Bug 2118141

Summary: GnuTLS is crashing on Fedora 37 pre-release when doing an wget https, SIGILL at vzeroupper
Product: [Fedora] Fedora Reporter: Rui Ribeiro <ruyrybeyro>
Component: gnutlsAssignee: Red Hat Crypto Team <crypto-team>
Status: ASSIGNED --- QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: high Docs Contact:
Priority: medium    
Version: 38CC: ansasaki, crypto-team, dueno, fkrenzel, tm, zfridric
Target Milestone: ---Keywords: Triaged
Target Release: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Rui Ribeiro 2022-08-14 14:09:16 UTC 
Description of problem:

wget core dumping when doing https requests (wget http requests are okay, curl requests do not core dump). VMWare it runs ok, but it crashing when running Fedora 37 in a VM, Parallels 17 and 18.

$ wget https://www.cnn.com
--2022-08-14 00:22:10--  https://www.cnn.com/
Resolving www.cnn.com (www.cnn.com)... 151.101.127.5
Connecting to www.cnn.com (www.cnn.com)|151.101.127.5|:443... connected.
Illegal instruction (core dumped)

$ ltrace wget https://www.cnn.com
...........
memcpy(0x5574d9c3a990, "www.cnn.com\0", 12)      = 0x5574d9c3a990
strlen("www.cnn.com")                            = 11
gnutls_server_name_set(0x5574da9083b0, 1, 0x5574d9c3a990, 11) = 0
free(0x5574d9c3a990)                             = <void>
gnutls_credentials_set(0x5574da9083b0, 1, 0x5574d9c46a80, 0) = 0
gnutls_transport_set_ptr(0x5574da9083b0, 3, 0, 5) = 0
gnutls_set_default_priority(0x5574da9083b0, 0, 0x5574d9bd6340, 5) = 0
gnutls_session_enable_compatibility_mode(0x5574da9083b0, 0x5574d9cb0c30, 0x5000000, 45) = 257
fcntl(3, 3, 0, 45)                               = 2
fcntl(3, 4, 2050, 0x7f483827baa4)                = 0
gnutls_handshake(0x5574da9083b0, 4, 0, 0x7f483827baa4) = 0xffffffe4
gnutls_record_get_direction(0x5574da9083b0, 0x7f483834ece0, 0x5574da8dcf01, 0x4d00) = 0
__fdelt_chk(3, 1, 0x5574da8dcf01, 0)             = 0
select(4, 0x7fff3e41e980, 0, 0)                  = 1
gnutls_error_is_fatal(0xffffffe4, 0x7fff3e41e980, 0xd5a60, 0) = 0
gnutls_handshake(0x5574da9083b0, 0x7fff3e41e980, 0xd5a60, 0 <no return ...>
--- SIGILL (Illegal instruction) ---
+++ killed by SIGILL +++


Version-Release number of selected component (if applicable):

$ rpm -q -a | egrep "wget|gnutls"
gnutls-3.7.7-1.fc37.x86_64
wget-1.21.3-4.fc37.x86_64


How reproducible:

wget https://www.cnn.com  with Fedora 37 in a Mac running Intel Parallels 17 or 18

Steps to Reproduce:

wget with an https request when running Fedora 37 under Intel Parallels 17 or 18

Actual results:

$ wget https://www.cnn.com
--2022-08-14 00:22:10--  https://www.cnn.com/
Resolving www.cnn.com (www.cnn.com)... 151.101.127.5
Connecting to www.cnn.com (www.cnn.com)|151.101.127.5|:443... connected.
Illegal instruction (core dumped)


Additional info:


---> GnuTLS problem

$ ltrace wget https://www.cnn.com
...........
memcpy(0x5574d9c3a990, "www.cnn.com\0", 12)      = 0x5574d9c3a990
strlen("www.cnn.com")                            = 11
gnutls_server_name_set(0x5574da9083b0, 1, 0x5574d9c3a990, 11) = 0
free(0x5574d9c3a990)                             = <void>
gnutls_credentials_set(0x5574da9083b0, 1, 0x5574d9c46a80, 0) = 0
gnutls_transport_set_ptr(0x5574da9083b0, 3, 0, 5) = 0
gnutls_set_default_priority(0x5574da9083b0, 0, 0x5574d9bd6340, 5) = 0
gnutls_session_enable_compatibility_mode(0x5574da9083b0, 0x5574d9cb0c30, 0x5000000, 45) = 257
fcntl(3, 3, 0, 45)                               = 2
fcntl(3, 4, 2050, 0x7f483827baa4)                = 0
gnutls_handshake(0x5574da9083b0, 4, 0, 0x7f483827baa4) = 0xffffffe4
gnutls_record_get_direction(0x5574da9083b0, 0x7f483834ece0, 0x5574da8dcf01, 0x4d00) = 0
__fdelt_chk(3, 1, 0x5574da8dcf01, 0)             = 0
select(4, 0x7fff3e41e980, 0, 0)                  = 1
gnutls_error_is_fatal(0xffffffe4, 0x7fff3e41e980, 0xd5a60, 0) = 0
gnutls_handshake(0x5574da9083b0, 0x7fff3e41e980, 0xd5a60, 0 <no return ...>
--- SIGILL (Illegal instruction) ---
+++ killed by SIGILL +++


