Bug#1016317: linux-image-5.10.0-16-armmp: insecure W+X mapping
Package: src:linux
Version: 5.10.127-2
Severity: normal
Dear Maintainer,
I just noticed after booting into the kernel 5.10.0-16-armmp #1 SMP Debian
5.10.127-2 (2022-07-23) armv7l GNU/Linux (on a SolidRun Cubox-i with an NXP iMX6) that I get an
insecure W+X mapping at address 0xf0879000
on a serial console and a backtrace during the boot process:
[ 5.377591] Registering SWP/SWPB emulation handler
[ 5.382640] registered taskstats version 1
[ 5.386784] Loading compiled-in X.509 certificates
[ 5.787454] Loaded X.509 cert 'Debian Secure Boot CA:
6ccece7e4c6c0d1f6149f3dd27dfcc5cbb419ea1'
[ 5.796311] Loaded X.509 cert 'Debian Secure Boot Signer 2021 - linux:
4b6ef5abca669825178e052c84667ccbc0531f8c'
[ 5.806849] zswap: loaded using pool lzo/zbud
[ 5.812253] Key type ._fscrypt registered
[ 5.816352] Key type .fscrypt registered
[ 5.820314] Key type fscrypt-provisioning registered
[ 5.825722] AppArmor: AppArmor sha1 policy hashing enabled
[ 5.865627] vcc_3v3: supplied by v_5v0
[ 5.895845] Freeing unused kernel memory: 2048K
[ 5.913843] ------------[ cut here ]------------
[ 5.918527] WARNING: CPU: 0 PID: 1 at arch/arm/mm/dump.c:248
note_page+0x3d0/0x3dc
[ 5.926143] arm/mm: Found insecure W+X mapping at address 0xf0879000
[ 5.932529] Modules linked in:
[ 5.935629] CPU: 0 PID: 1 Comm: swapper/0 Not tainted 5.10.0-16-armmp #1
Debian 5.10.127-2
[ 5.943912] Hardware name: Freescale i.MX6 Quad/DualLite (Device Tree)
[ 5.950457] Backtrace:
[ 5.952938] [<c0cf9890>] (dump_backtrace) from [<c0cf9c3c>]
(show_stack+0x20/0x24)
[ 5.960532] r7:000000f8 r6:60000013 r5:00000000 r4:c14cdda8
[ 5.966215] [<c0cf9c1c>] (show_stack) from [<c0cfeec4>]
(dump_stack+0xc8/0xdc)
[ 5.973469] [<c0cfedfc>] (dump_stack) from [<c034ddb0>] (__warn+0xfc/0x158)
[ 5.980449] r7:000000f8 r6:00000009 r5:c031fa38 r4:c0fbe5c8
[ 5.986130] [<c034dcb4>] (__warn) from [<c0cfaa18>]
(warn_slowpath_fmt+0xa4/0xe4)
[ 5.993633] r7:c031fa38 r6:000000f8 r5:c0fbe5c8 r4:c0fbe594
[ 5.999311] [<c0cfa978>] (warn_slowpath_fmt) from [<c031fa38>]
(note_page+0x3d0/0x3dc)
[ 6.007251] r8:00000000 r7:00000000 r6:00000005 r5:c140c4e0 r4:c197ff28
[ 6.013971] [<c031f668>] (note_page) from [<c031fb2c>]
(walk_pmd+0xe8/0x1a4)
[ 6.021042] r10:c197ff28 r9:c0207c20 r8:c1900800 r7:00000000 r6:c0fbe610
r5:f087b000
[ 6.028888] r4:c19001ec
[ 6.031437] [<c031fa44>] (walk_pmd) from [<c031fd2c>]
(ptdump_check_wx+0x88/0x104)
[ 6.039030] r10:00000000 r9:00000000 r8:00000000 r7:00000000 r6:c0208000
r5:f0800000
[ 6.046878] r4:c0207c28
[ 6.049435] [<c031fca4>] (ptdump_check_wx) from [<c0319c14>]
(mark_rodata_ro+0x3c/0x40)
[ 6.057459] r6:00000000 r5:c0d092cc r4:00000000
[ 6.062103] [<c0319bd8>] (mark_rodata_ro) from [<c0d09310>]
(kernel_init+0x44/0x130)
[ 6.069873] [<c0d092cc>] (kernel_init) from [<c03001a8>]
(ret_from_fork+0x14/0x2c)
[ 6.077459] Exception stack(0xc197ffb0 to 0xc197fff8)
[ 6.082528] ffa0: 00000000 00000000
00000000 00000000
[ 6.090726] ffc0: 00000000 00000000 00000000 00000000 00000000 00000000
00000000 00000000
[ 6.098924] ffe0: 00000000 00000000 00000000 00000000 00000013 00000000
[ 6.105553] r5:c0d092cc r4:00000000
[ 6.109187] ---[ end trace 36d095f56a800b3c ]---
[ 6.114076] Checked W+X mappings: FAILED, 1 W+X pages found
[ 6.119751] Run /init as init process
[ 6.847313] gpio_mxc: module verification failed: signature and/or required
key missing - tainting kernel
[ 6.859257] vdd1p1: supplied by regulator-dummy
[ 6.871900] v_usb2: supplied by v_5v0
[ 6.876972] vdd3p0: supplied by regulator-dummy
[ 6.882630] vdd2p5: supplied by regulator-dummy
[ 6.887949] vddarm: supplied by regulator-dummy
[ 6.893661] vddpu: supplied by regulator-dummy
[ 6.898847] vddsoc: supplied by regulator-dummy
I do not observe any functional issue so far though.
