Lately my system has been freezing and completely unresponsive. ctrl+alt+backspace, reisub, nothing works and I have to hard reset. I found some logs, syslog, and have posted a few leading up to the freeze. They’re all from ProtonVPN (I’m on beta). I’m hoping there’s something I can do without just not using ProtonVPN, assuming proton is the culprit. Can anyone make sense of this?

I don’t know how much of this info should be private so I redacted some, timezone, pc name, mac, ports.

2025-12-12T11:09:27.835680TIME MYPC protonvpn-app[4792]: 2025-12-12T15:09:27.835612+00:00 | proton.vpn.local_agent/port_forwarding.rs:225 | INFO | Receiving Response { version: 0, operation: 130, response_code: 0, gateway_epoch_seconds: 4116943, internal_port: REDACTED, external_port: REDACTED, lifetime_seconds: 60 }
2025-12-12T11:09:28.257753TIME MYPC protonvpn-app[4792]: 2025-12-12T15:09:28.257690+00:00 | proton.vpn.session.utils:112 | INFO | API:RESPONSE | '/feature/v2/frontend'
2025-12-12T11:09:28.258827TIME MYPC protonvpn-app[4792]: 2025-12-12T15:09:28.258799+00:00 | proton.vpn.core.refresher.feature_flags_refresher:94 | INFO | Next feature flag refresh scheduled in 1:39:23.178147
2025-12-12T11:09:32.026373-04:00 MYPC kernel: [UFW BLOCK] IN=proton0 OUT= MAC= SRC=REDACTED DST=REDACTED LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=30062 PROTO=TCP SPT=REDACTED DPT=REDACTED WINDOW=29200 RES=0x00 SYN URGP=0 
2025-12-12T11:32:17.244594TIME MYPC systemd-modules-load[957]: Inserted module 'lp'

Edit: The log includes the first entry after rebooting at 11:32. The system clock froze at 11:09:55, 22 seconds after the kernel entry.

Edit 2: There a whole bunch of entries prior to the ones I posted, all very similar mentioning proton and most with UFW block, for example:

2025-12-12T11:07:12.127370-04:00 MYPC kernel: [UFW BLOCK] IN=proton0 OUT= MAC= SRC=REDACTED DST=REDACTED LEN=52 TOS=0x00 PREC=0x00 TTL=116 ID=9565 PROTO=TCP SPT=REDACTED DPT=REDACTED WINDOW=65535 RES=0x00 SYN URGP=0

I’m realizing now the reference to Proton is just my connection.

Edit 3: If I’m reading this stuff correctly, a bunch of UFW BLOCK happened before the crash. Assuming SRC is the source IP, they’re all different. Assuming DPT is the port they’re trying to access, they’re all the same ProtonVPN port. There are more but between 11:01:32 and 11:09:32 there were 24 UFW blocks.

Edit 4: Froze again while messing around with my firewall. I had installed Firewall Configuration a little while ago to figure out some server stuff. No idea if it had anything to do with it, but I’ve deleted that and reset my ufw. I found one post online talking about firewall packets freezing their Arch system, so I’m wondering if that’s the root cause, I’m not great with network stuff haha. I’ve also installed fail2ban to block multiple ip attempts. Only weird thing now is previously my firewall had port numbers and stuff, and now it’s 0s like:

Allow incoming 0.0.0.0 ssh (0/TCP)

Allow incoming :: ssh (0/TCP)

Allow incoming 0.0.0.0 dhcpv6-client (0/TCP) etc.

No idea if that’s normal

  • data1701d (He/Him)@startrek.website
    link
    fedilink
    English
    arrow-up
    3
    ·
    edit-2
    22 days ago

    I don’t think it’s ProtonVPN, at least not directly, as those happened over 20 minutes before the crash (I’m assuming it happened somewhere around 9:32:30)

    That last one looks really odd, and I’m wondering what that kernel module is used for. I’m looking around real quick.

    EDIT: Looks like it’s for line printers. I’m trying to think why your kernel would randomly load that. Can we see the contents of the following?:

    • /etc/modules-load.d/modules.conf
    • /usr/lib/modules-load.d/modules.conf
    • /usr/local/lib/modules-load.d/modules.conf (if it exists)
    • /run/modules-load.d/modules.conf (if it exists)

    Also, can you give us more information about your hardware, just to be sure?

    • Jack_Burton@lemmy.caOP
      link
      fedilink
      arrow-up
      2
      ·
      edit-2
      22 days ago

      Should have mentioned I included the last log entry from when I got it back up. The clock froze at 11:09:55, 22 seconds after the kernel log entry. I booted back up at 11:32.

      -/etc/modules-load.d/modules.conf

      # /etc/modules is obsolete and has been replaced by /etc/modules-load.d/.
      # Please see modules-load.d(5) and modprobe.d(5) for details.
      #
      # Updating this file still works, but it is undocumented and unsupported.
      
      
      • /usr/lib/modules-load.d/modules.conf This does not exist. In that directory I have /usr/lib/modules-load.d/fwupd-msr.conf and /usr/lib/modules-load.d/osspd.conf

      • The other two do not exist.

      • OS: Ubuntu 24.04 noble

      Kernel: x86_64 Linux 6.14.0-37-generic

      Uptime: 13m

      Packages: 3944

      Shell: bash 5.2.21

      Resolution: 5250x2160

      DE: KDE 5.115.0 / Plasma 5.27.12

      WM: KWin

      GTK Theme: Materia-dark [GTK2/3]

      Icon Theme: breeze-dark

      CPU: 11th Gen Intel Core i5-11400F @ 12x 4.4GHz [62.0°C]

      GPU: NVIDIA GeForce RTX 3060

      RAM: 5560MiB / 15860MiB