[已破案] XDR 6088 CPU 一个核心永远 100% 跑满

je***

最近在排查别的问题，意外发现路由器的 CPU 永远都有一个核心跑满 100%，即便网速 0 也有一个核心 100%

每几秒种会轮换一次，反正总有一个是 100%




如果你们想复现，可以装个在 docker 装个空白 linux 镜像，安装 htop 然后查看。docker 默认共享 CPU 内存的，所以 docker 里显示多少实际就是多少。但是 TP 限制 docker 挂载系统目录，看不到具体进程。

top 命令只会显示 16% 左右的一个整体占用，万万没想到 16% 意思是一个核心永远被占满。。

话说有没有什么办法直接 ssh 登录到路由器，然后抓到是哪个进程在跑 CPU，固件版本是官方版 1.0.28

-------------第二次更新----------------

按照网上的反弹shell教程，获取了 root权限，然后从 https://downloads.openwrt.org/sn ... ortex-a53/packages/ 下载了 htop 包并且安装成功



抓出来了占用 CPU 的真凶是 dms 进程。但是他具体是个啥，就只有鬼知道了。


---
更新：

经过好心人私信提醒，可能是因为 LED 指示灯开关导致的，不过我已经刷了OpenWRT，没办法再复现了

iamy***

我用OP是自己改了核心调度和进程级别。没这问题

je***

iamyangyi 发表于 2024-2-17 16:50
我用OP是自己改了核心调度和进程级别。没这问题

我也开始犹豫要不要刷OP了，感觉网上大家说的对，TP就适合做个AP，固件做的一堆毛病

btw，我刚更新了下帖子，拿到root权限，也抓到进程名字了，大佬看看熟不熟悉这个进程

iamy***

DMS看起来应是TP的DOCKER进程吧.我猜叫 docker manager system

je***

iamyangyi 发表于 2024-2-17 17:41
DMS看起来应是TP的DOCKER进程吧.我猜叫 docker manager system

谢谢大佬。我刚直接 ./dms 运行了下 感觉是个很底层的服务，都涉及到网络初始化，dhcp了

1. root@(mt7986):/bin# dms
   
2. root@(mt7986):/bin#     mcbAlignFromPool(235). Fail to alloc 552000 bytes from mcb Generic, alloc from heap [<0x7f823ae020>].
   
3.     mcbAlignFromPool(235). Fail to alloc 883200 bytes from mcb Generic, alloc from heap [<0x7f8235d020>].
   
4.     mcbAlignFromPool(235). Fail to alloc 1214400 bytes from mcb Generic, alloc from heap [<0x7f8230c020>].
   
5.     systemLoadSysmode(753). get workform 0
   
6.     systemLoadSysmode(761). get mngt_mode 0, work_mode 0, controller_detect_mode 0
   
7. control socket bind setSock error
   
8.     gpioRequest(203). ERROR: request gpio 8 failed
   
9.     initGmacPortInfo(304). gmac0 include port0,  support switch
   
10.     initGmacPortInfo(304). gmac0 include port1,  support switch
    
11.     initGmacPortInfo(304). gmac0 include port2,  support switch
    
12.     initGmacPortInfo(304). gmac0 include port3,  support switch
    
13.     initGmacPortInfo(304). gmac0 include port4,  support switch
    
14.     initGmacPortInfo(304). gmac1 include port5, no support switch
    
15.     gpioRequest(203). ERROR: request gpio 7 failed
    
16. ### dhcp event command register. ###
    
17. ### dhcpv6 event command register. ###
    
18.     gpioRequest(203). ERROR: request gpio 12 failed
    
19. iptables: Chain already exists.
    
20. <WARN> ipt cmd failed: iptables -t filter -N INPUT_NOT_LAN_TO_WAN, 256
    
21. iptables: Chain already exists.
    
22. <WARN> ipt cmd failed: iptables -t filter -N INPUT_ICMP_TO_WAN, 256
    
23. iptables: Chain already exists.
    
24. <WARN> ipt cmd failed: iptables -t filter -N INPUT_ICMP_TO_WAN_IF, 256
    
25. iptables: Chain already exists.
    
26. <WARN> ipt cmd failed: iptables -t filter -N INPUT_DHCP_V4, 256
    
27. ip6tables: Chain already exists.
    
28. <WARN> ipt cmd failed: ip6tables -t filter -N INPUT_WAN_LOCAL_V6, 256
    
29. ip6tables: Chain already exists.
    
