Probably fixed by this upstream commit (v6.1.124):
commit 542ed8145e6f9392e3d0a86a0e9027d2ffd183e4
Author: Pablo Neira Ayuso <pa...@netfilter.org>
Date: Sat Dec 21 00:29:20 2024 +0100
netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext
Access to genmask field in struct nft_set_ext results in unaligned
atomic read:
[ 72.130109] Unable to handle kernel paging request at virtual address
ffff0000c2bb708c
[ 72.131036] Mem abort info:
[ 72.131213] ESR = 0x0000000096000021
[ 72.131446] EC = 0x25: DABT (current EL), IL = 32 bits
[ 72.132209] SET = 0, FnV = 0
[ 72.133216] EA = 0, S1PTW = 0
[ 72.134080] FSC = 0x21: alignment fault
[ 72.135593] Data abort info:
[ 72.137194] ISV = 0, ISS = 0x00000021, ISS2 = 0x00000000
[ 72.142351] CM = 0, WnR = 0, TnD = 0, TagAccess = 0
[ 72.145989] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0
[ 72.150115] swapper pgtable: 4k pages, 48-bit VAs, pgdp=0000000237d27000
[ 72.154893] [ffff0000c2bb708c] pgd=0000000000000000,
p4d=180000023ffff403, pud=180000023f84b403, pmd=180000023f835403,
+pte=0068000102bb7707
[ 72.163021] Internal error: Oops: 0000000096000021 [#1] SMP
[...]
[ 72.170041] CPU: 7 UID: 0 PID: 54 Comm: kworker/7:0 Tainted: G
E 6.13.0-rc3+ #2
[ 72.170509] Tainted: [E]=UNSIGNED_MODULE
[ 72.170720] Hardware name: QEMU QEMU Virtual Machine, BIOS
edk2-stable202302-for-qemu 03/01/2023
[ 72.171192] Workqueue: events_power_efficient nft_rhash_gc [nf_tables]
[ 72.171552] pstate: 21400005 (nzCv daif +PAN -UAO -TCO +DIT -SSBS
BTYPE=--)
[ 72.171915] pc : nft_rhash_gc+0x200/0x2d8 [nf_tables]
[ 72.172166] lr : nft_rhash_gc+0x128/0x2d8 [nf_tables]
[ 72.172546] sp : ffff800081f2bce0
[ 72.172724] x29: ffff800081f2bd40 x28: ffff0000c2bb708c x27:
0000000000000038
[ 72.173078] x26: ffff0000c6780ef0 x25: ffff0000c643df00 x24:
ffff0000c6778f78
[ 72.173431] x23: 000000000000001a x22: ffff0000c4b1f000 x21:
ffff0000c6780f78
[ 72.173782] x20: ffff0000c2bb70dc x19: ffff0000c2bb7080 x18:
0000000000000000
[ 72.174135] x17: ffff0000c0a4e1c0 x16: 0000000000003000 x15:
0000ac26d173b978
[ 72.174485] x14: ffffffffffffffff x13: 0000000000000030 x12:
ffff0000c6780ef0
[ 72.174841] x11: 0000000000000000 x10: ffff800081f2bcf8 x9 :
ffff0000c3000000
[ 72.175193] x8 : 00000000000004be x7 : 0000000000000000 x6 :
0000000000000000
[ 72.175544] x5 : 0000000000000040 x4 : ffff0000c3000010 x3 :
0000000000000000
[ 72.175871] x2 : 0000000000003a98 x1 : ffff0000c2bb708c x0 :
0000000000000004
[ 72.176207] Call trace:
[ 72.176316] nft_rhash_gc+0x200/0x2d8 [nf_tables] (P)
[ 72.176653] process_one_work+0x178/0x3d0
[ 72.176831] worker_thread+0x200/0x3f0
[ 72.176995] kthread+0xe8/0xf8
[ 72.177130] ret_from_fork+0x10/0x20
[ 72.177289] Code: 54fff984 d503201f d2800080 91003261 (f820303f)
[ 72.177557] ---[ end trace 0000000000000000 ]---
Align struct nft_set_ext to word size to address this and
documentation it.
pahole reports that this increases the size of elements for rhash and
pipapo in 8 bytes on x86_64.
