Hi All
I have a strange problem...
I used the following command to establish tunnels..
/usr/sbin/openvpn --dev-type tun --dev tun1 --local 100.100.100.1 --ifconfig 100.100.22.3 100.100.22.4 --port 10032 --comp-lzo no --tun-mtu 1500 --mssfix 1428 --persist-tun --ping 10 --daemon
[root@192 ~]# openvpn --version
OpenVPN 2.3.10 i686-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [MH] [IPv6] built on Jan 7 2016
library versions: OpenSSL 0.9.8b 04 May 2006, LZO 2.02
Originally developed by James Yonan
Copyright (C) 2002-2010 OpenVPN Technologies, Inc. <
sales@openvpn.net>
Compile time defines: enable_crypto=yes enable_crypto_ofb_cfb=yes enable_debug=yes enable_def_auth=yes enable_dlopen=unknown enable_dlopen_self=unknown enable_dlopen_self_static=unknown enable_fast_install=yes enable_fragment=yes enable_http_proxy=yes enable_iproute2=yes enable_libtool_lock=yes enable_lzo=yes enable_lzo_stub=no enable_management=yes enable_multi=yes enable_multihome=yes enable_pam_dlopen=no enable_pedantic=no enable_pf=yes enable_pkcs11=no enable_plugin_auth_pam=yes enable_plugin_down_root=yes enable_plugins=yes enable_port_share=yes enable_selinux=no enable_server=yes enable_shared=yes enable_shared_with_static_runtimes=no enable_small=no enable_socks=yes enable_ssl=yes enable_static=yes enable_strict=no enable_strict_options=no enable_systemd=no enable_win32_dll=yes enable_x509_alt_username=no with_crypto_library=openssl with_gnu_ld=yes with_mem_check=no with_plugindir='$(libdir)/openvpn/plugins' with_sysroot=no
When ftp traffic pass through tun1,I will get the following logs and kernel panic:
BUG: unable to handle kernel NULL pointer dereference [<f89eb91a>] tun_chr_aio_read+0x281/0x2ba [tun]
printing eip:
*pdpt = 000000002d505001
*pde = 0000000216d42067
Oops: 0002 [#1]
SMP
Modules linked in: xt_TCPMSS xt_conntrack ipt_LOG xt_limit ipt_IMQ sch_htb tcp_bic twofish twofish_common aes des sha256 ipt_NETFLOW ipt_weburl xt_webstr(P) ipt_REJECT iptable_filter imq xt_time xt_string ipt_iprange xt_ctdirmark(P) xt_CTDIRMARK(P) ipt_account xt_gw xt_icmpid(P) xt_ingw xt_BALANCE(P) qbkflow qbkf_timeout(P) nf_nat_pptp nf_conntrack_pptp ts_bm xt_connlimit xt_layer7 nf_nat_ftp nf_conntrack_ftp nf_nat_proto_gre nf_conntrack_proto_gre iptable_mangle iptable_nat nf_nat xt_connbytes xt_CLASSIFY xt_MARK xt_mark xt_state xt_CONNMARK xt_connmark tun ipcomp esp4 ah4 serpent crypto_null blowfish af_key n_hdlc e1000e e1000 r8168 sierra usbserial cdc_acm rtnet3070ap rt3070ap(P) rtutil3070ap squashfs
CPU: 0
EIP: 0060:[<c11be8fd>] Tainted: P VLI
EFLAGS: 00210047 (2.6.22 #103)
