[strongSwan] linux 4.3 regression: received netlink error: Invalid argument (22)

[Harald Dunkel]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Since kernel 4.3 routing seems to be broken. I get some messages
in /var/log/daemon.log saying

:
Nov  9 21:24:44 cecil charon: 13[IKE] installing new virtual IP 172.19.97.237
Nov  9 21:24:44 cecil charon: 13[KNL] received netlink error: Invalid argument (22)
Nov  9 21:24:44 cecil charon: 13[KNL] unable to install source route for 172.19.97.237
Nov  9 21:24:44 cecil charon: 13[KNL] received netlink error: Invalid argument (22)
Nov  9 21:24:44 cecil charon: 13[KNL] unable to install source route for 172.19.97.237
Nov  9 21:24:44 cecil charon: 13[KNL] received netlink error: Invalid argument (22)
Nov  9 21:24:44 cecil charon: 13[KNL] unable to install source route for 172.19.97.237
Nov  9 21:24:44 cecil charon: 13[KNL] received netlink error: Invalid argument (22)
Nov  9 21:24:44 cecil charon: 13[KNL] unable to install source route for 172.19.97.237
Nov  9 21:24:44 cecil charon: 13[KNL] received netlink error: Invalid argument (22)
Nov  9 21:24:44 cecil charon: 13[KNL] unable to install source route for 172.19.97.237
Nov  9 21:24:44 cecil charon: 13[KNL] received netlink error: Invalid argument (22)
Nov  9 21:24:44 cecil charon: 13[KNL] unable to install source route for 172.19.97.237
Nov  9 21:24:44 cecil charon: 13[KNL] received netlink error: Invalid argument (22)
Nov  9 21:24:44 cecil charon: 13[KNL] unable to install source route for 172.19.97.237
Nov  9 21:24:44 cecil charon: 13[KNL] received netlink error: Invalid argument (22)
Nov  9 21:24:44 cecil charon: 13[KNL] unable to install source route for 172.19.97.237
Nov  9 21:24:44 cecil charon: 13[KNL] received netlink error: Invalid argument (22)
Nov  9 21:24:44 cecil charon: 13[KNL] unable to install source route for 172.19.97.237
Nov  9 21:24:44 cecil charon: 13[KNL] received netlink error: Invalid argument (22)
Nov  9 21:24:44 cecil charon: 13[KNL] unable to install source route for 172.19.97.237
:

A ping to a host on the remote site fails.

I tried strongswan 5.3.2 and 5.3.3 (as provided by Debian). Moving
back to kernel 4.2.5 seems to fix this problem. Can anybody reproduce?


Regards
Harri
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQEcBAEBCAAGBQJWQQR3AAoJEAqeKp5m04HLVuwIAIaMK5H00uIe/Nu1Rk0eXtwO
6sCEtAjlhW6UjrLTUs1mxoBP3WgObo+da0Twdue9s56hUyYTox3+e8Pyv06tB0Zf
VJn6bwEb7xZ/QPfHQjnAiRWphQFh+YOzGk4azJ0KHH20iMWvUiZe7visti4KeFWp
hwjVvDS0Lm9WFBqqvjKKQ4aLblk4uuecBu0nSOt0L2rSi7mcqhJ3BA9+STpJi7uK
BSrAb6bgxJ6c/UKh/gsqjq+Lr6Q54NtMx6iW7Azb43QmDJWmtE+pSToErko2/bTl
Fle7q2IqFl93/IzSAX50xvgXXoLKKiw5Ua9cerwxWkD2OAGGt1RpC3OYooT92TU=
=ZyrK
-----END PGP SIGNATURE-----