Since I have not checked the output of the serial console for a while, I cannot tell when
the issue started to appear.
There is a similar report for the same hardware platform, but is reported on a 5.13 kernel:
https://lore.kernel.org/all/YUn2qpc5iBAIvCsd@shell.armlinux.org.uk/T/
I am not sure if it was already present in 5.10, if it got backported or if it is
entirely unrelated.
Many thanks for the great support of many hardware platforms
Rainer
-- Package-specific info:
** Version:
Linux version 5.10.0-16-armmp (debian-kernel@lists.debian.org) (gcc-10 (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2) #1 SMP Debian 5.10.127-2 (2022-07-23)
** Command line:
console=ttymxc0,115200 enable_wait_mode=off root=UUID=233113e0-67d1-409f-b2c0-57bd496213de rootfstype=ext4 ro rootwait console=ttymxc0,115200 console=tty1
** Tainted: WCE (9728)
* kernel issued warning
* staging driver was loaded
* unsigned module was loaded
** Kernel log:
[ 14.555632] imx6_media_csi: module is from the staging directory, the quality is unknown, you have been warned.
[ 14.560305] imx6_media_csi: module is from the staging directory, the quality is unknown, you have been warned.
[ 14.562114] platform regulatory.0: firmware: direct-loading firmware regulatory.db.p7s
[ 14.594854] ipu1_csi0: Registered ipu1_csi0 capture as /dev/video0
[ 14.601867] ftdi_sio 1-1:1.0: FTDI USB Serial Device converter detected
[ 14.627721] ipu1_ic_prpenc: Registered ipu1_ic_prpenc capture as /dev/video1
[ 14.637528] usb 1-1: Detected FT-X
[ 14.638602] ipu1_ic_prpvf: Registered ipu1_ic_prpvf capture as /dev/video2
[ 14.645437] brcmfmac: brcmf_fw_alloc_request: using brcm/brcmfmac4330-sdio for chip BCM4330/4
[ 14.651222] ipu1_csi1: Registered ipu1_csi1 capture as /dev/video3
[ 14.661508] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[ 14.663455] ipu2_csi0: Registered ipu2_csi0 capture as /dev/video4
[ 14.666981] usbcore: registered new interface driver brcmfmac
[ 14.682793] ipu2_ic_prpenc: Registered ipu2_ic_prpenc capture as /dev/video5
[ 14.690513] ipu2_ic_prpvf: Registered ipu2_ic_prpvf capture as /dev/video6
[ 14.690966] brcmfmac mmc0:0001:1: firmware: direct-loading firmware brcm/brcmfmac4330-sdio.bin
[ 14.698673] ipu2_csi1: Registered ipu2_csi1 capture as /dev/video7
[ 14.722896] imx-media: Registered ipu_ic_pp csc/scaler as /dev/video8
[ 14.724517] brcmfmac mmc0:0001:1: firmware: failed to load brcm/brcmfmac4330-sdio.solidrun,cubox-i-q.txt (-2)
[ 14.739532] brcmfmac mmc0:0001:1: Direct firmware load for brcm/brcmfmac4330-sdio.solidrun,cubox-i-q.txt failed with error -2
[ 14.773191] rc rc0: two consecutive events of type space
[ 14.781987] brcmfmac mmc0:0001:1: firmware: direct-loading firmware brcm/brcmfmac4330-sdio.txt
[ 14.865248] Adding 2663420k swap on /dev/mmcblk1p5. Priority:-2 extents:1 across:2663420k SSFS
[ 15.031682] brcmfmac: brcmf_fw_alloc_request: using brcm/brcmfmac4330-sdio for chip BCM4330/4
[ 15.050019] brcmfmac mmc0:0001:1: firmware: failed to load brcm/brcmfmac4330-sdio.clm_blob (-2)
[ 15.060946] brcmfmac: brcmf_c_process_clm_blob: no clm_blob available (err=-2), device may have limited channels available