Fedora VM  running in Parallels 17 and 18 -  does not advertise AVX1/2

[root@fedora ~]# lscpu
Architecture:            x86_64
  CPU op-mode(s):        32-bit, 64-bit
  Address sizes:         36 bits physical, 48 bits virtual
  Byte Order:            Little Endian
CPU(s):                  4
  On-line CPU(s) list:   0-3
Vendor ID:               GenuineIntel
  BIOS Vendor ID:        GenuineIntel
  Model name:            Intel(R) Core(TM) i7-6820HQ CPU @ 2.70GHz
    BIOS Model name:       CPU @ 2.7GHz
    BIOS CPU family:     2
    CPU family:          6
    Model:               94
    Thread(s) per core:  1
    Core(s) per socket:  4
    Socket(s):           1
    Stepping:            3
    BogoMIPS:            5424.00
    Flags:               fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mc
                         a cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscal
                         l nx rdtscp lm constant_tsc nopl xtopology nonstop_tsc 
                         cpuid tsc_known_freq pni pclmulqdq ssse3 cx16 pcid sse4
                         _1 sse4_2 x2apic movbe popcnt tsc_deadline_timer aes f1
                         6c rdrand hypervisor lahf_lm abm 3dnowprefetch invpcid_
                         single pti fsgsbase tsc_adjust bmi1 smep bmi2 invpcid r
                         dseed adx smap clflushopt dtherm arat pln pts
Virtualization features: 
  Hypervisor vendor:     KVM
  Virtualization type:   full  
Caches (sum of all):     
  L1d:                   128 KiB (4 instances)
  L1i:                   128 KiB (4 instances)
  L2:                    1 MiB (4 instances)
  L3:                    8 MiB (1 instance)
NUMA:                    
  NUMA node(s):          1
  NUMA node0 CPU(s):     0-3
Vulnerabilities:         
  Itlb multihit:         KVM: Mitigation: VMX unsupported
  L1tf:                  Mitigation; PTE Inversion
  Mds:                   Vulnerable: Clear CPU buffers attempted, no microcode; 
                         SMT Host state unknown
  Meltdown:              Mitigation; PTI
  Mmio stale data:       Vulnerable: Clear CPU buffers attempted, no microcode; 
                         SMT Host state unknown
  Retbleed:              Vulnerable
  Spec store bypass:     Vulnerable
  Spectre v1:            Mitigation; usercopy/swapgs barriers and __user pointer
                         sanitization
  Spectre v2:            Mitigation; Retpolines, STIBP disabled, RSB filling
  Srbds:                 Unknown: Dependent on hypervisor status
  Tsx async abort:       Not affected


/proc/cpuinfo

[root@fedora ~]# cat /proc/cpuinfo
processor	: 0
vendor_id	: GenuineIntel
cpu family	: 6
model		: 94
model name	: Intel(R) Core(TM) i7-6820HQ CPU @ 2.70GHz
stepping	: 3
cpu MHz		: 2712.000
cache size	: 8192 KB
physical id	: 0
siblings	: 4
core id		: 0
cpu cores	: 4
apicid		: 0
initial apicid	: 0
fpu		: yes
fpu_exception	: yes
cpuid level	: 22
wp		: yes
flags		: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx rdtscp lm constant_tsc nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq ssse3 cx16 pcid sse4_1 sse4_2 x2apic movbe popcnt tsc_deadline_timer aes f16c rdrand hypervisor lahf_lm abm 3dnowprefetch invpcid_single pti fsgsbase tsc_adjust bmi1 smep bmi2 invpcid rdseed adx smap clflushopt dtherm arat pln pts
bugs		: cpu_meltdown spectre_v1 spectre_v2 spec_store_bypass l1tf mds swapgs itlb_multihit srbds mmio_stale_data retbleed
bogomips	: 5424.00
clflush size	: 64
cache_alignment	: 64
address sizes	: 36 bits physical, 48 bits virtual
power management:

