Wireguard kernel module won't load on kernel 4.19.0-5 (Debian sid/buster)

Wireguard kernel module won't load on kernel 4.19.0-5 (Debian sid/buster)

[Nils Cant]

[-- Attachment #1.1: Type: text/plain, Size: 1767 bytes --]

Hello,

I'm unable to load the wireguard kernel module on Debian Sid or Debian Buster. (4.19.0-5-amd64 kernel)
(Debian buster is scheduled to be promoted to stable in a couple of weeks)

root@buster:~# modprobe wireguard
modprobe: ERROR: could not insert 'wireguard': Invalid argument
root@buster:~# modinfo wireguard
filename: /lib/modules/4.19.0-5-amd64/updates/dkms/wireguard.ko
alias: net-pf-16-proto-16-family-wireguard
alias: rtnl-link-wireguard
version: 0.0.20190601
author: Jason A. Donenfeld <Jason@zx2c4.com>
description: WireGuard secure network tunnel
license: GPL v2
srcversion: 69000E9D4B2B253E97C189A
depends: udp_tunnel,ip6_udp_tunnel
retpoline: Y
name: wireguard
vermagic: 4.19.0-5-amd64 SMP mod_unload modversions

The same version seems to work fine on Debian Stretch (4.9.0-9) or Fedora Core 30 (5.1.11-300)

The kernel ring throws a number of symbol version errors:

[...]
[ 97.450944] wireguard: loading out-of-tree module taints kernel.
[ 97.453335] wireguard: module verification failed: signature and/or required key missing - tainting kernel
[ 97.457727] wireguard: disagrees about version of symbol skb_put
[ 97.459772] wireguard: Unknown symbol skb_put (err -22)
[ 97.461555] wireguard: disagrees about version of symbol ip6_dst_hoplimit
[ 97.463609] wireguard: Unknown symbol ip6_dst_hoplimit (err -22)
[ 97.465590] wireguard: disagrees about version of symbol consume_skb
[ 97.467495] wireguard: Unknown symbol consume_skb (err -22)
[ 97.469326] wireguard: disagrees about version of symbol udp_sock_create4
[...]

I have tried both the apt package from debian unstable, as well as compile from source.

Any idea what could be going wrong? Is this a Debian kernel bug?
Thanks in advance,

Nils

[-- Attachment #1.2: Type: text/html, Size: 2098 bytes --]

[-- Attachment #2: Type: text/plain, Size: 148 bytes --]

_______________________________________________
WireGuard mailing list
WireGuard@lists.zx2c4.com
https://lists.zx2c4.com/mailman/listinfo/wireguard

Re: Wireguard kernel module won't load on kernel 4.19.0-5 (Debian sid/buster)

[Steven Honson]

[-- Attachment #1.1: Type: text/plain, Size: 3472 bytes --]

Hi Nils,

I've been unable to reproduce this on a vanilla VM built using `vagrant init debian/buster64; vagrant up`:

root@buster:/home/vagrant# modprobe wireguard
root@buster:/home/vagrant# modinfo wireguard
filename: /lib/modules/4.19.0-5-amd64/updates/dkms/wireguard.ko
alias: net-pf-16-proto-16-family-wireguard
alias: rtnl-link-wireguard
version: 0.0.20190601
author: Jason A. Donenfeld <Jason@zx2c4.com>
description: WireGuard secure network tunnel
license: GPL v2
srcversion: 69000E9D4B2B253E97C189A
depends: udp_tunnel,ip6_udp_tunnel
retpoline: Y
name: wireguard
vermagic: 4.19.0-5-amd64 SMP mod_unload modversions
root@buster:/home/vagrant# dmesg | grep wireguard
[ 17.664193] wireguard: loading out-of-tree module taints kernel.
[ 17.664231] wireguard: module verification failed: signature and/or required key missing - tainting kernel
[ 17.665555] wireguard: WireGuard 0.0.20190601 loaded. See www.wireguard.com for information.
[ 17.665556] wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld <Jason@zx2c4.com>. All Rights Reserved.
root@buster:/home/vagrant# uname -a
Linux buster 4.19.0-5-amd64 #1 SMP Debian 4.19.37-3 (2019-05-15) x86_64 GNU/Linux

The above output was from the WireGuard package from testing, I got similar results compiling WireGuard 0.0.20190601 from source too.

Can you check which version of the linux-image-4.19.0-5-amd64 package you have installed? I'm running 4.19.37-3 for reference.