30. <WARN> ipt cmd failed: ip6tables -t filter -N INPUT_WAN_GLOBAL_V6, 256
    
31. ip6tables: Chain already exists.
    
32. <WARN> ipt cmd failed: ip6tables -t filter -N INPUT_WAN_LOCAL_IF_V6, 256
    
33. ip6tables: Chain already exists.
    
34. <WARN> ipt cmd failed: ip6tables -t filter -N INPUT_WAN_GLOBAL_IF_V6, 256
    
35. ip6tables: Chain already exists.
    
36. <WARN> ipt cmd failed: ip6tables -t filter -N INPUT_WAN_STATIC_IF_V6, 256
    
37. ip6tables: Chain already exists.
    
38. <WARN> ipt cmd failed: ip6tables -t filter -N INPUT_DHCP_V6, 256
    
39. ip6tables: Chain already exists.
    
40. <WARN> ipt cmd failed: ip6tables -t filter -N INPUT_DHCP_STATIC_V6, 256
    
41. iptables: Chain already exists.
    
42. <WARN> ipt cmd failed: iptables -t nat -N PREROUTING_DHCP_BROAD, 256
    
43. iptables: Chain already exists.
    
44. <WARN> ipt cmd failed: iptables -t nat -N POSTROUTING_WAN_IF, 256
    
45. iptables: Chain already exists.
    
46. <WARN> ipt cmd failed: iptables -t nat -N POSTROUTING_SNAT_WAN, 256
    
47. iptables: Chain already exists.
    
48. <WARN> ipt cmd failed: iptables -t nat -N POSTROUTING_WAN_STATIC_IF, 256
    
49. ip6tables: Chain already exists.
    
50. <WARN> ipt cmd failed: ip6tables -t nat -N POSTROUTING_WAN_IF_V6, 256
    
51. ip6tables: Chain already exists.
    
52. <WARN> ipt cmd failed: ip6tables -t nat -N POSTROUTING_WAN_STATIC_IF_V6, 256
    
53.     checkOrResetFactoryInfo(988). Factory Info verified
    
54.     init_sock(173). socket bind error, Address in use(98).
    
55.     insertModuleDependant(186). Kmod igmp_proxy_snooping exist, try to remove it
    
56.     removeModuleNested(276). Removing module igmp_proxy_snooping...
    
57. statsService init
    
58. RTNETLINK answers: File exists
    
59. .policy_rule_mark ADD failed ret = [netlink talk failed]
    
60. RTNETLINK answers: File exists
    
61. policy_rule_mark ADD failed ret = [netlink talk failed]
    
62. RTNETLINK answers: File exists
    
63. policy_rule_mark ADD failed ret = [netlink talk failed]
    
64. RTNETLINK answers: File exists
    
65. policy_rule_mark ADD failed ret = [netlink talk failed]
    
66. [relay_mode_config_notify:42] sysModeGetWorkMode: 0
    
67. [relay_mode_config_notify:42] sysModeGetWorkMode: 0
    
68. [wanPortDetectCheckAllLan:113] sysModeGetWorkMode: 0
    
69.     deviceInfoInit(975). softver:1.0.28 Build 231028 Rel.25584
    
70. 
    
71. root@(mt7986):/bin#     br_scan_ifaces(47). Scanning bridge netif...
    
72.     topology_init_self_device(4554). init mesh group id: [aa:bb:cc:dd:ee:ff]
    
73.     autoconf_business_init(2064). init wlan_dev_num:0
    
74. 
    
75.     autoconf_business_init(2064). init wlan_dev_num:1
    
76. 
    
77. init wss module.
    
78.     event_sock_enable(1204). enabled netlink socket at 23 with own pid 10285
    
79. 
    
80.     jsonObjectToFile(290). Trying to commit to flash...
    
81.     portManageLoadConfigToDevWithMode(4854). load config to dev aa:bb:cc:dd:ee:ff
    
82.     loadMwanConfigToDev(3128). mwan 1 is close
    
83.     loadMwanConfigToDev(3128). mwan 2 is close
    
84.     loadIptvConfigToDev(3561). cap sub func 3c
    
85.     loadIptvConfigToDev(3568). load iptv to dev aa:bb:cc:dd:ee:ff
    
86. [portManageInit:6273] sysModeGetWorkMode: 0
    
87.     mt7986_addSlaveDevtoWan(312). No WAN to NEW WAN: new wan index: 1
    
88.     system_vdev_delif(802). Sys del virtual wan if failed:Invalid argument
    
89.     system_vdev_addif(776). Sys add virtual wan failed:Resource busy
    
90.     system_bridge_addif(842). Sys add bridge failed:Resource busy
    
91.     optimizeOneFile(1054). Rules Optimized: 619
    
92. 
    
