FS: 00007f522d85c800(0000) GS:ffff8fd03ee00000(0000) knlGS:0000000000000000 [ 63.216537] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.216545] CR2: ffffffffffffffc8 CR3: 000000023096e002 CR4: 00000000000206f0 [ 63.216554] note: ss[2540] exited with preempt_count 1 starting ss with options -t or -u or -x works fine There is: cat /proc/net/raw sl local_address rem_address st tx_queue rx_queue tr tm->when retrnsmt uid timeout inode ref pointer drops For reference: https://forums.opensuse.org/showthread.php/575368-Kernel-fault-when-starting... -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1203380 http://bugzilla.opensuse.org/show_bug.cgi?id=1203380#c1 --- Comment #1 from Hans Mayer <sddrossy@aol.com> --- ...installed netstat (-deprecated), works just fine. Found another TW install with nonfunctional ss (without options added). -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1203380 http://bugzilla.opensuse.org/show_bug.cgi?id=1203380#c2 Andreas Stieger <Andreas.Stieger@gmx.de> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |Andreas.Stieger@gmx.de Assignee|screening-team-bugs@suse.de |jengelh@inai.de Summary|Starting ss without option |iproute2: starting ss |fails to request raw |without option fails to |sockets |request raw sockets --- Comment #2 from Andreas Stieger <Andreas.Stieger@gmx.de> --- Looks like a kernel issue but running by iproute2 maintainer -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1203380 http://bugzilla.opensuse.org/show_bug.cgi?id=1203380#c3 --- Comment #3 from Jan Engelhardt <jengelh@inai.de> --- Oof. A misbehaving userspace should never cause the kernel to crash. I don't immediately notice an issue with 5.19.2 or 6.0.0-rc4. -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1203380 http://bugzilla.opensuse.org/show_bug.cgi?id=1203380#c4 --- Comment #4 from Jan Engelhardt <jengelh@inai.de> --- The "faulty address" ffffffffffffffc8 corresponds to -0x38. AFAICT, the instruction 124: 48 8b 43 c8 mov -0x38(%rbx),%rax correponds to raw_diag.c: ``` sk_nulls_for_each(sk, hnode, hlist) { struct inet_sock *inet = inet_sk(sk);
if (!net_eq(sock_net(sk), net))
continue;
hnode == %rbx.
sk == %rbx-0x68
&sk->sk_net == %rbx-0x38
So hnode is nullptr.
--
You are receiving this mail because:
You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1203380 Jan Engelhardt <jengelh@inai.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|jengelh@inai.de |kernel-maintainers@forge.pr | |ovo.novell.com -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1203380 Georg Pfuetzenreuter <georg.pfuetzenreuter@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |georg.pfuetzenreuter@suse.c | |om, | |kernel-bugs@opensuse.org -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1203380 http://bugzilla.opensuse.org/show_bug.cgi?id=1203380#c5 --- Comment #5 from Hans Mayer <sddrossy@aol.com> --- ...and now? ;-) -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1203380 Andreas Stieger <Andreas.Stieger@gmx.de> changed: What |Removed |Added ---------------------------------------------------------------------------- CC|Andreas.Stieger@gmx.de | -- You are receiving this mail because: You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply＠suse.com