[Bug 1229552] New: Traceback at ../net/netfilter/nf_tables_api.c:2050 nf_tables_chain_destroy
https://bugzilla.suse.com/show_bug.cgi?id=1229552 Bug ID: 1229552 Summary: Traceback at ../net/netfilter/nf_tables_api.c:2050 nf_tables_chain_destroy Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Kernel Assignee: kernel-bugs@opensuse.org Reporter: georg.pfuetzenreuter@suse.com QA Contact: qa-bugs@suse.de Target Milestone: --- Found By: --- Blocker: --- Created attachment 876865 --> https://bugzilla.suse.com/attachment.cgi?id=876865&action=edit asgard2.i.o.o journal after boot Hi, installing updates including kernel-default-5.14.21-150500.55.65.1 on one of our openSUSE firewall VMs today, lots of this is printed during boot: ``` Aug 21 09:47:25 asgard2 kernel: WARNING: CPU: 2 PID: 5509 at ../net/netfilter/nf_tables_api.c:2050 nf_tables_chain_destroy+0x12a/0x150 [nf_tables] Aug 21 09:47:25 asgard2 kernel: Modules linked in: tun nf_nat nf_conntrack_netlink nf_tables nfnetlink wireguard libchacha20poly1305 chacha_x86_64 poly1305_x86_64 ip6_udp_tunnel udp_tunnel curve25519_x86_64 libcurve25519_generic libchacha dm_mod af_packet 8021q garp mrp stp llc iscsi_ibft iscsi_boot_sysfs rfkill nls_iso8859_1 nls_cp437 vfat fat iTCO_wdt intel_pmc_bxt iTCO_vendor_support intel_rapl_msr intel_rapl_common virtio_net virtio_balloon i2c_i801 net_failover pcspkr failover lpc_ich i2c_smbus mfd_core button joydev fuse configfs dmi_sysfs ip_tables x_tables crc32_pclmul ghash_clmulni_intel sha512_ssse3 ahci libahci sha256_ssse3 sha1_ssse3 libata sd_mod xhci_pci xhci_pci_renesas t10_pi crc64_rocksoft_generic xhci_hcd crc64_rocksoft sg crc64 usbcore aesni_intel crypto_simd cryptd scsi_mod virtio_blk serio_raw btrfs blake2b_generic xor raid6_pq nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 libcrc32c crc32c_intel efivarfs qemu_fw_cfg virtio_rng Aug 21 09:47:25 asgard2 kernel: Supported: Yes Aug 21 09:47:25 asgard2 kernel: CPU: 2 PID: 5509 Comm: nft Tainted: G W 6.4.0-150600.23.17-default #1 SLE15-SP6 5eff937aa9559314e63d74eec60fba157a5dbfd6 Aug 21 09:47:25 asgard2 kernel: Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS unknown 02/02/2022 Aug 21 09:47:25 asgard2 kernel: RIP: 0010:nf_tables_chain_destroy+0x12a/0x150 [nf_tables] Aug 21 09:47:25 asgard2 kernel: Code: 5f e9 2a ab 42 d3 48 8b 7b 58 e8 21 ab 42 d3 48 8b 7b 68 e8 18 ab 42 d3 48 89 df 5b 5d 41 5c 41 5d 41 5e 41 5f e9 06 ab 42 d3 <0f> 0b 5b 5d 41 5c 41 5d 41 5e 41 5f e9 85 91 d6 d3 0f 0b e9 05 ff Aug 21 09:47:25 asgard2 kernel: RSP: 0018:ffffa7fd8046b788 EFLAGS: 00010202 Aug 21 09:47:25 asgard2 kernel: RAX: 0000000000000001 RBX: ffff8bf6e8c89000 RCX: 0000000080150010 Aug 21 09:47:25 asgard2 kernel: RDX: ffff8bf72442f850 RSI: 0000000000000001 RDI: ffff8bf72442f868 Aug 21 09:47:25 asgard2 kernel: RBP: ffff8bf641f9a310 R08: 0000000000000001 R09: 0000000000000000 Aug 21 09:47:25 asgard2 kernel: R10: ffff8bf72442fb00 R11: 0000000000000372 R12: dead000000000122 Aug 21 09:47:25 asgard2 kernel: R13: dead000000000100 R14: ffff8bf72442ff00 R15: ffff8bf72442ff00 Aug 21 09:47:25 asgard2 kernel: FS: 00007f5c7ee8d740(0000) GS:ffff8bf728300000(0000) knlGS:0000000000000000 Aug 21 09:47:25 asgard2 kernel: CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 Aug 21 09:47:25 asgard2 kernel: CR2: 000055f5de2fbf14 CR3: 000000018f6b2000 CR4: 0000000000350ee0 