Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Bug#1013249: virtio_ring: module verification failed: signature and/or required key missing - tainting kernel

128 views
Skip to first unread message

Ryutaroh Matsumoto

unread,
Jun 19, 2022, 10:40:03 PM6/19/22
to
Package: src:linux
Version: 5.18.5-1
Severity: normal
User: debian...@lists.debian.org
Usertags: riscv64
X-Debbugs-Cc: debian...@lists.debian.org

Dear Maintainer,

I do not expect a kernel module in a genuine Debian kernel package
taints a kernel. But I see the following message in dmesg on
QEMU RISCV64 virt machine:

[ 8.038025] virtio_ring: module verification failed: signature and/or required key missing - tainting kernel

The QEMU is running on Debian/testing amd64 with the following version:
$ dpkg-query -W | fgrep qemu-system-misc
qemu-system-misc 1:7.0+dfsg-7

The QEMU is started as follows:
qemu-system-riscv64 -machine virt,aclint=on,aia=none -m 4G -smp 4 -bios /usr/lib/riscv64-linux-gnu/opensbi/generic/fw_jump.elf -kernel /usr/lib/u-boot/qemu-riscv64_smode/uboot.elf -append "console=ttyS0 rw root=/dev/vda1" -netdev user,id=net0 -device virtio-net-pci,netdev=net0 -object rng-random,filename=/dev/urandom,id=rng0 -device virtio-rng-pci,rng=rng0 -drive if=virtio,file=debian-sid-riscv64.qcow2,index=0,format=qcow2,discard=unmap,detect-zeroes=unmap

-- Package-specific info:
** Version:
Linux version 5.18.0-2-riscv64 (debian...@lists.debian.org) (gcc-11 (Debian 11.2.0-20) 11.2.0, GNU ld (GNU Binutils for Debian) 2.38) #1 SMP Debian 5.18.5-1 (2022-06-16)

** Command line:
root=UUID=031c42a9-74c5-4b38-8e78-87d5f1141c24 rw noquiet root=/dev/vda1 net.ifnames=0 consoleblank=0 rw

** Tainted: E (8192)
* unsigned module was loaded

** Kernel log:
[ 0.000000] Linux version 5.18.0-2-riscv64 (debian...@lists.debian.org) (gcc-11 (Debian 11.2.0-20) 11.2.0, GNU ld (GNU Binutils for Debian) 2.38) #1 SMP Debian 5.18.5-1 (2022-06-16)
[ 0.000000] OF: fdt: Ignoring memory range 0x80000000 - 0x80200000
[ 0.000000] Machine model: riscv-virtio,qemu
[ 0.000000] efi: UEFI not found.
[ 0.000000] NUMA: No NUMA configuration found
[ 0.000000] NUMA: Faking a node at [mem 0x0000000080200000-0x000000017fffffff]
[ 0.000000] NUMA: NODE_DATA [mem 0x17ffedbc0-0x17ffeefff]
[ 0.000000] Zone ranges:
[ 0.000000] DMA32 [mem 0x0000000080200000-0x00000000ffffffff]
[ 0.000000] Normal [mem 0x0000000100000000-0x000000017fffffff]
[ 0.000000] Movable zone start for each node
[ 0.000000] Early memory node ranges
[ 0.000000] node 0: [mem 0x0000000080200000-0x000000017fffffff]
[ 0.000000] Initmem setup node 0 [mem 0x0000000080200000-0x000000017fffffff]
[ 0.000000] On node 0, zone DMA32: 512 pages in unavailable ranges
[ 0.000000] SBI specification v0.3 detected
[ 0.000000] SBI implementation ID=0x1 Version=0x10000
[ 0.000000] SBI TIME extension detected
[ 0.000000] SBI IPI extension detected
[ 0.000000] SBI RFENCE extension detected
[ 0.000000] SBI SRST extension detected
[ 0.000000] SBI HSM extension detected
[ 0.000000] riscv: base ISA extensions acdfhim
[ 0.000000] riscv: ELF capabilities acdfim
[ 0.000000] percpu: cpu 0 has no node -1 or node-local memory
[ 0.000000] percpu: Embedded 27 pages/cpu s72744 r8192 d29656 u110592
[ 0.000000] pcpu-alloc: s72744 r8192 d29656 u110592 alloc=27*4096
[ 0.000000] pcpu-alloc: [0] 0 [0] 1 [0] 2 [0] 3
[ 0.000000] Fallback order for Node 0: 0
[ 0.000000] Built 1 zonelists, mobility grouping on. Total pages: 1031688
[ 0.000000] Policy zone: Normal
[ 0.000000] Kernel command line: root=UUID=031c42a9-74c5-4b38-8e78-87d5f1141c24 rw noquiet root=/dev/vda1 net.ifnames=0 consoleblank=0 rw
[ 0.000000] Unknown kernel command line parameters "noquiet", will be passed to user space.
[ 0.000000] Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear)
[ 0.000000] Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear)
[ 0.000000] mem auto-init: stack:off, heap alloc:on, heap free:off
[ 0.000000] software IO TLB: mapped [mem 0x00000000fb73a000-0x00000000ff73a000] (64MB)
[ 0.000000] Memory: 2079280K/4192256K available (7539K kernel code, 5095K rwdata, 4096K rodata, 2456K init, 426K bss, 252764K reserved, 0K cma-reserved)
[ 0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1
[ 0.000000] ftrace: allocating 28720 entries in 113 pages
[ 0.000000] ftrace: allocated 113 pages with 4 groups
[ 0.000000] trace event string verifier disabled
[ 0.000000] rcu: Hierarchical RCU implementation.
[ 0.000000] rcu: RCU restricting CPUs from NR_CPUS=8 to nr_cpu_ids=4.
[ 0.000000] Rude variant of Tasks RCU enabled.
[ 0.000000] Tracing variant of Tasks RCU enabled.
[ 0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 25 jiffies.
[ 0.000000] rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4
[ 0.000000] NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0
[ 0.000000] riscv-intc: 64 local interrupts mapped
[ 0.000000] plic: plic@c000000: mapped 53 interrupts with 4 handlers for 8 contexts.
[ 0.000000] riscv_timer_init_dt: Registering clocksource cpuid [0] hartid [0]
[ 0.000000] clocksource: riscv_clocksource: mask: 0xffffffffffffffff max_cycles: 0x24e6a1710, max_idle_ns: 440795202120 ns
[ 0.000152] sched_clock: 64 bits at 10MHz, resolution 100ns, wraps every 4398046511100ns
[ 0.013528] Console: colour dummy device 80x25
[ 0.016428] printk: console [tty0] enabled
[ 0.020104] Calibrating delay loop (skipped), value calculated using timer frequency.. 20.00 BogoMIPS (lpj=40000)
[ 0.020519] pid_max: default: 32768 minimum: 301
[ 0.022877] LSM: Security Framework initializing
[ 0.024641] Yama: disabled by default; enable with sysctl kernel.yama.*
[ 0.028603] AppArmor: AppArmor initialized
[ 0.028772] TOMOYO Linux initialized
[ 0.033884] Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear)
[ 0.034042] Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear)
[ 0.263131] cblist_init_generic: Setting adjustable number of callback queues.
[ 0.268575] cblist_init_generic: Setting shift to 2 and lim to 1.
[ 0.269794] cblist_init_generic: Setting shift to 2 and lim to 1.
[ 0.273767] ASID allocator using 16 bits (65536 entries)
[ 0.275283] rcu: Hierarchical SRCU implementation.
[ 0.288965] EFI services will not be available.
[ 0.296200] smp: Bringing up secondary CPUs ...
[ 0.322482] smp: Brought up 1 node, 4 CPUs
[ 0.408782] node 0 deferred pages initialised in 80ms
[ 0.431749] devtmpfs: initialized
[ 0.445243] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 7645041785100000 ns
[ 0.446417] futex hash table entries: 1024 (order: 4, 65536 bytes, linear)
[ 0.451369] pinctrl core: initialized pinctrl subsystem
[ 0.460647] NET: Registered PF_NETLINK/PF_ROUTE protocol family
[ 0.463694] audit: initializing netlink subsys (disabled)
[ 0.465864] audit: type=2000 audit(0.308:1): state=initialized audit_enabled=0 res=1
[ 0.469000] thermal_sys: Registered thermal governor 'fair_share'
[ 0.469140] thermal_sys: Registered thermal governor 'bang_bang'
[ 0.469196] thermal_sys: Registered thermal governor 'step_wise'
[ 0.469224] thermal_sys: Registered thermal governor 'user_space'
[ 0.510164] HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages
[ 0.521413] iommu: Default domain type: Translated
[ 0.521479] iommu: DMA domain TLB invalidation policy: strict mode
[ 0.533036] NetLabel: Initializing
[ 0.533079] NetLabel: domain hash size = 128
[ 0.533113] NetLabel: protocols = UNLABELED CIPSOv4 CALIPSO
[ 0.534111] NetLabel: unlabeled traffic allowed by default
[ 0.538173] vgaarb: loaded
[ 0.540419] clocksource: Switched to clocksource riscv_clocksource
[ 0.622485] VFS: Disk quotas dquot_6.6.0
[ 0.622826] VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes)
[ 0.630509] AppArmor: AppArmor Filesystem Enabled
[ 0.663248] NET: Registered PF_INET protocol family
[ 0.665174] IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear)
[ 0.676706] tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear)
[ 0.676922] Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear)
[ 0.677124] TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear)
[ 0.677762] TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear)
[ 0.678267] TCP: Hash tables configured (established 32768 bind 32768)
[ 0.681410] MPTCP token hash table entries: 4096 (order: 4, 98304 bytes, linear)
[ 0.681899] UDP hash table entries: 2048 (order: 4, 65536 bytes, linear)
[ 0.682226] UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear)
[ 0.684938] NET: Registered PF_UNIX/PF_LOCAL protocol family
[ 0.685440] NET: Registered PF_XDP protocol family
[ 0.685739] PCI: CLS 0 bytes, default 64
[ 0.690546] Initialise system trusted keyrings
[ 0.692544] Trying to unpack rootfs image as initramfs...
[ 0.693042] Key type blacklist registered
[ 0.697118] workingset: timestamp_bits=44 max_order=20 bucket_order=0
[ 0.716205] zbud: loaded
[ 0.723453] integrity: Platform Keyring initialized
[ 0.723562] Key type asymmetric registered
[ 0.723722] Asymmetric key parser 'x509' registered
[ 5.202056] Freeing initrd memory: 60864K
[ 5.428954] alg: self-tests for CTR-KDF (hmac(sha256)) passed
[ 5.429639] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 251)
[ 5.430905] io scheduler mq-deadline registered
[ 5.445053] pci-host-generic 30000000.pci: host bridge /soc/pci@30000000 ranges:
[ 5.446040] pci-host-generic 30000000.pci: IO 0x0003000000..0x000300ffff -> 0x0000000000
[ 5.446687] pci-host-generic 30000000.pci: MEM 0x0040000000..0x007fffffff -> 0x0040000000
[ 5.446796] pci-host-generic 30000000.pci: MEM 0x0400000000..0x07ffffffff -> 0x0400000000
[ 5.447672] pci-host-generic 30000000.pci: Memory resource size exceeds max for 32 bits
[ 5.449380] pci-host-generic 30000000.pci: ECAM at [mem 0x30000000-0x3fffffff] for [bus 00-ff]
[ 5.450953] pci-host-generic 30000000.pci: PCI host bridge to bus 0000:00
[ 5.451244] pci_bus 0000:00: root bus resource [bus 00-ff]
[ 5.451364] pci_bus 0000:00: root bus resource [io 0x0000-0xffff]
[ 5.451461] pci_bus 0000:00: root bus resource [mem 0x40000000-0x7fffffff]
[ 5.451498] pci_bus 0000:00: root bus resource [mem 0x400000000-0x7ffffffff]
[ 5.453140] pci 0000:00:00.0: [1b36:0008] type 00 class 0x060000
[ 5.459062] pci 0000:00:01.0: [1af4:1000] type 00 class 0x020000
[ 5.460902] pci 0000:00:01.0: reg 0x10: [io 0x1000-0x101f]
[ 5.461810] pci 0000:00:01.0: reg 0x14: [mem 0x40000000-0x40000fff]
[ 5.464613] pci 0000:00:01.0: reg 0x20: [mem 0x40004000-0x40007fff 64bit pref]
[ 5.465607] pci 0000:00:01.0: reg 0x30: [mem 0x40040000-0x4007ffff pref]
[ 5.466394] pci 0000:00:02.0: [1af4:1005] type 00 class 0x00ff00
[ 5.466909] pci 0000:00:02.0: reg 0x10: [io 0x1020-0x103f]
[ 5.470249] pci 0000:00:02.0: reg 0x20: [mem 0x40080000-0x40083fff 64bit pref]
[ 5.471474] pci 0000:00:03.0: [1af4:1001] type 00 class 0x010000
[ 5.472073] pci 0000:00:03.0: reg 0x10: [io 0x1080-0x10ff]
[ 5.472900] pci 0000:00:03.0: reg 0x14: [mem 0x40084000-0x40084fff]
[ 5.475414] pci 0000:00:03.0: reg 0x20: [mem 0x40088000-0x4008bfff 64bit pref]
[ 5.479337] pci 0000:00:01.0: BAR 6: assigned [mem 0x40000000-0x4003ffff pref]
[ 5.479654] pci 0000:00:01.0: BAR 4: assigned [mem 0x400000000-0x400003fff 64bit pref]
[ 5.481877] pci 0000:00:02.0: BAR 4: assigned [mem 0x400004000-0x400007fff 64bit pref]
[ 5.482222] pci 0000:00:03.0: BAR 4: assigned [mem 0x400008000-0x40000bfff 64bit pref]
[ 5.482707] pci 0000:00:01.0: BAR 1: assigned [mem 0x40040000-0x40040fff]
[ 5.483031] pci 0000:00:03.0: BAR 1: assigned [mem 0x40041000-0x40041fff]
[ 5.483387] pci 0000:00:03.0: BAR 0: assigned [io 0x0000-0x007f]
[ 5.483705] pci 0000:00:01.0: BAR 0: assigned [io 0x0080-0x009f]
[ 5.483993] pci 0000:00:02.0: BAR 0: assigned [io 0x00a0-0x00bf]
[ 5.489084] Serial: 8250/16550 driver, 4 ports, IRQ sharing disabled
[ 5.503454] 10000000.uart: ttyS0 at MMIO 0x10000000 (irq = 2, base_baud = 230400) is a 16550A
[ 5.522393] printk: console [ttyS0] enabled
[ 5.528180] mousedev: PS/2 mouse device common for all mice
[ 5.533925] goldfish_rtc 101000.rtc: registered as rtc0
[ 5.534684] goldfish_rtc 101000.rtc: setting system clock to 2022-06-20T02:09:57 UTC (1655690997)
[ 5.538585] syscon-poweroff soc:poweroff: pm_power_off already claimed for sbi_srst_power_off
[ 5.539149] syscon-poweroff: probe of soc:poweroff failed with error -16
[ 5.540593] ledtrig-cpu: registered to indicate activity on CPUs
[ 5.541818] riscv-pmu-sbi: SBI PMU extension is available
[ 5.542370] riscv-pmu-sbi: 15 firmware and 2 hardware counters
[ 5.542574] riscv-pmu-sbi: Perf sampling/filtering is not supported as sscof extension is not available
[ 5.547194] NET: Registered PF_INET6 protocol family
[ 5.694952] Segment Routing with IPv6
[ 5.695513] In-situ OAM (IOAM) with IPv6
[ 5.696375] mip6: Mobile IPv6
[ 5.696611] NET: Registered PF_PACKET protocol family
[ 5.697459] mpls_gso: MPLS GSO support
[ 5.700032] registered taskstats version 1
[ 5.700388] Loading compiled-in X.509 certificates
[ 5.895019] Loaded X.509 cert 'Debian Secure Boot CA: 6ccece7e4c6c0d1f6149f3dd27dfcc5cbb419ea1'
[ 5.895746] Loaded X.509 cert 'Debian Secure Boot Signer 2021 - linux: 4b6ef5abca669825178e052c84667ccbc0531f8c'
[ 5.902917] zswap: loaded using pool lzo/zbud
[ 5.906113] Key type ._fscrypt registered
[ 5.906725] Key type .fscrypt registered
[ 5.906832] Key type fscrypt-provisioning registered
[ 6.052792] Key type encrypted registered
[ 6.053065] AppArmor: AppArmor sha1 policy hashing enabled
[ 6.053817] ima: No TPM chip found, activating TPM-bypass!
[ 6.054104] ima: Allocated hash algorithm: sha256
[ 6.056127] ima: No architecture policies found
[ 6.056808] evm: Initialising EVM extended attributes:
[ 6.056926] evm: security.selinux
[ 6.057032] evm: security.SMACK64 (disabled)
[ 6.057114] evm: security.SMACK64EXEC (disabled)
[ 6.057195] evm: security.SMACK64TRANSMUTE (disabled)
[ 6.057281] evm: security.SMACK64MMAP (disabled)
[ 6.057361] evm: security.apparmor
[ 6.057437] evm: security.ima
[ 6.057497] evm: security.capability
[ 6.057578] evm: HMAC attrs: 0x1
[ 6.397595] Freeing unused kernel image (initmem) memory: 2456K
[ 6.414981] Run /init as init process
[ 6.415598] with arguments:
[ 6.415744] /init
[ 6.415820] noquiet
[ 6.415873] with environment:
[ 6.416394] HOME=/
[ 6.416464] TERM=linux
[ 8.303638] virtio_ring: module verification failed: signature and/or required key missing - tainting kernel
[ 8.851413] virtio_blk virtio2: [vda] 62914560 512-byte logical blocks (32.2 GB/30.0 GiB)
[ 8.888533] vda: vda1 vda2
[ 9.655942] raid6: int64x8 gen() 582 MB/s
[ 9.723941] raid6: int64x4 gen() 1425 MB/s
[ 9.791921] raid6: int64x2 gen() 1621 MB/s
[ 9.859949] raid6: int64x1 gen() 1297 MB/s
[ 9.860122] raid6: using algorithm int64x2 gen() 1621 MB/s
[ 9.927999] raid6: .... xor() 981 MB/s, rmw enabled
[ 9.928204] raid6: using intx1 recovery algorithm
[ 9.937641] xor: measuring software checksum speed
[ 9.943554] 8regs : 1921 MB/sec
[ 9.948758] 8regs_prefetch : 2192 MB/sec
[ 9.953548] 32regs : 2171 MB/sec
[ 9.958334] 32regs_prefetch : 2208 MB/sec
[ 9.958480] xor: using function: 32regs_prefetch (2208 MB/sec)
[ 11.186529] Btrfs loaded, crc32c=crc32c-generic, zoned=yes, fsverity=yes
[ 12.147212] EXT4-fs (vda1): warning: maximal mount count reached, running e2fsck is recommended
[ 12.178096] EXT4-fs (vda1): mounted filesystem with ordered data mode. Quota mode: none.
[ 13.269745] Not activating Mandatory Access Control as /sbin/tomoyo-init does not exist.
[ 13.878773] systemd[1]: Inserted module 'autofs4'
[ 14.068623] systemd[1]: systemd 251.2-5 running in system mode (+PAM +AUDIT +SELINUX +APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL +ACL +BLKID +CURL +ELFUTILS +FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE +TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified)
[ 14.069629] systemd[1]: Detected architecture riscv64.
[ 14.082833] systemd[1]: Hostname set to <riscv64-debian>.
[ 17.032209] random: crng init done
[ 18.255003] systemd-crontab-generator[170]: ignoring /etc/cron.d/e2scrub_all because native timer is present
[ 19.817367] systemd[1]: Queued start job for default target Graphical Interface.
[ 19.877227] systemd[1]: Created slice Slice /system/getty.
[ 19.894612] systemd[1]: Created slice Slice /system/modprobe.
[ 19.907607] systemd[1]: Created slice Slice /system/serial-getty.
[ 19.918681] systemd[1]: Created slice User and Session Slice.
[ 19.925241] systemd[1]: Started Dispatch Password Requests to Console Directory Watch.
[ 19.930425] systemd[1]: Started Forward Password Requests to Wall Directory Watch.
[ 19.942892] systemd[1]: Set up automount Arbitrary Executable File Formats File System Automount Point.
[ 19.946601] systemd[1]: Reached target Local Encrypted Volumes.
[ 19.948530] systemd[1]: Reached target Local Integrity Protected Volumes.
[ 19.950465] systemd[1]: Reached target Remote Encrypted Volumes.
[ 19.952223] systemd[1]: Reached target Remote File Systems.
[ 19.953962] systemd[1]: Reached target Remote Verity Protected Volumes.
[ 19.955601] systemd[1]: Reached target Slice Units.
[ 19.957708] systemd[1]: Reached target Local Verity Protected Volumes.
[ 19.969910] systemd[1]: Listening on Syslog Socket.
[ 19.975259] systemd[1]: Listening on fsck to fsckd communication Socket.
[ 19.979550] systemd[1]: Listening on initctl Compatibility Named Pipe.
[ 19.986041] systemd[1]: Listening on Journal Audit Socket.
[ 19.992032] systemd[1]: Listening on Journal Socket (/dev/log).
[ 19.999655] systemd[1]: Listening on Journal Socket.
[ 20.006078] systemd[1]: Listening on Network Service Netlink Socket.
[ 20.012976] systemd[1]: Listening on udev Control Socket.
[ 20.017797] systemd[1]: Listening on udev Kernel Socket.
[ 20.049314] systemd[1]: Mounting Huge Pages File System...
[ 20.082921] systemd[1]: Mounting POSIX Message Queue File System...
[ 20.123755] systemd[1]: Mounting Kernel Debug File System...
[ 20.169919] systemd[1]: Mounting Kernel Trace File System...
[ 20.218635] systemd[1]: Starting Set the console keyboard layout...
[ 20.263631] systemd[1]: Starting Create List of Static Device Nodes...
[ 20.310531] systemd[1]: Starting Load Kernel Module configfs...
[ 20.357632] systemd[1]: Starting Load Kernel Module drm...
[ 20.405082] systemd[1]: Starting Load Kernel Module fuse...
[ 20.449187] systemd[1]: Starting nftables...
[ 20.455433] systemd[1]: File System Check on Root Device was skipped because of a failed condition check (ConditionPathIsReadWrite=!/).
[ 20.535108] systemd[1]: Starting Journal Service...
[ 20.605300] systemd[1]: Starting Load Kernel Modules...
[ 20.692227] systemd[1]: Starting Generate network units from Kernel command line...
[ 20.725920] fuse: init (API version 7.36)
[ 20.783136] systemd[1]: Starting Remount Root and Kernel File Systems...
[ 20.802746] systemd[1]: Repartition Root Disk was skipped because all trigger condition checks failed.
[ 20.877655] systemd[1]: Starting Coldplug All udev Devices...
[ 21.193087] systemd[1]: Mounted Huge Pages File System.
[ 21.214188] systemd[1]: Mounted POSIX Message Queue File System.
[ 21.237985] systemd[1]: Mounted Kernel Debug File System.
[ 21.260441] systemd[1]: Mounted Kernel Trace File System.
[ 21.326960] systemd[1]: Finished Create List of Static Device Nodes.
[ 21.389916] systemd[1]: modp...@configfs.service: Deactivated successfully.
[ 21.406995] systemd[1]: Finished Load Kernel Module configfs.
[ 21.444607] EXT4-fs (vda1): re-mounted. Quota mode: none.
[ 21.457242] systemd[1]: modp...@fuse.service: Deactivated successfully.
[ 21.471208] systemd[1]: Finished Load Kernel Module fuse.
[ 21.581895] systemd[1]: modp...@drm.service: Deactivated successfully.
[ 21.604248] systemd[1]: Finished Load Kernel Module drm.
[ 21.632696] systemd[1]: Finished Load Kernel Modules.
[ 21.651697] systemd[1]: Finished Generate network units from Kernel command line.
[ 21.669124] systemd[1]: Finished Remount Root and Kernel File Systems.
[ 21.741561] systemd[1]: Mounting FUSE Control File System...
[ 21.792419] systemd[1]: Mounting Kernel Configuration File System...
[ 21.800317] systemd[1]: Platform Persistent Storage Archival was skipped because of a failed condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore).
[ 21.893382] systemd[1]: Starting Load/Save Random Seed...
[ 21.985854] systemd[1]: Starting Apply Kernel Variables...
[ 22.107390] systemd[1]: Starting Create System Users...
[ 22.296979] systemd[1]: Mounted FUSE Control File System.
[ 22.318333] systemd[1]: Mounted Kernel Configuration File System.
[ 22.434515] systemd[1]: Finished Load/Save Random Seed.
[ 22.446637] systemd[1]: First Boot Complete was skipped because of a failed condition check (ConditionFirstBoot=yes).
[ 22.604473] systemd[1]: Finished Apply Kernel Variables.
[ 22.638478] systemd[1]: Finished nftables.
[ 22.658023] systemd[1]: Reached target Preparation for Network.
[ 22.856228] systemd[1]: Started Journal Service.
[ 23.268693] systemd-journald[195]: Received client request to flush runtime journal.
[ 27.118735] Adding 4193276k swap on /dev/vda2. Priority:-2 extents:1 across:4193276k DscFS
[ 27.755226] cfg80211: Loading compiled-in X.509 certificates for regulatory database
[ 27.757324] cfg80211: Loaded X.509 cert 'be...@debian.org: 577e021cb980e0e820821ba7b54b4961b8b4fadf'
[ 27.758856] cfg80211: Loaded X.509 cert 'romain...@gmail.com: 3abbc6ec146e09d1b6016ab9d6cf71dd233f0328'
[ 27.760545] cfg80211: Loaded X.509 cert 'sforshee: 00b28ddf47aef9cea7'
[ 27.763835] platform regulatory.0: firmware: failed to load regulatory.db (-2)
[ 27.764399] firmware_class: See https://wiki.debian.org/Firmware for information about missing firmware
[ 27.764728] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[ 27.765393] cfg80211: failed to load regulatory.db

** Model information
Device Tree model: riscv-virtio,qemu

** Loaded modules:
tls(E)
cfg80211(E)
rfkill(E)
virtio_rng(E)
rng_core(E)
nf_tables(E)
nfnetlink(E)
drm(E)
drm_panel_orientation_quirks(E)
fuse(E)
i2c_core(E)
configfs(E)
ip_tables(E)
x_tables(E)
autofs4(E)
ext4(E)
crc16(E)
mbcache(E)
jbd2(E)
btrfs(E)
blake2b_generic(E)
xor(E)
raid6_pq(E)
zstd_compress(E)
libcrc32c(E)
crc32c_generic(E)
virtio_net(E)
net_failover(E)
virtio_blk(E)
failover(E)
virtio_pci(E)
virtio_pci_legacy_dev(E)
virtio_pci_modern_dev(E)
virtio_mmio(E)
virtio(E)
virtio_ring(E)

** Network status:
*** IP interfaces and addresses:
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
link/ether 52:54:00:12:34:56 brd ff:ff:ff:ff:ff:ff
altname enp0s1
inet 10.0.2.15/24 brd 10.0.2.255 scope global dynamic noprefixroute eth0
valid_lft 85505sec preferred_lft 85505sec
inet6 fec0::218a:c668:5980:1dfe/64 scope site dynamic noprefixroute
valid_lft 86199sec preferred_lft 14199sec
inet6 fe80::6e57:de61:2804:e679/64 scope link noprefixroute
valid_lft forever preferred_lft forever

*** Device statistics:
Inter-| Receive | Transmit
face |bytes packets errs drop fifo frame compressed multicast|bytes packets errs drop fifo colls carrier compressed
lo: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
eth0: 11376941 8388 0 0 0 0 0 0 188707 1040 0 0 0 0 0 0


** PCI devices:
00:00.0 Host bridge [0600]: Red Hat, Inc. QEMU PCIe Host bridge [1b36:0008]
Subsystem: Red Hat, Inc. QEMU PCIe Host bridge [1af4:1100]
Control: I/O- Mem- BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
Status: Cap- 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 0, Cache Line Size: 32 bytes

00:01.0 Ethernet controller [0200]: Red Hat, Inc. Virtio network device [1af4:1000]
Subsystem: Red Hat, Inc. Virtio network device [1af4:0001]
Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 0, Cache Line Size: 32 bytes
Interrupt: pin A routed to IRQ 16
Region 0: I/O ports at 0080 [size=32]
Region 1: Memory at 40040000 (32-bit, non-prefetchable) [size=4K]
Region 4: Memory at 400000000 (64-bit, prefetchable) [size=16K]
Expansion ROM at 40000000 [disabled] [size=256K]
Capabilities: [98] MSI-X: Enable- Count=4 Masked-
Vector table: BAR=1 offset=00000000
PBA: BAR=1 offset=00000800
Capabilities: [84] Vendor Specific Information: VirtIO: <unknown>
BAR=0 offset=00000000 size=00000000
Capabilities: [70] Vendor Specific Information: VirtIO: Notify
BAR=4 offset=00003000 size=00001000 multiplier=00000004
Capabilities: [60] Vendor Specific Information: VirtIO: DeviceCfg
BAR=4 offset=00002000 size=00001000
Capabilities: [50] Vendor Specific Information: VirtIO: ISR
BAR=4 offset=00001000 size=00001000
Capabilities: [40] Vendor Specific Information: VirtIO: CommonCfg
BAR=4 offset=00000000 size=00001000
Kernel driver in use: virtio-pci
Kernel modules: virtio_pci

00:02.0 Unclassified device [00ff]: Red Hat, Inc. Virtio RNG [1af4:1005]
Subsystem: Red Hat, Inc. Virtio RNG [1af4:0004]
Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 0, Cache Line Size: 32 bytes
Interrupt: pin A routed to IRQ 17
Region 0: I/O ports at 00a0 [size=32]
Region 4: Memory at 400004000 (64-bit, prefetchable) [size=16K]
Capabilities: [84] Vendor Specific Information: VirtIO: <unknown>
BAR=0 offset=00000000 size=00000000
Capabilities: [70] Vendor Specific Information: VirtIO: Notify
BAR=4 offset=00003000 size=00001000 multiplier=00000004
Capabilities: [60] Vendor Specific Information: VirtIO: DeviceCfg
BAR=4 offset=00002000 size=00001000
Capabilities: [50] Vendor Specific Information: VirtIO: ISR
BAR=4 offset=00001000 size=00001000
Capabilities: [40] Vendor Specific Information: VirtIO: CommonCfg
BAR=4 offset=00000000 size=00001000
Kernel driver in use: virtio-pci
Kernel modules: virtio_pci

00:03.0 SCSI storage controller [0100]: Red Hat, Inc. Virtio block device [1af4:1001]
Subsystem: Red Hat, Inc. Virtio block device [1af4:0002]
Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 0, Cache Line Size: 32 bytes
Interrupt: pin A routed to IRQ 18
Region 0: I/O ports at 0000 [virtual] [size=128]
Region 1: Memory at 40041000 (32-bit, non-prefetchable) [virtual] [size=4K]
Region 4: Memory at 400008000 (64-bit, prefetchable) [virtual] [size=16K]
Capabilities: [98] MSI-X: Enable- Count=5 Masked-
Vector table: BAR=1 offset=00000000
PBA: BAR=1 offset=00000800
Capabilities: [84] Vendor Specific Information: VirtIO: <unknown>
BAR=0 offset=00000000 size=00000000
Capabilities: [70] Vendor Specific Information: VirtIO: Notify
BAR=4 offset=00003000 size=00001000 multiplier=00000004
Capabilities: [60] Vendor Specific Information: VirtIO: DeviceCfg
BAR=4 offset=00002000 size=00001000
Capabilities: [50] Vendor Specific Information: VirtIO: ISR
BAR=4 offset=00001000 size=00001000
Capabilities: [40] Vendor Specific Information: VirtIO: CommonCfg
BAR=4 offset=00000000 size=00001000
Kernel driver in use: virtio-pci
Kernel modules: virtio_pci


** USB devices:
not available


-- System Information:
Debian Release: bookworm/sid
APT prefers unreleased
APT policy: (500, 'unreleased'), (500, 'unstable')
Architecture: riscv64

Kernel: Linux 5.18.0-2-riscv64 (SMP w/4 CPU threads)
Kernel taint flags: TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages linux-image-5.18.0-2-riscv64 depends on:
ii initramfs-tools [linux-initramfs-tool] 0.141
ii kmod 29-1+b1
ii linux-base 4.9

Versions of packages linux-image-5.18.0-2-riscv64 recommends:
pn apparmor <none>
pn firmware-linux-free <none>

Versions of packages linux-image-5.18.0-2-riscv64 suggests:
pn debian-kernel-handbook <none>
pn linux-doc-5.18 <none>

Versions of packages linux-image-5.18.0-2-riscv64 is related to:
pn firmware-amd-graphics <none>
pn firmware-atheros <none>
pn firmware-bnx2 <none>
pn firmware-bnx2x <none>
pn firmware-brcm80211 <none>
pn firmware-cavium <none>
pn firmware-intel-sound <none>
pn firmware-intelwimax <none>
pn firmware-ipw2x00 <none>
pn firmware-ivtv <none>
pn firmware-iwlwifi <none>
pn firmware-libertas <none>
pn firmware-linux-nonfree <none>
pn firmware-misc-nonfree <none>
pn firmware-myricom <none>
pn firmware-netxen <none>
pn firmware-qlogic <none>
pn firmware-realtek <none>
pn firmware-samsung <none>
pn firmware-siano <none>
pn firmware-ti-connectivity <none>
pn xen-hypervisor <none>

-- no debconf information

Ben Hutchings

unread,
Jun 20, 2022, 8:10:03 PM6/20/22
to
Control: severity -1 important
Control: forcemerge -1 825141
Control: fixed -1 4.6.1-1
Control: found -1 5.4-1~exp1

On Mon, 2022-06-20 at 11:34 +0900, Ryutaroh Matsumoto wrote:
> Package: src:linux
> Version: 5.18.5-1
> Severity: normal
> User: debian...@lists.debian.org
> Usertags: riscv64
> X-Debbugs-Cc: debian...@lists.debian.org
>
> Dear Maintainer,
>
> I do not expect a kernel module in a genuine Debian kernel package
> taints a kernel. But I see the following message in dmesg on
> QEMU RISCV64 virt machine:
>
> [ 8.038025] virtio_ring: module verification failed: signature and/or required key missing - tainting kernel
[...]


Yes, this is not right. Ideally we would be signing modules on all
architectures, but currently we don't do that. We should configure the
kernel not to expect signatures on other architectures, but these
settings have got out of sync.

This was broken and then fixed once before, so I'm merging this with
the earlier report and noting the version where this seems to have
regressed.

Ben.

--
Ben Hutchings
Any smoothly functioning technology is indistinguishable
from a rigged demo.
signature.asc
0 new messages