93.     optimizeOneFile(1055). Rules Unoptimized: 43
    
94. 
    
95. [<cloud_relay_client/dms>:<cloud_relay_client/iccCtl()/465>] local->1/1024, cmd 0x40004926, sendlen 4, iccctl_ret 0
    
96. [<cloud_relay_client/dms>:<cloud_relay_client/iccCtl()/465>] local->1/1024, cmd 0x40004921, sendlen 16, iccctl_ret 0
    
97. lanv6LocalIpv6: fe80::6eb1:58ff:fee0:cc1c
    
98.     insertModuleDependant(186). Kmod arp_filter exist, try to remove it
    
99.     removeModuleNested(276). Removing module arp_filter...
    
100.     insertModuleDependant(186). Kmod dn_login exist, try to remove it
     
101.     removeModuleNested(276). Removing module dn_login...
     
102.     dnsProxyParamInit(196). priDnsStr = 223.6.6.6,223.6.6.6, sndDnsStr = 0.0.0.0,0.0.0.0
     
103.     dnsProxyParamInit(238). priDns6Str = 240c::6666,240c::6666, sndDns6Str = ::,::
     
104.     dnsProxyParamInit(196). priDnsStr = 223.6.6.6,223.6.6.6, sndDnsStr = 0.0.0.0,0.0.0.0
     
105.     dnsProxyParamInit(238). priDns6Str = 240c::6666,240c::6666, sndDns6Str = ::,::
     
106.     insertModuleDependant(186). Kmod dns_proxy exist, try to remove it
     
107.     removeModuleNested(276). Removing module dns_proxy...
     
108.     devDiscoveryStart(616). Regist devDiscover socket error.
     
109. 
     
110. [lanDhcpcInit:1676] sysModeGetWorkMode: 0
     
111. [dhcpsParamsUpdate:1328] sysModeGetWorkMode: 0
     
112. 1
     
113. 1
     
114.     firewallCtxInit(560). /network/wan_status/wan_status
     
115.     firewallCtxInit(560). /network/wan_status_2/wan_status_2
     
116. iptables: Chain already exists.
     
117. <WARN> ipt cmd failed: iptables -t filter -N BM_INTERNET_ALLOW, 256
     
118. iptables: Chain already exists.
     
119. <WARN> ipt cmd failed: iptables -t filter -N BM_INTERNET_DURATION, 256
     
120. iptables: Chain already exists.
     
121. <WARN> ipt cmd failed: iptables -t filter -N BM_APP_DURATION, 256
     
122. iptables: Chain already exists.
     
123. <WARN> ipt cmd failed: iptables -t filter -N BM_APP_TIMESTAMP, 256
     
124. iptables: Chain already exists.
     
125. <WARN> ipt cmd failed: iptables -t filter -N BM_APP_STATISTICS, 256
     
126. iptables: Chain already exists.
     
127. <WARN> ipt cmd failed: iptables -t filter -N BM_APPDIST, 256
     
128. iptables: Chain already exists.
     
129. <WARN> ipt cmd failed: iptables -t filter -N BM_WEBFILTER, 256
     
130. iptables: Chain already exists.
     
131. <WARN> ipt cmd failed: iptables -t filter -N BM_WEB_DNS, 256
     
132. iptables: Chain already exists.
     
133. <WARN> ipt cmd failed: iptables -t filter -N BM_WEBSEC, 256
     
134. iptables: Chain already exists.
     
135. <WARN> ipt cmd failed: iptables -t filter -N FORWARD_DMZ, 256
     
136. iptables: Chain already exists.
     
137. <WARN> ipt cmd failed: iptables -t nat -N PREROUTING_DMZ, 256
     
138. ip6tables: Chain already exists.
     
139. <WARN> ipt cmd failed: ip6tables -t filter -N FORWARD_DMZ_V6, 256
     
140. ip6tables: Chain already exists.
     
141. <WARN> ipt cmd failed: ip6tables -t nat -N PREROUTING_DMZ_V6, 256
     
142. iptables: Chain already exists.
     