Fixes: 7ffc7481153b ("netfilter: nft_set_hash: skip duplicated elements
pending gc run")
Signed-off-by: Pablo Neira Ayuso <pa...@netfilter.org>
diff --git a/include/net/netfilter/nf_tables.h
b/include/net/netfilter/nf_tables.h
index 4afa64c81304..0027beca5cd5 100644
--- a/include/net/netfilter/nf_tables.h
+++ b/include/net/netfilter/nf_tables.h
@@ -733,15 +733,18 @@ struct nft_set_ext_tmpl {
/**
* struct nft_set_ext - set extensions
*
- * @genmask: generation mask
+ * @genmask: generation mask, but also flags (see NFT_SET_ELEM_DEAD_BIT)
* @offset: offsets of individual extension types
* @data: beginning of extension data
+ *
+ * This structure must be aligned to word size, otherwise atomic bitops
+ * on genmask field can cause alignment failure on some archs.
*/
struct nft_set_ext {
u8 genmask;
u8 offset[NFT_SET_EXT_NUM];
char data[];
-};
+} __aligned(BITS_PER_LONG / 8);
static inline void nft_set_ext_prepare(struct nft_set_ext_tmpl *tmpl)
{
On 1/11/25 21:46, Peter Gerber wrote:
> Package: src:linux
> Version: 6.1.123-1
> Severity: critical
> Justification: breaks the whole system
> X-Debbugs-Cc: pe...@arbitrary.ch
>
> Dear Maintainer,
>
> Ever since updating to linux-image-6.1.0-29-arm64 I've been seeing this oops:
>
> Jan 11 20:17:16 violet kernel: Unable to handle kernel paging request at
> virtual address ffff0000e1fb238c
> Jan 11 20:17:16 violet kernel: Mem abort info:
> Jan 11 20:17:16 violet kernel: ESR = 0x0000000096000021
> Jan 11 20:17:16 violet kernel: EC = 0x25: DABT (current EL), IL = 32 bits
> Jan 11 20:17:16 violet kernel: SET = 0, FnV = 0
> Jan 11 20:17:16 violet kernel: EA = 0, S1PTW = 0
> Jan 11 20:17:16 violet kernel: FSC = 0x21: alignment fault
> Jan 11 20:17:16 violet kernel: Data abort info:
> Jan 11 20:17:16 violet kernel: ISV = 0, ISS = 0x00000021
> Jan 11 20:17:16 violet kernel: CM = 0, WnR = 0
> Jan 11 20:17:16 violet kernel: swapper pgtable: 4k pages, 48-bit VAs,
> pgdp=00000000be7fa000
> Jan 11 20:17:16 violet kernel: [ffff0000e1fb238c] pgd=1800000139ff8003,
> p4d=1800000139ff8003, pud=18000001399ff003, pmd=18000001398ef003,
> pte=0068000121fb2f07
> Jan 11 20:17:37 violet kernel: Internal error: Oops: 0000000096000021 [#1] SMP
>
> So far, only one machine used as Wireguard-based VPN is affected. There is
> other, identical,
> machines not used as VPN which have as of yet been unaffected.
