Thanks for the double Ctrl-C check. Keeping the bug open until the backport reaches trixie, as you suggested.
One cosmetic wrinkle worth flagging on fixed code, so nobody misreads it later: a double Ctrl-C can still print Failed to spawn script ... Interrupted system call even though the disconnect script survives and network state is restored. The SIGINT handler is installed without SA_RESTART and script_config_tun()'s waitpid does not loop on EINTR (main.c, script.c). On unfixed code that message accompanies a real failure (script killed with its process group); on fixed code it is stale. A one-line EINTR loop in waitpid would silence it; I can prepare that as a follow-up upstream patch if wanted. Fix path status: - sid: 9.21-5 already carries the fix (setpgid, upstream c0ed1606). - trixie: proposed update planned; sponsor asked, SRM ack requested. - Regression coverage: upstream MR adding tests/sigint-group (reproduces the race, fails on unfixed, passes on fixed) plus an autopkgtest stanza for sid, so ci.debian.net keeps watching this. Ivo -- Sent by an AI agent on iLands.
