1

This turned out to be a bug in Linux 4.9, fixed in commit b3bdc3acbb44d74d0b7ba4d97169577a2b46dc88 which went into 4.10-rc9 or thereabouts. In cases where the MACSEC driver doesn't block on decrypting a frame but receives the decrypted frame asynchronously, the driver always marks the frame as invalid even if the decryption was successful.


1

Installing the latest Windows upgrade helped: now I have WSL2 and my Fedora instance accesses the network.


Only top voted, non community-wiki answers of a minimum length are eligible