processor	: 1
vendor_id	: GenuineIntel
cpu family	: 6
model		: 94
model name	: Intel(R) Core(TM) i7-6820HQ CPU @ 2.70GHz
stepping	: 3
cpu MHz		: 2712.000
cache size	: 8192 KB
physical id	: 0
siblings	: 4
core id		: 1
cpu cores	: 4
apicid		: 1
initial apicid	: 1
fpu		: yes
fpu_exception	: yes
cpuid level	: 22
wp		: yes
flags		: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx rdtscp lm constant_tsc nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq ssse3 cx16 pcid sse4_1 sse4_2 x2apic movbe popcnt tsc_deadline_timer aes f16c rdrand hypervisor lahf_lm abm 3dnowprefetch invpcid_single pti fsgsbase tsc_adjust bmi1 smep bmi2 invpcid rdseed adx smap clflushopt dtherm arat pln pts
bugs		: cpu_meltdown spectre_v1 spectre_v2 spec_store_bypass l1tf mds swapgs itlb_multihit srbds mmio_stale_data retbleed
bogomips	: 5424.00
clflush size	: 64
cache_alignment	: 64
address sizes	: 36 bits physical, 48 bits virtual
power management:

processor	: 2
vendor_id	: GenuineIntel
cpu family	: 6
model		: 94
model name	: Intel(R) Core(TM) i7-6820HQ CPU @ 2.70GHz
stepping	: 3
cpu MHz		: 2712.000
cache size	: 8192 KB
physical id	: 0
siblings	: 4
core id		: 2
cpu cores	: 4
apicid		: 2
initial apicid	: 2
fpu		: yes
fpu_exception	: yes
cpuid level	: 22
wp		: yes
flags		: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx rdtscp lm constant_tsc nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq ssse3 cx16 pcid sse4_1 sse4_2 x2apic movbe popcnt tsc_deadline_timer aes f16c rdrand hypervisor lahf_lm abm 3dnowprefetch invpcid_single pti fsgsbase tsc_adjust bmi1 smep bmi2 invpcid rdseed adx smap clflushopt dtherm arat pln pts
bugs		: cpu_meltdown spectre_v1 spectre_v2 spec_store_bypass l1tf mds swapgs itlb_multihit srbds mmio_stale_data retbleed
bogomips	: 5424.00
clflush size	: 64
cache_alignment	: 64
address sizes	: 36 bits physical, 48 bits virtual
power management:

processor	: 3
vendor_id	: GenuineIntel
cpu family	: 6
model		: 94
model name	: Intel(R) Core(TM) i7-6820HQ CPU @ 2.70GHz
stepping	: 3
cpu MHz		: 2712.000
cache size	: 8192 KB
physical id	: 0
siblings	: 4
core id		: 3
cpu cores	: 4
apicid		: 3
initial apicid	: 3
fpu		: yes
fpu_exception	: yes
cpuid level	: 22
wp		: yes
flags		: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ss ht syscall nx rdtscp lm constant_tsc nopl xtopology nonstop_tsc cpuid tsc_known_freq pni pclmulqdq ssse3 cx16 pcid sse4_1 sse4_2 x2apic movbe popcnt tsc_deadline_timer aes f16c rdrand hypervisor lahf_lm abm 3dnowprefetch invpcid_single pti fsgsbase tsc_adjust bmi1 smep bmi2 invpcid rdseed adx smap clflushopt dtherm arat pln pts
bugs		: cpu_meltdown spectre_v1 spectre_v2 spec_store_bypass l1tf mds swapgs itlb_multihit srbds mmio_stale_data retbleed
bogomips	: 5424.00
clflush size	: 64
cache_alignment	: 64
address sizes	: 36 bits physical, 48 bits virtual
power management:


Host i7 Macbook Pro late 2016. AXV1, No AVX2

% sysctl -a | grep machdep.cpu.featuresmachdep.cpu.features: FPU VME DE PSE TSC MSR PAE MCE CX8 APIC SEP MTRR PGE MCA CMOV PAT PSE36 CLFSH DS ACPI MMX FXSR SSE SSE2 SS HTT TM PBE SSE3 PCLMULQDQ DTES64 MON DSCPL VMX SMX EST TM2 SSSE3 FMA CX16 TPR PDCM SSE4.1 SSE4.2 x2APIC MOVBE POPCNT AES PCID XSAVE OSXSAVE SEGLIM64 TSCTMR AVX1.0 RDRAND F16C


SIGILL at vzeroupper, Full gdb backtrace:

[root@fedora ~]# gdb -ex=r --args wget https://www.cnn.com
GNU gdb (GDB) Fedora 12.1-4.fc37
Copyright (C) 2022 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.
Type "show copying" and "show warranty" for details.
This GDB was configured as "x86_64-redhat-linux-gnu".
Type "show configuration" for configuration details.
For bug reporting instructions, please see:
<https://www.gnu.org/software/gdb/bugs/>.
Find the GDB manual and other documentation resources online at:
    <http://www.gnu.org/software/gdb/documentation/>.

