network deadlock in Linux kernel 4.9 (IPSEC)

wolfgang_muees — Fri, 23 Apr 2021 14:19:12 GMT

Hi,

I am using Linux kernel 4.9 on the i.MX6 series.

If using ethernet MAC and IPSEC (for VPN), sometimes the system goes into deadlock.

The problem is in xfrm_input.c, in the xfrm_input() function.

This function is called for each incomming network packet, and also for each decrypted packet.

Both calls came from (different) soft irqs, and as the resources were protected with spin_lock(), there will be a deadlock if both calls came at the same time.

The solution is to convert all spinlock functions in xfrm_input() to use spinlock_bh() funktions.

Look at this patch:

https://patchwork.ozlabs.org/project/netdev/patch/20090511184739.6e497f29@penta.localdomain/

regards

Wolfgang

Re: network deadlock in Linux kernel 4.9 (IPSEC)

Bio_TICFSL — Thu, 29 Apr 2021 12:58:18 GMT

Hello wolfgang,

You should try one of the latest BSP 5.4.47 or 5.9 since it has more stable network, and must include the ethernet bug patch.

Regards

topic network deadlock in Linux kernel 4.9 (IPSEC) in i.MX Processors

network deadlock in Linux kernel 4.9 (IPSEC)

Re: network deadlock in Linux kernel 4.9 (IPSEC)