Description of problem:

When an IPsec tunnel between a RHEL 5.4 server (2.6.18-194.17.1.el5 #1 SMP Mon Sep 20 07:12:06 EDT 2010 x86_64 x86_64 x86_64 GNU/Linux) and an external gateway is take down for some reason.  A subsequent connect() call to 
a socket on the other end of the openswan IPsec tunnel hangs for more than 30 
seconds.  The socket is set to non-blocking.




Version-Release number of selected component (if applicable):

RHEL Kernel:

2.6.18-194.17.1.el5 #1 SMP Mon Sep 20 07:12:06 EDT 2010 x86_64 x86_64 x86_64 GNU/Linux

Openswan version:

openswan-2.6.21-5.el5_5.3

How reproducible:

100% reproducible.  Happens every time.


Steps to Reproduce:
1.  Establish an IPsec tunnel between an RHEL server mentioned above and an 
external gateway
2.  Take the tunnel down
3.  Try to connect() to a socket on the other end of the tunnel
  
Actual results:

connect() hangs for over 30 secs.

Expected results:

The connect() should fail right away.  The socket is set to non-blocking.

Additional info:

Output from ps command that shows that thread in question is stuck on the 
wait chan xfrm_l which is an ipsec kernel module.  


bmc-hp1-0-0-0:/root-# ps -aefLl | grep __http_stack_asr
1 S nxuser   10847 19118 10905  0   15  75   0 - 134939 xfrm_l 17:28 ?       00:00:00 /opt/proxy/bin/http_stack Http Stack Bmc__http_stack_asr_1 257 asr-1 10847 localhost 108
bmc-hp1-0-0-0:/root-# date
Fri Jan 21 19:13:25 CET 2011
bmc-hp1-0-0-0:/root-# ps -aefLl | grep __http_stack_asr
1 S nxuser   10847 19118 10905  0   15  75   0 - 134939 xfrm_l 17:28 ?       00:00:00 /opt/proxy/bin/http_stack Http Stack Bmc__http_stack_asr_1 257 asr-1 10847 localhost 108
bmc-hp1-0-0-0:/root-# ps -aefLl | grep __http_stack_asr
1 S nxuser   10847 19118 10905  0   15  75   0 - 134939 xfrm_l 17:28 ?       00:00:00 /opt/proxy/bin/http_stack Http Stack Bmc__http_stack_asr_1 257 asr-1 10847 localhost 108
1 S nxuser   10847 19118 10905  0   15  75   0 - 134939 xfrm_l 17:28 ?       00:00:00 /opt/proxy/bin/http_stack Http Stack Bmc__http_stack_asr_1 257 asr-1 10847 localhost 108
bmc-hp1-0-0-0:/root-# date
Fri Jan 21 19:13:48 CET 2011
bmc-hp1-0-0-0:/root-# ps -aefLl | grep __http_stack_asr
1 S nxuser   10847 19118 10905  0   15  75   0 - 134939 xfrm_l 17:28 ?       00:00:00 /opt/proxy/bin/http_stack Http Stack Bmc__http_stack_asr_1 257 asr-1 10847 localhost 108
bmc-hp1-0-0-0:/root-# date
Fri Jan 21 19:13:54 CET 2011
bmc-hp1-0-0-0:/root-# date
Fri Jan 21 19:13:56 CET 2011
bmc-hp1-0-0-0:/root-# ps -aefLl | grep __http_stack_asr
1 S nxuser   10847 19118 10905  0   15  75   0 - 134811 -     17:28 ?        00:00:00 /opt/proxy/bin/http_stack Http Stack Bmc__http_stack_asr_1 257 asr-1 10847 localhost 108
bmc-hp1-0-0-0:/root-# date
Fri Jan 21 19:14:00 CET 2011
bmc-hp1-0-0-0:/root-#



gdb info:
> (gdb) up
> #5  0xf7e16bac in stSanityCheck () at dispatch.c:1351
> 1351    in dispatch.c
> (gdb) p d
> $7 = (dispatcher_t *) 0x9be6ef4
> (gdb) p d->cpuInfo
> $8 = {pid = 19205, cpu = 0, _idx = 0, _cpu = {0, 0, 0, 0, 0}, admissionRate = 100, selfAdmissionRate = 100, agentsAdmissionRate = 100, highTreshold = 90,
>   emergencyTreshold = 99, gainUpFactor = 1, gainDownFactor = 1, loadFactor = 0, count = 0, _oldtime = {tv_sec = 0, tv_usec = 0}, olduclicks = 0, oldsclicks = 0,
>   procFileFd = 0, procFileName = "/proc/19041/task/19205/stat", '\0'
> <repeats 228 times>, alarmTimer = 0, alarmRaised = false}
> (gdb) thread 8
> [Switching to thread 8 (Thread 4088118160 (LWP 19205))]#0  0xffffe410 
> in __kernel_vsyscall ()
> (gdb) bt
> #0  0xffffe410 in __kernel_vsyscall ()
> #1  0xf7bb3fa8 in connect () from /lib/libpthread.so.0
> #2  0xf7e2dfd2 in stCreateSock (dstAddr=0xf5903378,
> srcAddr=0xf59032f8) at sock.c:519
> #3  0xf7e2ff65 in stNewSocket (dispatcher=0x9be6ef4, 
> dstAddr=0xf5903378, srcAddr=0xf59032f8, fd=-1) at socket.c:242
> #4  0xf7e2ec74 in stGetStreamSocketByAddr (stream=0xf59031ac, ssl=0) 
> at
> sock.c:734
> #5  0xf7e2ef80 in stGetStreamSocket (stream=0xf59031ac, ssl=0) at
> sock.c:813
> #6  0x0806438f in ?? ()
> #7  0xf59031ac in ?? ()
> #8  0x00000000 in ?? ()
> (gdb)