Hello: This patch was applied to netdev/net.git (main) by Paolo Abeni <pabeni@xxxxxxxxxx>: On Mon, 22 May 2023 14:08:20 +0200 you wrote: > With a raw socket bound to IPPROTO_RAW (ie with hdrincl enabled), the > protocol field of the flow structure, build by raw_sendmsg() / > rawv6_sendmsg()), is set to IPPROTO_RAW. This breaks the ipsec policy > lookup when some policies are defined with a protocol in the selector. > > For ipv6, the sin6_port field from 'struct sockaddr_in6' could be used to > specify the protocol. Just accept all values for IPPROTO_RAW socket. > > [...] Here is the summary with links: - [net,v2] ipv{4,6}/raw: fix output xfrm lookup wrt protocol https://git.kernel.org/netdev/net/c/3632679d9e4f You are awesome, thank you! -- Deet-doot-dot, I am a bot. https://korg.docs.kernel.org/patchwork/pwbot.html