BUG: KFENCE: use-after-free read in ipt_do_t ...:

Good day,

After updating to the latest version (IPFire 2.27 (x86_64) - Core Update 162), I have now started to receive the following error in the Log Summary shown below. Any help in trouble shooting/resolving this error is welcomed.

Kernel and Firewall:

WARNING: Kernel Errors Present
BUG: KFENCE: use-after-free read in ipt_do_t …: 19 Time(s)

57 Time(s): __do_softirq+0xc6/0x27e
25 Time(s): __napi_poll+0x2a/0x160
6 Time(s): __netif_receive_skb_list_core+0x22c/0x250
32 Time(s): __netif_receive_skb_one_core+0x8f/0xa0
19 Time(s): __pskb_pull_tail+0x52/0x3f0
1 Time(s): __schedule+0x11ab/0x14e0
53 Time(s): asm_common_interrupt+0x1e/0x40
19 Time(s): bnx2_alloc_rx_data+0x3f/0x1a0 [bnx2]
19 Time(s): bnx2_poll_msix+0x33/0xe0 [bnx2]
6 Time(s): bnx2_poll_msix+0x9f/0xe0 [bnx2]
19 Time(s): bnx2_poll_work+0x95c/0xf70 [bnx2]
53 Time(s): common_interrupt+0x80/0xa0
53 Time(s): cpu_startup_entry+0x19/0x20
52 Time(s): cpuidle_enter+0x29/0x40
52 Time(s): cpuidle_enter_state+0xc7/0x380
1 Time(s): do_idle+0x150/0x200
52 Time(s): do_idle+0x1bf/0x200
32 Time(s): ifb_ri_tasklet+0x17a/0x28f [ifb]
6 Time(s): ip_forward+0x3cc/0x530
6 Time(s): ip_list_rcv+0xf6/0x130
6 Time(s): ip_output+0x133/0x180
32 Time(s): ip_rcv+0x9a/0x1a0
6 Time(s): ip_sublist_rcv+0x185/0x210
6 Time(s): ip_sublist_rcv_finish+0x6b/0x70
19 Time(s): ipt_do_table+0x17f/0x730
19 Time(s): ipt_do_table+0x2a3/0x730
53 Time(s): irq_exit_rcu+0x89/0xb0
4 Time(s): kthread+0x127/0x150
19 Time(s): match+0x146/0x668 [xt_layer7]
6 Time(s): napi_complete_done+0x6f/0x1b0
25 Time(s): net_rx_action+0x2eb/0x580
32 Time(s): netif_receive_skb+0x44/0x150
6 Time(s): netif_receive_skb_list_internal+0x1ab/0x2e0
38 Time(s): nf_hook_slow+0x3f/0xc0
19 Time(s): pskb_expand_head+0x10f/0x350
4 Time(s): ret_from_fork+0x22/0x30
4 Time(s): run_ksoftirqd+0x28/0x40
1 Time(s): schedule_idle+0x26/0x40
53 Time(s): secondary_startup_64_no_verify+0xb0/0xbb
4 Time(s): smpboot_thread_fn+0xaf/0x150
37 Time(s): start_kernel+0xa6b/0xabf
32 Time(s): tasklet_action_common.constprop.0+0xbf/0x130
38 Time(s): ==================================================================
12 Time(s): CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B O 5.15.6-ipfire #1
2 Time(s): CPU: 0 PID: 11 Comm: ksoftirqd/0 Tainted: G B O 5.15.6-ipfire #1
5 Time(s): CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B O 5.15.6-ipfire #1
19 Time(s): Hardware name: Supermicro X9SCL/X9SCM/X9SCL/X9SCM, BIOS 2.0b 09/17/2012
1 Time(s): Use-after-free read at 0x000000002a96db1a (in kfence-#239):
1 Time(s): Use-after-free read at 0x0000000036ed0b0e (in kfence-#87):
2 Time(s): Use-after-free read at 0x00000000449e6542 (in kfence-#63):
1 Time(s): Use-after-free read at 0x0000000060e6e262 (in kfence-#230):
1 Time(s): Use-after-free read at 0x00000000623fc40f (in kfence-#165):
1 Time(s): Use-after-free read at 0x00000000656f63af (in kfence-#59):
1 Time(s): Use-after-free read at 0x000000006ae8c00d (in kfence-#150):
1 Time(s): Use-after-free read at 0x000000006f0dd538 (in kfence-#254):
1 Time(s): Use-after-free read at 0x0000000076404480 (in kfence-#106):
1 Time(s): Use-after-free read at 0x00000000a98c0c5b (in kfence-#230):
1 Time(s): Use-after-free read at 0x00000000abcbc561 (in kfence-#182):
1 Time(s): Use-after-free read at 0x00000000ac2dc1eb (in kfence-#9):
1 Time(s): Use-after-free read at 0x00000000cee73a1a (in kfence-#117):
1 Time(s): Use-after-free read at 0x00000000dfd15648 (in kfence-#71):
2 Time(s): Use-after-free read at 0x00000000e9b4edee (in kfence-#65):
1 Time(s): Use-after-free read at 0x00000000f10a9ece (in kfence-#103):
1 Time(s): Use-after-free read at 0x00000000f1496a77 (in kfence-#140):
1 Time(s): allocated by task 0 on cpu 0 at 112654.980906s:
1 Time(s): allocated by task 0 on cpu 0 at 112936.010910s:
1 Time(s): allocated by task 0 on cpu 0 at 113922.464654s:
1 Time(s): allocated by task 0 on cpu 0 at 114699.948081s:
