Hello:
This patch was applied to netdev/net.git (main) by Paolo Abeni pabeni@redhat.com:
On Mon, 22 May 2023 14:08:20 +0200 you wrote:
With a raw socket bound to IPPROTO_RAW (ie with hdrincl enabled), the protocol field of the flow structure, build by raw_sendmsg() / rawv6_sendmsg()), is set to IPPROTO_RAW. This breaks the ipsec policy lookup when some policies are defined with a protocol in the selector.
For ipv6, the sin6_port field from 'struct sockaddr_in6' could be used to specify the protocol. Just accept all values for IPPROTO_RAW socket.
[...]
Here is the summary with links: - [net,v2] ipv{4,6}/raw: fix output xfrm lookup wrt protocol https://git.kernel.org/netdev/net/c/3632679d9e4f
You are awesome, thank you!