>
>
> -- Package-specific info:
> ** Version:
> Linux version 6.1.0-29-arm64 (debian-ker...@lists.debian.org) (gcc-12 (Debian
> 12.2.0-14) 12.2.0, GNU ld (GNU Binutils for Debian) 2.40) #1 SMP Debian
> 6.1.123-1 (2025-01-02)
>
> ** Command line:
> BOOT_IMAGE=/@rootfs/boot/vmlinuz-6.1.0-29-arm64
> root=UUID=1111c685-9c54-4826-a942-a926fcf5cc08 ro rootflags=subvol=@rootfs
> consoleblank=0 systemd.show_status=true console=tty1 console=ttyS0 audit=1
> slab_nomerge mds=full,nosmt nosmt=force pti=on vsyscall=none
> page_alloc.shuffle=1 oops=panic panic=-1 hardened_usercopy=1
> iommu.passthrough=0 iommu.strict=1 init_mlocked_on_free=1 init_on_alloc=1
> init_on_free=1 random.trust_cpu=off randomize_kstack_offset=on
>
> ** Not tainted
>
> ** Kernel log:
> [ 2.977788] systemd[1]: Reached target veritysetup.target - Local Verity
> Protected Volumes.
> [ 2.979473] systemd[1]: Listening on dm-event.socket - Device-mapper event
> daemon FIFOs.
> [ 2.981849] systemd[1]: Listening on lvm2-lvmpolld.socket - LVM2 poll
> daemon socket.
> [ 2.983607] systemd[1]: Listening on systemd-fsckd.socket - fsck to fsckd
> communication Socket.
> [ 2.985584] systemd[1]: Listening on systemd-initctl.socket - initctl
> Compatibility Named Pipe.
> [ 2.987703] systemd[1]: Listening on systemd-journald-audit.socket -
> Journal Audit Socket.
> [ 2.990118] systemd[1]: Listening on systemd-journald-dev-log.socket -
> Journal Socket (/dev/log).
> [ 2.992114] systemd[1]: Listening on systemd-journald.socket - Journal
> Socket.
> [ 2.994016] systemd[1]: Listening on systemd-networkd.socket - Network
> Service Netlink Socket.
> [ 2.996051] systemd[1]: Listening on systemd-udevd-control.socket - udev
> Control Socket.
> [ 2.997906] systemd[1]: Listening on systemd-udevd-kernel.socket - udev
> Kernel Socket.
> [ 3.019099] systemd[1]: Mounting dev-hugepages.mount - Huge Pages File
> System...
> [ 3.022997] systemd[1]: Mounting dev-mqueue.mount - POSIX Message Queue
> File System...
> [ 3.026019] systemd[1]: Mounting sys-kernel-debug.mount - Kernel Debug
> File System...
> [ 3.029014] systemd[1]: Mounting sys-kernel-tracing.mount - Kernel Trace
> File System...
> [ 3.031221] systemd[1]: Finished blk-availability.service - Availability
> of block devices.
> [ 3.034827] systemd[1]: Starting keyboard-setup.service - Set the console
> keyboard layout...
> [ 3.037253] systemd[1]: Starting kmod-static-nodes.service - Create List
> of Static Device Nodes...
> [ 3.039467] systemd[1]: Starting lvm2-monitor.service - Monitoring of LVM2
> mirrors, snapshots etc. using dmeventd or progress polling...
> [ 3.042320] systemd[1]: Starting modprobe@configfs.service - Load Kernel
> Module configfs...
> [ 3.044915] systemd[1]: Starting modprobe@dm_mod.service - Load Kernel
> Module dm_mod...
> [ 3.047435] systemd[1]: Starting modprobe@drm.service - Load Kernel Module
> drm...
> [ 3.049934] systemd[1]: Starting modprobe@efi_pstore.service - Load Kernel
> Module efi_pstore...
> [ 3.052741] systemd[1]: Starting modprobe@fuse.service - Load Kernel
> Module fuse...
> [ 3.066012] systemd[1]: Starting modprobe@loop.service - Load Kernel
> Module loop...
> [ 3.076850] systemd[1]: systemd-fsck-root.service - File System Check on
> Root Device was skipped because of an unmet condition check
> (ConditionPathExists=!/run/initramfs/fsck-root).
> [ 3.083151] pstore: Using crash dump compression: deflate
> [ 3.085032] fuse: init (API version 7.38)
> [ 3.085907] systemd[1]: Starting systemd-journald.service - Journal
> Service...