[ 15.085233] brcmfmac: brcmf_c_preinit_dcmds: Firmware: BCM4330/4 wl0: Oct 25 2011 19:34:12 version 5.90.125.104
[ 15.243914] EXT4-fs (mmcblk1p1): mounting ext2 file system using the ext4 subsystem
[ 15.270711] EXT4-fs (mmcblk1p1): mounted filesystem without journal. Opts: (null)
[ 15.278446] ext2 filesystem being mounted at /boot supports timestamps until 2038 (0x7fffffff)
[ 15.752002] audit: type=1400 audit(1659028386.980:2): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/bin/man" pid=376 comm="apparmor_parser"
[ 15.767378] audit: type=1400 audit(1659028386.980:3): apparmor="STATUS" operation="profile_load" profile="unconfined" name="man_filter" pid=376 comm="apparmor_parser"
[ 15.783474] audit: type=1400 audit(1659028386.980:4): apparmor="STATUS" operation="profile_load" profile="unconfined" name="man_groff" pid=376 comm="apparmor_parser"
[ 15.800424] audit: type=1400 audit(1659028387.008:5): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/sbin/ntpd" pid=374 comm="apparmor_parser"
[ 15.820015] audit: type=1400 audit(1659028387.048:6): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/sbin/cups-browsed" pid=373 comm="apparmor_parser"
[ 15.839318] audit: type=1400 audit(1659028387.052:7): apparmor="STATUS" operation="profile_load" profile="unconfined" name="lsb_release" pid=377 comm="apparmor_parser"
[ 15.860141] audit: type=1400 audit(1659028387.088:8): apparmor="STATUS" operation="profile_load" profile="unconfined" name="nvidia_modprobe" pid=378 comm="apparmor_parser"
[ 15.877159] audit: type=1400 audit(1659028387.088:9): apparmor="STATUS" operation="profile_load" profile="unconfined" name="nvidia_modprobe//kmod" pid=378 comm="apparmor_parser"
[ 15.910497] audit: type=1400 audit(1659028387.140:10): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/lib/cups/backend/cups-pdf" pid=370 comm="apparmor_parser"
[ 15.927658] audit: type=1400 audit(1659028387.140:11): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/usr/sbin/cupsd" pid=370 comm="apparmor_parser"
[ 16.170383] Qualcomm Atheros AR8035 2188000.ethernet-1:00: attached PHY driver [Qualcomm Atheros AR8035] (mii_bus:phy_addr=2188000.ethernet-1:00, irq=POLL)
[ 16.901603] zram: Added device: zram0
[ 16.910375] zram: Added device: zram1
[ 16.918833] zram: Added device: zram2
[ 16.923771] zram: Added device: zram3
[ 16.976926] zram0: detected capacity change from 0 to 527380480
[ 16.998308] zram1: detected capacity change from 0 to 527380480
[ 17.019301] zram2: detected capacity change from 0 to 527380480
[ 17.037449] zram3: detected capacity change from 0 to 527380480
[ 17.285139] Adding 515016k swap on /dev/zram0. Priority:100 extents:1 across:515016k SSFS
[ 17.337146] Adding 515016k swap on /dev/zram1. Priority:100 extents:1 across:515016k SSFS
[ 17.385119] Adding 515016k swap on /dev/zram2. Priority:100 extents:1 across:515016k SSFS
[ 17.429126] Adding 515016k swap on /dev/zram3. Priority:100 extents:1 across:515016k SSFS
[ 18.237551] fec 2188000.ethernet eth0: Link is Up - 1Gbps/Full - flow control rx/tx
[ 18.245386] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
[ 48.197534] NFSD: Using UMH upcall client tracking operations.
