On Wed, Sep 02, 2026 at 07:01:12PM +0000, Ido Schimmel wrote:
Fix this by making sure that the ICMP error packet does not have a valid
dst entry, thereby forcing the IP layer to perform a route lookup.
Tested on net with this patch applied:
- pmtu.sh: all 16 bridged and all 16 OVS subtests pass, both with and
without br_netfilter loaded. Without the patch, loading br_netfilter
makes all 16 bridged subtests fail (the reply gets delivered and exits
with the old -w 1 failure).
- The forwarded-sender reproducer from my earlier mail goes from
10 tx / 0 rx / no errors to 10 tx / 8 rx / +1 error, the error being
"From 192.168.4.1 icmp_seq=1 Frag needed and DF set (mtu = 3950)" --
the tunnel's PTB reaching the sender.
Tested-by: Yaroslav Dudkov <redacted>