EIP is at skb_dequeue+0x22/0x3f
eax: 00000000 ebx: ed4ff520 ecx: ed4ff518 edx: 00200282
esi: ea8c75c0 edi: ed4ff52c ebp: eeb2c440 esp: ed543e78
ds: 007b es: 007b fs: 00d8 gs: 0033 ss: 0068
Process openvpn (pid: 5493, ti=ed542000 task=dfffb070 task.ti=ed542000)
Stack: 000005dc 00000000 ed543eb4 f89eb753 00000054 ed543f64 ed4ff500 eeb2c440
000005dc 000005dc 00000000 dfffb070 c10159a3 ed4ff518 ed4ff518 02450000
00005400 00080000 00000000 f89ebd80 ed543edc eeb2c440 c105a6cf 00000000
Call Trace:
[<f89eb753>] tun_chr_aio_read+0xba/0x2ba [tun]
[<c10159a3>] default_wake_function+0x0/0xc
[<c105a6cf>] do_sync_read+0xc7/0x10a
[<c1028cf1>] autoremove_wake_function+0x0/0x35
[<f8a0ebe3>] e1000_put_txbuf+0x23/0x40 [e1000e]
[<f8a0ee40>] e1000_clean_tx_irq+0x1a0/0x230 [e1000e]
[<c11bef3d>] __kfree_skb+0xa3/0xfa
[<c11c4b8d>] net_tx_action+0x61/0xcc
[<c105a608>] do_sync_read+0x0/0x10a
[<c105ae32>] vfs_read+0x88/0x10a
[<c105b230>] sys_read+0x41/0x67
[<c1003cf2>] sysenter_past_esp+0x5f/0x85
[<c1260000>] hrtimer_nanosleep_restart+0x25/0xa8
=======================
Code: 21 0a 00 89 d8 5b 5e 5f c3 57 56 8d 78 0c 53 89 c3 89 f8 e8 32 21 0a 00 8b 33 39 de 89 c2 75 04 31 f6 eb 17 8b 06 ff 4b 08 89 03 <89> 58 04 c7 06 00 00 00 00 c7 46 04 00 00 00 00 89 f8 e8 67 21
EIP: [<c11be8fd>] skb_dequeue+0x22/0x3f SS:ESP 0068:ed543e78
packet error in ignore 2
packet error in ignore 2
BUG: unable to handle kernel NULL pointer dereference at virtual address 00000004
printing eip:
c11be28b
*pdpt = 000000002d784001
*pde = 00000002160ae067
Oops: 0000 [#2]
SMP
Modules linked in: xt_TCPMSS xt_conntrack ipt_LOG xt_limit ipt_IMQ sch_htb tcp_bic twofish twofish_common aes des sha256 ipt_NETFLOW ipt_weburl xt_webstr(P) ipt_REJECT iptable_filter imq xt_time xt_string ipt_iprange xt_ctdirmark(P) xt_CTDIRMARK(P) ipt_account xt_gw xt_icmpid(P) xt_ingw xt_BALANCE(P) qbkflow qbkf_timeout(P) nf_nat_pptp nf_conntrack_pptp ts_bm xt_connlimit xt_layer7 nf_nat_ftp nf_conntrack_ftp nf_nat_proto_gre nf_conntrack_proto_gre iptable_mangle iptable_nat nf_nat xt_connbytes xt_CLASSIFY xt_MARK xt_mark xt_state xt_CONNMARK xt_connmark tun ipcomp esp4 ah4 serpent crypto_null blowfish af_key n_hdlc e1000e e1000 r8168 sierra usbserial cdc_acm rtnet3070ap rt3070ap(P) rtutil3070ap squashfs
CPU: 1
EIP: 0060:[<c11be28b>] Tainted: P VLI
EFLAGS: 00210286 (2.6.22 #103)
EIP is at skb_checksum+0x1ad/0x2a3
eax: c03757a0 ebx: c03757a0 ecx: eb742cec edx: 00000000
esi: ed738bc0 edi: 00000100 ebp: 00000000 esp: ed725d34
ds: 007b es: 007b fs: 00d8 gs: 0033 ss: 0068
Process openvpn (pid: 5920, ti=ed724000 task=ed5ed580 task.ti=ed724000)
