Hi Samuel,

Thanks for the extra info. I'm CCing PaXTeam on this, as likely it has
something to do with changes to PaX. I'll flip through the logs and
source and see if I can figure it out.

Regards,
Jason

On Tue, Dec 6, 2016 at 7:26 PM, Samuel Holland <samuel@sholland.org> wrote:
> Hello,
>
> (forgot the list, sorry for the duplicate)
>
> On 12/06/2016 12:19 PM, Jason A. Donenfeld wrote:
>>
>> I noticed you're using "4.8.11-hardened". What kernel is this
>> actually? Grsecurity?
>
>
> Yes, this is the =sys-kernel/hardened-sources-4.8.11 from Gentoo.
> Attached is my kernel configuration.
>
> Some additional information: Both this snapshot (0.0.20161129) and the
> previous one work fine with =sys-kernel/hardened-sources-4.7.10
> (effectively the same kernel config), so I have downgraded to that as a
> workaround.
>
> I didn't get netconsole set up until after about the third or fourth
> panic. The top line from the earlier backtraces was
> curve25519_generate_public for all of them I believe.
>
>> Jason
>
>
> Thanks,
> Samuel


On Tue, Dec 6, 2016 at 7:23 AM, Samuel Holland <samuel@sholland.org> wrote:
> Hello,
>
> I'm getting a reproducable kernel panic with WireGuard snapshot 20161129
> and Gentoo's hardened-sources 4.8.11 about one minute after boot
> (persistent keepalive is set to 25 seconds). Netconsole output is
> attached from three consecutive panics. For the first, since I have the
> interface start on boot, I had to rmmod wireguard to enable netconsole,
> and modprobe it again to prompt the panic. For the second two I was able
> to repeat my commands fast enough to catch the panic happen on its own.
>
> Regards,
> Samuel