> [ 3.087271] pstore: Registered efi as persistent store backend
> [ 3.090954] systemd[1]: Starting systemd-modules-load.service - Load
> Kernel Modules...
> [ 3.093917] loop: module loaded
> [ 3.097738] device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled.
> Duplicate IMA measurements will not be recorded in the IMA log.
> [ 3.101923] ACPI: bus type drm_connector registered
> [ 3.107644] device-mapper: uevent: version 1.0.3
> [ 3.108944] systemd[1]: Starting systemd-network-generator.service -
> Generate network units from Kernel command line...
> [ 3.111046] device-mapper: ioctl: 4.47.0-ioctl (2022-07-28) initialised:
> dm-de...@redhat.com
> [ 3.111467] systemd[1]: Starting systemd-remount-fs.service - Remount Root
> and Kernel File Systems...
> [ 3.114306] systemd[1]: Starting systemd-udev-trigger.service - Coldplug
> All udev Devices...
> [ 3.121247] systemd[1]: Mounted dev-hugepages.mount - Huge Pages File
> System.
> [ 3.128303] systemd[1]: Mounted dev-mqueue.mount - POSIX Message Queue
> File System.
> [ 3.129703] systemd[1]: Mounted sys-kernel-debug.mount - Kernel Debug File
> System.
> [ 3.131140] systemd[1]: Mounted sys-kernel-tracing.mount - Kernel Trace
> File System.
> [ 3.143188] systemd[1]: Finished keyboard-setup.service - Set the console
> keyboard layout.
> [ 3.145123] systemd[1]: Finished kmod-static-nodes.service - Create List
> of Static Device Nodes.
> [ 3.146745] systemd[1]: Finished lvm2-monitor.service - Monitoring of LVM2
> mirrors, snapshots etc. using dmeventd or progress polling.
> [ 3.153799] systemd[1]: modprobe@configfs.service: Deactivated
> successfully.
> [ 3.154641] systemd[1]: Finished modprobe@configfs.service - Load Kernel
> Module configfs.
> [ 3.156647] systemd[1]: modprobe@dm_mod.service: Deactivated successfully.
> [ 3.157479] systemd[1]: Finished modprobe@dm_mod.service - Load Kernel
> Module dm_mod.
> [ 3.159407] systemd[1]: modprobe@drm.service: Deactivated successfully.
> [ 3.160184] systemd[1]: Finished modprobe@drm.service - Load Kernel Module
> drm.
> [ 3.163267] BTRFS info (device sda1: state M): turning on async discard
> [ 3.166036] systemd[1]: modprobe@efi_pstore.service: Deactivated
> successfully.
> [ 3.167016] systemd[1]: Finished modprobe@efi_pstore.service - Load Kernel
> Module efi_pstore.
> [ 3.168644] systemd[1]: modprobe@fuse.service: Deactivated successfully.
> [ 3.169441] systemd[1]: Finished modprobe@fuse.service - Load Kernel
> Module fuse.
> [ 3.170978] systemd[1]: modprobe@loop.service: Deactivated successfully.
> [ 3.171738] systemd[1]: Finished modprobe@loop.service - Load Kernel
> Module loop.
> [ 3.173292] systemd[1]: Finished systemd-modules-load.service - Load
> Kernel Modules.
> [ 3.174795] systemd[1]: Finished systemd-network-generator.service -
> Generate network units from Kernel command line.
> [ 3.177136] systemd[1]: Finished systemd-remount-fs.service - Remount Root
> and Kernel File Systems.
> [ 3.191075] systemd[1]: Mounting sys-fs-fuse-connections.mount - FUSE
> Control File System...
> [ 3.193387] systemd[1]: Mounting sys-kernel-config.mount - Kernel
> Configuration File System...
> [ 3.197530] systemd[1]: Starting cloud-init-local.service - Initial
> cloud-init job (pre-networking)...