Stack: 00000001 ed725d5c c1013dfb 00200246 00000010 eb742cec c03757a0 00000000
00000000 00000000 00000000 c11bd424 eb742cec ed738bc0 ed725ebc ed725f3c
c11c0b68 00000000 eb742cec ed738bc0 c12043b9 ed725d98 00000000 c1375798
Call Trace:
[<c1013dfb>] __wake_up+0x32/0x43
[<c11bd424>] sock_def_readable+0x39/0x63
[<c11c0b68>] __skb_checksum_complete_head+0x18/0x58
[<c12043b9>] udp_recvmsg+0xa6/0x1d0
[<c11bb725>] sock_common_recvmsg+0x3e/0x54
[<c11ba0af>] sock_recvmsg+0xcf/0xe8
[<c1028cf1>] autoremove_wake_function+0x0/0x35
[<c101d9ce>] current_fs_time+0x41/0x46
[<c106c33e>] mntput_no_expire+0x11/0x5d
[<c11baeba>] sys_recvfrom+0xd7/0x12b
[<c106292e>] do_path_lookup+0x162/0x1c7
[<c1061808>] getname+0x59/0xad
[<c105cf86>] cp_new_stat64+0xfc/0x10e
[<c11bb407>] sys_socketcall+0x1cd/0x261
[<c1003cf2>] sysenter_past_esp+0x5f/0x85
=======================
Code: 11 01 00 00 8b 44 24 2c 01 44 24 20 03 6c 24 2c 8b 54 24 24 ff 44 24 1c 83 44 24 10 08 89 54 24 18 8b 4c 24 14 8b 91 b0 00 00 00 <0f> b7 42 04 39 44 24 1c 0f 8c c7 fe ff ff 8b 72 10 85 f6 0f 84
EIP: [<c11be28b>] skb_checksum+0x1ad/0x2a3 SS:ESP 0068:ed725d34
BUG: unable to handle kernel NULL pointer dereference at virtual address 00000004
printing eip:
c1209937
*pdpt = 00000000013ce001
*pde = 0000000000000000
Oops: 0002 [#3]
SMP
Modules linked in: xt_TCPMSS xt_conntrack ipt_LOG xt_limit ipt_IMQ sch_htb tcp_bic twofish twofish_common aes des sha256 ipt_NETFLOW ipt_weburl xt_webstr(P) ipt_REJECT iptable_filter imq xt_time xt_string ipt_iprange xt_ctdirmark(P) xt_CTDIRMARK(P) ipt_account xt_gw xt_icmpid(P) xt_ingw xt_BALANCE(P) qbkflow qbkf_timeout(P) nf_nat_pptp nf_conntrack_pptp ts_bm xt_connlimit xt_layer7 nf_nat_ftp nf_conntrack_ftp nf_nat_proto_gre nf_conntrack_proto_gre iptable_mangle iptable_nat nf_nat xt_connbytes xt_CLASSIFY xt_MARK xt_mark xt_state xt_CONNMARK xt_connmark tun ipcomp esp4 ah4 serpent crypto_null blowfish af_key n_hdlc e1000e e1000 r8168 sierra usbserial cdc_acm rtnet3070ap rt3070ap(P) rtutil3070ap squashfs
CPU: 1
EIP: 0060:[<c1209937>] Tainted: P VLI
EFLAGS: 00210297 (2.6.22 #103)
EIP is at inet_sock_destruct+0x15/0x1b2
eax: 00000000 ebx: ed738bc0 ecx: ea8c75c0 edx: ed738c2c
esi: 00000000 edi: ed6ed068 ebp: ed6dd114 esp: ed725ba0
ds: 007b es: 007b fs: 00d8 gs: 0000 ss: 0068
Process openvpn (pid: 5920, ti=ed724000 task=ed5ed580 task.ti=ed724000)
Stack: c1260adc ed738bc0 c120425e ed738bc0 ed738bc0 c11bc2af c1260adc ed738c90
c11bc38e ed738bc0 ed6ed040 c1209461 00000000 ed6ed040 c11ba44b ed72a6c0
ed6ed068 ed72a6c0 c11ba81e ed6ed068 00000008 c105b4e6 00000000 00000000
