Hi,

On Mon, Sep 12, 2022 at 03:06:47PM +0200, Kristof Provost via Openvpn-devel 
wrote:
> Can you reproduce the panic?

Yes, very easy.

Start a handful of OpenVPN instances, some with DCO

gert@fbsd14:~/t_server.git $ SU /root/t_server/start
starting tun-tcp-p2mp/server.conf...
starting tun-udp-p2mp/server.conf...
starting tun-udp-p2mp-topology-subnet/server.conf...
starting tap-udp-p2mp/server.conf...
starting tun-udp-p2mp-112-mask/server.conf...
starting tun-udp-p2mp-fragment/server.conf...
starting tun-udp-p2p/server.conf...
starting tun-udp-p2mp-hash-defscript/server.conf...
starting tap-tcp-p2p/server.conf...
starting tun-udp-p2p-tls-sha256/server.conf...

(I think 4 of them are using DCO, the others regular tuntap)

... then unload the module

gert@fbsd14:/usr/obj $ SU kldunload if_ovpn
gert@fbsd14:/usr/obj $ 

and it freezes right after the prompt reappears.

Kernel says:

tun0: link state changed to DOWN
tun0: link state changed to UP
ovpn0: changing name to 'tun1'
[fib_algo] inet.0 (bsearch4#589) rebuild_fd_flm: switching algo to 
radix4_lockless
ovpn1: changing name to 'tun2'
tap9: Ethernet address: 58:9c:fc:10:e1:05
tap9: link state changed to UP
tun3: link state changed to UP
tun4: link state changed to UP
ovpn2: changing name to 'tun5'
tun6: link state changed to UP
tap99: Ethernet address: 58:9c:fc:10:ff:d7
tap99: link state changed to UP
ovpn3: changing name to 'tun11'
Warning: memory type ovpn leaked memory on destroy (1 allocations, 2048 bytes 
leaked).

Fatal trap 12: page fault while in kernel mode
cpuid = 2; apic id = 04
fault virtual address   = 0xffffffff83180db0
fault code              = supervisor read instruction, page not present
instruction pointer     = 0x20:0xffffffff83180db0
stack pointer           = 0x28:0xfffffe00085a3df8
frame pointer           = 0x28:0xfffffe00085a3e40
code segment            = base 0x0, limit 0xfffff, type 0x1b
                        = DPL 0, pres 1, long 1, def32 0, gran 1
processor eflags        = interrupt enabled, resume, IOPL = 0
current process         = 0 (softirq_2)
trap number             = 12
panic: page fault
cpuid = 2
time = 1662989293
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x2b/frame 0xfffffe00085a3bb0
vpanic() at vpanic+0x151/frame 0xfffffe00085a3c00
panic() at panic+0x43/frame 0xfffffe00085a3c60
trap_fatal() at trap_fatal+0x387/frame 0xfffffe00085a3cc0
trap_pfault() at trap_pfault+0xab/frame 0xfffffe00085a3d20
calltrap() at calltrap+0x8/frame 0xfffffe00085a3d20
--- trap 0xc, rip = 0xffffffff83180db0, rsp = 0xfffffe00085a3df8, rbp = 
0xfffffe00085a3e40 ---
__stop_set_sysinit_set() at __stop_set_sysinit_set+0x4390/frame 
0xfffffe00085a3e40
gtaskqueue_run_locked() at gtaskqueue_run_locked+0xa7/frame 0xfffffe00085a3ec0
gtaskqueue_thread_loop() at gtaskqueue_thread_loop+0xc2/frame 0xfffffe00085a3ef0
fork_exit() at fork_exit+0x80/frame 0xfffffe00085a3f30
fork_trampoline() at fork_trampoline+0xe/frame 0xfffffe00085a3f30
--- trap 0x106000d1, rip = 0x110c0000025010f4, rsp = 0x118a0000025d116a, rbp = 
0xf7c0000022f ---
KDB: enter: panic
---<<BOOT>>---


gert
-- 
"If was one thing all people took for granted, was conviction that if you 
 feed honest figures into a computer, honest figures come out. Never doubted 
 it myself till I met a computer with a sense of humor."
                             Robert A. Heinlein, The Moon is a Harsh Mistress

Gert Doering - Munich, Germany                             g...@greenie.muc.de

Attachment: signature.asc
Description: PGP signature

_______________________________________________
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Reply via email to