Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67;
Message-ID: <1518021487.2100.2.camel@debian.org>
Subject: Regression for ip6-in-ip4 IPsec tunnel in 4.14.16
From:   Yves-Alexis Perez <corsac@debian.org>
To:     Mike Maloney <maloney@google.com>
Cc:     "David S. Miller" <davem@davemloft.net>,
        Alexey Kuznetsov <kuznet@ms2.inr.ac.ru>,
        Hideaki YOSHIFUJI <yoshfuji@linux-ipv6.org>,
        netdev@vger.kernel.org, linux-kernel@vger.kernel.org,
        Eric Dumazet <edumazet@google.com>,
        Greg Kroah-Hartman <gregkh@linuxfoundation.org>,
        stable@vger.kernel.org, debian-kernel@lists.debian.org
Date:   Wed, 07 Feb 2018 17:38:07 +0100
Content-Type: multipart/signed; micalg="pgp-sha256";
        protocol="application/pgp-signature"; boundary="=-L1rlN2cFfKF51vgztWia"
Mime-Version: 1.0
Sender: linux-kernel-owner@vger.kernel.org
Precedence: bulk


--=-L1rlN2cFfKF51vgztWia
Content-Type: multipart/mixed; boundary="=-8+Gs/Tr7DZ3otw6bh12O"


--=-8+Gs/Tr7DZ3otw6bh12O
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

Hi Mike,

I noticed a regression in 4.14.16 stable kernel (I assume it's also
present in mainline).

I'm using an IPsec setup where I tunnel all my IP trafic to a gateway.
The tunnel can use either IPv6 or IPv4 (depending on what's available
locally) and will route both IPv4 and IPv6 (my gateway will assign both
family addresses).

The tunnel doesn't use ESP directly but rather encapsulates in UDP.

Starting with 4.14.16, IPv6 traffic is broken. When trying a simple ping
to an IPv6 address I get:

ping: sendmsg: Invalid argument

I bisected 4.14.15 to 4.14.16 and got the attached bisect log, which
ends with 8278804e05f6bcfe3fdfea4a404020752ead15a6 as the offending
commit. The -EINVAL is consistent with the =E2=80=9CInvalid argument=E2=80=
=9D return
from ping. I didn't try yet on a pure IPv6 setup (without IPsec
tunneling) but will followup when I have a chance to test it.

Reverting that commit on top of 4.14.17 fixes the problem.

If you need more info, please ask.

Regards,
--=20
Yves-Alexis
--=-8+Gs/Tr7DZ3otw6bh12O
Content-Disposition: attachment; filename="ip6-bisect.log"
Content-Type: text/x-log; name="ip6-bisect.log"; charset="UTF-8"
Content-Transfer-Encoding: base64

