From nobody Wed Jan 17 20:24:53 2024 X-Original-To: freebsd-arm@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4TFcnQ2TTyz56dtY for ; Wed, 17 Jan 2024 20:25:14 +0000 (UTC) (envelope-from marklmi@yahoo.com) Received: from sonic307-55.consmr.mail.gq1.yahoo.com (sonic307-55.consmr.mail.gq1.yahoo.com [98.137.64.31]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4TFcnP5Qcdz4qt8 for ; Wed, 17 Jan 2024 20:25:13 +0000 (UTC) (envelope-from marklmi@yahoo.com) Authentication-Results: mx1.freebsd.org; none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1705523111; bh=BVwbb315fTYEV/MQ/RaOlDBUu+DHQizlFDOGnm0v+JM=; h=Subject:From:In-Reply-To:Date:Cc:References:To:From:Subject:Reply-To; b=ZesKW5vSiKzZt+t3bQ7j2lg6zTj3/gr7i3fZ9NqwWm+berRPwRhzOt/Rtt2SlrEWLk22dVNcV9syCwMv4+sqw9xihYEeLFRi3kjN39/rNkvYR6lv45BYR/cUTycJGAXfddSCFM6HQbLosBTqA2u3JlTobDK4mwuVW6z8eklKIaMjB6yenA0TNjZplScCDQX3Fsq9KxG1bWRbNuOOM1feQ+H9aQdf/OIyojb9EiRh8eM2cLnqD0x1NcgESS8malvaDnPOKYlPHDcm54WYEaJIzWfDibAMSF5z0Ym/awNQvu4I0JbvUtpbqUXzKNj7O9h/JfsmV5LloBExr6ZCcZvouw== X-SONIC-DKIM-SIGN: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1705523111; bh=05nJiTMv94hX47Hhm5paHncGfCMe3cDqW6u+2MbDCa2=; h=X-Sonic-MF:Subject:From:Date:To:From:Subject; b=H7YrpaSFIEstpkb9C0GKNni1xixbzG3RgUvB/F03b1k8Z+aBPZrea91NzcxDuPyNXKjhngvluIX6tAM2AOv7WR5S3jxtaLoKYadoqZME9CY7Yow727ROAMygAzVHGkimwr+KPG/sKY38yLbT3FcVba3deQyd29FHiijJXg5wHM7kBvu79lLeZZbLPHqLaVA4e4tm7C+ogMxbQKmXQI8DDDvfW+JAPMlH2nghw4t0Na7wHiiFJlVaOIJEjBNIeG03jRBGJe9n0fKpxkyLDcGIJo1YkrJg8+OTGZf8AGl6jBBXV5/KKt5d5MZGc398J8cvBqbMg2acHCkM33315RMiVg== X-YMail-OSG: 99QUNtwVM1nFczUjPMhjFKLEWh_N.MEkjMKNw_FqqnTfVWyagZXy_KlGQxYb6dA K2RaWcrTxatgVA0ee3s0aAIIG249L1FUFJ5n_jMGIWc_nTt76ngrCU5j6MH2uJspJnXqnk2C3V2M jWINCEY0U_vF9mirxAi6IFnRDChvzjOPhPZ7jvldzEJnEstHVYlysvksvhUlKmESP5VUy4RHQwDo o.fNhXui9epVc5BbdTE2mrz4WWJDr0H9LLEWJ_mEyaAOrG6MU6UUWcejUkdRHCoqFJL0krrjef9I Ng0xbKxrgyXMZCUP7DNVGs4M2t17r0WZ3VmoMK6YbjhQQB.jSKWGqesA1lzZgBaDUf_xKWQqXh1g _uKYs0H4K7C1NMrAqqKdXS4h0VA7aJ2R3SJO0wxZ_t8i7tevBQEGzJiNf.XcdX6iyNDfelPgFgyY wmhZeNAvCyTXzZaLhOiFNMU_MK1AaX4XmQw7TptSud58q7xojV_E_jBnmvQ6yQeB9_W_FH5IZ0rC DeUMRG5AoUp4p6AiBUuLe3BZeUcEkN.3Dkbv6Amx0hYxhxPDery8rcGrPYHOUF46QfpENHeMybzM zksBR_Wc1Z1v1i3m4FAgABTXvmEUhTHOr6n62diqoXtk4U.93gkVlkMRpANJlspJov724_akk3yX cZDzGirG00Q.gzAJvWsnJKxI5pvz.3APifqd.wSNcHG.7vhVvg4nMlXb6oLTLFKk6Sarbnd_Gn7B Xym07QnbMTDM1Pg7Pl7tigHwfe9SbtyMUbEVqmWEEpJcNjxnoHdQdoYaMC4ttkXH.3WLOBzxwTlk GFImVOx2tupLExGXVQ_h.G9OM5B8bupXu6jKAx9Y1sbJh_.OGNi5rnGZPdJi4dD.tIjyr_tHPxzt KDYyaiT_p5XaPw.h9Rr3.TMmMgFMkEoOE5ScK9XpdBL5z9Uc.IsRRlBo33OGLqTfrCF9ET5HakEs LcBXJVqKhTI6we2oyUU.pGuahCKrECKU9ZzZuGKRWHOUOdutS9i1tfljLJkyvMj6IXuWuCrDcZ62 m8Hb.kCfQSrZzlOHFyjb38LYVj6iSQZLVXJ7_QRp5M67_X9YVIlLmxSnIldN5C7cTCCpgczp3Suq 8Kngd1EFh5RjOKvtkZKWQn4oDP0RsIX3aLx_yyJP8m9DPLy5145ACznRmi3d8y1NwzhOcbYhYMtG