[ 48.203480] NFSD: starting 90-second grace period (net f0000069)
[ 54.296341] kauditd_printk_skb: 2 callbacks suppressed
[ 54.296357] audit: type=1400 audit(1659028425.082:14): apparmor="DENIED" operation="capable" profile="/usr/sbin/cupsd" pid=1100 comm="cupsd" capability=12 capname="net_admin"
[ 55.094946] audit: type=1400 audit(1659028425.895:15): apparmor="DENIED" operation="capable" profile="/usr/sbin/cups-browsed" pid=1688 comm="cups-browsed" capability=23 capname="sys_nice"
[ 56.485923] FS-Cache: Loaded
[ 56.678528] FS-Cache: Netfs 'nfs' registered for caching
[ 56.790549] Key type dns_resolver registered
[ 57.611721] NFS: Registering the id_resolver key type
[ 57.617147] Key type id_resolver registered
[ 57.622812] Key type id_legacy registered
[ 4308.259764] IPv4: martian source 192.168.7.2 from 192.168.0.33, on dev eth0.7
[ 4308.267070] ll header: 00000000: ff ff ff ff ff ff dc a6 32 4d dc db 08 06 00 01
[ 4308.274551] ll header: 00000010: 08 00
[ 6080.621213] IPv4: martian source 192.0.0.128 from 192.0.0.64, on dev eth0.3
[ 6080.628242] ll header: 00000000: ff ff ff ff ff ff a4 14 37 f4 2e 04 08 06 00 01
[ 6080.635718] ll header: 00000010: 08 00
[ 6080.713756] IPv4: martian source 192.0.0.128 from 192.0.0.64, on dev eth0.3
[ 6080.720843] ll header: 00000000: ff ff ff ff ff ff a4 14 37 f4 2d d6 08 06 00 01
[ 6080.728319] ll header: 00000010: 08 00
[ 6081.622228] IPv4: martian source 192.0.0.128 from 192.0.0.64, on dev eth0.3
[ 6081.629336] ll header: 00000000: ff ff ff ff ff ff a4 14 37 f4 2e 04 08 06 00 01
[ 6081.636793] ll header: 00000010: 08 00
[ 6081.714712] IPv4: martian source 192.0.0.128 from 192.0.0.64, on dev eth0.3
[ 6081.721743] ll header: 00000000: ff ff ff ff ff ff a4 14 37 f4 2d d6 08 06 00 01
[ 6081.729186] ll header: 00000010: 08 00
[17235.195634] audit: type=1400 audit(1659045607.264:16): apparmor="DENIED" operation="capable" profile="/usr/sbin/cupsd" pid=24672 comm="cupsd" capability=12 capname="net_admin"
[17235.917675] audit: type=1400 audit(1659045607.984:17): apparmor="DENIED" operation="capable" profile="/usr/sbin/cups-browsed" pid=24731 comm="cups-browsed" capability=23 capname="sys_nice"
[61412.677885] wlan-data REJECT IN=eth0.2 OUT=eth0.7 MAC=d0:63:b4:00:32:5c:82:11:3f:77:f6:29:08:00:45:00:07:70 SRC=192.168.2.106 DST=192.168.7.201 LEN=1904 TOS=0x00 PREC=0x00 TTL=63 ID=39960 PROTO=UDP SPT=37632 DPT=1716 LEN=1884
[64010.697260] wlan-data REJECT IN=eth0.2 OUT=eth0.7 MAC=d0:63:b4:00:32:5c:82:11:3f:77:f6:29:08:00:45:00:07:70 SRC=192.168.2.106 DST=192.168.7.201 LEN=1904 TOS=0x00 PREC=0x00 TTL=63 ID=63078 PROTO=UDP SPT=39319 DPT=1716 LEN=1884
[64058.313902] wlan-data REJECT IN=eth0.2 OUT=eth0.7 MAC=d0:63:b4:00:32:5c:82:11:3f:77:f6:29:08:00:45:00:07:70 SRC=192.168.2.106 DST=192.168.7.201 LEN=1904 TOS=0x00 PREC=0x00 TTL=63 ID=4160 PROTO=UDP SPT=46566 DPT=1716 LEN=1884
[68614.434249] IPv4: martian source 192.168.7.2 from 192.168.0.33, on dev eth0.7
[68614.441519] ll header: 00000000: ff ff ff ff ff ff dc a6 32 4d dc db 08 06 00 01
[68614.448977] ll header: 00000010: 08 00
[81627.699650] wlan-data REJECT IN=eth0.2 OUT=eth0.7 MAC=d0:63:b4:00:32:5c:82:11:3f:77:f6:29:08:00:45:00:07:70 SRC=192.168.2.106 DST=192.168.7.201 LEN=1904 TOS=0x00 PREC=0x00 TTL=63 ID=51170 PROTO=UDP SPT=45670 DPT=1716 LEN=1884
