[Openswan Users] Kernel Oops and Panic

[Egon Burgener]

Hi all

I am building a system with openswan 2.6.18 and kernel 2.6.25. NAT-T  
and KLIPS patches are applied.

As soon as ipsec gets started I get a kernel Oops (see below). If I  
chose an other algorithm I get the same Oops
( like "IP: [<c8927b2d>] :ipsec:des_32+0x3/0x499" ).

Establishing tunnels works, but as soon as a packet has to be  
decrypted I get a kernel panic

Does anyone have a running openswan installation on kernel 2.6.25 with  
KLIPS?
Does anyone has a idea what the problem could be or if there is a BUG?

Thx
Egon


BUG: unable to handle kernel NULL pointer dereference at 00000000
IP: [<c8927b2d>] :ipsec:aes_32+0x3/0x499
*pdpt = 0000000001f3b001 *pde = 0000000000000000
Oops: 0002 [#8] SMP
Modules linked in: authenc aead deflate zlib_deflate sha256_generic  
aes_generic ipsec xt_state ipt_LOG xt_limit iptable_raw iptable_nat  
iptable_mangle iptable_filte
_addrtype xt_dscp xt_string xt_multiport xt_conntrack xt_connmark  
xt_DSCP xt_MARK xt_CONNMARK ip_tables nf_nat_ftp nf_nat  
nf_conntrack_ipv4 nf_conntrack_ftp nf_conn
  [last unloaded: aes_generic]

Pid: 15920, comm: pluto Tainted: G      D  (2.6.25 #1)
EIP: 0060:[<c8927b2d>] EFLAGS: 00010202 CPU: 0
EIP is at aes_32+0x3/0x499 [ipsec]
EAX: c431ec00 EBX: c8954560 ECX: 00000004 EDX: 00000000
ESI: c1c56c40 EDI: c431ec00 EBP: c1c51a1c ESP: c1c51a08
  DS: 007b ES: 007b FS: 00d8 GS: 0000 SS: 0068
Process pluto (pid: 15920, ti=c1c51000 task=c321a2f0 task.ti=c1c51000)
Stack: c431ec00 c1c56c40 c8954560 c116122b c1c51a48 c1c51a2c 00000286  
c89262f2
        00000000 c1c51a54 c8925e4f 04010000 cccccccd 00000246 00001a68  
c78015c0
        c8954560 c423c400 00000000 c1c51a94 c8921c5b 00000010 0000000e  
c1c51a78
Call Trace:
  [<c116122b>] ? put_dec+0x5b/0x70
  [<c89262f2>] ? AES_set_key+0x12/0x20 [ipsec]
  [<c8925e4f>] ? .des_ede3_cbc_encrypt_end+0x1f/0x60 [ipsec]
  [<c8921c5b>] ? ipsec_alg_enc_key_create+0x12b/0x220 [ipsec]
  [<c89219e8>] ? ipsec_alg_get+0x38/0x60 [ipsec]
  [<c8901dec>] ? ipsec_sa_init+0x23c/0xa90 [ipsec]
  [<c1161754>] ? vsnprintf+0x2d4/0x4f0
  [<c891c760>] ? pfkey_address_build+0x280/0x380 [ipsec]
  [<c891c228>] ? pfkey_sa_builds+0x1a8/0x280 [ipsec]
  [<c13e1a5c>] ? fn_hash_lookup+0x1c/0xd0
  [<c13dddb2>] ? inet_addr_type+0x82/0xe0
  [<c8913061>] ? pfkey_add_parse+0x1c1/0x7e0 [ipsec]
  [<c1161754>] ? vsnprintf+0x2d4/0x4f0
  [<c89219e8>] ? ipsec_alg_get+0x38/0x60 [ipsec]
  [<c8922b8f>] ? ipsec_alg_sa_init+0x4f/0xd0 [ipsec]
  [<c8918070>] ? pfkey_key_process+0xa0/0x1d0 [ipsec]
  [<c89178dc>] ? pfkey_sa_process+0x18c/0x1a0 [ipsec]
  [<c8917638>] ? pfkey_msg_interp+0x298/0x3b0 [ipsec]
  [<c1414dec>] ? schedule_timeout+0x8c/0x90
  [<c1381a2a>] ? memcpy_fromiovec+0x3a/0x70
  [<c8911013>] ? pfkey_sendmsg+0x2c3/0x4d0 [ipsec]
  [<c1379814>] ? do_sock_write+0x94/0xb0
  [<c1379881>] ? sock_aio_write+0x51/0x70
  [<c1074377>] ? do_sync_write+0xc7/0x120
  [<c103b550>] ? autoremove_wake_function+0x0/0x50
  [<c1074522>] ? vfs_write+0x152/0x160
  [<c10745dd>] ? sys_write+0x3d/0x70
  [<c1003c8a>] ? syscall_call+0x7/0xb
  =======================
Code: 89 e5 83 ec 08 53 56 57 8b 55 0c 8b 4d 14 81 f9 80 00 00 00 72  
03 c1 e9 03 83 f9 20 74 0a 83 f9 18 74 05 b9 10 00 00 00 c1 e9 02 <89>  
4a 00 8d 41 06 89 42 04
  10 8d 7a 08 fc 55 89 c8 f3 a5
EIP: [<c8927b2d>] aes_32+0x3/0x499 [ipsec] SS:ESP 0068:c1c51a08
---[ end trace ca143223eefdc828 ]---