View Issue Details

IDProjectCategoryView StatusLast Update
0001283channel: elrepo/el8kmod-wireguardpublic2022-11-10 16:25
Reporterbkida Assigned Topperry  
PrioritynormalSeverityminorReproducibilityalways
Status resolvedResolutionfixed 
Summary0001283: Problems on kmod-wireguard after upgrade almalinux to 8.7
DescriptionAfter upgrading from almalinux to 8.7 (kernel 4.18.0-425.3.1) the entire server is malfunctioning. If I go back to the previous kernel 4.18.0-372 the server is fine. therefore I assume this is a problem with the kernel and the wireguard module and not directly with the RH8.6 upgrade to 8.7 itself. Logs indicate problems with wireguard, fragment /var/log/kern

Nov 10 18:41:52 MYHOSTNAME kernel: wireguard: module verification failed: signature and/or required key missing - tainting kernel
Nov 10 18:41:52 MYHOSTNAME kernel: wireguard: WireGuard 1.0.20220627 loaded. See www.wireguard.com for information.
Nov 10 18:41:52 MYHOSTNAME kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld <Jason@zx2c4.com>. All Rights Reserved.
Nov 10 18:42:19 MYHOSTNAME kernel: watchdog: BUG: soft lockup - CPU#0 stuck for 22s! [kworker/0:5:686]
Nov 10 18:42:19 MYHOSTNAME kernel: Modules linked in: nft_limit ip6t_REJECT nf_reject_ipv6 xt_owner nf_nat_ftp iptable_nat xt_REDIRECT xt_conntrack iptable_mangle nf_conntrack_ftp xt_LOG nf_log_syslog xt_limit iptable_filter ip_tables xt_multiport nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 nft_counter wireguard(E) ip6_udp_tunnel udp_tunnel ipt_REJECT nf_reject_ipv4 nft_compat nf_tables nfnetlink ext4 mbcache jbd2 intel_rapl_msr intel_rapl_common amd_energy crct10dif_pclmul crc32_pclmul iTCO_wdt iTCO_vendor_support ghash_clmulni_intel pcspkr i2c_i801 lpc_ich joydev virtio_balloon xfs libcrc32c sr_mod cdrom sd_mod t10_pi ahci sg libahci virtio_gpu drm_shmem_helper drm_kms_helper libata syscopyarea sysfillrect sysimgblt fb_sys_fops drm crc32c_intel serio_raw virtio_scsi virtio_console virtio_net net_failover failover dm_mirror dm_region_hash dm_log dm_mod
Nov 10 18:42:19 MYHOSTNAME kernel: CPU: 0 PID: 686 Comm: kworker/0:5 Tainted: G E --------- - - 4.18.0-425.3.1.el8.x86_64 #1
Nov 10 18:42:19 MYHOSTNAME kernel: Hardware name: Hetzner vServer, BIOS 20171111 11/11/2017
Nov 10 18:42:19 MYHOSTNAME kernel: Workqueue: events_power_efficient wg_ratelimiter_gc_entries [wireguard]
Nov 10 18:42:19 MYHOSTNAME kernel: RIP: 0010:native_queued_spin_lock_slowpath+0x24/0x1c0
Nov 10 18:42:19 MYHOSTNAME kernel: Code: ff ff 0f 1f 40 00 0f 1f 44 00 00 0f 1f 44 00 00 ba 01 00 00 00 8b 07 85 c0 75 0d f0 0f b1 17 85 c0 75 f2 e9 6e b7 aa 00 f3 90 <eb> e9 81 fe 00 01 00 00 74 44 81 e6 00 ff ff ff 75 71 f0 0f ba 2f
Nov 10 18:42:19 MYHOSTNAME kernel: RSP: 0018:ffffafd680787e60 EFLAGS: 00000202 ORIG_RAX: ffffffffffffff13
Nov 10 18:42:19 MYHOSTNAME kernel: RAX: 0000000000000001 RBX: ffffffffc09b6160 RCX: ffffffffaebb9a40
Nov 10 18:42:19 MYHOSTNAME kernel: RDX: 0000000000000001 RSI: 0000000000003610 RDI: ffffffffc09b6fb8
Nov 10 18:42:19 MYHOSTNAME kernel: RBP: 000f41fbc48f9240 R08: ffffffffaebb9ae0 R09: 0000746e65696369
Nov 10 18:42:19 MYHOSTNAME kernel: R10: 8080808080808080 R11: 0000000000000018 R12: dead000000000200
Nov 10 18:42:19 MYHOSTNAME kernel: R13: 0000000000000000 R14: ffff973975da3e40 R15: 0000000000000000
Nov 10 18:42:19 MYHOSTNAME kernel: FS: 0000000000000000(0000) GS:ffff9739bcc00000(0000) knlGS:0000000000000000
Nov 10 18:42:19 MYHOSTNAME kernel: CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
Nov 10 18:42:19 MYHOSTNAME kernel: CR2: 000056413e027f44 CR3: 000000000366c000 CR4: 0000000000350ef0
Nov 10 18:42:19 MYHOSTNAME kernel: Call Trace:
Nov 10 18:42:19 MYHOSTNAME kernel: wg_ratelimiter_gc_entries+0x11b/0x170 [wireguard]
Nov 10 18:42:19 MYHOSTNAME kernel: process_one_work+0x1a7/0x360
Nov 10 18:42:19 MYHOSTNAME kernel: ? create_worker+0x1a0/0x1a0
Nov 10 18:42:19 MYHOSTNAME kernel: worker_thread+0x30/0x390
Nov 10 18:42:19 MYHOSTNAME kernel: ? create_worker+0x1a0/0x1a0
Nov 10 18:42:19 MYHOSTNAME kernel: kthread+0x10b/0x130
Nov 10 18:42:19 MYHOSTNAME kernel: ? set_kthread_struct+0x50/0x50
Nov 10 18:42:19 MYHOSTNAME kernel: ret_from_fork+0x35/0x40
Nov 10 18:42:47 MYHOSTNAME kernel: watchdog: BUG: soft lockup - CPU#0 stuck for 22s! [kworker/0:5:686]
Nov 10 18:42:47 MYHOSTNAME kernel: Modules linked in: nft_limit ip6t_REJECT nf_reject_ipv6 xt_owner nf_nat_ftp iptable_nat xt_REDIRECT xt_conntrack iptable_mangle nf_conntrack_ftp xt_LOG nf_log_syslog xt_limit iptable_filter ip_tables xt_multiport nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 nft_counter wireguard(E) ip6_udp_tunnel udp_tunnel ipt_REJECT nf_reject_ipv4 nft_compat nf_tables nfnetlink ext4 mbcache jbd2 intel_rapl_msr intel_rapl_common amd_energy crct10dif_pclmul crc32_pclmul iTCO_wdt iTCO_vendor_support ghash_clmulni_intel pcspkr i2c_i801 lpc_ich joydev virtio_balloon xfs libcrc32c sr_mod cdrom sd_mod t10_pi ahci sg libahci virtio_gpu drm_shmem_helper drm_kms_helper libata syscopyarea sysfillrect sysimgblt fb_sys_fops drm crc32c_intel serio_raw virtio_scsi virtio_console virtio_net net_failover failover dm_mirror dm_region_hash dm_log dm_mod