[82086.523535] wlan-data REJECT IN=eth0.2 OUT=eth0.7 MAC=d0:63:b4:00:32:5c:82:11:3f:77:f6:29:08:00:45:00:07:70 SRC=192.168.2.106 DST=192.168.7.201 LEN=1904 TOS=0x00 PREC=0x00 TTL=63 ID=61208 PROTO=UDP SPT=45875 DPT=1716 LEN=1884
[86574.784241] IPv4: martian source 192.168.3.1 from 192.168.0.203, on dev eth0.3
[86574.791616] ll header: 00000000: ff ff ff ff ff ff 18 31 bf 52 1b 1c 08 06 00 01
[86574.799070] ll header: 00000010: 08 00
[86575.787615] IPv4: martian source 192.168.3.1 from 192.168.0.203, on dev eth0.3
[86575.794948] ll header: 00000000: ff ff ff ff ff ff 18 31 bf 52 1b 1c 08 06 00 01
[86575.802465] ll header: 00000010: 08 00
[86576.811502] IPv4: martian source 192.168.3.1 from 192.168.0.203, on dev eth0.3
[86576.818929] ll header: 00000000: ff ff ff ff ff ff 18 31 bf 52 1b 1c 08 06 00 01
[86576.826467] ll header: 00000010: 08 00
** Model information
Hardware : Freescale i.MX6 Quad/DualLite (Device Tree)
Revision : 0000
Device Tree model: SolidRun Cubox-i Dual/Quad
** Loaded modules:
ip6t_REJECT(E)
nf_reject_ipv6(E)
xt_comment(E)
ip6_tables(E)
nf_log_ipv6(E)
xt_recent(E)
ipt_REJECT(E)
nf_reject_ipv4(E)
xt_conntrack(E)
xt_hashlimit(E)
xt_addrtype(E)
xt_mark(E)
nft_chain_nat(E)
xt_MASQUERADE(E)
rpcsec_gss_krb5(E)
nft_counter(E)
nfsv4(E)
dns_resolver(E)
xt_CT(E)
nfs(E)
nfs_ssc(E)
fscache(E)
xt_tcpudp(E)
nft_compat(E)
nfnetlink_log(E)
xt_NFLOG(E)
nf_log_ipv4(E)
nf_log_common(E)
xt_LOG(E)
nf_nat_tftp(E)
nf_nat_snmp_basic(E)
nf_conntrack_snmp(E)
nf_nat_sip(E)
nf_nat_pptp(E)
nf_nat_irc(E)
nf_nat_h323(E)
nf_nat_ftp(E)
nf_nat_amanda(E)
ts_kmp(E)
nf_conntrack_amanda(E)
nf_nat(E)
nf_conntrack_sane(E)
nf_conntrack_tftp(E)
nf_conntrack_sip(E)
nf_conntrack_pptp(E)
nf_conntrack_netlink(E)
nf_conntrack_netbios_ns(E)
nf_conntrack_broadcast(E)
nf_conntrack_irc(E)
nf_conntrack_h323(E)
nf_conntrack_ftp(E)
nf_conntrack(E)
nf_defrag_ipv6(E)
nf_defrag_ipv4(E)
nf_tables(E)
libcrc32c(E)
nfnetlink(E)
zram(E)
zsmalloc(E)
dw_hdmi_ahb_audio(E)
dw_hdmi_cec(E)
brcmfmac(E)
imx6_media_csi(CE)
v4l2_fwnode(E)
ftdi_sio(E)
brcmutil(E)
usbserial(E)
cfg80211(E)
rfkill(E)
snd_soc_imx_spdif(E)
nvmem_imx_ocotp(E)
mux_mmio(E)
video_mux(E)
mux_core(E)
imx_thermal(E)
snd_soc_fsl_spdif(E)
dw_hdmi_imx(E)
imx_pcm_dma(E)
dw_hdmi(E)
imx6_media(CE)
snd_soc_core(E)
imx2_wdt(E)
snd_pcm_dmaengine(E)
coda_vpu(E)
snd_pcm(E)
imx_media_common(CE)
snd_timer(E)
v4l2_jpeg(E)
imx_vdoa(E)
snd(E)
videobuf2_dma_contig(E)
v4l2_mem2mem(E)
soundcore(E)
videobuf2_vmalloc(E)
videobuf2_memops(E)
imxdrm(E)
videobuf2_v4l2(E)
videobuf2_common(E)
pwm_imx27(E)
etnaviv(E)
imx_ipu_v3(E)
gpu_sched(E)
evdev(E)
cec(E)
gpio_ir_recv(E)
drm_kms_helper(E)
rc_core(E)
leds_pwm(E)
imx6q_cpufreq(E)
8021q(E)
garp(E)
mrp(E)
stp(E)
llc(E)
nfsd(E)
auth_rpcgss(E)
drm(E)
nfs_acl(E)
lockd(E)
grace(E)
fuse(E)
configfs(E)
sunrpc(E)
ip_tables(E)
x_tables(E)
autofs4(E)
ext4(E)
crc16(E)
mbcache(E)
jbd2(E)
crc32c_generic(E)
ci_hdrc_imx(E)
ci_hdrc(E)
ulpi(E)
roles(E)
ahci_imx(E)
libahci_platform(E)
ehci_hcd(E)
libahci(E)
udc_core(E)
sdhci_esdhc_imx(E)
sdhci_pltfm(E)
cqhci(E)
at803x(E)
sdhci(E)
phy_generic(E)
usbcore(E)
libata(E)
usbmisc_imx(E)
i2c_imx(E)
scsi_mod(E)
phy_mxs_usb(E)
anatop_regulator(E)
gpio_mxc(E)