143. <WARN> ipt cmd failed: iptables -t filter -N INPUT_HOSTFORBID, 256
     
144. ip6tables: Chain already exists.
     
145. <WARN> ipt cmd failed: ip6tables -t filter -N INPUT_HOSTFORBID, 256
     
146. iptables: Chain already exists.
     
147. <WARN> ipt cmd failed: iptables -t filter -N FORWARD_HOSTFORBID, 256
     
148. ip6tables: Chain already exists.
     
149. <WARN> ipt cmd failed: ip6tables -t filter -N FORWARD_HOSTFORBID, 256
     
150. iptables: Chain already exists.
     
151. <WARN> ipt cmd failed: iptables -t filter -N INPUT_LANWEB, 256
     
152. ip6tables: Chain already exists.
     
153. <WARN> ipt cmd failed: ip6tables -t filter -N INPUT_LANWEB, 256
     
154. iptables: Chain already exists.
     
155. <WARN> ipt cmd failed: iptables -t filter -N FORWARD_UPNP, 256
     
156. iptables: Chain already exists.
     
157. <WARN> ipt cmd failed: iptables -t filter -N FORWARD_UPNP_WAN, 256
     
158. iptables: Chain already exists.
     
159. <WARN> ipt cmd failed: iptables -t nat -N PREROUTING_UPNP, 256
     
160. ip6tables: Chain already exists.
     
161. <WARN> ipt cmd failed: ip6tables -t filter -N FORWARD_UPNP_V6, 256
     
162. ip6tables: Chain already exists.
     
163. <WARN> ipt cmd failed: ip6tables -t filter -N FORWARD_UPNP_WAN_V6, 256
     
164. ip6tables: Chain already exists.
     
165. <WARN> ipt cmd failed: ip6tables -t nat -N PREROUTING_UPNP_V6, 256
     
166. iptables: Chain already exists.
     
167. <WARN> ipt cmd failed: iptables -t filter -N FORWARD_VS, 256
     
168. iptables: Chain already exists.
     
169. <WARN> ipt cmd failed: iptables -t nat -N PREROUTING_VS, 256
     
170. ip6tables: Chain already exists.
     
171. <WARN> ipt cmd failed: ip6tables -t filter -N FORWARD_VS_V6, 256
     
172. ip6tables: Chain already exists.
     
173. <WARN> ipt cmd failed: ip6tables -t nat -N PREROUTING_VS_V6, 256
     
174. iptables: Chain already exists.
     
175. <WARN> ipt cmd failed: iptables -t filter -N INPUT_virtual**, 256
     
176. iptables: Chain already exists.
     
177. <WARN> ipt cmd failed: iptables -t filter -N FORWARD_virtual**, 256
     
178. iptables: Chain already exists.
     
179. <WARN> ipt cmd failed: iptables -t nat -N POSTROUTING_virtual**, 256
     
180. ip6tables: Chain already exists.
     
181. <WARN> ipt cmd failed: ip6tables -t filter -N FORWARD_IPV6_FIREWALL_SWITCH, 256
     
182. iptables: Chain already exists.
     
183. <WARN> ipt cmd failed: iptables -t filter -N FORWARD_SETMARK, 256
     
184. ip6tables: Chain already exists.
     
185. <WARN> ipt cmd failed: ip6tables -t filter -N FORWARD_SETMARK, 256
     
186.     updateChainInputIcmpToWanIf(222). enter icmp to wanif
     
187. iptables: Chain already exists.
     
188. <WARN> ipt cmd failed: iptables -t filter -N BM_WEBSEC_DOWNLOAD, 256
     
189. iptables: Chain already exists.
     
190. <WARN> ipt cmd failed: iptables -t filter -N BM_WEBSEC_SUBMIT, 256
     
191. ip6tables: No chain/target/match by that name.
     
192. <WARN> ipt cmd failed: ip6tables -w -t filter -F INPUT_virtual**, 256
     
193. ip6tables: No chain/target/match by that name.
     
194. <WARN> ipt cmd failed: ip6tables -w -t filter -F FORWARD_virtual**, 256
     
195. ip6tables: No chain/target/match by that name.
     
196. <WARN> ipt cmd failed: ip6tables -w -t nat -F POSTROUTING_virtual**, 256
     
197.     gpioRequest(203). ERROR: request gpio 9 failed
     
198. statsService start.
     
199. ===============DHCP_TIMEOUT=30
     
200. [wanStartIndex:4878] sysModeGetWorkMode:

复制代码