Call Trace:
[<c1260adc>] _write_lock_bh+0x8/0x1a
[<c120425e>] udp_lib_unhash+0x10/0x88
[<c11bc2af>] sk_free+0x21/0xb9
[<c1260adc>] _write_lock_bh+0x8/0x1a
[<c11bc38e>] sk_common_release+0x47/0x8e
[<c1209461>] inet_release+0x40/0x45
[<c11ba44b>] sock_release+0x14/0x5f
[<c11ba81e>] sock_close+0x2a/0x2f
[<c105b4e6>] __fput+0x96/0x13c
[<c10591ce>] filp_close+0x51/0x58
[<c101b518>] put_files_struct+0x5f/0xa7
[<c101c5a1>] do_exit+0x215/0x6b2
[<c1108b53>] do_unblank_screen+0xd/0x103
[<c100515b>] die+0x1f9/0x225
[<c12623ae>] do_page_fault+0x5cc/0x6ad
[<c1013e73>] task_rq_lock+0x31/0x58
[<c1261de2>] do_page_fault+0x0/0x6ad
[<c1260c32>] error_code+0x72/0x78
[<c101007b>] relocate_kernel+0x7b/0x94
[<c11be28b>] skb_checksum+0x1ad/0x2a3
[<c1013dfb>] __wake_up+0x32/0x43
[<c11bd424>] sock_def_readable+0x39/0x63
[<c11c0b68>] __skb_checksum_complete_head+0x18/0x58
[<c12043b9>] udp_recvmsg+0xa6/0x1d0
[<c11bb725>] sock_common_recvmsg+0x3e/0x54
[<c11ba0af>] sock_recvmsg+0xcf/0xe8
[<c1028cf1>] autoremove_wake_function+0x0/0x35
[<c101d9ce>] current_fs_time+0x41/0x46
[<c106c33e>] mntput_no_expire+0x11/0x5d
[<c11baeba>] sys_recvfrom+0xd7/0x12b
[<c106292e>] do_path_lookup+0x162/0x1c7
[<c1061808>] getname+0x59/0xad
[<c105cf86>] cp_new_stat64+0xfc/0x10e
[<c11bb407>] sys_socketcall+0x1cd/0x261
[<c1003cf2>] sysenter_past_esp+0x5f/0x85
=======================
Code: 24 10 00 00 00 00 e8 4b 24 fb ff 8b 44 24 10 83 c4 14 5b 5e 5f c3 53 89 c3 83 ec 10 8b 4b 6c 8d 53 6c 39 d1 74 21 8b 01 ff 4a 08 <89> 50 04 89 43 6c 89 c8 c7 41 04 00 00 00 00 c7 01 00 00 00 00
EIP: [<c1209937>] inet_sock_destruct+0x15/0x1b2 SS:ESP 0068:ed725ba0
Fixing recursive fault but reboot is needed!
BUG: unable to handle kernel NULL pointer dereference at virtual address 00000000
printing eip:
c11be855
*pdpt = 000000002d505001
*pde = 0000000216d42067
Oops: 0002 [#4]
SMP
Modules linked in: xt_TCPMSS xt_conntrack ipt_LOG xt_limit ipt_IMQ sch_htb tcp_bic twofish twofish_common aes des sha256 ipt_NETFLOW ipt_weburl xt_webstr(P) ipt_REJECT iptable_filter imq xt_time xt_string ipt_iprange xt_ctdirmark(P) xt_CTDIRMARK(P) ipt_account xt_gw xt_icmpid(P) xt_ingw xt_BALANCE(P) qbkflow qbkf_timeout(P) nf_nat_pptp nf_conntrack_pptp ts_bm xt_connlimit xt_layer7 nf_nat_ftp nf_conntrack_ftp nf_nat_proto_gre nf_conntrack_proto_gre iptable_mangle iptable_nat nf_nat xt_connbytes xt_CLASSIFY xt_MARK xt_mark xt_state xt_CONNMARK xt_connmark tun ipcomp esp4 ah4 serpent crypto_null blowfish af_key n_hdlc e1000e e1000 r8168 sierra usbserial cdc_acm rtnet3070ap rt3070ap(P) rtutil3070ap squashfs
CPU: 0
EIP: 0060:[<c11be855>] Tainted: P VLI