** Network interface configuration:
*** /etc/network/interfaces:
source /etc/network/interfaces.d/*
auto lo
iface lo inet loopback
allow-hotplug eth0
iface eth0 inet static
address 0.0.0.0
auto eth0.1
iface eth0.1 inet dhcp
auto eth0.2
iface eth0.2 inet static
address 192.168.2.1
netmask 255.255.255.0
auto eth0.3
iface eth0.3 inet static
address 192.168.3.1
netmask 255.255.255.0
auto eth0.4
iface eth0.4 inet static
address 192.168.4.1
netmask 255.255.255.0
auto eth0.5
iface eth0.5 inet static
address 192.168.5.1
netmask 255.255.255.0
auto eth0.6
iface eth0.6 inet static
address 192.168.6.1
netmask 255.255.255.0
auto eth0.7
iface eth0.7 inet static
address 192.168.7.1
netmask 255.255.255.0
iface eth0.7 inet6 manual
auto eth0.8
iface eth0.8 inet static
address 192.168.8.1
netmask 255.255.255.0
iface eth0.8 inet6 manual
iface eth0.1 inet6 auto
dhcp 1
request_prefix 1
iface wlan0 inet dhcp
wpa-ssid DLAN-private
wpa-psk ************
** Network status:
*** IP interfaces and addresses:
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
link/ether d0:63:b4:00:32:5c brd ff:ff:ff:ff:ff:ff
inet6 fe80::d263:b4ff:fe00:325c/64 scope link
valid_lft forever preferred_lft forever
3: wlan0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN group default qlen 1000
link/ether b8:5a:f7:82:b0:bd brd ff:ff:ff:ff:ff:ff
4: eth0.1@eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether d0:63:b4:00:32:5c brd ff:ff:ff:ff:ff:ff
inet 192.168.0.30/24 brd 192.168.0.255 scope global dynamic eth0.1
valid_lft 774843sec preferred_lft 774843sec
inet6 2a02:8070:8982:4ee0:d263:b4ff:fe00:325c/64 scope global dynamic mngtmpaddr
valid_lft 7039sec preferred_lft 3439sec
inet6 fe80::d263:b4ff:fe00:325c/64 scope link
valid_lft forever preferred_lft forever
5: eth0.2@eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether d0:63:b4:00:32:5c brd ff:ff:ff:ff:ff:ff
inet 192.168.2.1/24 brd 192.168.2.255 scope global eth0.2
valid_lft forever preferred_lft forever
inet6 fd8d:5fab:96ee:0:d263:b4ff:fe00:325c/64 scope global dynamic mngtmpaddr
valid_lft forever preferred_lft forever
inet6 fd22:c2e0:8eb2:0:d263:b4ff:fe00:325c/64 scope global dynamic mngtmpaddr
valid_lft forever preferred_lft forever
inet6 fda0:18e7:afcf:0:d263:b4ff:fe00:325c/64 scope global dynamic mngtmpaddr
valid_lft forever preferred_lft forever
inet6 fe80::d263:b4ff:fe00:325c/64 scope link
valid_lft forever preferred_lft forever
6: eth0.3@eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether d0:63:b4:00:32:5c brd ff:ff:ff:ff:ff:ff
inet 192.168.3.1/24 brd 192.168.3.255 scope global eth0.3
valid_lft forever preferred_lft forever
inet6 fe80::d263:b4ff:fe00:325c/64 scope link
valid_lft forever preferred_lft forever
7: eth0.4@eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether d0:63:b4:00:32:5c brd ff:ff:ff:ff:ff:ff
inet 192.168.4.1/24 brd 192.168.4.255 scope global eth0.4
valid_lft forever preferred_lft forever
inet6 fe80::d263:b4ff:fe00:325c/64 scope link
valid_lft forever preferred_lft forever
8: eth0.5@eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether d0:63:b4:00:32:5c brd ff:ff:ff:ff:ff:ff
inet 192.168.5.1/24 brd 192.168.5.255 scope global eth0.5
valid_lft forever preferred_lft forever
inet6 fe80::d263:b4ff:fe00:325c/64 scope link
valid_lft forever preferred_lft forever