jC0_.J.PQw8VAHTLXkU5DMe4LETek1974KVnroVN31vYFSuxVbl1Uac4mYcnzPCHKL2sbDaDrGj5 ZAYRugC5FIrXtzzBoDpAzaOocHGX.IjzwRE5bN6uW7jxuHQJu45azshhi4kCPjcAM6xcgSPz4Jcu lEYQ9jlKq8AqJPNoZHYtSduzeQY_2nuOfctsMkHOkgxDjlf_5KK6sR97U6J2Tg8U68mUcTn5tj5e oeoGH4vR_.Y9KwVnyl0xB8Z4rN9x22Wt8LRYZraytbp76wDXBIWVI.w41cEXHBeh2mTYCi6MZUSY 5xYG.lUxzOTrDAWG765xuHlI3jHtExotCl7.EjSu3Zu7daiQIPnUsautJB.YZFHj3f9j0Agk3XHl P__LIgbwZz4NwZqs0.NqbyeQK2RrVt4da2SdadTbcLX1DVEpqIKw80Fp76RceveEKeeZJIIoP63F U1P2bGfLN6ArdViBuet7D.pkPMZ6xI5Pdkb3M9QoeXoOhccoM20a_CJgT8omAye2c4JMRVLdAsBW 11fz2vKL1RrN2VwNwfMyPjpb3Tijuzpb8wDLr4I0gJVzh0ZfkYt8NhOFa7i5kcym7BKoR5JS_jdl gnnEB.UOatbYtnpT2WrXggM_QAC8tJq7_lSN75NXOFg_5BwO6H2Yjf4Cn33LcIfux7TVIKT8KrfO sBfVr5FILP3uxdkNuw4QwnCjgLVqidHw.X0HxNhykI3RDfsl9ed0NbpX89OD1XzcS1KLlZXwNU6H T0XTFtDoNGDDUgQVho8kRKtm0RjtEwtyvioIpaWnMFBjr_ht4nil9pQa2w8ZfyRJEiJU2HKTTAmE neFLdTFQZBSEYPgzcDatUAuM.vaURE5A4Qj8DuOL1r4asS6yOfDVSpjcfGxUAjGKCNYg_7guDl8F x1LthxYSB46Jovu0xw_WAamxK1hN_yCBTkzgpbGgWNBmi8RM0vH7yYnyJkHDsaV1w8VXFO38AfpG mS4dEClTWYBsbXsrFhSp.HUAzgPtV41_DUBojiY1GAcsEsnkJa22VfZc7QlgawsMHjQJXHwjsRd4 WJmFVM0QtOYv7XC7_1jBrxr6S.CF3j4PIj68Gn0Us9fosz.d.QY3ZCPVzRmKsBHD.C567QrUbi5J Kog-- X-Sonic-MF: X-Sonic-ID: 103194d5-dd02-4d03-b8d2-676a467ade0d Received: from sonic.gate.mail.ne1.yahoo.com by sonic307.consmr.mail.gq1.yahoo.com with HTTP; Wed, 17 Jan 2024 20:25:11 +0000 Received: by hermes--production-gq1-78d49cd6df-5s2z2 (Yahoo Inc. Hermes SMTP Server) with ESMTPA ID 285ad6fec2dd87b3f94e05d4bae14ba8; Wed, 17 Jan 2024 20:25:04 +0000 (UTC) Content-Type: text/plain; charset=us-ascii List-Id: Porting FreeBSD to ARM processors List-Archive: https://lists.freebsd.org/archives/freebsd-arm List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-arm@freebsd.org Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3774.300.61.1.2\)) Subject: Re: sshd signal 11 on -current From: Mark Millard In-Reply-To: Date: Wed, 17 Jan 2024 12:24:53 -0800 Cc: freebsd-arm@freebsd.org Content-Transfer-Encoding: quoted-printable Message-Id: References: <7EF12F55-70E4-4780-BF73-3C7B963C3781@yahoo.com> To: bob prohaska X-Mailer: Apple Mail (2.3774.300.61.1.2) X-Rspamd-Queue-Id: 4TFcnP5Qcdz4qt8 X-Spamd-Bar: ---- X-Rspamd-Pre-Result: action=no action; module=replies; Message is reply to one we originated X-Spamd-Result: default: False [-4.00 / 15.00]; REPLY(-4.00)[]; ASN(0.00)[asn:36647, ipnet:98.137.64.0/20, country:US] On Jan 17, 2024, at 11:55, bob prohaska wrote: >=20 > On Wed, Jan 17, 2024 at 09:34:28AM -0800, Mark Millard wrote: >> On Jan 17, 2024, at 08:00, bob prohaska wrote: >>=20 >>> A Pi4 running -current reported: >>>=20 >>> Jan 13 16:23:10 nemesis kernel: pid 53604 (sshd), jid 0, uid 22: = exited on signal 11 (no core dump - bad address) >>> repeatedly. >>=20 >> I assume that the pid changed from message to message, in addition >> to the time but the rest of