Cheers,
Steven

On Fri, 21 Jun 2019, at 12:58 AM, Nils Cant wrote:
> Hello,
> 
> I'm unable to load the wireguard kernel module on Debian Sid or Debian Buster. (4.19.0-5-amd64 kernel)
> (Debian buster is scheduled to be promoted to stable in a couple of weeks)
> 
> root@buster:~# modprobe wireguard
> modprobe: ERROR: could not insert 'wireguard': Invalid argument
> root@buster:~# modinfo wireguard
> filename: /lib/modules/4.19.0-5-amd64/updates/dkms/wireguard.ko
> alias: net-pf-16-proto-16-family-wireguard
> alias: rtnl-link-wireguard
> version: 0.0.20190601
> author: Jason A. Donenfeld <Jason@zx2c4.com>
> description: WireGuard secure network tunnel
> license: GPL v2
> srcversion: 69000E9D4B2B253E97C189A
> depends: udp_tunnel,ip6_udp_tunnel
> retpoline: Y
> name: wireguard
> vermagic: 4.19.0-5-amd64 SMP mod_unload modversions
> 
> The same version seems to work fine on Debian Stretch (4.9.0-9) or Fedora Core 30 (5.1.11-300)
> 
> The kernel ring throws a number of symbol version errors:
> 
> [...]
> [ 97.450944] wireguard: loading out-of-tree module taints kernel.
> [ 97.453335] wireguard: module verification failed: signature and/or required key missing - tainting kernel
> [ 97.457727] wireguard: disagrees about version of symbol skb_put
> [ 97.459772] wireguard: Unknown symbol skb_put (err -22)
> [ 97.461555] wireguard: disagrees about version of symbol ip6_dst_hoplimit
> [ 97.463609] wireguard: Unknown symbol ip6_dst_hoplimit (err -22)
> [ 97.465590] wireguard: disagrees about version of symbol consume_skb
> [ 97.467495] wireguard: Unknown symbol consume_skb (err -22)
> [ 97.469326] wireguard: disagrees about version of symbol udp_sock_create4
> [...]
> 
> I have tried both the apt package from debian unstable, as well as compile from source.
> 
> Any idea what could be going wrong? Is this a Debian kernel bug?
> 
> 
> Thanks in advance,
> 
> Nils
> _______________________________________________
> WireGuard mailing list
> WireGuard@lists.zx2c4.com
> https://lists.zx2c4.com/mailman/listinfo/wireguard
> 

[-- Attachment #1.2: Type: text/html, Size: 5474 bytes --]

[-- Attachment #2: Type: text/plain, Size: 148 bytes --]

_______________________________________________
WireGuard mailing list
WireGuard@lists.zx2c4.com
https://lists.zx2c4.com/mailman/listinfo/wireguard

Re: Wireguard kernel module won't load on kernel 4.19.0-5 (Debian sid/buster)

[Laszlo KERTESZ]

[-- Attachment #1.1: Type: text/plain, Size: 2134 bytes --]

I have this kernel on Debian Stretch (from backports) and wireguard works
just fine with it.


On Sat, Jun 22, 2019 at 10:52 AM Nils Cant <nils@krash.be> wrote:

> Hello,
>
> I'm unable to load the wireguard kernel module on Debian Sid or Debian
> Buster. (4.19.0-5-amd64 kernel)
> (Debian buster is scheduled to be promoted to stable in a couple of weeks)
>
> root@buster:~# modprobe wireguard
> modprobe: ERROR: could not insert 'wireguard': Invalid argument
> root@buster:~# modinfo wireguard
> filename: /lib/modules/4.19.0-5-amd64/updates/dkms/wireguard.ko
> alias: net-pf-16-proto-16-family-wireguard
> alias: rtnl-link-wireguard
> version: 0.0.20190601
> author: Jason A. Donenfeld <Jason@zx2c4.com>
> description: WireGuard secure network tunnel
> license: GPL v2
> srcversion: 69000E9D4B2B253E97C189A
> depends: udp_tunnel,ip6_udp_tunnel
> retpoline: Y
> name: wireguard
> vermagic: 4.19.0-5-amd64 SMP mod_unload modversions
>
> The same version seems to work fine on Debian Stretch (4.9.0-9) or Fedora
> Core 30 (5.1.11-300)
>
> The kernel ring throws a number of symbol version errors:
>
> [...]
> [ 97.450944] wireguard: loading out-of-tree module taints kernel.
> [ 97.453335] wireguard: module verification failed: signature and/or
> required key missing - tainting kernel
> [ 97.457727] wireguard: disagrees about version of symbol skb_put
> [ 97.459772] wireguard: Unknown symbol skb_put (err -22)
> [ 97.461555] wireguard: disagrees about version of symbol ip6_dst_hoplimit
> [ 97.463609] wireguard: Unknown symbol ip6_dst_hoplimit (err -22)
> [ 97.465590] wireguard: disagrees about version of symbol consume_skb
> [ 97.467495] wireguard: Unknown symbol consume_skb (err -22)
> [ 97.469326] wireguard: disagrees about version of symbol udp_sock_create4
> [...]
>
> I have tried both the apt package from debian unstable, as well as compile
> from source.
>
> Any idea what could be going wrong? Is this a Debian kernel bug?
>
>
> Thanks in advance,
>
> Nils
> _______________________________________________
> WireGuard mailing list
> WireGuard@lists.zx2c4.com
> https://lists.zx2c4.com/mailman/listinfo/wireguard
>

[-- Attachment #1.2: Type: text/html, Size: 2805 bytes --]

[-- Attachment #2: Type: text/plain, Size: 148 bytes --]

_______________________________________________
WireGuard mailing list
WireGuard@lists.zx2c4.com
https://lists.zx2c4.com/mailman/listinfo/wireguard