<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><br><br><div dir="ltr">Sent from my iPhone</div><div dir="ltr"><br>Begin forwarded message:<br><br></div><blockquote type="cite"><div dir="ltr"><b>From:</b> bugzilla@redhat.com<br><b>Date:</b> August 10, 2020 at 08:12:27 EDT<br><b>To:</b> pwouters@redhat.com<br><b>Subject:</b> <b>[Bug 1867580] New: pluto process frequently dumps core</b><br><br></div></blockquote><blockquote type="cite"><div dir="ltr"><span>https://bugzilla.redhat.com/show_bug.cgi?id=1867580</span><br><span></span><br><span> Bug ID: 1867580</span><br><span> Summary: pluto process frequently dumps core</span><br><span> Product: Fedora</span><br><span> Version: 32</span><br><span> Hardware: x86_64</span><br><span> OS: Linux</span><br><span> Status: NEW</span><br><span> Component: libreswan</span><br><span> Assignee: pwouters@redhat.com</span><br><span> Reporter: reg.bugs@poti.sk</span><br><span> QA Contact: extras-qa@fedoraproject.org</span><br><span> CC: pwouters@redhat.com, sahana@redhat.com</span><br><span> Target Milestone: ---</span><br><span> Classification: Fedora</span><br><span></span><br><span></span><br><span></span><br><span>Description of problem:</span><br><span></span><br><span>I was configuring a VPN tunnel with a Mikrotik router RB-2011UiAS-RM on the</span><br><span>other side. The router gets firmware upgrades regularly.</span><br><span></span><br><span>Finally I found a parameter combination for both sides shown below that</span><br><span>basically works, but the pluto process crashes often. It seems that the crashes</span><br><span>correspond with the phase 2 key lifetime of 2 hours. After the coredump systemd</span><br><span>restarts the ipsec service and the VPN is then re-established.</span><br><span></span><br><span>----</span><br><span>My ipsec conf file:</span><br><span></span><br><span>conn XXX</span><br><span> auto=start</span><br><span> left=212.XX.XX.XX</span><br><span> leftsubnet=192.168.XX.0/24</span><br><span> leftsourceip=192.168.XX.YY</span><br><span> right=195.XX.XX.XX</span><br><span> rightsubnet=192.168.YY.0/24</span><br><span></span><br><span> ike=aes256-sha256;modp3072</span><br><span> ikelifetime=15h</span><br><span> ikev2=no</span><br><span></span><br><span> phase2alg=aes256-sha256;modp2048</span><br><span> salifetime=2h</span><br><span> mtu=1406</span><br><span> authby=secret</span><br><span></span><br><span>----</span><br><span>From the journal:</span><br><span></span><br><span>aug 09 08:58:13 systemd[1]: ipsec.service: Main process exited, code=dumped,</span><br><span>status=11/SEGV</span><br><span>aug 09 08:58:14 systemd[1]: ipsec.service: Failed with result 'core-dump'.</span><br><span>aug 09 11:00:00 systemd[1]: ipsec.service: Main process exited, code=dumped,</span><br><span>status=6/ABRT</span><br><span>aug 09 11:00:00 systemd[1]: ipsec.service: Failed with result 'core-dump'.</span><br><span>aug 09 13:00:05 systemd[1]: ipsec.service: Main process exited, code=dumped,</span><br><span>status=11/SEGV</span><br><span>aug 09 13:00:05 systemd[1]: ipsec.service: Failed with result 'core-dump'.</span><br><span>aug 09 15:00:09 systemd[1]: ipsec.service: Main process exited, code=dumped,</span><br><span>status=11/SEGV</span><br><span>aug 09 15:00:09 systemd[1]: ipsec.service: Failed with result 'core-dump'.</span><br><span>aug 09 16:53:24 systemd[1]: ipsec.service: Main process exited, code=dumped,</span><br><span>status=11/SEGV</span><br><span>aug 09 16:53:24 systemd[1]: ipsec.service: Failed with result 'core-dump'.</span><br><span>aug 09 18:55:10 systemd[1]: ipsec.service: Main process exited, code=dumped,</span><br><span>status=6/ABRT</span><br><span>aug 09 18:55:10 systemd[1]: ipsec.service: Failed with result 'core-dump'.</span><br><span>aug 09 20:55:14 systemd[1]: ipsec.service: Main process exited, code=dumped,</span><br><span>status=11/SEGV</span><br><span>aug 09 20:55:14 systemd[1]: ipsec.service: Failed with result 'core-dump'.