]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
net: increase IP_TUNNEL_RECURSION_LIMIT to 5
authorChris J Arges <carges@cloudflare.com>
Thu, 2 Apr 2026 22:23:16 +0000 (17:23 -0500)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 22 Apr 2026 11:30:37 +0000 (13:30 +0200)
commit527918cf60a4e7b3d2501d7fa6df84df51e05f21
tree7e924a292bab38ec2204ae31f5b602ec31757a60
parent5b9911582d441f72fe6ccb15ffe3303bbc07f6f5
net: increase IP_TUNNEL_RECURSION_LIMIT to 5

[ Upstream commit 77facb35227c421467cdb49268de433168c2dcef ]

In configurations with multiple tunnel layers and MPLS lwtunnel routing, a
single tunnel hop can increment the counter beyond this limit. This causes
packets to be dropped with the "Dead loop on virtual device" message even
when a routing loop doesn't exist.

Increase IP_TUNNEL_RECURSION_LIMIT from 4 to 5 to handle this use-case.

Fixes: 6f1a9140ecda ("net: add xmit recursion limit to tunnel xmit functions")
Link: https://lore.kernel.org/netdev/88deb91b-ef1b-403c-8eeb-0f971f27e34f@redhat.com/
Signed-off-by: Chris J Arges <carges@cloudflare.com>
Link: https://patch.msgid.link/20260402222401.3408368-1-carges@cloudflare.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
include/net/ip_tunnels.h