9: eth0.6@eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether d0:63:b4:00:32:5c brd ff:ff:ff:ff:ff:ff
inet 192.168.6.1/24 brd 192.168.6.255 scope global eth0.6
valid_lft forever preferred_lft forever
inet6 fe80::d263:b4ff:fe00:325c/64 scope link
valid_lft forever preferred_lft forever
10: eth0.7@eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether d0:63:b4:00:32:5c brd ff:ff:ff:ff:ff:ff
inet 192.168.7.1/24 brd 192.168.7.255 scope global eth0.7
valid_lft forever preferred_lft forever
inet6 2a02:8070:8982:4efc:d263:b4ff:fe00:325c/62 scope global deprecated
valid_lft 877sec preferred_lft 0sec
inet6 fe80::d263:b4ff:fe00:325c/64 scope link
valid_lft forever preferred_lft forever
11: eth0.8@eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether d0:63:b4:00:32:5c brd ff:ff:ff:ff:ff:ff
inet 192.168.8.1/24 brd 192.168.8.255 scope global eth0.8
valid_lft forever preferred_lft forever
inet6 fe80::d263:b4ff:fe00:325c/64 scope link
valid_lft forever preferred_lft forever
*** Device statistics:
Inter-| Receive | Transmit
face |bytes packets errs drop fifo frame compressed multicast|bytes packets errs drop fifo colls carrier compressed
lo: 638277168 7850760 0 0 0 0 0 0 638277168 7850760 0 0 0 0 0 0
eth0: 2288531104 13482268 91332 0 91332 0 0 0 907077550 13035706 0 0 0 0 0 0
wlan0: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
eth0.1: 4103932598 5375257 0 0 0 0 0 2034 4848418244 5934675 0 0 0 0 0 0
eth0.2: 4673428590 4856258 0 0 0 0 0 10310 2912222200 4845399 0 0 0 0 0 0
eth0.3: 10642021 168874 0 6 0 0 0 148 21825831 157230 0 0 0 0 0 0
eth0.4: 1293536 21015 0 0 0 0 0 23 2402698 31879 0 0 0 0 0 0
eth0.5: 2235273 45743 0 0 0 0 0 85 2501512 45825 0 0 0 0 0 0
eth0.6: 26424836 61123 0 0 0 0 0 25 6903537 72802 0 0 0 0 0 0
eth0.7: 1657771982 1408927 0 0 0 0 0 52469 1650569905 1947647 0 0 0 0 0 0
eth0.8: 0 0 0 0 0 0 0 0 17604 166 0 0 0 0 0 0
*** Protocol statistics:
Ip:
Forwarding: 1
11957456 total packets received
5 with invalid headers
122 with invalid addresses
10020952 forwarded
0 incoming packets discarded
1881948 incoming packets delivered
11896296 requests sent out
406 reassemblies required
203 packets reassembled ok
6 fragments received ok
12 fragments created
Icmp:
269280 ICMP messages received
4 input ICMP message failed
ICMP input histogram:
destination unreachable: 485
echo requests: 6
echo replies: 268789
273939 ICMP messages sent
0 ICMP messages failed
ICMP output histogram:
destination unreachable: 4778
time exceeded: 5
echo requests: 269150
echo replies: 6
IcmpMsg:
InType0: 268789
InType3: 485
InType8: 6
OutType0: 6
OutType3: 4778
OutType8: 269150
OutType11: 5
Tcp:
781606 active connection openings
761859 passive connection openings
10 failed connection attempts
1265 connection resets received
12 connections established
8878068 segments received
8987875 segments sent out
259 segments retransmitted
1 bad segments received
4224 resets sent
Udp:
260335 packets received
2256 packets to unknown port received
0 packet receive errors
223991 packets sent
0 receive buffer errors
0 send buffer errors
IgnoredMulti: 24927
UdpLite:
TcpExt:
1 resets received for embryonic SYN_RECV sockets
27 ICMP packets dropped because they were out-of-window
735986 TCP sockets finished time wait in fast timer