> [ 3.203949] systemd[1]: systemd-firstboot.service - First Boot Wizard was
> skipped because of an unmet condition check (ConditionFirstBoot=yes).
> [ 3.206185] systemd[1]: Starting systemd-pstore.service - Platform
> Persistent Storage Archival...
> [ 3.208982] systemd[1]: Starting systemd-random-seed.service - Load/Save
> Random Seed...
> [ 3.210919] systemd[1]: systemd-repart.service - Repartition Root Disk was
> skipped because no trigger condition checks were met.
> [ 3.214318] systemd[1]: Starting systemd-sysctl.service - Apply Kernel
> Variables...
> [ 3.222739] systemd[1]: Starting systemd-sysusers.service - Create System
> Users...
> [ 3.239632] systemd[1]: Started systemd-journald.service - Journal Service.
> [ 3.360570] systemd-journald[350]: Received client request to flush
> runtime journal.
> [ 3.370033] systemd-journald[350]: File
> /var/log/journal/534845c972ef4766995d8e7d018f9df3/system.journal corrupted or
> uncleanly shut down, renaming and replacing.
> [ 3.584870] sr 0:0:0:0: Attached scsi generic sg0 type 5
> [ 3.592275] sd 0:0:0:1: Attached scsi generic sg1 type 0
> [ 3.697839] [drm] pci: virtio-gpu-pci detected at 0000:00:01.0
> [ 3.698553] [drm] features: -virgl +edid -resource_blob -host_visible
> [ 3.698555] [drm] features: -context_init
> [ 3.702787] [drm] number of scanouts: 1
> [ 3.703597] [drm] number of cap sets: 0
> [ 3.704930] [drm] Initialized virtio_gpu 0.1.0 0 for 0000:00:01.0 on minor > 0
> [ 3.715947] virtio-pci 0000:00:01.0: [drm]
> drm_plane_enable_fb_damage_clips() not called
> [ 3.715960] Console: switching to colour frame buffer device 160x50
> [ 3.722605] virtio-pci 0000:00:01.0: [drm] fb0: virtio_gpudrmfb frame
> buffer device
> [ 4.765066] cfg80211: Loading compiled-in X.509 certificates for
> regulatory database
> [ 4.766246] cfg80211: Loaded X.509 cert 'b...@debian.org:
> 577e021cb980e0e820821ba7b54b4961b8b4fadf'
> [ 4.767969] cfg80211: Loaded X.509 cert 'romain.per...@gmail.com:
> 3abbc6ec146e09d1b6016ab9d6cf71dd233f0328'
> [ 4.769279] cfg80211: Loaded X.509 cert 'sforshee: 00b28ddf47aef9cea7'
> [ 4.771298] cfg80211: Loaded X.509 cert 'wens:
> 61c038651aabdcf94bd0ac7ff06c7248db18c600'
> [ 4.772878] platform regulatory.0: firmware: direct-loading firmware regul
> ** Model information
> atory.db
> [ 4.773682] platform regulatory.0: firmware: direct-loading firmware
> regulatory.db.p7s
> [ 4.797441] wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for
> information.
> [ 4.798376] wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld
> <ja...@zx2c4.com>. All Rights Reserved.