Aug 21 09:47:25 asgard2 kernel: Call Trace: Aug 21 09:47:25 asgard2 kernel: <TASK> Aug 21 09:47:25 asgard2 kernel: ? __warn+0x7d/0x140 Aug 21 09:47:25 asgard2 kernel: ? nf_tables_chain_destroy+0x12a/0x150 [nf_tables 33ac467d326e5f0a925b542f8b6b5777507be3ab] Aug 21 09:47:25 asgard2 kernel: ? report_bug+0xfb/0x1e0 Aug 21 09:47:25 asgard2 kernel: ? handle_bug+0x44/0x80 Aug 21 09:47:25 asgard2 kernel: ? exc_invalid_op+0x13/0x60 Aug 21 09:47:25 asgard2 kernel: ? asm_exc_invalid_op+0x16/0x20 Aug 21 09:47:25 asgard2 kernel: ? nf_tables_chain_destroy+0x12a/0x150 [nf_tables 33ac467d326e5f0a925b542f8b6b5777507be3ab] Aug 21 09:47:25 asgard2 kernel: __nf_tables_abort+0x5c4/0xb00 [nf_tables 33ac467d326e5f0a925b542f8b6b5777507be3ab] Aug 21 09:47:25 asgard2 kernel: nf_tables_abort+0x5c/0x1a0 [nf_tables 33ac467d326e5f0a925b542f8b6b5777507be3ab] Aug 21 09:47:25 asgard2 kernel: nfnetlink_rcv_batch+0x368/0x640 [nfnetlink 464c7ee5607c7e250b1543054c6c85719c9ba7a6] Aug 21 09:47:25 asgard2 kernel: ? __vmalloc_node_range+0x40d/0x860 Aug 21 09:47:25 asgard2 kernel: ? srso_return_thunk+0x5/0x5f Aug 21 09:47:25 asgard2 kernel: ? srso_return_thunk+0x5/0x5f Aug 21 09:47:25 asgard2 kernel: nfnetlink_rcv+0x121/0x140 [nfnetlink 464c7ee5607c7e250b1543054c6c85719c9ba7a6] Aug 21 09:47:25 asgard2 kernel: netlink_unicast+0x1c7/0x290 Aug 21 09:47:25 asgard2 kernel: netlink_sendmsg+0x31c/0x460 Aug 21 09:47:25 asgard2 kernel: sock_sendmsg+0x92/0xa0 Aug 21 09:47:25 asgard2 kernel: ? srso_return_thunk+0x5/0x5f Aug 21 09:47:25 asgard2 kernel: ____sys_sendmsg+0x207/0x2a0 Aug 21 09:47:25 asgard2 kernel: ___sys_sendmsg+0x88/0xd0 Aug 21 09:47:25 asgard2 kernel: ? srso_return_thunk+0x5/0x5f Aug 21 09:47:25 asgard2 kernel: ? srso_return_thunk+0x5/0x5f Aug 21 09:47:25 asgard2 kernel: ? srso_return_thunk+0x5/0x5f Aug 21 09:47:25 asgard2 kernel: ? sk_getsockopt+0x1d1/0x10e0 Aug 21 09:47:25 asgard2 kernel: ? srso_return_thunk+0x5/0x5f Aug 21 09:47:25 asgard2 kernel: ? srso_return_thunk+0x5/0x5f Aug 21 09:47:25 asgard2 kernel: ? srso_return_thunk+0x5/0x5f Aug 21 09:47:25 asgard2 kernel: ? sk_getsockopt+0x1d1/0x10e0 Aug 21 09:47:25 asgard2 kernel: ? srso_return_thunk+0x5/0x5f Aug 21 09:47:25 asgard2 kernel: ? srso_return_thunk+0x5/0x5f Aug 21 09:47:25 asgard2 kernel: ? srso_return_thunk+0x5/0x5f Aug 21 09:47:25 asgard2 kernel: ? security_capable+0x38/0x60 Aug 21 09:47:25 asgard2 kernel: ? __sys_sendmsg+0x5e/0xa0 Aug 21 09:47:25 asgard2 kernel: __sys_sendmsg+0x5e/0xa0 Aug 21 09:47:25 asgard2 kernel: ? __sys_setsockopt+0xff/0x1b0 Aug 21 09:47:25 asgard2 kernel: do_syscall_64+0x5b/0x80 Aug 21 09:47:25 asgard2 kernel: ? srso_return_thunk+0x5/0x5f Aug 21 09:47:25 asgard2 kernel: ? syscall_exit_to_user_mode+0x1e/0x40 Aug 21 09:47:25 asgard2 kernel: ? srso_return_thunk+0x5/0x5f Aug 21 09:47:25 asgard2 kernel: ? do_syscall_64+0x67/0x80 Aug 21 09:47:25 asgard2 kernel: ? srso_return_thunk+0x5/0x5f Aug 21 09:47:25 asgard2 kernel: ? syscall_exit_to_user_mode+0x1e/0x40 Aug 21 09:47:25 asgard2 kernel: ? srso_return_thunk+0x5/0x5f Aug 21 09:47:25 asgard2 kernel: ? do_syscall_64+0x67/0x80 Aug 21 09:47:25 asgard2 kernel: ? srso_return_thunk+0x5/0x5f Aug 21 09:47:25 asgard2 kernel: ? do_user_addr_fault+0x446/0x890 Aug 21 09:47:25 asgard2 kernel: ? srso_return_thunk+0x5/0x5f Aug 21 09:47:25 asgard2 kernel: ? exc_page_fault+0x69/0x150 