each message text matched exactly. >>=20 >=20 > I've put a copy of the relevant lines from nemesis's /var/log/messages > at http://www.zefox.net/~fbsd/tiptrouble/sshfaults.log >=20 >=20 >>> There's no obvious disruption of operation, existing >>> ssh connections seem undisturbed. >>=20 >=20 > I'll take that statement back. The host ns2.zefox.net > crashed and rebooted while I was writing this note. >=20 > After logging back in to ns2.zefox.net the session was again > terminated by a "Corrupted MAC on input message: >=20 > Last login: Wed Jan 17 11:28:45 2024 from nemesis.zefox.com > FreeBSD 12.4-STABLE r373269 GENERIC=20 >=20 > Welcome to FreeBSD! >=20 > Release Notes, Errata: https://www.FreeBSD.org/releases/ > Security Advisories: https://www.FreeBSD.org/security/ > FreeBSD Handbook: https://www.FreeBSD.org/handbook/ > FreeBSD FAQ: https://www.FreeBSD.org/faq/ > Questions List: = https://lists.FreeBSD.org/mailman/listinfo/freebsd-questions/ > FreeBSD Forums: https://forums.FreeBSD.org/ >=20 > Documents installed with the system are in the = /usr/local/share/doc/freebsd/ > directory, or can be installed later with: pkg install en-freebsd-doc > For other languages, replace "en" with a language code like de or fr. >=20 > Show the version of FreeBSD installed: freebsd-version ; uname -a > Please include that output and any error messages when posting = questions. > Introduction to manual pages: man man > FreeBSD directory layout: man hier >=20 > Edit /etc/motd to change this login announcement. > To change an environment variable in tcsh you use: setenv NAME "value" > where NAME is the name of the variable and "value" its new value. > bob@ns2:~ % uptime > 11:30AM up 21 mins, 1 user, load averages: 0.00, 0.00, 0.00 > bob@ns2:~ % grep -i ssh /var/log/messages > Jan 1 00:38:20 ns2 sshd[8068]: error: = Fssh_kex_exchange_identification: Connection closed by remote host > Jan 1 01:04:47 ns2 sshd[8182]: error: = Fssh_kex_exchange_identification: Connection closed by remote host > Jan 1 01:49:21 ns2 sshd[8242]: error: PAM: Authentication error for = illegal user info from 185.11.61.234 > Jan 1 02:19:41 ns2 sshd[8292]: error: PAM: Authentication error for = illegal user cromados from 85.209.11.226 > Jan 1 02:26:04 ns2 sshd[8308]: error: = Fssh_kex_exchange_identification: Connection closed by remote host > Jan 1 03:09:31 ns2 sshd[8623]: error: = Fssh_kex_exchange_identification: Connection closed by remote host > Corrupted MAC on input. > ssh_dispatch_run_fatal: Connection to 50.1.20.30 port 22: message = authentication code incorrect > bob@raspberrypi:~ $=20 >=20 >=20 > It's very curious that logging back in to ns2.zefox.net goes=20 > without error, but attempts to look at /var/log/messages > simply repeats the "corrupted MAC..." message with ssh disconnection: >=20 > Last login: Wed