For help, type "help".
Type "apropos word" to search for commands related to "word"...
Reading symbols from wget...
Reading symbols from /usr/lib/debug/usr/bin/wget-1.21.3-4.fc37.x86_64.debug...
Starting program: /usr/bin/wget https://www.cnn.com
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib64/libthread_db.so.1".
--2022-08-14 00:54:33--  https://www.cnn.com/
Resolving www.cnn.com (www.cnn.com)... 151.101.127.5
Connecting to www.cnn.com (www.cnn.com)|151.101.127.5|:443... connected.

Program received signal SIGILL, Illegal instruction.
0x00007ffff7dc168a in sha512_block_data_order_avx2 () from /lib64/libgnutls.so.30
(gdb)  x/i 0x00007ffff7dc168a168a
=> 0x7ffff7dc168a <sha512_block_data_order_avx2+74>:	vzeroupper 
(gdb) bt full
#0  0x00007ffff7dc168a in sha512_block_data_order_avx2 () from /lib64/libgnutls.so.30
No symbol table info available.
#1  0x00007ffff7db48a2 in x86_sha512_update (ctx=0x7fffffffcb90, length=128, 
    data=0x7fffffffca90 '\\' <repeats 128 times>, "0\177\024VUU") at sha-x86-ssse3.c:215
        octx = {h = {14680500436340154072, 7105036623409894663, 10473403895298186519, 
            1526699215303891257, 7436329637833083697, 10282925794625328401, 
            15784041429090275239, 5167115440072839076}, Nl = 1, Nh = 93825006243152, u = {d = {
              17856615494224707584, 6209326166487105535, 21845, 4294967296, 
              17860264794792132608, 14740327792639, 17179869184, 18446687655019184127, 
              18446687517580230655, 18446687929897091071, 18446687861177614335, 
              18446687380141277183, 18446688067336044543, 18446687998616567807, 
              17766886347441733631, 18008653916}, 
            p = "\000\000\000\000/q\317\367\377\177\000\000@\365+VUU\000\000\000\000\000\000\000\000\000\000\001\000\000\000\000\000\000\000\064h\334\367\377\177\000\000h\r\000\000\000\000\000\000\004\000\000\000\377\177\000\000\260\314\377\377\377\177\000\000\220\314\377\377\377\177\000\000\360\314\377\377\377\177\000\000\340\314\377\377\377\177\000\000p\314\377\377\377\177\000\000\020\315\377\377\377\177\000\000\000\315\377\377\377\177\000\000\000\251\220\366\\@f1\004\000\000"}, num = 0, md_len = 0}
        res = 0
        t2 = 1
        i = <optimized out>
#2  0x00007ffff7eb1fdb in nettle_hmac_set_key (outer=<optimized out>, inner=0x7fffffffcc68, 
    state=<optimized out>, hash=0x7ffff7e83640 <x86_sha384>, key_length=0, 
    key=0x7ffff7df4ea3 "") at /usr/src/debug/nettle-3.8-2.fc37.x86_64/hmac.c:83
        pad = 0x7fffffffca90 '\\' <repeats 128 times>, "0\177\024VUU"
        __PRETTY_FUNCTION__ = "nettle_hmac_set_key"
#3  0x00007ffff7db26aa in wrap_x86_hmac_fast (algo=<optimized out>, nonce=<optimized out>, 
    nonce_size=<optimized out>, key=0x7ffff7df4ea3, key_size=0, text=0x7fffffffcf30, 
    text_size=48, digest=0x5555562bfae0) at hmac-x86-ssse3.c:297
        ctx = {ctx = {sha1 = {outer = {state = {3238371032, 3418070365, 914150663, 1654270250, 
                  812702999}, count = 1526699215303891257, index = 4290775857, 
                block = "g&3g\021\025Xh\207J\264\216\247\217\371d\r.\fۤO\372\276\035H\265G", '\000' <repeats 24 times>, "/q\317\367\377\177\000\000@\365+V"}, inner = {state = {0, 0, 1, 0, 
--Type <RET> for more, q to quit, c to continue without paging--c