Steps To ReproduceOn RH 8.6:
1. Install kmod-wireguard
2. Configure some wireguard VPN
3. Enable wireguard
4. Update RH 8.6 to 8.7 (or only kernel)
TagsNo tags attached.

Activities

toracat

2022-11-10 14:07

administrator   ~0008727

Acknowledged.

pperry

2022-11-10 15:29

administrator   ~0008728

Thank you for the report.

Updated packages have been released and uploaded to the elrepo repository for el8.7:

kmod-wireguard-1.0.20220627-3.el8_7.elrepo.x86_64.rpm

Packages should be available on mirror sites shortly. Please can you test by updating and rebooting to the el8.7 kernel.

Feedback would be much appreciated.

Thanks

bkida

2022-11-10 16:02

reporter   ~0008729

The wireguard on kernel 4.18.0-425.3.1 now seems to work fine

pperry

2022-11-10 16:24

administrator   ~0008730

Great - thank you for the feedback.

Closing this bug as fixed

Issue History

Date Modified Username Field Change
2022-11-10 14:01 bkida New Issue
2022-11-10 14:01 bkida Status new => assigned
2022-11-10 14:01 bkida Assigned To => pperry
2022-11-10 14:07 toracat Status assigned => acknowledged
2022-11-10 14:07 toracat Note Added: 0008727
2022-11-10 15:29 pperry Note Added: 0008728
2022-11-10 16:02 bkida Note Added: 0008729
2022-11-10 16:24 pperry Note Added: 0008730
2022-11-10 16:25 pperry Status acknowledged => resolved
2022-11-10 16:25 pperry Resolution open => fixed