Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 504740 - net-firewall/ipset with kernel 3.13.6 - invalid opcode: 0000 in ip_set_dump_start in ip_set
Summary: net-firewall/ipset with kernel 3.13.6 - invalid opcode: 0000 in ip_set_dump_s...
Status: RESOLVED OBSOLETE
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: [OLD] Core system (show other bugs)
Hardware: AMD64 Linux
: Normal normal (vote)
Assignee: Robin Johnson
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2014-03-15 20:46 UTC by Sandu Adrian
Modified: 2016-06-05 14:59 UTC (History)
3 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
strace ipset -L hanging (ipset_list_hang_strace.txt,3.17 KB, text/plain)
2014-03-15 20:46 UTC, Sandu Adrian
Details
kernel trace from ipset -L (ipset_list_kernel_trace.txt,5.12 KB, text/plain)
2014-03-15 20:47 UTC, Sandu Adrian
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Sandu Adrian 2014-03-15 20:46:13 UTC
Created attachment 372764 [details]
strace ipset -L hanging

Running
sys-kernel/gentoo-sources-3.13.6
net-firewall/ipset-6.20.1 ( happened for ipset-6.17 too )

ipset -L hangs

d3xt3r01 ~ # strace ipset -L
execve("/usr/sbin/ipset", ["ipset", "-L"], [/* 27 vars */]) = 0
brk(0)                                  = 0x1759000
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2d3c81000
access("/etc/ld.so.preload", R_OK)      = -1 ENOENT (No such file or directory)
open("/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3
fstat(3, {st_mode=S_IFREG|0644, st_size=75461, ...}) = 0
mmap(NULL, 75461, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fa2d3c6e000
close(3)                                = 0
open("/lib64/libipset.so.3", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\200\344\0\0\0\0\0\0"..., 832) = 832
fstat(3, {st_mode=S_IFREG|0755, st_size=173912, ...}) = 0
mmap(NULL, 2269368, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fa2d3836000
mprotect(0x7fa2d3858000, 2093056, PROT_NONE) = 0
mmap(0x7fa2d3a57000, 36864, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x21000) = 0x7fa2d3a57000
mmap(0x7fa2d3a60000, 184, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fa2d3a60000
close(3)                                = 0
open("/lib64/libc.so.6", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0M\2\0\0\0\0\0"..., 832) = 832
fstat(3, {st_mode=S_IFREG|0755, st_size=1732856, ...}) = 0
mmap(NULL, 3845176, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fa2d348b000
mprotect(0x7fa2d362c000, 2097152, PROT_NONE) = 0
mmap(0x7fa2d382c000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1a1000) = 0x7fa2d382c000
mmap(0x7fa2d3832000, 15416, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fa2d3832000
close(3)                                = 0
open("/lib64/libmnl.so.0", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\240 \0\0\0\0\0\0"..., 832) = 832
fstat(3, {st_mode=S_IFREG|0755, st_size=22760, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2d3c6d000
mmap(NULL, 2117960, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fa2d3285000
mprotect(0x7fa2d328a000, 2093056, PROT_NONE) = 0
mmap(0x7fa2d3489000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4000) = 0x7fa2d3489000
close(3)                                = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2d3c6c000
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa2d3c6b000
arch_prctl(ARCH_SET_FS, 0x7fa2d3c6c700) = 0
mprotect(0x7fa2d382c000, 16384, PROT_READ) = 0
mprotect(0x7fa2d3489000, 4096, PROT_READ) = 0
mprotect(0x7fa2d3a57000, 24576, PROT_READ) = 0
mprotect(0x604000, 4096, PROT_READ)     = 0
mprotect(0x7fa2d3c82000, 4096, PROT_READ) = 0
munmap(0x7fa2d3c6e000, 75461)           = 0
brk(0)                                  = 0x1759000
brk(0x177d000)                          = 0x177d000
socket(PF_NETLINK, SOCK_RAW, 12)        = 3
bind(3, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 0
getsockname(3, {sa_family=AF_NETLINK, pid=11570, groups=00000000}, [12]) = 0
sendto(3, "\34\0\0\0\1\6\1\0~\264$S\0\0\0\0\2\0\0\0\5\0\1\0\6\0\0\0", 28, 0, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12
Comment 1 Sandu Adrian 2014-03-15 20:47:33 UTC
Created attachment 372766 [details]
kernel trace from ipset -L
Comment 2 Sandu Adrian 2014-03-15 20:51:38 UTC
Also, the CPU spikes at 100%
Can't kill the ipset process.

# ps ax -o comm,wchan | grep ipset
ipset           nfnl_lock
Comment 3 Jeroen Roovers (RETIRED) gentoo-dev 2014-03-16 03:08:12 UTC
There is a 6.21.1 version out there that might fix this.
Comment 4 Sandu Adrian 2014-03-16 07:53:09 UTC
I tried:
wget .. ipset-6.21.1.tar.bz2
tar -xjf ipset-6.21.1.tar.bz2
cd ipset-6.21.1
./configure --prefix=/usr/local
cd src
./ipset -L
Same results.

ipset worked just fine 'till I enabled some iptables/nf_tables/ipset stuff in the kernel ( can't remember which ).
Comment 5 Robin Johnson archtester Gentoo Infrastructure gentoo-dev Security 2014-06-20 21:00:02 UTC
(In reply to Sandu Adrian from comment #4)
> ipset worked just fine 'till I enabled some iptables/nf_tables/ipset stuff
> in the kernel ( can't remember which ).
Well then figure that part out. 

I can't reproduce locally on 3.15.0
Comment 6 Pacho Ramos gentoo-dev 2016-05-06 10:46:30 UTC
what about 6.24?
Comment 7 Robin Johnson archtester Gentoo Infrastructure gentoo-dev Security 2016-06-04 00:35:50 UTC
retest on 6.29
Comment 8 Sandu Adrian 2016-06-05 14:59:24 UTC
At this time, I don't have access to the machine anymore ( don't even know what happened to it .. ). 
I guess we can safely close this, was a weird machine anyway.