              4158416948}, count = 3432, index = 4, block = "\377\177\000\000\260\314\377\377\377\177\000\000\220\314\377\377\377\177\000\000\360\314\377\377\377\177\000\000\340\314\377\377\377\177\000\000p\314\377\377\377\177\000\000\020\315\377\377\377\177\000\000\000\315\377\377\377\177\000\000\000\251\220", <incomplete sequence \366>}, state = {state = {4, 21845, 3238371032, 3418070365, 914150663}, count = 10473403895298186519, index = 4144912697, block = "\330\354/\025\061\v\300\377g&3g\021\025Xh\207J\264\216\247\217\371d\r.\fۤO\372\276\035H\265G", '\000' <repeats 27 times>}}, sha224 = {outer = {state = {3238371032, 3418070365, 914150663, 1654270250, 812702999, 2438529370, 4144912697, 355462360}, count = 7436329637833083697, index = 1750603025, block = "\207J\264\216\247\217\371d\r.\fۤO\372\276\035H\265G", '\000' <repeats 24 times>, "/q\317\367\377\177\000\000@\365+VUU\000\000\000\000\000"}, inner = {state = {1, 0, 4158416948, 32767, 3432, 0, 4, 32767}, count = 140737488342192, index = 4294954128, block = "\377\177\000\000\360\314\377\377\377\177\000\000\340\314\377\377\377\177\000\000p\314\377\377\377\177\000\000\020\315\377\377\377\177\000\000\000\315\377\377\377\177\000\000\000\251\220\366\\@f1\004\000\000\000UU\000\000؞\005\301"}, state = {state = {914150663, 1654270250, 812702999, 2438529370, 4144912697, 355462360, 4290775857, 1731405415}, count = 10282925794625328401, index = 1694076839, block = "\r.\fۤO\372\276\035H\265G", '\000' <repeats 51 times>}}, sha256 = {outer = {state = {3238371032, 3418070365, 914150663, 1654270250, 812702999, 2438529370, 4144912697, 355462360}, count = 7436329637833083697, index = 1750603025, block = "\207J\264\216\247\217\371d\r.\fۤO\372\276\035H\265G", '\000' <repeats 24 times>, "/q\317\367\377\177\000\000@\365+VUU\000\000\000\000\000"}, inner = {state = {1, 0, 4158416948, 32767, 3432, 0, 4, 32767}, count = 140737488342192, index = 4294954128, block = "\377\177\000\000\360\314\377\377\377\177\000\000\340\314\377\377\377\177\000\000p\314\377\377\377\177\000\000\020\315\377\377\377\177\000\000\000\315\377\377\377\177\000\000\000\251\220\366\\@f1\004\000\000\000UU\000\000؞\005\301"}, state = {state = {914150663, 1654270250, 812702999, 2438529370, 4144912697, 355462360, 4290775857, 1731405415}, count = 10282925794625328401, index = 1694076839, block = "\r.\fۤO\372\276\035H\265G", '\000' <repeats 51 times>}}, sha384 = {outer = {state = {14680500436340154072, 7105036623409894663, 10473403895298186519, 1526699215303891257, 7436329637833083697, 10282925794625328401, 15784041429090275239, 5167115440072839076}, count_low = 0, count_high = 0, index = 0, block = "\000\000\000\000/q\317\367\377\177\000\000@\365+VUU\000\000\000\000\000\000\000\000\000\000\001\000\000\000\000\000\000\000\064h\334\367\377\177\000\000h\r\000\000\000\000\000\000\004\000\000\000\377\177\000\000\260\314\377\377\377\177\000\000\220\314\377\377\377\177\000\000\360\314\377\377\377\177\000\000\340\314\377\377\377\177\000\000p\314\377\377\377\177\000\000\020\315\377\377\377\177\000\000\000\315\377\377\377\177\000\000\000\251\220\366\\@f1\004\000\000"}, inner = {state = {14680500436340154072, 7105036623409894663, 10473403895298186519, 1526699215303891257, 7436329637833083697, 10282925794625328401, 15784041429090275239, 5167115440072839076}, count_low = 0, count_high = 0, index = 0, block = '\000' <repeats 127 times>}, state = {state = {0, 93825006255222, 32, 0, 0, 0, 0, 0}, count_low = 0, count_high = 0, index = 0, block = '\000' <repeats 127 times>}}, sha512 = {outer = {state = {14680500436340154072, 7105036623409894663, 10473403895298186519, 1526699215303891257, 7436329637833083697, 10282925794625328401, 15784041429090275239, 5167115440072839076}, count_low = 0, count_high = 0, index = 0, block = "\000\000\000\000/q\317\367\377\177\000\000@\365+VUU\000\000\000\000\000\000\000\000\000\000\001\000\000\000\000\000\000\000\064h\334\367\377\177\000\000h\r\000\000\000\000\000\000\004\000\000\000\377\177\000\000\260\314\377\377\377\177\000\000\220\314\377\377\377\177\000\000\360\314\377\377\377\177\000\000\340\314\377\377\377\177\000\000p\314\377\377\377\177\000\000\020\315\377\377\377\177\000\000\000\315\377\377\377\177\000\000\000\251\220\366\\@f1\004\000\000"}, inner = {state = {14680500436340154072, 7105036623409894663, 10473403895298186519, 1526699215303891257, 7436329637833083697, 10282925794625328401, 15784041429090275239, 5167115440072839076}, count_low = 0, count_high = 0, index = 0, block = '\000' <repeats 127 times>}, state = {state = {0, 93825006255222, 32, 0, 0, 0, 0, 0}, count_low = 0, count_high = 0, index = 0, block = '\000' <repeats 127 times>}}}, ctx_ptr = 0x7fffffffcb90, algo = GNUTLS_MAC_UNKNOWN, length = 48, update = 0x7ffff7db2960 <x86_hmac_sha512_update>, digest = 0x7ffff7db28a0 <x86_hmac_sha384_digest>, setkey = 0x7ffff7db27b0 <x86_hmac_sha384_set_key>}
        ret = <optimized out>
        __func__ = "wrap_x86_hmac_fast"
#4  0x00007ffff7cc6a27 in _gnutls_mac_fast (algorithm=GNUTLS_MAC_SHA384, key=0x7ffff7df4ea3, keylen=0, text=0x7fffffffcf30, textlen=48, digest=0x5555562bfae0) at hash_int.c:167
        ret = <optimized out>
        cc = <optimized out>
        __func__ = "_gnutls_mac_fast"
#5  0x00007ffff7ce7c2d in gnutls_hmac_fast (algorithm=GNUTLS_MAC_SHA384, key=key@entry=0x7ffff7df4ea3, keylen=keylen@entry=0, ptext=0x7fffffffcf30, ptext_len=ptext_len@entry=48, digest=digest@entry=0x5555562bfae0) at crypto-api.c:801
        ret = <optimized out>
        not_approved = true
        __func__ = "gnutls_hmac_fast"
#6  0x00007ffff7d0033f in _tls13_init_secret2 (prf=0x7ffff7e87888 <hash_algorithms+168>, psk=<optimized out>, psk@entry=0x0, psk_size=48, psk_size@entry=0, out=out@entry=0x5555562bfae0) at secrets.c:61
        buf = '\000' <repeats 48 times>, "(\345+VUU", '\000' <repeats 18 times>, "\b\000\000\000\000\000\000\000`\177\350\367\377\177\000\000\000\000\000\000\000\000\000\000\330\360\347\367\377\177\000\000\275\252\314\367\377\177\000\000\320\343+VUU\000\000\b\000\000\000\261\000\000"
        __func__ = "_tls13_init_secret2"
#7  0x00007ffff7d00410 in _tls13_init_secret (session=session@entry=0x5555562be3d0, psk=psk@entry=0x0, psk_size=psk_size@entry=0) at secrets.c:37
No locals.
#8  0x00007ffff7cb7db0 in read_server_hello (datalen=<optimized out>, data=<optimized out>, session=0x5555562be3d0) at handshake.c:2100
        session_id_len = <optimized out>
        session_id = <optimized out>
        major = <optimized out>
        minor = <optimized out>
        pos = <optimized out>
        cs_pos = <optimized out>
        ret = 0
        saved_vers = <optimized out>
        comp_pos = <optimized out>
        srandom_pos = <optimized out>
        len = <optimized out>
        ext_parse_flag = 8
        vers = 0x7ffff7e87f60 <sup_versions+160>
        session_id_len = <optimized out>
        session_id = <optimized out>
        cs_pos = <optimized out>
        comp_pos = <optimized out>
        srandom_pos = <optimized out>
        major = <optimized out>
        minor = <optimized out>
        pos = <optimized out>
        ret = <optimized out>
        len = <optimized out>
        ext_parse_flag = <optimized out>
        vers = <optimized out>
        saved_vers = <optimized out>
        __func__ = "read_server_hello"
        cipher = <optimized out>
#9  _gnutls_recv_handshake (session=session@entry=0x5555562be3d0, type=type@entry=GNUTLS_HANDSHAKE_SERVER_HELLO, optional=optional@entry=0, buf=buf@entry=0x0) at handshake.c:1658
        ret = <optimized out>
        ret2 = <optimized out>
        hsk = {htype = GNUTLS_HANDSHAKE_SERVER_HELLO, rtype = GNUTLS_HANDSHAKE_SERVER_HELLO, length = 118, sequence = 0, start_offset = 0, end_offset = 117, header = "\002\000\000v\000\000\000\000\000\000\000", header_size = 4, data = {allocd = 0x5555562b3c20 "\003\003f{-\220B\261\326\025\r\332}`\307j\024\277\021\351\253c@\373\364R\216W\016\021\303\316\a\244 @\366\234.\340\006#\266p9\364\302J<\257\274\323\340\063\221\016'\342\036\375\263i\222g\237", data = 0x5555562b3c20 "\003\003f{-\220B\261\326\025\r\332}`\307j\024\277\021\351\253c@\373\364R\216W\016\021\303\316\a\244 @\366\234.\340\006#\266p9\364\302J<\257\274\323\340\063\221\016'\342\036\375\263i\222g\237", max_length = 2048, length = 118}}
