[Openswan Users] Pluto not work after log message : Errno 28: No space left on device

Fri Dec 19 00:22:02 EST 2008

> Linux  kernel  2.6.19  , klips nat-t patched
> Openswan  2.4.9
Now I upate to 
Linux INTERNET 2.6.27.8-P4-SMP #16 SMP PREEMPT Fri Dec 19 01:18:59 CST 2008
i686 unknown
Linux Openswan 2.6.20rc1 (klips)
Error again.
Next time I will compile with " LEAK_DETECTIVE" and try again for more info.
2008/12/19 12:56:18 INTERNET kernel: KLIPS ipsec_SAref_alloc: unexpected
error, refFreeListHead = 112 points to invalid entry.

version 2
config setup
        pluto=yes
        plutowait=no
        plutodebug=none
        klipsdebug=none
        uniqueids=yes
        nat_traversal=yes
        nhelpers=0

conn    %default
        type=tunnel
        keyingtries=0
        keyexchange=ike
        auto=start
        authby=secret
        auth=esp
        ikelifetime=1h
        rekeymargin=10m
        rekeyfuzz=20%
        keylife=8h
        compress=no

conn PROFILE_1
        pfs=yes
        keylife=86400s
        rekey=no
        ikelifetime=60000s
        ike=des-md5-modp768,des-sha1-modp768,3des-md5,3des-sha1,3des-md5
        esp=3des-md5
        compress=no
        left=xx.xx.xx.xx.xx
        leftnexthop=xx.xx.xx.xx
        leftsubnet=129.100.248.0/21
        leftsourceip=129.100.253.50
        auto=add
        right=%any
        rightsubnet=vhost:%all

#Disable Opportunistic Encryption
conn block
        auto=ignore
conn private
        auto=ignore
conn private-or-clear
        auto=ignore
conn clear-or-private
        auto=ignore
conn clear
        auto=ignore
conn packetdefault
        auto=ignore

2008/12/19 12:56:18 INTERNET pluto[7951]: "PROFILE_1"[1339] 117.92.182.123
#17261: the peer proposed: 129.100.248.0/21:0/0 -> 128.10
0.20.0/24:0/0
2008/12/19 12:56:18 INTERNET pluto[7951]: "PROFILE_1"[1339] 117.92.182.123
#17263: responding to Quick Mode proposal {msgid:8886d9e2
}
2008/12/19 12:56:18 INTERNET pluto[7951]: "PROFILE_1"[1339] 117.92.182.123
#17263:     us: 129.100.248.0/21===218.94.70.147<218.94.7
0.147>[+S=C]---218.94.70.145
2008/12/19 12:56:18 INTERNET pluto[7951]: "PROFILE_1"[1339] 117.92.182.123
#17263:   them: 117.92.182.123[+S=C]===128.100.20.0/24
2008/12/19 12:56:18 INTERNET pluto[7951]: "PROFILE_1"[1339] 117.92.182.123
#17263: keeping refhim=11496 during rekey
2008/12/19 12:56:18 INTERNET kernel: KLIPS ipsec_SAref_alloc: unexpected
error, refFreeListHead = 112 points to invalid entry.
2008/12/19 12:56:18 INTERNET pluto[7951]: ERROR: "PROFILE_1"[1339]
117.92.182.123 #17263: pfkey write() of K_SADB_ADD message 91421
for Add SA tun.56a5 at 117.92.182.123 failed. Errno 29: Illegal seek
2008/12/19 12:56:18 INTERNET pluto[7951]: |   02 03 00 09  0d 00 00 00  1d
65 01 00  0f 1f 00 00
2008/12/19 12:56:18 INTERNET pluto[7951]: |   03 00 01 00  00 00 56 a5  00
01 00 00  00 00 00 00
2008/12/19 12:56:18 INTERNET pluto[7951]: |   00 00 00 00  00 00 00 00  03
00 05 00  00 00 00 00
2008/12/19 12:56:18 INTERNET pluto[7951]: |   02 00 00 00  75 5c b6 7b  00
00 00 00  00 00 00 00
2008/12/19 12:56:18 INTERNET pluto[7951]: |   03 00 06 00  00 00 00 00  02
00 00 00  da 5e 46 93
2008/12/19 12:56:18 INTERNET pluto[7951]: |   00 00 00 00  00 00 00 00  02
00 20 00  00 00 00 00
2008/12/19 12:56:18 INTERNET pluto[7951]: |   e8 2c 00 00  00 00 00 00
2008/12/19 12:56:18 INTERNET kernel: KLIPS pfkey_add_parse: failed to intern
SA as SAref#0
2008/12/19 12:56:18 INTERNET kernel: KLIPS ipsec_SAref_alloc: unexpected
error, refFreeListHead = 112 points to invalid entry.
2008/12/19 12:56:18 INTERNET kernel: KLIPS pfkey_add_parse: failed to intern
SA as SAref#0
2008/12/19 12:56:18 INTERNET pluto[7951]: ERROR: "PROFILE_1"[2710]
60.171.109.15 #17262: pfkey write() of K_SADB_ADD message 91423 f
or Add SA esp.399a8d2b at 60.171.109.15 failed. Errno 29: Illegal seek
2008/12/19 12:56:18 INTERNET pluto[7951]: |   02 03 00 03  12 00 00 00  1f
65 01 00  0f 1f 00 00
2008/12/19 12:56:18 INTERNET pluto[7951]: |   03 00 01 00  39 9a 8d 2b  40
01 02 03  00 00 00 00
2008/12/19 12:56:18 INTERNET pluto[7951]: |   00 00 00 00  00 00 00 00  03
00 05 00  00 00 00 00
2008/12/19 12:56:18 INTERNET pluto[7951]: |   02 00 00 00  da 5e 46 93  00
00 00 00  00 00 00 00
2008/12/19 12:56:18 INTERNET pluto[7951]: |   03 00 06 00  00 00 00 00  02
00 00 00  3c ab 6d 0f
2008/12/19 12:56:18 INTERNET pluto[7951]: |   00 00 00 00  00 00 00 00  03
00 08 00  80 00 00 00
2008/12/19 12:56:18 INTERNET pluto[7951]: |   a1 5b 7a d6  68 a2 4e b1  ba
f9 e6 fe  bb 17 01 11
2008/12/19 12:56:18 INTERNET pluto[7951]: |   04 00 09 00  c0 00 00 00  48
fb c1 df  58 c2 27 62
2008/12/19 12:56:18 INTERNET pluto[7951]: |   60 40 d9 66  78 62 1d d3  34
09 f1 aa  50 54 a4 7a

--------------
From: Paul Wouters [mailto:paul at xelerance.com] 
Time: 2008年12月16日 22:00
To. Leo
cc: users at openswan.org
Subject: Re: Pluto not work after log message : Errno 28: No space left on
device

On Tue, 16 Dec 2008, Leo wrote:

> Hi , all and Paul 
> Linux  kernel  2.6.19  , klips nat-t patched
> Openswan  2.4.9 
> 
> pluto not work after  message
> 2008/12/14 16:36:10 INTERNET pluto[1415]: ERROR: "PROFILE_1"[676]
> 60.166.215.36 #21071: pfkey write() of SADB_ADD message 63711 for Add SA
> tun.4593 at 60.166.215.36 failed. Errno 28: No space left on device

Looks like you ran out of memory. Upgrade to at least 2.4.13. Then if the
problem remains, compile with LEAK_DETECTIVE and after a while when memory
has been leaked restart (not crash!) and it should log where the memory
leaks occur.

Paul