Aug 21 09:47:25 asgard2 kernel: entry_SYSCALL_64_after_hwframe+0x7c/0xe6 Aug 21 09:47:25 asgard2 kernel: RIP: 0033:0x7f5c7e9313c0 Aug 21 09:47:25 asgard2 kernel: Code: 1f 84 00 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 80 3d 69 c6 0d 00 00 74 17 b8 2e 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 58 c3 0f 1f 80 00 00 00 00 48 83 ec 28 89 54 Aug 21 09:47:25 asgard2 kernel: RSP: 002b:00007ffe95184ec8 EFLAGS: 00000202 ORIG_RAX: 000000000000002e Aug 21 09:47:25 asgard2 kernel: RAX: ffffffffffffffda RBX: 00007ffe951960e0 RCX: 00007f5c7e9313c0 Aug 21 09:47:25 asgard2 kernel: RDX: 0000000000000000 RSI: 00007ffe95195f90 RDI: 0000000000000003 Aug 21 09:47:25 asgard2 kernel: RBP: 00007ffe95196090 R08: 0000000000000004 R09: 0000000000000002 Aug 21 09:47:25 asgard2 kernel: R10: 00007f5c7e80c840 R11: 0000000000000202 R12: 0000000000040000 Aug 21 09:47:25 asgard2 kernel: R13: 00000000000e0800 R14: 00007ffe95184f00 R15: 0000000000000003 Aug 21 09:47:25 asgard2 kernel: </TASK> Aug 21 09:47:25 asgard2 kernel: ---[ end trace 0000000000000000 ]--- ``` Full journal (which includes the kernel log) is attached. -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1229552 https://bugzilla.suse.com/show_bug.cgi?id=1229552#c3 Georg Pfuetzenreuter <georg.pfuetzenreuter@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo?(georg.pfuetzenreu | |ter@suse.com) | --- Comment #3 from Georg Pfuetzenreuter <georg.pfuetzenreuter@suse.com> --- Hi Takashi, thanks for the swift response. When booting with the previous kernel, 6.4.0-150600.21-default, no traceback is observed in the kernel output. When booting with the latest kernel, 6.4.0-150600.23.17-default, the traceback is produced. I hope it is Leap 15.6: ``` # grep PRETTY /etc/os-release PRETTY_NAME="openSUSE Leap 15.6" ``` -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1229552 https://bugzilla.suse.com/show_bug.cgi?id=1229552#c9 --- Comment #9 from Georg Pfuetzenreuter <georg.pfuetzenreuter@suse.com> --- Hi Michal, thanks for looking into it. I bisected as suggested. The issue was first introduced with kernel-source.git commit: ``` 8ba3bb46ac3e63ce1a0d2e07ddbe5b47c9bf7f36 netfilter: nf_tables: restore set elements when delete set fails (CVE-2024-27012 bsc#1223804). ``` Which correlates to upstream linux.git commit: ``` e79b47a8615d42c68aaeb68971593333667382ed netfilter: nf_tables: restore set elements when delete set fails ``` There is a follow-up linux.git commit which seems interesting as the trace in its description is similar to the one observed by me: ``` 86a1471d7cde792941109b93b558b5dc078b9ee9 netfilter: nf_tables: fix memleak in map from abort path ``` I will test it. -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1229552 https://bugzilla.suse.com/show_bug.cgi?id=1229552#c10 --- Comment #10 from Georg Pfuetzenreuter <georg.pfuetzenreuter@suse.com> --- Seems I can't build with 86a1471d7cde792941109b93b558b5dc078b9ee9 applied so easily as it depends on definitions from other patches. -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1229552 https://bugzilla.suse.com/show_bug.cgi?id=1229552#c13 --- Comment #13 from Georg Pfuetzenreuter <georg.pfuetzenreuter@suse.com> --- Hi everyone, any update/ideas? -- You are receiving this mail because: You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply＠suse.com