1 Time(s): allocated by task 0 on cpu 0 at 70027.899457s:
1 Time(s): allocated by task 0 on cpu 0 at 87201.262379s:
1 Time(s): allocated by task 0 on cpu 0 at 87231.588319s:
1 Time(s): allocated by task 0 on cpu 0 at 90788.227916s:
1 Time(s): allocated by task 0 on cpu 0 at 93081.162770s:
1 Time(s): allocated by task 0 on cpu 0 at 95265.459454s:
1 Time(s): allocated by task 0 on cpu 0 at 95321.748727s:
1 Time(s): allocated by task 0 on cpu 0 at 96353.673905s:
1 Time(s): allocated by task 0 on cpu 0 at 98551.505900s:
1 Time(s): allocated by task 0 on cpu 1 at 86498.417018s:
1 Time(s): allocated by task 0 on cpu 1 at 88354.565130s:
1 Time(s): allocated by task 0 on cpu 1 at 88571.623383s:
1 Time(s): allocated by task 0 on cpu 1 at 89238.313657s:
1 Time(s): allocated by task 0 on cpu 1 at 94531.722320s:
1 Time(s): allocated by task 0 on cpu 1 at 99691.244849s:
1 Time(s): freed by task 0 on cpu 0 at 112789.901865s:
1 Time(s): freed by task 0 on cpu 0 at 113023.455464s:
1 Time(s): freed by task 0 on cpu 0 at 114113.083367s:
1 Time(s): freed by task 0 on cpu 0 at 70120.703759s:
1 Time(s): freed by task 0 on cpu 0 at 87370.385318s:
1 Time(s): freed by task 0 on cpu 0 at 87417.114012s:
1 Time(s): freed by task 0 on cpu 0 at 88603.055705s:
1 Time(s): freed by task 0 on cpu 0 at 93124.935409s:
1 Time(s): freed by task 0 on cpu 0 at 95321.265302s:
1 Time(s): freed by task 0 on cpu 0 at 95323.279047s:
1 Time(s): freed by task 0 on cpu 0 at 96380.929539s:
1 Time(s): freed by task 0 on cpu 0 at 98560.458068s:
1 Time(s): freed by task 0 on cpu 1 at 86499.628404s:
1 Time(s): freed by task 0 on cpu 1 at 88391.024712s:
1 Time(s): freed by task 0 on cpu 1 at 89301.729618s:
1 Time(s): freed by task 0 on cpu 1 at 94535.603295s:
1 Time(s): freed by task 0 on cpu 1 at 99733.156327s:
1 Time(s): freed by task 11 on cpu 0 at 114783.892039s:
1 Time(s): freed by task 11 on cpu 0 at 90835.983904s:
1 Time(s): kfence-#103: 0x0000000053adc618-0x0000000038edabe8, size=1984, cache=kmalloc-2k
1 Time(s): kfence-#106: 0x0000000005d3e4f2-0x000000005213277b, size=1984, cache=kmalloc-2k
1 Time(s): kfence-#117: 0x000000009f6737fa-0x000000006de640b8, size=1984, cache=kmalloc-2k
1 Time(s): kfence-#140: 0x00000000ce277341-0x0000000064bfd537, size=1984, cache=kmalloc-2k
1 Time(s): kfence-#150: 0x000000004652171a-0x00000000caeb5225, size=1984, cache=kmalloc-2k
1 Time(s): kfence-#165: 0x00000000205a1f9c-0x00000000841bf0bd, size=1984, cache=kmalloc-2k
1 Time(s): kfence-#182: 0x00000000bb8583b6-0x00000000eb951a4e, size=1984, cache=kmalloc-2k
1 Time(s): kfence-#230: 0x000000000f9774b1-0x00000000ad3fc295, size=1984, cache=kmalloc-2k
1 Time(s): kfence-#230: 0x00000000b8ec80db-0x00000000f98e769a, size=1984, cache=kmalloc-2k
1 Time(s): kfence-#239: 0x0000000003d24e7e-0x00000000cb37da79, size=1984, cache=kmalloc-2k
1 Time(s): kfence-#254: 0x000000009071e1d9-0x00000000a9ee277c, size=1984, cache=kmalloc-2k
1 Time(s): kfence-#59: 0x00000000c977423e-0x00000000cf3c51f8, size=1984, cache=kmalloc-2k
2 Time(s): kfence-#63: 0x00000000ab5950b7-0x000000006ab0fa11, size=1984, cache=kmalloc-2k
2 Time(s): kfence-#65: 0x000000007ac9783c-0x00000000c2ec29eb, size=1984, cache=kmalloc-2k
1 Time(s): kfence-#71: 0x00000000604864e8-0x000000001fff1b44, size=1984, cache=kmalloc-2k
1 Time(s): kfence-#87: 0x000000007b3886a6-0x00000000e180f79c, size=1984, cache=kmalloc-2k
1 Time(s): kfence-#9: 0x0000000075411f89-0x000000000c171e6e, size=1984, cache=kmalloc-2k
1 Time(s): perf: interrupt took too long (3968 > 3912), lowering kernel.perf_event_max_sample_rate to 50000

This looks like a bug in the kernel driver for one of your NICs.

This will hopefully be fixed with one of the future kernels.

Thank you for the reply. From this info, can we tell which NIC is having the problem?

  1. NetXtreme II BCM5709 Gigabit Ethernet
  2. Intel 82574L Gigabit Ethernet
  3. Intel 82579 PHY Gigabit Ethernet

I’m currently using only the NetXtreme II.

Thank you,