</span><br><span>aug 09 22:57:05 systemd[1]: ipsec.service: Main process exited, code=dumped,</span><br><span>status=6/ABRT</span><br><span>aug 09 22:57:05 systemd[1]: ipsec.service: Failed with result 'core-dump'</span><br><span></span><br><span>----</span><br><span>One of the stack traces:</span><br><span></span><br><span> Stack trace of thread 81411:</span><br><span> #0 0x00007f705e5f99e5 raise (libc.so.6 + 0x3c9e5)</span><br><span> #1 0x00007f705e5e2895 abort (libc.so.6 + 0x25895)</span><br><span> #2 0x00007f705e63d857 __libc_message (libc.so.6 + 0x80857)</span><br><span> #3 0x00007f705e644d7c malloc_printerr (libc.so.6 + 0x87d7c)</span><br><span> #4 0x00007f705e645abc unlink_chunk.constprop.0 (libc.so.6 + 0x88abc)</span><br><span> #5 0x00007f705e645c27 malloc_consolidate (libc.so.6 + 0x88c27)</span><br><span> #6 0x00007f705e647a85 _int_malloc (libc.so.6 + 0x8aa85)</span><br><span> #7 0x00007f705e64a235 __libc_calloc (libc.so.6 + 0x8d235)</span><br><span> #8 0x00007f705dd93ef7 PORT_ZAlloc_Util (libnssutil3.so + 0x18ef7)</span><br><span> #9 0x00007f705d699100 sftk_GetObjectFromList (libsoftokn3.so + 0x24100)</span><br><span> #10 0x00007f705d699245 sftk_NewObject (libsoftokn3.so + 0x24245)</span><br><span> #11 0x00007f705d689a32 NSC_CreateObject (libsoftokn3.so + 0x14a32)</span><br><span> #12 0x00007f705eaf3a86 PK11_CreateNewObject (libnss3.so + 0x50a86)</span><br><span> #13 0x00007f705eafd810 pk11_ImportSymKeyWithTempl (libnss3.so + 0x5a810)</span><br><span> #14 0x00007f705eafe79a PK11_ImportSymKeyWithFlags (libnss3.so + 0x5b79a)</span><br><span> #15 0x00007f705eafee58 pk11_CopyToSlotPerm (libnss3.so + 0x5be58)</span><br><span> #16 0x000055bc94f66dbf chunk_from_symkey.part.0 (pluto + 0xb4dbf)</span><br><span> #17 0x000055bc94fb1137 section_5_keymat (pluto + 0xff137)</span><br><span> #18 0x000055bc94f41d2d compute_proto_keymat (pluto + 0x8fd2d)</span><br><span> #19 0x000055bc94f42ebb quick_inR1_outI2_tail (pluto + 0x90ebb)</span><br><span> #20 0x000055bc94f43036 quick_inR1_outI2_continue (pluto + 0x91036)</span><br><span> #21 0x000055bc94f78c8e pcr_completed (pluto + 0xc6c8e)</span><br><span> #22 0x000055bc94f78df7 handle_helper_answer (pluto + 0xc6df7)</span><br><span> #23 0x000055bc94f2b9ad resume_handler (pluto + 0x799ad)</span><br><span> #24 0x00007f705e8143b4 event_process_active_single_queue (libevent-2.1.so.6</span><br><span>+ 0x233b4)</span><br><span> #25 0x00007f705e814ba7 event_base_loop (libevent-2.1.so.6 + 0x23ba7)</span><br><span> #26 0x000055bc94f2ec25 call_server (pluto + 0x7cc25)</span><br><span> #27 0x000055bc94ee8aad main (pluto + 0x36aad)</span><br><span> #28 0x00007f705e5e4042 __libc_start_main (libc.so.6 + 0x27042)</span><br><span> #29 0x000055bc94eea5de _start (pluto + 0x385de)</span><br><span></span><br><span> Stack trace of thread 81414:</span><br><span> #0 0x00007f705ea4ce92 pthread_cond_wait@@GLIBC_2.3.2 (libpthread.so.0 +</span><br><span>0xfe92)</span><br><span> #1 0x000055bc94f7930b pluto_crypto_helper_thread (pluto + 0xc730b)</span><br><span> #2 0x00007f705ea46432 start_thread (libpthread.so.0 + 0x9432)</span><br><span> #3 0x00007f705e6be913 __clone (libc.so.6 + 0x101913)</span><br><span></span><br><span> Stack trace of thread 81413:</span><br><span> #0 0x00007f705ea4ce92 pthread_cond_wait@@GLIBC_2.3.2 (libpthread.so.0 +</span><br><span>0xfe92)</span><br><span> #1 0x000055bc94f7930b pluto_crypto_helper_thread (pluto + 0xc730b)</span><br><span> #2 0x00007f705ea46432 start_thread (libpthread.so.0 + 0x9432)</span><br><span> #3 0x00007f705e6be913 __clone (libc.so.6 + 0x101913)</span><br><span></span><br><span>----</span><br><span>Activity immediately before a crash:</span><br><span></span><br><span>#3: initiating Quick Mode</span><br><span>PSK+ENCRYPT+TUNNEL+PFS+UP+IKEV1_ALLOW+SAREF_TRACK+IKE_FRAG_ALLOW+ESN_NO to</span><br><span>replace #2 {using isakmp#1 msgid:21e0e943</span><br><span>proposal=AES_CBC_256-HMAC_SHA2_256_128-MODP2048 pfsgroup=MODP2048}</span><br><span></span><br><span>#3: STATE_QUICK_I1: sent QI1, expecting QR1, to replace #2</span><br><span></span><br><span>ANOM_ABEND auid=4294967295 uid=0 gid=0 ses=4294967295</span><br><span>subj=system_u:system_r:ipsec_t:s0 pid=81411 comm="pluto"</span><br><span>exe="/usr/libexec/ipsec/pluto" sig=6 res=1</span><br><span></span><br><span></span><br><span>Version-Release number of selected component (if applicable):</span><br><span>libreswan-3.32-2.fc32.x86_64</span><br><span></span><br><span>How reproducible:</span><br><span></span><br><span></span><br><span>Steps to Reproduce:</span><br><span>1. the whole setup must be probably duplicated</span><br><span></span><br><span>Actual results:</span><br><span>Pluto coredump after 2 hours</span><br><span></span><br><span>Expected results:</span><br><span>No coredump, continuous service of pluto daemon.</span><br><span></span><br><span>Additional info:</span><br><span></span><br><span></span><br><span>-- </span><br><span>You are receiving this mail because:</span><br><span>You are on the CC list for the bug.</span><br><span>You are the assignee for the bug.</span><br><span></span><br></div></blockquote></body></html>