        __func__ = "_gnutls_recv_handshake"
#10 0x00007ffff7cba51b in handshake_client (session=0x5555562be3d0) at handshake.c:3085
        ret = <optimized out>
        ver = <optimized out>
        ret = <optimized out>
        ver = <optimized out>
        reset = <optimized out>
        __func__ = "handshake_client"
#11 gnutls_handshake (session=session@entry=0x5555562be3d0) at handshake.c:2884
        vers = 0x7ffff7e87f38 <sup_versions+120>
        ret = <optimized out>
        __func__ = "gnutls_handshake"
#12 0x000055555559208c in _do_handshake (session=0x5555562be3d0, fd=fd@entry=3, read_timer=read_timer@entry=0x0) at /usr/src/debug/wget-1.21.3-4.fc37.x86_64/src/gnutls.c:557
        flags = 2
        err = <optimized out>
        next_timeout = 900
#13 0x00005555555972cc in ssl_connect_wget (fd=3, hostname=<optimized out>, continue_session=<optimized out>) at /usr/src/debug/wget-1.21.3-4.fc37.x86_64/src/gnutls.c:936
        ctx = <optimized out>
        session = 0x5555562be3d0
        err = <optimized out>
#14 0x0000555555576eae in establish_connection (u=<optimized out>, conn_ref=0x7fffffffd498, hs=0x7fffffffdd00, proxy=<optimized out>, proxyauth=<optimized out>, req_ref=<optimized out>, using_ssl=0x7fffffffd487, inhibit_keep_alive=false, sock_ref=0x7fffffffd48c) at /usr/src/debug/wget-1.21.3-4.fc37.x86_64/src/http.c:2211
        host_lookup_failed = <optimized out>
        sock = 3
        req = 0x5555558a1f50
        conn = 0x5555555fc820
        resp = <optimized out>
        write_error = <optimized out>
        statcode = <optimized out>
#15 0x000055555557fd79 in gethttp (u=<optimized out>, original_url=<optimized out>, hs=<optimized out>, dt=<optimized out>, proxy=<optimized out>, iri=<optimized out>, count=<optimized out>) at /usr/src/debug/wget-1.21.3-4.fc37.x86_64/src/http.c:3326
        conn_err = <optimized out>
        req = 0x5555558a1f50
        type = 0x0
        user = 0x0
        passwd = 0x0
        proxyauth = 0x0
        statcode = <optimized out>
        write_error = <optimized out>
        contlen = <optimized out>
        contrange = <optimized out>
        conn = 0x5555555fc820
        fp = <optimized out>
        err = <optimized out>
        retval = <optimized out>
        sock = -1
        auth_finished = false
        basic_auth_finished = false
        ntlm_seen = false
        using_ssl = false
        head_only = <optimized out>
        cond_get = <optimized out>
        metalink = <optimized out>
        head = 0x0
        resp = 0x0
        hdrval = '\000' <repeats 16 times>, "_f\316Gּ\275\n\000\251\220\366\\@f1\377\000\000\000\000\000\000\000\370\376\377\377\377\377\377\377\000\000\000\000\000\000\000\000\060\333\377\377\377\177\000\000z\326\377\377\377\177\000\000\t\000\000\000\000\000\000\000\060\321]UUU\000\000p\326\377\377\377\177\000\000\354\000\000\000\000\000\000\000\060\333\377\377\377\177\000\000p\326\377\377\377\177\000\000\354\000\000\000\000\000\000\000p\326\377\377\377\177\000\000_\211ZUUU\000\000\000\000\000\000\n\000\000\000\000\000\000\000\n\000\000\000p\326\377\377\377\177\000\000\377\000\000\000\000\000\000\000index.html\000b\000\000\000\000{p\v\017\000\000\000\000\207"...
        message = 0x0
        warc_enabled = <optimized out>
        warc_tmp = 0x0
        warc_timestamp_str = "H\241\356", '\000' <repeats 17 times>
        warc_request_uuid = '\000' <repeats 25 times>, "\251\220\366\\@f1u\334\340\367\377\177\000\000\351\217[UUU\000"