Jan 17 11:41:19 2024 from gateway.zefox.net > FreeBSD 12.4-STABLE r373269 GENERIC=20 >=20 > Welcome to FreeBSD! >=20 > Release Notes, Errata: https://www.FreeBSD.org/releases/ > Security Advisories: https://www.FreeBSD.org/security/ > FreeBSD Handbook: https://www.FreeBSD.org/handbook/ > FreeBSD FAQ: https://www.FreeBSD.org/faq/ > Questions List: = https://lists.FreeBSD.org/mailman/listinfo/freebsd-questions/ > FreeBSD Forums: https://forums.FreeBSD.org/ >=20 > Documents installed with the system are in the = /usr/local/share/doc/freebsd/ > directory, or can be installed later with: pkg install en-freebsd-doc > For other languages, replace "en" with a language code like de or fr. >=20 > Show the version of FreeBSD installed: freebsd-version ; uname -a > Please include that output and any error messages when posting = questions. > Introduction to manual pages: man man > FreeBSD directory layout: man hier >=20 > Edit /etc/motd to change this login announcement. > When using ZFS as the file system the "df" command is reporting the = pool size > and not file system sizes. It also does not know about descendent ZFS > datasets, snapshots, quotas, and reservations with their individual = space usage.=20 > Use the built-in "zfs list" command to get a better overview of space = usage: >=20 > zfs list -o space >=20 > -- Benedict Reuschling > bob@ns2:~ % more /var/log/messages > Corrupted MAC on input. > ssh_dispatch_run_fatal: Connection to 50.1.20.30 port 22: message = authentication code incorrect >=20 > bob@raspberrypi:~ $=20 >=20 > Despite this ns2.zefox.net still answers queries sent via > nslookup: >=20 > bob@raspberrypi:~ $ nslookup >> server ns2.zefox.net > Default server: ns2.zefox.net > Address: 50.1.20.30#53 >> www.zefox.org > Server: ns2.zefox.net > Address: 50.1.20.30#53 >=20 > Name: www.zefox.org > Address: 50.1.20.28 >> www.zefox.net > Server: ns2.zefox.net > Address: 50.1.20.30#53 >=20 > Name: www.zefox.net > Address: 50.1.20.27 >=20 > Outwardly, ns2.zefox.net appears to work as intended.=20 >=20 Does connecting to ns2.zefox.net from the Mac workstation also end up seeing "Corrupted MAC on input" eventually when you then look at /various/log/messages somehow (more, grep, . . .)? Does connecting to ns2.zefox.net from "pi4 RasPiOS workstation" also end up seeing "Corrupted MAC on input" eventually? Does connecting to ns2.zefox.net from "gateway.zefox.net" also end up seeing "Corrupted MAC on input" eventually? Does connecting to ns2.zefox.net from "ns1.zefox.net" also end up seeing "Corrupted MAC on input" eventually? . . . Does connecting to ns2.zefox.net from "www.zefox.org" also end up seeing "Corrupted MAC on input" eventually? Which see the problem and which do not (if any)? I'm not claiming answering the questions are easy. =3D=3D=3D Mark Millard marklmi at yahoo.com