From: Florian Westphal <[email protected]>
Date: Sun, 6 Aug 2017 10:19:07 +0200
> Quoting Ilan Tayari:
> 1. Set up a host-to-host IPSec tunnel (or transport, doesn't matter)
> 2. Ping over IPSec, or do something to populate the pcpu cache
> 3. Join a MC group, then leave MC group
> 4. Try to ping again using same CPU as before -> traffic
> doesn't egress the machine at all
>
> Ilan debugged the problem down to the fact that one of the path dsts
> devices point to lo due to earlier dst_dev_put().
> In this case, dst is marked as DEAD and we cannot reuse the bundle.
>
> The cache only asserted that the requested policy and that of the cached
> bundle match, but its not enough - also verify the path is still valid.
>
> Fixes: ec30d78c14a813 ("xfrm: add xdst pcpu cache")
> Reported-by: Ayham Masood <[email protected]>
> Tested-by: Ilan Tayari <[email protected]>
> Signed-off-by: Florian Westphal <[email protected]>
Since this regression is from the flow cache removal that went directly
into my tree, I'll apply this directly to net-next as well.
Thanks Florian.
