[SRU][O/J][PATCH 0/2] ipsec_offload in rtnetlink.sh from ubunsu_kselftests_net fails on O/J (LP: #2096976)

Edoardo Canepa edoardo.canepa at canonical.com
Fri Mar 14 07:57:58 UTC 2025


BugLink: https://bugs.launchpad.net/bugs/2096976

[ Impact ]

selftest: netfilter: after upstream commit 2cf567f421dbfe7e53b7e5ddee9400da10efb75d
ipsec_offload test needs its source ip written into  the expected value, however the
complete patchset https://lore.kernel.org/lkml/20241010040027.21440-1-liuhangbin@gmail.com/
has a more comprehensive modification so this only fixes the test for the
current status (only patch 2/3 of the patchset applied).

Found on Oracular 6.11.0-17.17 and should be found on its derivatives /
backports.

Log output:

    # selftests: net: rtnetlink.sh
    # PASS: policy routing
    ---(snip)---
    # PASS: ipsec
    # FAIL: ipsec_offload incorrect driver data
    # FAIL: ipsec_offload
    # PASS: bridge fdb get

Verbose output should be like:

    COMMAND: modprobe -q netdevsim
    COMMAND: ip x p add dir out src 192.168.123.3/24 dst 192.168.123.4/24 tmpl
proto esp src 192.168.123.3 dst 192.168.123.4 spi 9 mode transport reqid 42
    COMMAND: ip x p add dir in src 192.168.123.4/24 dst 192.168.123.3/24 tmpl
proto esp src 192.168.123.4 dst 192.168.123.3 spi 9 mode transport reqid 42
    COMMAND: ip x s add proto esp src 192.168.123.3 dst 192.168.123.4 spi 9 mode
transport reqid 42 aead rfc4106(gcm(aes))
0x3132333435363738393031323334353664636261 128 sel src 192.168.123.3/24 dst
192.168.123.4/24 offload dev eni0np1 dir out
    COMMAND: ip x s add proto esp src 192.168.123.4 dst 192.168.123.3 spi 9 mode
transport reqid 42 aead rfc4106(gcm(aes))
0x3132333435363738393031323334353664636261 128 sel src 192.168.123.4/24 dst
192.168.123.3/24 offload dev eni0np1 dir in
    COMMAND: diff /sys/kernel/debug/netdevsim/netdevsim0/ports/0//ipsec -
        2c2
    < sa[0] tx ipaddr=0x00000000 00000000 00000000 047ba8c0
    ---
    > sa[0] tx ipaddr=0x00000000 00000000 00000000 00000000
    FAIL: ipsec_offload incorrect driver data

[ Fix ]

Oracular: fixed separately
Jammy:    fixed separately

[ Test Plan ]

Compiled, boot tested and auto-tested on amd64.

[ Where Problems Could Occur ]

The fix affects only the failing ipsec_offload of the netfilter test.



More information about the kernel-team mailing list