EFLAGS: 00210002 (2.6.22 #103)
EIP is at skb_queue_tail+0x1c/0x2d
eax: 00200202 ebx: eb742cec ecx: 00000004 edx: 00000000
esi: eb759c80 edi: eb742cf8 ebp: 0000003c esp: ed543b80
ds: 007b es: 007b fs: 00d8 gs: 0033 ss: 0068
Process openvpn (pid: 5493, ti=ed542000 task=dfffb070 task.ti=ed542000)
Stack: eb759c80 eb742c80 fffffff4 c11bd821 c1378044 ed543bd0 00200246 c1426bc0
eb759c80 eb742c80 eaba1e80 ed38ba8e c12013b6 eb759c80 c12017ac 00000009
eb742c80 00000009 c1201879 01031fac 00000009 eaba1e80 00000001 eb5f3300
Call Trace:
[<c11bd821>] sock_queue_rcv_skb+0xa0/0xd3
[<c12013b6>] raw_rcv_skb+0x8/0x1e
[<c12017ac>] raw_rcv+0xe5/0xeb
[<c1201879>] raw_v4_input+0xb0/0xf8
[<c11e73b1>] ip_local_deliver+0xe3/0x23e
[<c11e6b94>] ip_local_deliver_finish+0x0/0x1bf
[<c11e7295>] ip_rcv+0x484/0x4bd
[<c11e6900>] ip_rcv_finish+0x0/0x294
[<c12059c6>] arp_rcv+0xf0/0x104
[<c11c332b>] netif_receive_skb+0x1f5/0x259
[<f8a1062f>] e1000_receive_skb+0x3f/0x180 [e1000e]
[<f8a1739d>] e1000_clean_rx_irq+0x21d/0x380 [e1000e]
[<f8a14a27>] e1000e_poll+0x1c7/0x2f0 [e1000e]
[<f8a2ba8b>] __kc_adapter_clean+0x2b/0x50 [e1000e]
[<c11c5069>] net_rx_action+0x91/0x17d
[<c101dbf6>] __do_softirq+0x5d/0xc1
[<c101dc8c>] do_softirq+0x32/0x36
[<c100e729>] smp_apic_timer_interrupt+0x74/0x80
[<c10047c0>] apic_timer_interrupt+0x28/0x30
[<c101c4a0>] do_exit+0x114/0x6b2
[<c1108b53>] do_unblank_screen+0xd/0x103
[<c100515b>] die+0x1f9/0x225
[<c12623ae>] do_page_fault+0x5cc/0x6ad
[<c1028d06>] autoremove_wake_function+0x15/0x35
[<c1261de2>] do_page_fault+0x0/0x6ad
[<c1260c32>] error_code+0x72/0x78
[<c11b007b>] hidinput_connect+0xfbd/0x2b39
[<c11be8fd>] skb_dequeue+0x22/0x3f
[<f89eb753>] tun_chr_aio_read+0xba/0x2ba [tun]
[<c10159a3>] default_wake_function+0x0/0xc
[<c105a6cf>] do_sync_read+0xc7/0x10a
[<c1028cf1>] autoremove_wake_function+0x0/0x35
[<f8a0ebe3>] e1000_put_txbuf+0x23/0x40 [e1000e]
[<f8a0ee40>] e1000_clean_tx_irq+0x1a0/0x230 [e1000e]
[<c11bef3d>] __kfree_skb+0xa3/0xfa
[<c11c4b8d>] net_tx_action+0x61/0xcc
[<c105a608>] do_sync_read+0x0/0x10a
[<c105ae32>] vfs_read+0x88/0x10a
[<c105b230>] sys_read+0x41/0x67
[<c1003cf2>] sysenter_past_esp+0x5f/0x85
[<c1260000>] hrtimer_nanosleep_restart+0x25/0xa8
=======================
Code: 04 89 0a 89 c2 89 f8 5b 5e 5f e9 42 22 0a 00 57 56 89 d6 8d 78 0c 53 89 c3 89 f8 e8 d2 21 0a 00 8b 53 04 ff 43 08 89 1e 89 56 04 <89> 32 89 73 04 89 c2 89 f8 5b 5e 5f e9 15 22 0a 00 57 56 89 d6
EIP: [<c11be855>] skb_queue_tail+0x1c/0x2d SS:ESP 0068:ed543b80
Kernel panic - not syncing: Fatal exception in interrupt
Any suggestions will be appreciated!