>
> ** Loaded modules:
> wireguard
> libchacha20poly1305
> chacha_neon
> poly1305_neon
> libcurve25519_generic
> libchacha
> ip6_udp_tunnel
> udp_tunnel
> cfg80211
> rfkill
> nft_reject_inet
> nf_reject_ipv4
> nf_reject_ipv6
> nft_reject
> nf_log_syslog
> nft_log
> nft_limit
> nft_masq
> nft_redir
> nft_ct
> nft_fib_inet
> nft_fib_ipv4
> nft_fib_ipv6
> nft_fib
> nft_chain_nat
> nf_nat
> nf_conntrack
> nf_defrag_ipv6
> binfmt_misc
> nf_defrag_ipv4
> nf_tables
> nfnetlink
> nls_ascii
> nls_cp437
> vfat
> fat
> arm_smccc_trng
> virtio_gpu
> virtio_balloon
> virtio_dma_buf
> drm_shmem_helper
> virtio_console
> drm_kms_helper
> joydev
> sg
> evdev
> dm_mod
> loop
> fuse
> efi_pstore
> dax
> drm
> configfs
> qemu_fw_cfg
> virtio_rng
> ip_tables
> x_tables
> autofs4
> xxhash_generic
> btrfs
> blake2b_generic
> zstd_compress
> efivarfs
> raid10
> raid456
> async_raid6_recov
> async_memcpy
> async_pq
> async_xor
> async_tx
> xor
> xor_neon
> hid_generic
> usbhid
> hid
> raid6_pq
> libcrc32c
> crc32c_generic
> raid1
> raid0
> multipath
> linear
> md_mod
> sd_mod
> t10_pi
> crc64_rocksoft_generic
> sr_mod
> crc64_rocksoft
> crc_t10dif
> cdrom
> crct10dif_generic
> crc64
> crct10dif_ce
> crct10dif_common
> virtio_scsi
> polyval_ce
> polyval_generic
> scsi_mod
> scsi_common
> ghash_ce
> gf128mul
> virtio_net
> net_failover
> failover
> xhci_pci
> xhci_hcd
> sha2_ce
> sha256_arm64
> usbcore
> sha1_ce
> usb_common
> virtio_pci
> virtio_pci_legacy_dev
> virtio_pci_modern_dev
> virtio_mmio
> aes_neon_bs
> aes_neon_blk
> aes_ce_blk
> aes_ce_cipher
>
> ** Network interface configuration:
>
> ** Network status:
> *** IP interfaces and addresses:
> 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group
> default qlen 1000
> link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
> inet 127.0.0.1/8 scope host lo
> valid_lft forever preferred_lft forever
> inet6 ::1/128 scope host noprefixroute
> valid_lft forever preferred_lft forever
> 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP
> group default qlen 1000
> link/ether 96:00:02:7a:d3:a4 brd ff:ff:ff:ff:ff:ff
> altname enp1s0
> inet xxxxxxxxxxxxx/32 brd 128.140.61.82 scope global dynamic eth0
> valid_lft 86111sec preferred_lft 86111sec
> inet6 xxxxxxxxxxxxxxxxxxxxx/64 scope global
> valid_lft forever preferred_lft forever
> inet6 xxxxxxxxxxxxxxxxxxxxxxxx/64 scope link
> valid_lft forever preferred_lft forever
> 3: wg0: <POINTOPOINT,NOARP,UP,LOWER_UP> mtu 1420 qdisc noqueue state UNKNOWN
> group default qlen 1000
> link/none
> inet xxxxxxxxxxx/24 scope global wg0
> valid_lft forever preferred_lft forever
> inet6 xxxxxxxxxxxxxxxxx/64 scope global
> valid_lft forever preferred_lft forever
>
> *** Device statistics:
> Inter-| Receive | Transmit
> face |bytes packets errs drop fifo frame compressed multicast|bytes
> packets errs drop fifo colls carrier compressed
> lo: 10578 134 0 0 0 0 0 0 10578
> 134 0 0 0 0 0 0
> eth0: 2531753 5559 0 0 0 0 0 0 2788642
> 5527 0 0 0 0 0 0
> wg0: 854136 2201 0 0 0 0 0 0 1016816
> 2429 0 0 0 0 0 0
>
> *** Protocol statistics:
> Ip:
> Forwarding: 1
> 6890 total packets received
> 3925 forwarded
> 0 incoming packets discarded
> 2958 incoming packets delivered
> 7081 requests sent out
> 24 outgoing packets dropped
