diff --git a/net/xfrm/xfrm_input.c b/net/xfrm/xfrm_input.c index 77e82033ad70..588cd38e2e68 100644 --- a/net/xfrm/xfrm_input.c +++ b/net/xfrm/xfrm_input.c @@ -539,6 +539,11 @@ int xfrm_input(struct sk_buff *skb, int nexthdr, __be32 spi, int encap_type) goto lock; } + // strip bridge info from skb + if (skb_ext_exist(skb, SKB_EXT_BRIDGE_NF)){ + skb_ext_del(skb, SKB_EXT_BRIDGE_NF); + } + family = XFRM_SPI_SKB_CB(skb)->family; /* if tunnel is present override skb->mark value with tunnel i_key */