        warc_ip_buf = {family = 255, data = {d4 = {s_addr = 0}, d6 = {__in6_u = {__u6_addr8 = "\000\000\000\000\000\020\000\000\000\000\000\000 \020\000", __u6_addr16 = {0, 0, 4096, 0, 0, 0, 4128, 0}, __u6_addr32 = {0, 4096, 0, 4128}}}}, ipv6_scope = 0}
        warc_ip = 0x0
        warc_payload_offset = <optimized out>
        keep_alive = <optimized out>
        chunked_transfer_encoding = <optimized out>
        inhibit_keep_alive = <optimized out>
        body_data_size = <optimized out>
#16 0x00005555555841b9 in http_loop (u=0x5555555fc820, original_url=0x5555555fc820, newloc=0x7fffffffe048, local_file=0x7fffffffe040, referer=<optimized out>, dt=0x7fffffffe228, proxy=0x0, iri=0x5555555fc7f0) at /usr/src/debug/wget-1.21.3-4.fc37.x86_64/src/http.c:4423
        count = 1
        got_head = false
        time_came_from_head = false
        got_name = true
        tms = <optimized out>
        tmrate = <optimized out>
        err = <optimized out>
        ret = TRYLIMEXC
        tmr = -1
        hstat = {len = 0, contlen = -1, restval = 0, res = -1, rderrmsg = 0x0, newloc = 0x0, remote_time = 0x0, error = 0x0, statcode = 0, message = 0x0, rd_size = 0, dltime = 0, referer = 0x0, local_file = 0x5555555dcb30 "index.html", existence_checked = false, timestamp_checked = false, orig_file_name = 0x0, orig_file_size = 0, orig_file_tstamp = 0, metalink = 0x0, local_encoding = ENC_NONE, remote_encoding = ENC_NONE, temporary = false}
        st = {st_dev = 0, st_ino = 140737348518733, st_nlink = 140737342332928, st_mode = 1432339232, st_uid = 21845, st_gid = 48, __pad0 = 0, st_rdev = 93824992920304, st_size = 16, st_blksize = 140737349799040, st_blocks = 48, st_atim = {tv_sec = 140737348550882, tv_nsec = 140737339375616}, st_mtim = {tv_sec = 89, tv_nsec = 0}, st_ctim = {tv_sec = 140737348521314, tv_nsec = 93824992920304}, __glibc_reserved = {140737348123288, 3, 0}}
        send_head_first = false
        force_full_retrieve = false
#17 0x000055555558d84c in retrieve_url (orig_parsed=0x5555555fc820, origurl=0x7fffffffe6ec "https://www.cnn.com", file=0x7fffffffe238, newloc=0x7fffffffe230, refurl=0x0, dt=0x7fffffffe228, recursive=false, iri=0x5555555fc7f0, register_status=true) at /usr/src/debug/wget-1.21.3-4.fc37.x86_64/src/retr.c:983
        result = NOCONERROR
        url = 0x5555555dc470 "https://www.cnn.com"
        location_changed = <optimized out>
        iri_fallbacked = false
        dummy = 21845
        mynewloc = 0x0
        proxy = <optimized out>
        u = 0x5555555fc820
        proxy_url = <optimized out>
        up_error_code = 1431876999
        local_file = 0x0
        redirection_count = 0
        method_suspended = false
        saved_body_data = <optimized out>
        saved_method = <optimized out>
        saved_body_file_name = 0x0
#18 0x0000555555562551 in main (argc=<optimized out>, argv=<optimized out>) at /usr/src/debug/wget-1.21.3-4.fc37.x86_64/src/main.c:2172
        dt = 0
        url_err = 0
        t = 0x7fffffffe6ec "https://www.cnn.com"
        filename = 0x0
        redirected_URL = 0x0
        iri = 0x5555555fc7f0
        url_parsed = 0x5555555fc820
        error = <optimized out>
        p = <optimized out>
        i = 0
        ret = <optimized out>
        longindex = -1
        nurls = 1
        retconf = <optimized out>
        argstring_length = <optimized out>
        use_userconfig = <optimized out>
        noconfig = false
        append_to_log = <optimized out>
        start_time = 2.514e-06
(gdb) 
quit
A debugging session is active.

	Inferior 1 [process 2985] will be killed.

Quit anyway? (y or n) y
Comment 1 Ben Cotton 2023-02-07 15:12:38 UTC 
This bug appears to have been reported against 'rawhide' during the Fedora Linux 38 development cycle.
Changing version to 38.