> Icmp:
> 45 ICMP messages received
> 0 input ICMP message failed
> ICMP input histogram:
> destination unreachable: 44
> echo requests: 1
> 45 ICMP messages sent
> 0 ICMP messages failed
> ICMP output histogram:
> destination unreachable: 44
> echo replies: 1
> IcmpMsg:
> InType3: 44
> InType8: 1
> OutType0: 1
> OutType3: 44
> Tcp:
> 11 active connection openings
> 2 passive connection openings
> 0 failed connection attempts
> 0 connection resets received
> 4 connections established
> 1291 segments received
> 1345 segments sent out
> 9 segments retransmitted
> 0 bad segments received
> 23 resets sent
> Udp:
> 2258 packets received
> 40 packets to unknown port received
> 0 packet receive errors
> 99 packets sent
> 0 receive buffer errors
> 0 send buffer errors
> UdpLite:
> TcpExt:
> 41 delayed acks sent
> Quick ack mode was activated 5 times
> 112 packet headers predicted
> 251 acknowledgments not containing data payload received
> 387 predicted acknowledgments
> Detected reordering 26 times using SACK
> 4 congestion windows recovered without slow start after partial ack
> TCPSackFailures: 1
> 2 retransmits in slow start
> TCPTimeouts: 4
> TCPLossProbes: 3
> TCPBacklogCoalesce: 1
> TCPDSACKOldSent: 5
> TCPDSACKRecv: 5
> 8 connections reset due to unexpected data
> TCPDSACKIgnoredNoUndo: 3
> TCPSackShiftFallback: 52
> TCPRcvCoalesce: 53
> TCPAutoCorking: 58
> TCPOrigDataSent: 1014
> TCPDelivered: 1019
> TcpTimeoutRehash: 4
> TcpDuplicateDataRehash: 1
> TCPDSACKRecvSegs: 5
> IpExt:
> InOctets: 2896083
> OutOctets: 5137842
> InNoECTPkts: 6965
> MPTcpExt:
>
>
> ** PCI devices:
> not available
>
> ** USB devices:
> not available
>
>
> -- System Information:
> Debian Release: 12.9
> APT prefers stable-updates
> APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500,
> 'stable')
> Architecture: arm64 (aarch64)
>
> Kernel: Linux 6.1.0-29-arm64 (SMP w/2 CPU threads)
> Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set
> Shell: /bin/sh linked to /usr/bin/dash
> Init: systemd (via /run/systemd/system)
> LSM: AppArmor: enabled
>
> Versions of packages linux-image-6.1.0-29-arm64 depends on:
> ii initramfs-tools [linux-initramfs-tool] 0.142+deb12u1
> ii kmod 30+20221128-1
> ii linux-base 4.9
>
> Versions of packages linux-image-6.1.0-29-arm64 recommends:
> ii apparmor 3.0.8-3
> pn firmware-linux-free <none>
>
> Versions of packages linux-image-6.1.0-29-arm64 suggests:
> pn debian-kernel-handbook <none>
> pn linux-doc-6.1 <none>
>
> Versions of packages linux-image-6.1.0-29-arm64 is related to:
> pn firmware-amd-graphics <none>
> pn firmware-atheros <none>
> pn firmware-bnx2 <none>
> pn firmware-bnx2x <none>
> pn firmware-brcm80211 <none>
> pn firmware-cavium <none>
> pn firmware-intel-sound <none>
> pn firmware-intelwimax <none>
> pn firmware-ipw2x00 <none>
> pn firmware-ivtv <none>
> pn firmware-iwlwifi <none>
> pn firmware-libertas <none>
> pn firmware-linux-nonfree <none>
> pn firmware-misc-nonfree <none>
> pn firmware-myricom <none>
> pn firmware-netxen <none>
> pn firmware-qlogic <none>
> pn firmware-realtek <none>
> pn firmware-samsung <none>
> pn firmware-siano <none>
> pn firmware-ti-connectivity <none>
> pn xen-hypervisor <none>
>
> -- no debconf information