45661 time wait sockets recycled by time stamp
2 packetes rejected in established connections because of timestamp
16847 delayed acks sent
36 delayed acks further delayed because of locked socket
Quick ack mode was activated 66 times
770805 packet headers predicted
2375028 acknowledgments not containing data payload received
1131842 predicted acknowledgments
TCPSackRecovery: 68
Detected reordering 2 times using SACK
30 congestion windows fully recovered without slow start
TCPDSACKUndo: 12
TCPLostRetransmit: 83
TCPSackFailures: 1
68 fast retransmits
TCPTimeouts: 136
TCPLossProbes: 63
TCPLossProbeRecovery: 3
TCPBacklogCoalesce: 10313
TCPDSACKOldSent: 66
TCPDSACKRecv: 79
1260 connections reset due to unexpected data
1249 connections reset due to early user close
6 connections aborted due to timeout
TCPDSACKIgnoredNoUndo: 40
TCPSackShiftFallback: 70
TCPDeferAcceptDrop: 240
TCPRcvCoalesce: 258562
TCPOFOQueue: 62787
TCPChallengeACK: 16
TCPSYNChallenge: 1
TCPFastOpenActive: 11
TCPFastOpenCookieReqd: 16
TCPSpuriousRtxHostQueues: 5
TCPAutoCorking: 40709
TCPSynRetrans: 57
TCPOrigDataSent: 3658859
TCPHystartTrainDetect: 2
TCPHystartTrainCwnd: 47
TCPKeepAlive: 27
TCPDelivered: 4439267
TCPAckCompressed: 2941
TcpTimeoutRehash: 133
TCPDSACKRecvSegs: 79
IpExt:
InTruncatedPkts: 1
InMcastPkts: 55352
OutMcastPkts: 23576
InBcastPkts: 26483
OutBcastPkts: 1359
InOctets: 10458214753
OutOctets: 17935161721
InMcastOctets: 8540863
OutMcastOctets: 3686135
InBcastOctets: 1812960
OutBcastOctets: 103284
InNoECTPkts: 13501507
** PCI devices:
** USB devices:
Bus 002 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
Bus 001 Device 002: ID 0403:6015 Future Technology Devices International, Ltd Bridge(I2C/SPI/UART/FIFO)
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
-- System Information:
Debian Release: 11.4
APT prefers stable-security
APT policy: (500, 'stable-security'), (500, 'stable')
Architecture: armhf (armv7l)
Foreign Architectures: amd64
Kernel: Linux 5.10.0-16-armmp (SMP w/4 CPU threads)
Kernel taint flags: TAINT_WARN, TAINT_CRAP, TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US:en
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages linux-image-5.10.0-16-armmp depends on:
ii initramfs-tools [linux-initramfs-tool] 0.140
ii kmod 28-1
ii linux-base 4.6
Versions of packages linux-image-5.10.0-16-armmp recommends:
ii apparmor 2.13.6-10
ii firmware-linux-free 20200122-1
Versions of packages linux-image-5.10.0-16-armmp suggests:
pn debian-kernel-handbook <none>
pn linux-doc-5.10 <none>
Versions of packages linux-image-5.10.0-16-armmp is related to:
ii firmware-amd-graphics 20210315-3
pn firmware-atheros <none>
pn firmware-bnx2 <none>
pn firmware-bnx2x <none>
pn firmware-brcm80211 <none>
pn firmware-cavium <none>
pn firmware-intel-sound <none>
pn firmware-intelwimax <none>
pn firmware-ipw2x00 <none>
pn firmware-ivtv <none>
pn firmware-iwlwifi <none>
pn firmware-libertas <none>
ii firmware-linux-nonfree 20210315-3
ii firmware-misc-nonfree 20210315-3
pn firmware-myricom <none>
pn firmware-netxen <none>
pn firmware-qlogic <none>
pn firmware-realtek <none>
pn firmware-samsung <none>
pn firmware-siano <none>
pn firmware-ti-connectivity <none>
pn xen-hypervisor <none>
-- no debconf information
Reply to: