canonical-ubuntu-qa team mailing list archive

Thread
Date
[Bug 1864073] Re: seccomp_bpf fails Eoan 5.3 in ubuntu_kernel_selftests

To: canonical-ubuntu-qa@xxxxxxxxxxxxxxxxxxx
From: Jürg Häfliger <1864073@xxxxxxxxxxxxxxxxxx>
Date: Sat, 19 Apr 2025 02:05:36 -0000
Reply-to: Bug 1864073 <1864073@xxxxxxxxxxxxxxxxxx>
Sender: noreply@xxxxxxxxxxxxx
*** This bug is a duplicate of bug 1872047 ***
    https://bugs.launchpad.net/bugs/1872047

** Tags added: kernel-daily-bug

-- 
You received this bug notification because you are a member of Canonical
Platform QA Team, which is subscribed to ubuntu-kernel-tests.
https://bugs.launchpad.net/bugs/1864073

Title:
  seccomp_bpf fails Eoan 5.3 in ubuntu_kernel_selftests

Status in ubuntu-kernel-tests:
  Triaged
Status in linux-aws package in Ubuntu:
  Confirmed
Status in linux-aws source package in Eoan:
  Confirmed

Bug description:
  Cloud: AWS
  Kernel: 5.3.0-1012.13
  Test: ubuntu_kernel_selftests

  
  The following is observed from the autotest failure.

  02/19 21:33:08 DEBUG|     utils:0153| [stdout] Estimated seccomp overhead per syscall: 42 ns
  02/19 21:33:08 DEBUG|     utils:0153| [stdout] ok 1..2 selftests: seccomp: seccomp_benchmark [PASS]
  02/19 21:33:08 DEBUG|     utils:0153| [stdout] make[1]: Leaving directory '/home/ubuntu/autotest/client/tmp/ubuntu_kernel_selftests/src/linux/tools/testing/selftests/seccomp'
  02/19 21:33:08 DEBUG|     utils:0153| [stdout] make: Leaving directory '/home/ubuntu/autotest/client/tmp/ubuntu_kernel_selftests/src/linux/tools/testing/selftests'
  02/19 21:33:08 INFO |ubuntu_ker:0179| ========== Summary ===========
  02/19 21:33:08 INFO |ubuntu_ker:0056| Sub test case: seccomp_bpf failed.
  02/19 21:33:08 ERROR|      test:0414| Exception escaping from test:
  Traceback (most recent call last):
    File "/home/ubuntu/autotest/client/shared/test.py", line 411, in _exec
      _call_test_function(self.execute, *p_args, **p_dargs)
    File "/home/ubuntu/autotest/client/shared/test.py", line 823, in _call_test_function
      return func(*args, **dargs)
    File "/home/ubuntu/autotest/client/shared/test.py", line 291, in execute
      postprocess_profiled_run, args, dargs)
    File "/home/ubuntu/autotest/client/shared/test.py", line 212, in _call_run_once
      self.run_once(*args, **dargs)
    File "/home/ubuntu/autotest/client/tests/ubuntu_kernel_selftests/ubuntu_kernel_selftests.py", line 188, in run_once
      raise error.TestError('Test failed for ' + test_name)
  TestError: Test failed for seccomp

  
  When the test is run standalone we can get a little more information.

  [==========] Running 75 tests from 1 test cases.
  [ RUN      ] global.mode_strict_support
  [       OK ] global.mode_strict_support
  [ RUN      ] global.mode_strict_cannot_call_prctl
  [       OK ] global.mode_strict_cannot_call_prctl
  [ RUN      ] global.no_new_privs_support
  [       OK ] global.no_new_privs_support
  [ RUN      ] global.mode_filter_support
  [       OK ] global.mode_filter_support
  [ RUN      ] global.mode_filter_without_nnp
  [       OK ] global.mode_filter_without_nnp
  [ RUN      ] global.filter_size_limits
  [       OK ] global.filter_size_limits
  [ RUN      ] global.filter_chain_limits
  [       OK ] global.filter_chain_limits
  [ RUN      ] global.mode_filter_cannot_move_to_strict
  [       OK ] global.mode_filter_cannot_move_to_strict
  [ RUN      ] global.mode_filter_get_seccomp
  [       OK ] global.mode_filter_get_seccomp
  [ RUN      ] global.ALLOW_all
  [       OK ] global.ALLOW_all
  [ RUN      ] global.empty_prog
  [       OK ] global.empty_prog
  [ RUN      ] global.log_all
  [       OK ] global.log_all
  [ RUN      ] global.unknown_ret_is_kill_inside
  [       OK ] global.unknown_ret_is_kill_inside
  [ RUN      ] global.unknown_ret_is_kill_above_allow
  [       OK ] global.unknown_ret_is_kill_above_allow
  [ RUN      ] global.KILL_all
  [       OK ] global.KILL_all
  [ RUN      ] global.KILL_one
  [       OK ] global.KILL_one
  [ RUN      ] global.KILL_one_arg_one
  [       OK ] global.KILL_one_arg_one
  [ RUN      ] global.KILL_one_arg_six
  [       OK ] global.KILL_one_arg_six
  [ RUN      ] global.KILL_thread
  [       OK ] global.KILL_thread
  [ RUN      ] global.KILL_process
  [       OK ] global.KILL_process
  [ RUN      ] global.arg_out_of_range
  [       OK ] global.arg_out_of_range
  [ RUN      ] global.ERRNO_valid
  [       OK ] global.ERRNO_valid
  [ RUN      ] global.ERRNO_zero
  [       OK ] global.ERRNO_zero
  [ RUN      ] global.ERRNO_capped
  [       OK ] global.ERRNO_capped
  [ RUN      ] global.ERRNO_order
  [       OK ] global.ERRNO_order
  [ RUN      ] TRAP.dfl
  [       OK ] TRAP.dfl
  [ RUN      ] TRAP.ign
  [       OK ] TRAP.ign
  [ RUN      ] TRAP.handler
  [       OK ] TRAP.handler
  [ RUN      ] precedence.allow_ok
  [       OK ] precedence.allow_ok
  [ RUN      ] precedence.kill_is_highest
  [       OK ] precedence.kill_is_highest
  [ RUN      ] precedence.kill_is_highest_in_any_order
  [       OK ] precedence.kill_is_highest_in_any_order
  [ RUN      ] precedence.trap_is_second
  [       OK ] precedence.trap_is_second
  [ RUN      ] precedence.trap_is_second_in_any_order
  [       OK ] precedence.trap_is_second_in_any_order
  [ RUN      ] precedence.errno_is_third
  [       OK ] precedence.errno_is_third
  [ RUN      ] precedence.errno_is_third_in_any_order
  [       OK ] precedence.errno_is_third_in_any_order
  [ RUN      ] precedence.trace_is_fourth
  [       OK ] precedence.trace_is_fourth
  [ RUN      ] precedence.trace_is_fourth_in_any_order
  [       OK ] precedence.trace_is_fourth_in_any_order
  [ RUN      ] precedence.log_is_fifth
  [       OK ] precedence.log_is_fifth
  [ RUN      ] precedence.log_is_fifth_in_any_order
  [       OK ] precedence.log_is_fifth_in_any_order
  [ RUN      ] TRACE_poke.read_has_side_effects
  [       OK ] TRACE_poke.read_has_side_effects
  [ RUN      ] TRACE_poke.getpid_runs_normally
  [       OK ] TRACE_poke.getpid_runs_normally
  [ RUN      ] TRACE_syscall.ptrace_syscall_redirected
  [       OK ] TRACE_syscall.ptrace_syscall_redirected
  [ RUN      ] TRACE_syscall.ptrace_syscall_errno
  [       OK ] TRACE_syscall.ptrace_syscall_errno
  [ RUN      ] TRACE_syscall.ptrace_syscall_faked
  [       OK ] TRACE_syscall.ptrace_syscall_faked
  [ RUN      ] TRACE_syscall.syscall_allowed
  [       OK ] TRACE_syscall.syscall_allowed
  [ RUN      ] TRACE_syscall.syscall_redirected
  [       OK ] TRACE_syscall.syscall_redirected
  [ RUN      ] TRACE_syscall.syscall_errno
  [       OK ] TRACE_syscall.syscall_errno
  [ RUN      ] TRACE_syscall.syscall_faked
  [       OK ] TRACE_syscall.syscall_faked
  [ RUN      ] TRACE_syscall.skip_after_RET_TRACE
  [       OK ] TRACE_syscall.skip_after_RET_TRACE
  [ RUN      ] TRACE_syscall.kill_after_RET_TRACE
  [       OK ] TRACE_syscall.kill_after_RET_TRACE
  [ RUN      ] TRACE_syscall.skip_after_ptrace
  [       OK ] TRACE_syscall.skip_after_ptrace
  [ RUN      ] TRACE_syscall.kill_after_ptrace
  [       OK ] TRACE_syscall.kill_after_ptrace
  [ RUN      ] global.seccomp_syscall
  [       OK ] global.seccomp_syscall
  [ RUN      ] global.seccomp_syscall_mode_lock
  [       OK ] global.seccomp_syscall_mode_lock
  [ RUN      ] global.detect_seccomp_filter_flags
  [       OK ] global.detect_seccomp_filter_flags
  [ RUN      ] global.TSYNC_first
  [       OK ] global.TSYNC_first
  [ RUN      ] TSYNC.siblings_fail_prctl
  [       OK ] TSYNC.siblings_fail_prctl
  [ RUN      ] TSYNC.two_siblings_with_ancestor
  [       OK ] TSYNC.two_siblings_with_ancestor
  [ RUN      ] TSYNC.two_sibling_want_nnp
  [       OK ] TSYNC.two_sibling_want_nnp
  [ RUN      ] TSYNC.two_siblings_with_no_filter
  [       OK ] TSYNC.two_siblings_with_no_filter
  [ RUN      ] TSYNC.two_siblings_with_one_divergence
  [       OK ] TSYNC.two_siblings_with_one_divergence
  [ RUN      ] TSYNC.two_siblings_not_under_filter
  [       OK ] TSYNC.two_siblings_not_under_filter
  [ RUN      ] global.syscall_restart
  [       OK ] global.syscall_restart
  [ RUN      ] global.filter_flag_log
  [       OK ] global.filter_flag_log
  [ RUN      ] global.get_action_avail
  [       OK ] global.get_action_avail
  [ RUN      ] global.get_metadata
  [  XFAIL!  ] get_metadata requires real root
  [       OK ] global.get_metadata
  [ RUN      ] global.user_notification_basic
  [       OK ] global.user_notification_basic
  [ RUN      ] global.user_notification_kill_in_middle
  [       OK ] global.user_notification_kill_in_middle
  [ RUN      ] global.user_notification_signal
  [       OK ] global.user_notification_signal
  [ RUN      ] global.user_notification_closed_listener
  [       OK ] global.user_notification_closed_listener
  [ RUN      ] global.user_notification_child_pid_ns
  [       OK ] global.user_notification_child_pid_ns
  [ RUN      ] global.user_notification_sibling_pid_ns
  seccomp_bpf.c:3414:global.user_notification_sibling_pid_ns:Expected unshare(CLONE_NEWPID) (18446744073709551615) == 0 (0)
  seccomp_bpf.c:3399:global.user_notification_sibling_pid_ns:Expected unshare(CLONE_NEWPID) (18446744073709551615) == 0 (0)
  global.user_notification_sibling_pid_ns: Test terminated by assertion
  [     FAIL ] global.user_notification_sibling_pid_ns
  [ RUN      ] global.user_notification_fault_recv
  [       OK ] global.user_notification_fault_recv
  [ RUN      ] global.seccomp_get_notif_sizes
  [       OK ] global.seccomp_get_notif_sizes
  [ RUN      ] global.user_notification_continue
  [       OK ] global.user_notification_continue
  [==========] 74 / 75 tests passed.
  [  FAILED  ]


  It would appear that running this with "sudo" is the problem, upon
  changing to the root user and re-running

  root@ip-172-31-20-80:/home/ubuntu/autotest/client/tmp/ubuntu_kernel_selftests/src/linux/tools/testing/selftests/seccomp# ./seccomp_bpf 
  [==========] Running 75 tests from 1 test cases.
  [ RUN      ] global.mode_strict_support
  [       OK ] global.mode_strict_support
  [ RUN      ] global.mode_strict_cannot_call_prctl
  [       OK ] global.mode_strict_cannot_call_prctl
  [ RUN      ] global.no_new_privs_support
  [       OK ] global.no_new_privs_support
  [ RUN      ] global.mode_filter_support
  [       OK ] global.mode_filter_support
  [ RUN      ] global.mode_filter_without_nnp
  [       OK ] global.mode_filter_without_nnp
  [ RUN      ] global.filter_size_limits
  [       OK ] global.filter_size_limits
  [ RUN      ] global.filter_chain_limits
  [       OK ] global.filter_chain_limits
  [ RUN      ] global.mode_filter_cannot_move_to_strict
  [       OK ] global.mode_filter_cannot_move_to_strict
  [ RUN      ] global.mode_filter_get_seccomp
  [       OK ] global.mode_filter_get_seccomp
  [ RUN      ] global.ALLOW_all
  [       OK ] global.ALLOW_all
  [ RUN      ] global.empty_prog
  [       OK ] global.empty_prog
  [ RUN      ] global.log_all
  [       OK ] global.log_all
  [ RUN      ] global.unknown_ret_is_kill_inside
  [       OK ] global.unknown_ret_is_kill_inside
  [ RUN      ] global.unknown_ret_is_kill_above_allow
  [       OK ] global.unknown_ret_is_kill_above_allow
  [ RUN      ] global.KILL_all
  [       OK ] global.KILL_all
  [ RUN      ] global.KILL_one
  [       OK ] global.KILL_one
  [ RUN      ] global.KILL_one_arg_one
  [       OK ] global.KILL_one_arg_one
  [ RUN      ] global.KILL_one_arg_six
  [       OK ] global.KILL_one_arg_six
  [ RUN      ] global.KILL_thread
  [       OK ] global.KILL_thread
  [ RUN      ] global.KILL_process
  [       OK ] global.KILL_process
  [ RUN      ] global.arg_out_of_range
  [       OK ] global.arg_out_of_range
  [ RUN      ] global.ERRNO_valid
  [       OK ] global.ERRNO_valid
  [ RUN      ] global.ERRNO_zero
  [       OK ] global.ERRNO_zero
  [ RUN      ] global.ERRNO_capped
  [       OK ] global.ERRNO_capped
  [ RUN      ] global.ERRNO_order
  [       OK ] global.ERRNO_order
  [ RUN      ] TRAP.dfl
  [       OK ] TRAP.dfl
  [ RUN      ] TRAP.ign
  [       OK ] TRAP.ign
  [ RUN      ] TRAP.handler
  [       OK ] TRAP.handler
  [ RUN      ] precedence.allow_ok
  [       OK ] precedence.allow_ok
  [ RUN      ] precedence.kill_is_highest
  [       OK ] precedence.kill_is_highest
  [ RUN      ] precedence.kill_is_highest_in_any_order
  [       OK ] precedence.kill_is_highest_in_any_order
  [ RUN      ] precedence.trap_is_second
  [       OK ] precedence.trap_is_second
  [ RUN      ] precedence.trap_is_second_in_any_order
  [       OK ] precedence.trap_is_second_in_any_order
  [ RUN      ] precedence.errno_is_third
  [       OK ] precedence.errno_is_third
  [ RUN      ] precedence.errno_is_third_in_any_order
  [       OK ] precedence.errno_is_third_in_any_order
  [ RUN      ] precedence.trace_is_fourth
  [       OK ] precedence.trace_is_fourth
  [ RUN      ] precedence.trace_is_fourth_in_any_order
  [       OK ] precedence.trace_is_fourth_in_any_order
  [ RUN      ] precedence.log_is_fifth
  [       OK ] precedence.log_is_fifth
  [ RUN      ] precedence.log_is_fifth_in_any_order
  [       OK ] precedence.log_is_fifth_in_any_order
  [ RUN      ] TRACE_poke.read_has_side_effects
  [       OK ] TRACE_poke.read_has_side_effects
