Subject: Re: 2.6.19rc2 XFRM does too large direct mapping allocations for hashes

From: David Miller <[email-masked]>
Date: Wed, 18 Oct 2006 12:37:47 -0700 (PDT)

From: Andi Kleen <[email-masked]>
Date: Wed, 18 Oct 2006 13:50:22 +0200

> I got this while restarting ipsec on a 2.6.19rc2 system that was
> up for a few days.

It's been fixed already in current GIT.

The xfrm state counters weren't being maintained correctly,
so they'd go "negative" and the hashing code thought it
needed a "huge" hash table. :-)