Package: src:linux Version: 6.1.69-1 Severity: normal Dear Maintainer,
since Debian 12 (Bookworm) the nft with named set ends with kernel trace and the nft stalled (D) # ps aux root 82373 0.0 0.0 0 0 ? D Jan02 0:00 [nft] The message looks like: [ 3566.525419] ------------[ cut here ]------------ [ 3566.525424] kernel BUG at mm/slub.c:419! [ 3566.529834] invalid opcode: 0000 [#1] PREEMPT SMP PTI [ 3566.535474] CPU: 19 PID: 8146 Comm: kworker/19:0 Not tainted 6.1.0-17-amd64 #1 Debian 6.1.69-1 [ 3566.545182] Hardware name: /0X3D66, BIOS 2.2.2 01/16/2014 [ 3566.551304] Workqueue: events nf_tables_trans_destroy_work [nf_tables] [ 3566.558609] RIP: 0010:__slab_free+0x118/0x2d0 [ 3566.563474] Code: 74 35 49 8b 06 48 89 4c 24 20 48 c1 e8 36 4c 8b a4 c3 d8 00 00 00 4c 89 e7 e8 74 6a 71 00 48 8b 4c 24 20 48 89 44 24 18 eb 8f <0f> 0b f7 43 08 00 0d 21 00 75 cd eb c6 80 4c 24 53 80 e9 75 ff ff [ 3566.584431] RSP: 0018:ffffa76066effdb0 EFLAGS: 00010246 [ 3566.590262] RAX: ffff95430ba21930 RBX: ffff952b80043300 RCX: 00000000802a001a [ 3566.598223] RDX: ffffa76066effdd8 RSI: ffffeed9a22e8840 RDI: ffffa76066effe18 [ 3566.606189] RBP: ffff95430ba21900 R08: 0000000000000001 R09: ffffffffc0d89ecc [ 3566.614152] R10: 0000000000000013 R11: 0000000000000001 R12: ffffa76066effe50 [ 3566.622114] R13: ffff95430ba21900 R14: ffffeed9a22e8840 R15: ffff95430ba21900 [ 3566.630079] FS: 0000000000000000(0000) GS:ffff955a9fa40000(0000) knlGS:0000000000000000 [ 3566.639107] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3566.645518] CR2: 00007f255e9eb3d8 CR3: 0000002a6d410006 CR4: 00000000001706e0 [ 3566.653479] Call Trace: [ 3566.656210] <TASK> [ 3566.658552] ? __die_body.cold+0x1a/0x1f [ 3566.662928] ? die+0x2a/0x50 [ 3566.666144] ? do_trap+0xc5/0x110 [ 3566.669848] ? __slab_free+0x118/0x2d0 [ 3566.674029] ? do_error_trap+0x6a/0x90 [ 3566.678211] ? __slab_free+0x118/0x2d0 [ 3566.682393] ? exc_invalid_op+0x4c/0x60 [ 3566.686676] ? __slab_free+0x118/0x2d0 [ 3566.690857] ? asm_exc_invalid_op+0x16/0x20 [ 3566.695529] ? nf_tables_trans_destroy_work+0x1cc/0x250 [nf_tables] [ 3566.702532] ? __slab_free+0x118/0x2d0 [ 3566.706714] ? obj_cgroup_uncharge_pages+0xd0/0xd0 [ 3566.712066] nf_tables_trans_destroy_work+0x1cc/0x250 [nf_tables] [ 3566.718874] process_one_work+0x1c7/0x380 [ 3566.723351] worker_thread+0x4d/0x380 [ 3566.727436] ? rescuer_thread+0x3a0/0x3a0 [ 3566.731908] kthread+0xda/0x100 [ 3566.735417] ? kthread_complete_and_exit+0x20/0x20 [ 3566.740763] ret_from_fork+0x22/0x30 [ 3566.744759] </TASK> [ 3566.747195] Modules linked in: xt_conntrack xt_MASQUERADE nf_conntrack_netlink xfrm_user xfrm_algo xt_addrtype nft_compat br_netfilter bridge 8021q garp stp mrp llc overlay bonding tls nft_nat nft_chain_nat nf_nat nft_log qrtr nft_limit nft_ct nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 nf_tables libcrc32c nfnetlink_log nfnetlink binfmt_misc intel_rapl_msr intel_rapl_common sb_edac x86_pkg_temp_thermal intel_powerclamp nls_ascii nls_cp437 coretemp kvm_intel vfat fat kvm ipmi_ssif irqbypass ghash_clmulni_intel sha512_ssse3 sha512_generic sha256_ssse3 sha1_ssse3 aesni_intel crypto_simd cryptd ipmi_si iTCO_wdt rapl intel_pmc_bxt ipmi_devintf joydev intel_cstate iTCO_vendor_support ipmi_msghandler sg acpi_power_meter watchdog intel_uncore mei_me mei pcspkr evdev