  [ RUN      ] TRACE_poke.getpid_runs_normally
  [       OK ] TRACE_poke.getpid_runs_normally
  [ RUN      ] TRACE_syscall.ptrace_syscall_redirected
  [       OK ] TRACE_syscall.ptrace_syscall_redirected
  [ RUN      ] TRACE_syscall.ptrace_syscall_errno
  [       OK ] TRACE_syscall.ptrace_syscall_errno
  [ RUN      ] TRACE_syscall.ptrace_syscall_faked
  [       OK ] TRACE_syscall.ptrace_syscall_faked
  [ RUN      ] TRACE_syscall.syscall_allowed
  [       OK ] TRACE_syscall.syscall_allowed
  [ RUN      ] TRACE_syscall.syscall_redirected
  [       OK ] TRACE_syscall.syscall_redirected
  [ RUN      ] TRACE_syscall.syscall_errno
  [       OK ] TRACE_syscall.syscall_errno
  [ RUN      ] TRACE_syscall.syscall_faked
  [       OK ] TRACE_syscall.syscall_faked
  [ RUN      ] TRACE_syscall.skip_after_RET_TRACE
  [       OK ] TRACE_syscall.skip_after_RET_TRACE
  [ RUN      ] TRACE_syscall.kill_after_RET_TRACE
  [       OK ] TRACE_syscall.kill_after_RET_TRACE
  [ RUN      ] TRACE_syscall.skip_after_ptrace
  [       OK ] TRACE_syscall.skip_after_ptrace
  [ RUN      ] TRACE_syscall.kill_after_ptrace
  [       OK ] TRACE_syscall.kill_after_ptrace
  [ RUN      ] global.seccomp_syscall
  [       OK ] global.seccomp_syscall
  [ RUN      ] global.seccomp_syscall_mode_lock
  [       OK ] global.seccomp_syscall_mode_lock
  [ RUN      ] global.detect_seccomp_filter_flags
  [       OK ] global.detect_seccomp_filter_flags
  [ RUN      ] global.TSYNC_first
  [       OK ] global.TSYNC_first
  [ RUN      ] TSYNC.siblings_fail_prctl
  [       OK ] TSYNC.siblings_fail_prctl
  [ RUN      ] TSYNC.two_siblings_with_ancestor
  [       OK ] TSYNC.two_siblings_with_ancestor
  [ RUN      ] TSYNC.two_sibling_want_nnp
  [       OK ] TSYNC.two_sibling_want_nnp
  [ RUN      ] TSYNC.two_siblings_with_no_filter
  [       OK ] TSYNC.two_siblings_with_no_filter
  [ RUN      ] TSYNC.two_siblings_with_one_divergence
  [       OK ] TSYNC.two_siblings_with_one_divergence
  [ RUN      ] TSYNC.two_siblings_not_under_filter
  [       OK ] TSYNC.two_siblings_not_under_filter
  [ RUN      ] global.syscall_restart
  [       OK ] global.syscall_restart
  [ RUN      ] global.filter_flag_log
  [       OK ] global.filter_flag_log
  [ RUN      ] global.get_action_avail
  [       OK ] global.get_action_avail
  [ RUN      ] global.get_metadata
  [       OK ] global.get_metadata
  [ RUN      ] global.user_notification_basic
  [       OK ] global.user_notification_basic
  [ RUN      ] global.user_notification_kill_in_middle
  [       OK ] global.user_notification_kill_in_middle
  [ RUN      ] global.user_notification_signal
  [       OK ] global.user_notification_signal
  [ RUN      ] global.user_notification_closed_listener
  [       OK ] global.user_notification_closed_listener
  [ RUN      ] global.user_notification_child_pid_ns
  [       OK ] global.user_notification_child_pid_ns
  [ RUN      ] global.user_notification_sibling_pid_ns
  [       OK ] global.user_notification_sibling_pid_ns
  [ RUN      ] global.user_notification_fault_recv
  [       OK ] global.user_notification_fault_recv
  [ RUN      ] global.seccomp_get_notif_sizes
  [       OK ] global.seccomp_get_notif_sizes
  [ RUN      ] global.user_notification_continue
  [       OK ] global.user_notification_continue
  [==========] 75 / 75 tests passed.
  [  PASSED  ]

  
  The test passes.  most likely what has to happen here is the test should be changed to run directly as the root user and not sudo.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-kernel-tests/+bug/1864073/+subscriptions