IyBiYWQ6IFs2YzcwMDc2NjY3ZjI0NmRjMjAwYzdhM2U5YWVhYmQyZjhmMzg4NDE2XSBMaW51eCA0
LjE0LjE2CiMgZ29vZDogW2ExNjEzNGIwODIzNDZiN2U3YzM0ZjU5NGEwNzYzZWFmYWNkY2VhOTJd
IExpbnV4IDQuMTQuMTUKZ2l0IGJpc2VjdCBzdGFydCAndjQuMTQuMTYnICd2NC4xNC4xNScKIyBi
YWQ6IFs3MmQ0ZjNhYmQ2ZDM1MjFmNWNkOTc4YjYzZjkzMDEwNTFmMTI3ODEyXSByODE2OTogZml4
IG1lbW9yeSBjb3JydXB0aW9uIG9uIHJldHJpZXZhbCBvZiBoYXJkd2FyZSBzdGF0aXN0aWNzLgpn
aXQgYmlzZWN0IGJhZCA3MmQ0ZjNhYmQ2ZDM1MjFmNWNkOTc4YjYzZjkzMDEwNTFmMTI3ODEyCiMg
Z29vZDogWzI5NWJjZmJiY2Y1YTc0MWU5MTAzNjA1YzMyNTIyNzZlZDIxNDMzYmJdIEFSTTogbmV0
OiBicGY6IGNvcnJlY3Qgc3RhY2sgbGF5b3V0IGRvY3VtZW50YXRpb24KZ2l0IGJpc2VjdCBnb29k
IDI5NWJjZmJiY2Y1YTc0MWU5MTAzNjA1YzMyNTIyNzZlZDIxNDMzYmIKIyBiYWQ6IFs4Mjc4ODA0
ZTA1ZjZiY2ZlM2ZkZmVhNGE0MDQwMjA3NTJlYWQxNWE2XSBpcHY2OiBmaXggdWRwdjYgc2VuZG1z
ZyBjcmFzaCBjYXVzZWQgYnkgdG9vIHNtYWxsIE1UVQpnaXQgYmlzZWN0IGJhZCA4Mjc4ODA0ZTA1
ZjZiY2ZlM2ZkZmVhNGE0MDQwMjA3NTJlYWQxNWE2CiMgZ29vZDogWzlhZDk3MGM4YTEzNTk1ZTM4
ZDNhZjk4MTE0YmNiYmVjNmQ4YTViZTRdIGRybS92YzQ6IEZpeCBOVUxMIHBvaW50ZXIgZGVyZWZl
cmVuY2UgaW4gdmM0X3NhdmVfaGFuZ19zdGF0ZSgpCmdpdCBiaXNlY3QgZ29vZCA5YWQ5NzBjOGEx
MzU5NWUzOGQzYWY5ODExNGJjYmJlYzZkOGE1YmU0CiMgZ29vZDogWzQyZDY4YmYyYTQyMzgxNjQy
ZWE1YWU0NjBjNmE1ZDg2YTU2MjEzZjBdIGlwdjQ6IE1ha2UgbmVpZ2ggbG9va3VwIGtleXMgZm9y
IGxvb3BiYWNrL3BvaW50LXRvLXBvaW50IGRldmljZXMgYmUgSU5BRERSX0FOWQpnaXQgYmlzZWN0
IGdvb2QgNDJkNjhiZjJhNDIzODE2NDJlYTVhZTQ2MGM2YTVkODZhNTYyMTNmMAojIGdvb2Q6IFsy
Mjk1YjNkZDU0M2Y5YTVhMTgzNGU0MjY1ZDUwNmE1YmMwODE5OTgzXSBpcHY2OiBGaXggZ2V0c29j
a29wdCgpIGZvciBzb2NrZXRzIHdpdGggZGVmYXVsdCBJUFY2X0FVVE9GTE9XTEFCRUwKZ2l0IGJp
c2VjdCBnb29kIDIyOTViM2RkNTQzZjlhNWExODM0ZTQyNjVkNTA2YTViYzA4MTk5ODMKIyBmaXJz
dCBiYWQgY29tbWl0OiBbODI3ODgwNGUwNWY2YmNmZTNmZGZlYTRhNDA0MDIwNzUyZWFkMTVhNl0g
aXB2NjogZml4IHVkcHY2IHNlbmRtc2cgY3Jhc2ggY2F1c2VkIGJ5IHRvbyBzbWFsbCBNVFUK


--=-8+Gs/Tr7DZ3otw6bh12O--

--=-L1rlN2cFfKF51vgztWia
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: This is a digitally signed message part

-----BEGIN PGP SIGNATURE-----

iQEzBAABCAAdFiEE8vi34Qgfo83x35gF3rYcyPpXRFsFAlp7K28ACgkQ3rYcyPpX
RFvWegf9Ex1DIVvXam8ohFGGmIXbnruVY5kLjJJEH1R89M0O5CK4XBkYJGrY7HBh
WC+6XEi33rdXm1tYa4WULmmVrIllEQVSQUx5uLxKnm7y1Ok8Bm0pCVqsPnmre50H
MuGDtDQ/erQRe8mgkQVMc9uiNShyDzaM9LJsEzG/JUJ44qNsR7uieMQtEEGr1CJ/
djlFphgYu1Ie5pjEH6c7Nx5i/djV8/l0CaroN5Aop75b5VIK0oOykJp3LtU8lgvL
ERc/oE7CTkDuCi7spECJzDZXeROEa4js+h9Vwh6UuPXW9l4vx/r/yKiJR76i1HF1
lLG1cVz+4NbpsWa1HXXhUKSWQ3lTlA==
=9jN8
-----END PGP SIGNATURE-----

--=-L1rlN2cFfKF51vgztWia--