parport_pc ppdev lp parport efi_pstore dm_mod fuse loop configfs efivarfs ip_tables x_tables autofs4 ext4 crc16 mbcache jbd2 crc32c_generic hid_generic usbhid hid sr_mod cdrom sd_mod t10_pi crc64_rocksoft crc64 crc_t10dif [ 3566.747268] crct10dif_generic mgag200 i2c_algo_bit drm_shmem_helper ahci drm_kms_helper libahci ehci_pci ehci_hcd libata crct10dif_pclmul megaraid_sas drm crct10dif_common crc32_pclmul crc32c_intel usbcore tg3 scsi_mod lpc_ich libphy usb_common scsi_common wmi button [ 3566.870202] ---[ end trace 0000000000000000 ]--- [ 3566.878075] RIP: 0010:__slab_free+0x118/0x2d0 [ 3566.882954] Code: 74 35 49 8b 06 48 89 4c 24 20 48 c1 e8 36 4c 8b a4 c3 d8 00 00 00 4c 89 e7 e8 74 6a 71 00 48 8b 4c 24 20 48 89 44 24 18 eb 8f <0f> 0b f7 43 08 00 0d 21 00 75 cd eb c6 80 4c 24 53 80 e9 75 ff ff [ 3566.903925] RSP: 0018:ffffa76066effdb0 EFLAGS: 00010246 [ 3566.909772] RAX: ffff95430ba21930 RBX: ffff952b80043300 RCX: 00000000802a001a [ 3566.917752] RDX: ffffa76066effdd8 RSI: ffffeed9a22e8840 RDI: ffffa76066effe18 [ 3566.925747] RBP: ffff95430ba21900 R08: 0000000000000001 R09: ffffffffc0d89ecc [ 3566.933714] R10: 0000000000000013 R11: 0000000000000001 R12: ffffa76066effe50 [ 3566.941694] R13: ffff95430ba21900 R14: ffffeed9a22e8840 R15: ffff95430ba21900 [ 3566.949670] FS: 0000000000000000(0000) GS:ffff955a9fa40000(0000) knlGS:0000000000000000 [ 3566.958717] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3566.965144] CR2: 00007f255e9eb3d8 CR3: 0000002a6d410006 CR4: 00000000001706e0 After this status, the host is still running, but without nft and if I call or edit nft, then it hungs, so I have to reboot the host. Please refer to Bug#1053564 too. -- Package-specific info: ** Kernel log: boot messages should be attached ------------ Wed Jan 03 06:04:15 CET 2024 ------------ /dev/sda2: clean, 144565/5472256 files, 2022274/21874944 blocks Mounting proc-sys-fs-binfm…utable File Formats File System... [ OK ] Finished console-setup.ser…[0m - Set console font and keymap. [ OK ] Finished plymouth-read-wri…lymouth To Write Out Runtime Data. [ OK ] Mounted proc-sys-fs-binfmt…ecutable File Formats File System. [ OK ] Finished systemd-binfmt.se… Set Up Additional Binary Formats. [ OK ] Finished systemd-journal-f…ush Journal to Persistent Storage. Starting systemd-tmpfiles-… Volatile Files and Directories... [ OK ] Finished apparmor.service - Load AppArmor profiles. [ OK ] Finished systemd-tmpfiles-…te Volatile Files and Directories. Starting systemd-timesyncd… - Network Time Synchronization... Starting systemd-update-ut…rd System Boot/Shutdown in UTMP... [ OK ] Finished systemd-update-ut…cord System Boot/Shutdown in UTMP. [ OK ] Started systemd-timesyncd.…0m - Network Time Synchronization. [ OK ] Reached target sysinit.target - System Initialization. [ OK ] Started nftmod.path - Watchdog Trigger for new nftables. [ OK ] Started nftsecurity@ingres…nment change ingress for nftables. [ OK ] Started systemd-tmpfiles-c… Cleanup of Temporary Directories. [ OK ] Reached target time-set.target - System Time Set. [ OK ] Started anacron.timer - Trigger anacron every hour. [ OK ] Started apt-daily.timer - Daily apt download activities. [ OK ] Started apt-daily-upgrade.