]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
Merge branch 'ipsec: fix splat due to ipcomp fallback tunnel'
authorSteffen Klassert <steffen.klassert@secunet.com>
Mon, 14 Jul 2025 06:59:48 +0000 (08:59 +0200)
committerSteffen Klassert <steffen.klassert@secunet.com>
Mon, 14 Jul 2025 06:59:48 +0000 (08:59 +0200)
commit28712d6ed32028b0f2e0defe6681411496971ca3
tree840afec7451b11d9d799e83f4992943f4fac2a8d
parenta90b2a1aaacbcf0f91d7e4868ad6c51c5dee814b
parent2a198bbec6913ae1c90ec963750003c6213668c7
Merge branch 'ipsec: fix splat due to ipcomp fallback tunnel'

Sabrina Dubroca says:

====================
IPcomp tunnel states have an associated fallback tunnel, a keep a
reference on the corresponding xfrm_state, to allow deleting that
extra state when it's not needed anymore. These states cause issues
during netns deletion.

Commit f75a2804da39 ("xfrm: destroy xfrm_state synchronously on net
exit path") tried to address these problems but doesn't fully solve
them, and slowed down netns deletion by adding one synchronize_rcu per
deleted state.

The first patch solves the problem by moving the fallback state
deletion earlier (when we delete the user state, rather than at
destruction), then we can revert the previous fix.
====================

Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>