search

Tert-butyllithium / syscord

A syscall hooker/capturer with low overhead, inspired by sysdig
MIT License
3 stars 5 forks source link

handler for `recvfrom` in arm64 sometimes leads to crash #9

Open Tert-butyllithium opened 3 years ago

Tert-butyllithium commented 3 years ago 
[  219.583869] ------------[ cut here ]------------
[  219.588471] WARNING: CPU: 2 PID: 549 at /home/lumia/arm-env-whexy-oe/linux/net/core/skbuff.c:651 skb_release_head_state+0xb4/0xc0
[  219.600000] Modules linked in: my_sysdig(O)
[  219.604138] CPU: 2 PID: 549 Comm: nginx Tainted: G        W  O      5.3.0-00261-gbd616cebdde9-dirty #1
[  219.613346] Hardware name: ARM Juno development board (r2) (DT)
[  219.619200] pstate: 40000005 (nZcv daif -PAN -UAO)
[  219.623937] pc : skb_release_head_state+0xb4/0xc0
[  219.628588] lr : skb_release_head_state+0xb4/0xc0
[  219.633237] sp : ffffff801157bb20
[  219.636510] x29: ffffff801157bb20 x28: ffffffc96eede0c0
[  219.641763] x27: ffffffc96eede190 x26: 0000000000000000
[  219.647016] x25: ffffffc96eede61c x24: ffffffc96f7300e0
[  219.652269] x23: 00000000000003b3 x22: ffffffc96f7300e0
[  219.657522] x21: 0000000000000001 x20: 0000000000000000
[  219.662774] x19: ffffffc96f7300e0 x18: ffffffffffffffff
[  219.668027] x17: 0000000000000000 x16: 0000000000000000
[  219.673279] x15: ffffff8010d78648 x14: ffffff809157b857
[  219.678532] x13: ffffff801157b865 x12: 0000000000000000
[  219.683784] x11: 0000000000000000 x10: 0000000005f5e0ff
[  219.689036] x9 : 00000000ffffffd0 x8 : 0000000000000429
[  219.694289] x7 : ffffff8010d8e140 x6 : ffffffc97ef5fa40
[  219.699542] x5 : ffffffc97ef5fa40 x4 : 0000000000000000
[  219.704794] x3 : ffffffc97ef6e950 x2 : 660ed24d4e18a000
[  219.710047] x1 : 0000000000000000 x0 : 0000000000000024
[  219.715299] Call trace:
[  219.717714]  skb_release_head_state+0xb4/0xc0
[  219.722021]  skb_release_all+0x20/0x40
[  219.725725]  __kfree_skb+0x20/0x38
[  219.729086]  tcp_recvmsg+0x594/0x990
[  219.732619]  inet_recvmsg+0x7c/0x138
[  219.736152]  sock_recvmsg+0x58/0x68
[  219.739599]  __sys_recvfrom+0xc0/0x148
[  219.743304]  __arm64_sys_recvfrom+0x2c/0x40
[  219.747440]  el0_svc_common.constprop.0+0xc8/0x170
[  219.752177]  el0_svc_handler+0x70/0x90
[  219.755882]  el0_svc+0x8/0xc
[  219.758726] ---[ end trace b218345b549479e1 ]---
Tert-butyllithium commented 3 years ago

it looks like syslog also lets it crash?