… apt upgrade and clean activities. [ OK ] Started dpkg-db-backup.tim… Daily dpkg database backup timer. [ OK ] Started e2scrub_all.timeretadata Check for All Filesystems. [ OK ] Started exim4-base.timer - Daily exim4-base housekeeping. [ OK ] Started fstrim.timer - Discard unused blocks once a week. [ OK ] Started logrotate.timer - Daily rotation of log files. [ OK ] Started man-db.timer - Daily man-db regeneration. [ OK ] Started plocate-updatedb.t…Update the plocate database daily. [ OK ] Reached target timers.target - Timer Units. [ OK ] Listening on avahi-daemon.…NS/DNS-SD Stack Activation Socket. [ OK ] Listening on dbus.socket-Bus System Message Bus Socket. Starting docker.socket - Docker Socket for the API... [ OK ] Listening on libvirtd.socket - Libvirt local socket. [ OK ] Listening on libvirtd-admi…socket - Libvirt admin socket. [ OK ] Listening on libvirtd-ro.s… - Libvirt local read-only socket. [ OK ] Listening on lldpad.socket… Discovery Protocol Agent Socket.. [ OK ] Listening on virtlockd.soc…rtual machine lock manager socket. [ OK ] Listening on virtlockd-adm…machine lock manager admin socket. [ OK ] Listening on virtlogd.sock…irtual machine log manager socket. [ OK ] Listening on virtlogd-admi…irtual machine log manager socket. [ OK ] Listening on docker.socket - Docker Socket for the API. [ OK ] Reached target sockets.target - Socket Units. [ OK ] Reached target basic.target - Basic System. [ OK ] Started anacron.service - Run anacron jobs. Starting avahi-daemon.serv…e - Avahi mDNS/DNS-SD Stack... [ OK ] Started cron.service -…kground program processing daemon. Starting dbus.service - D-Bus System Message Bus... Starting e2scrub_reap.serv…e ext4 Metadata Check Snapshots... Starting lm-sensors.servic…ize hardware monitoring sensors... [ OK ] Started nfthelper@antispoo…serving antispoof with ip monitor. [ OK ] Started nftsecurity@antisp…ent change antispoof for nftables. [ OK ] Started nfthelper@ingress.…observing ingress with ip monitor. Starting nftables.service - nftables... Starting openipmi.serviceSB: OpenIPMI Driver init script... Starting polkit.service - Authorization Manager... Starting rsyslog.service - System Logging Service... Starting systemd-logind.se…ice - User Login Management... Starting systemd-machined.… Container Registration Service... Starting udisks2.service - Disk Manager... Starting ulogd2.serviceilter Userspace Logging Daemon... [ OK ] Started ulogd2.service…etfilter Userspace Logging Daemon. [ OK ] Finished lm-sensors.servic…alize hardware monitoring sensors. [ OK ] Started openipmi.serviceSB: OpenIPMI Driver init script. [ OK ] Started rsyslog.service - System Logging Service. [ OK ] Started dbus.service - D-Bus System Message Bus. Starting wpa_supplicant.service - WPA supplicant... [ OK ] Started systemd-machined.s…nd Container Registration Service. [ OK ] Started systemd-logind.service - User Login Management. [ OK ] Started avahi-daemon.service - Avahi mDNS/DNS-SD Stack. [ OK ] Started polkit.service - Authorization Manager. Starting ModemManager.service - Modem Manager... [ OK ] Started wpa_supplicant.service - WPA supplicant. [ OK ] Started udisks2.service - Disk Manager. [ OK ] Finished e2scrub_reap.serv…ine ext4 Metadata Check Snapshots. [ OK ] Started ModemManager.service - Modem Manager. [ OK ] Finished nftables.service - nftables. [ OK ] Reached target network-pre…get - Preparation for Network. [ OK ] Started ifup@eno1.service - ifup for eno1. [ OK ] Started ifup@eno2.service - ifup for eno2. [ OK ] Started ifup@eno4.service - ifup for eno4. Starting networking.service - Raise network interfaces... Starting nftextras.service…te Automagic Rules for nftables... Starting nftsecurity@ingre…eate ingress rules for nftables... [ OK ] Finished nftextras.service…eate Automagic Rules for nftables. [ OK ] Finished nftsecurity@ingre…Create ingress rules for nftables. [FAILED] Failed to start networking…ce - Raise network interfaces. See 'systemctl status networking.service' for details. [ OK ] Reached target network.target - Network. [ OK ] Reached target network-online.target - Network is Online. Starting containerd.servic… - containerd container runtime... Starting exim4.service… LSB: exim Mail Transport Agent... Starting hddtemp.service temperature monitoring daemon... Starting libvirt-guests.se…d/Resume Running libvirt Guests... Starting libvirtd.service - Virtualization daemon... [ OK ] Started lldpad.service… Discovery Protocol Agent Daemon.. [ OK ] Started nftfqdn.service - nftables with FQDN. Starting nftsecurity@antis…te antispoof rules for nftables... Starting ssh.service - OpenBSD Secure Shell server... Starting systemd-user-sess…vice - Permit User Sessions... [ OK ] Started unattended-upgrade…0m - Unattended Upgrades Shutdown. Starting xrdp-sesman.service - xrdp session manager... [ OK ] Started hddtemp.servicesk temperature monitoring daemon. [ OK ] Finished systemd-user-sess…ervice - Permit User Sessions. Starting lightdm.service - Light Display Manager... Starting plymouth-quit-wai… until boot process finishes up... [ OK ] Finished libvirt-guests.se…end/Resume Running libvirt Guests. [ OK ] Started xrdp-sesman.service - xrdp session manager. Starting xrdp.service - xrdp daemon... -- System Information: Debian Release: 12.4 APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable') Architecture: amd64 (x86_64) Kernel: Linux 6.1.0-16-amd64 (SMP w/20 CPU threads; PREEMPT) Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US:en Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages linux-image-6.1.0-17-amd64 depends on: ii initramfs-tools [linux-initramfs-tool] 0.142 ii kmod 30+20221128-1 ii linux-base 4.9 Versions of packages linux-image-6.1.0-17-amd64 recommends: ii apparmor 3.0.8-3 ii firmware-linux-free 20200122-1 Versions of packages linux-image-6.1.0-17-amd64 suggests: pn debian-kernel-handbook <none> ii extlinux 3:6.04~git20190206.bf6db5b4+dfsg1-3+b1 ii grub-efi-amd64 2.06-13+deb12u1 pn linux-doc-6.1 <none> Versions of packages linux-image-6.1.0-17-amd64 is related to: ii firmware-amd-graphics 20230210-5 pn firmware-atheros <none> pn firmware-bnx2 <none> pn firmware-bnx2x <none> pn firmware-brcm80211 <none> pn firmware-cavium <none> pn firmware-intel-sound <none> pn firmware-intelwimax <none> pn firmware-ipw2x00 <none> pn firmware-ivtv <none> pn firmware-iwlwifi <none> pn firmware-libertas <none> ii firmware-linux-nonfree 20230210-5 ii firmware-misc-nonfree 20230210-5 pn firmware-myricom <none> pn firmware-netxen <none> pn firmware-qlogic <none> pn firmware-realtek <none> pn firmware-samsung <none> pn firmware-siano <none> pn firmware-ti-connectivity <none> pn xen-hypervisor <none> -- no debconf information