From mboxrd@z Thu Jan  1 00:00:00 1970
From: Yves-Alexis Perez <corsac@debian.org>
Subject: Re: Regression for ip6-in-ip4 IPsec tunnel in 4.14.16
Date: Wed, 07 Feb 2018 18:23:02 +0100
Message-ID: <1518024182.2136.3.camel@debian.org>
References: <1518021487.2100.2.camel@debian.org>
         <1518023139.2100.7.camel@debian.org>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg="pgp-sha256";
        protocol="application/pgp-signature"; boundary="=-RiUeG7/sVUdT5Bwl3BXM"
Cc: "David S. Miller" <davem@davemloft.net>,
        Alexey Kuznetsov <kuznet@ms2.inr.ac.ru>,
        Hideaki YOSHIFUJI <yoshfuji@linux-ipv6.org>,
        netdev@vger.kernel.org, linux-kernel@vger.kernel.org,
        Eric Dumazet <edumazet@google.com>,
        Greg Kroah-Hartman <gregkh@linuxfoundation.org>,
        stable@vger.kernel.org, debian-kernel@lists.debian.org,
        Tobias Brunner <tobias@strongswan.org>
To: Mike Maloney <maloney@google.com>
Return-path: <stable-owner@vger.kernel.org>
In-Reply-To: <1518023139.2100.7.camel@debian.org>
Sender: stable-owner@vger.kernel.org
List-Id: netdev.vger.kernel.org


--=-RiUeG7/sVUdT5Bwl3BXM
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

On Wed, 2018-02-07 at 18:05 +0100, Yves-Alexis Perez wrote:
> I'll try to printk the mtu before returning EINVAL to see why it's lower =
than
> 1280, but maybe the IP encapsulation is not correctly handled?

I did:

diff --git a/net/ipv6/ip6_output.c b/net/ipv6/ip6_output.c
index 3763dc01e374..d3c651158d35 100644
--- a/net/ipv6/ip6_output.c
+++ b/net/ipv6/ip6_output.c
@@ -1215,7 +1215,7 @@ static int ip6_setup_cork(struct sock *sk, struct ine=
t_cork_full *cork,
                        mtu =3D np->frag_size;
        }
        if (mtu < IPV6_MIN_MTU)
-               return -EINVAL;
+               printk("mtu: %d\n", mtu);
        cork->base.fragsize =3D mtu;
        if (dst_allfrag(rt->dst.path))
                cork->base.flags |=3D IPCORK_ALLFRAG;

and I get:

f=C3=A9vr. 07 18:19:50 scapa kernel: mtu: 1218

and it doesn't depend on the original packet size (same thing happens with
ping -s 100). It also happens with UDP (DNS) traffic, but apparently not wi=
th
TCP.

Regards,
--=20
Yves-Alexis
--=-RiUeG7/sVUdT5Bwl3BXM
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: This is a digitally signed message part

-----BEGIN PGP SIGNATURE-----

iQEzBAABCAAdFiEE8vi34Qgfo83x35gF3rYcyPpXRFsFAlp7NfYACgkQ3rYcyPpX
RFt+PwgAx+VG1WqNLIKE3pjxS15vsQqDdP0GA2BqG98fT/viHocDeg6+zCDqvLnW
12Nv/Nr+OVMRcFO87aVWvM5Z4u/CXIzObjpzUYdV2NGBOIq/S22lnlZhi50eqY0y
vzl1us9bFdP6Jgba/JLT3UirJ2NbB39wxFO2aWaHO2v0zn0E1ETZF7jSNjkiI4xL
kVZcsNtlugX19qDSiNWeXbRfZ2jU7JI1Pmi6wVQX7MtrjdHAsLBrPaSwqMw1DmkW
9kly6UpafeT8Lw3WrvoXaWJSW4wvdku6lUHxa5ztxALNCpdlFqa+NmpxcoEIixtj
ttdGcJEUEBb2veDkaPunq4jIkGIW2w==
=SBA+
-----END PGP SIGNATURE-----

--=-RiUeG7/sVUdT5Bwl3BXM--