From nobody Mon Mar 2 18:12:26 2026 X-Original-To: bugs@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4fPn8V1J7Kz6T2gw for ; Mon, 02 Mar 2026 18:12:26 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R12" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 4fPn8V0L92z43c7 for ; Mon, 02 Mar 2026 18:12:26 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1772475146; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=QgdMWEGI8nhvX8uM/pah9U0ZP8uw9RX98w7mqpGwBGw=; b=ofU9mMW+6p72kSdXXzNK9RUe2rUkCSNnoHLOKKitaQBtdOZhA7hD8mJdaB2lUY2wbMu7fM VqZ1wQp5ocNGH70JbJXMnkVqV/TiKwXMjA/rGQDDnyAzuApde2EjuxhC+7IPxOUEduGgHt Rjq/pHXsJYoei/buHvwKiyrJdz/OTzs6f8+dWcSrVJrbBx/kDcCHaJo0SXhIxhG01LyZK/ i+CLiHJt7iiq+IdYUcPuUckAua/JIp7vEY5N59LGIx2BqpgxkW76Q4wfN65y9cMUV4qzfy Tawfc7Cxm62E6wzaKlWkAsy/6ghgprx6Q9oy0pZCGsT4wa5zJz7TtgxDyZC91Q== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1772475146; a=rsa-sha256; cv=none; b=B1QYXp7mWDOki3dl+gBo9tSEgwP3+UJDl66elDBo5kSrbi91f7ZFIkgLsgrUKcaka5O4rT iyg5rahEseF6KEy6ymZ8eLTF/lkznjoxy3ENjIvNGI2F2n9913vVo+ANQjEBgzjJvNxU90 /HtjMJHsIHtVreIjYHmaZo0Y+hQpE9/0znUUbjsxB9nacrO9n3ph+m8ts37Yr6yep4+cCY d9EH3hQqCCbJeY7akRfVA9K9bITo3nlev1Eta6Y4Ck0/kU3edz1O97bXZa0F2Bpokegj2Z 1PTrzR+KFHrR/geS1vPyksMP7+Wu0M4sViB2xxyXL0KRXBmHADvMv3l9wEEfsw== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1772475146; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=QgdMWEGI8nhvX8uM/pah9U0ZP8uw9RX98w7mqpGwBGw=; b=aIn9Y2KAF8iGgBjKp9ot5wsVqTjwcVNQWMH0k4W5hxjoo5YC5dIXw0u5Ls2FdUkiP3Pup1 qzHKgAl4ef4uOvJsYmG5B48tplL/5euUDNevSSw+vtsnSK6cFKpW1vBZ4oLMFHlQoS/E9A dj6kM5ibQDCdp0NSLFZz5Lx31aN2WZyAA/l/RvpKvFSVDndBtsRDCaJ/QwD9825OGUiCJC VAPmkEHWXoqpvzJLcSRlyUNtH+g/1aCGRAgGHGZqOPFqivhOo2mY5WQdBQBCFfPlYn8Gx2 mTWzKygB5ned4nXxVWFmipq8V8d8tlutAHZll2O4Lo6c17Rqc1AYoCr/SzffDw== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4fPn8T71WxzmdG for ; Mon, 02 Mar 2026 18:12:25 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 622ICPSS066701 for ; Mon, 2 Mar 2026 18:12:25 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 622ICPcO066700 for bugs@FreeBSD.org; Mon, 2 Mar 2026 18:12:25 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: bugs@FreeBSD.org Subject: [Bug 293548] ocserv: kernel panic with tun interfaces Date: Mon, 02 Mar 2026 18:12:26 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: new X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 15.0-RELEASE X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Only Me X-Bugzilla-Who: mcurex@yandex.ru X-Bugzilla-Status: New X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: bugs@FreeBSD.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: bug_id short_desc product version rep_platform op_sys bug_status bug_severity priority component assigned_to reporter attachments.created Message-ID: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Bug reports List-Archive: https://lists.freebsd.org/archives/freebsd-bugs List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-bugs@FreeBSD.org MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D293548 Bug ID: 293548 Summary: ocserv: kernel panic with tun interfaces Product: Base System Version: 15.0-RELEASE Hardware: amd64 OS: Any Status: New Severity: Affects Only Me Priority: --- Component: kern Assignee: bugs@FreeBSD.org Reporter: mcurex@yandex.ru Created attachment 268484 --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=3D268484&action= =3Dedit core.1.1.txt - first halt uname -sri FreeBSD 15.0-RELEASE-p2 GENERIC swapinfo Device 1K-blocks Used Avail Capacity /dev/da0p3 4194264 0 4194264 0% Details of diagnostics in attached reports, two halts, two files. My config are: Two ocserv servers, with own pid files, own configs, one on socket ${INET_IF}:4444, another on ${INET_IF}:5555 After connect via client software something more, than 10 users, kernel hal= t on panic with tuncreate() problem. Short analyze: Basic info. Panic: page fault (page error) Address of halt: 0x8 (read by zero point + movement) Proccess: ocserv (PID 4055) Place of halt: /usr/src/sys/net/if_tuntap.c:1013, function tuncreate() Execution stack:=20 tuncreate() =E2=86=92 tun_clone_create() =E2=86=92 if_clone_create() =E2=86= =92 tunclone() =E2=86=92 devfs_lookup() =E2=86=92 namei() =E2=86=92 vn_open_cred() =E2=86=92 sys_ope= nat() Problem is, trying to create from ocserv TUN-interface (/dev/tun34) starte= d to create point for the pointer, that dosen't exists tuncreate(). First crash (core.1.1.txt) Place of halt: __mtx_lock_sleep() in tuncreate():1043 Address: 0x488 type: mutex block Second crash core.2.txt Place of halt: tuncreate():1013 Address: 0x8 type: Page fault (NULL deref) Shared: Creation of tun-interfaces via ocserv Both crashes are on the one driver of TUN-devices, but in different places = of code =E2=80=94 IMHO, that's the system problem in tuntap FreeBSD 15.0-RELEA= SE-p2. --=20 You are receiving this mail because: You are the assignee for the bug.=