Re: [PATCH net v2] netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm
Jakub Kicinski <[email protected]>
| Newsgroups | gmane.linux.network.bridge |
|---|---|
| Message-ID | <20250822071330.4168f0db__33152.4550494336$1755872396$gmane$org@kernel.org> |
On Fri, 22 Aug 2025 09:50:58 +0200 Florian Westphal wrote: > Wang Liang <[email protected]> wrote: > > When send a broadcast packet to a tap device, which was added to a bridge, > > br_nf_local_in() is called to confirm the conntrack. If another conntrack > > with the same hash value is added to the hash table, which can be > > triggered by a normal packet to a non-bridge device, the below warning > > may happen. > > I placed this in nf.git:testing. 👍️ > In case netdev maintainers want to take it directly: Unrelated, but while I have you -- nft_flowtable.sh is one of the most flake-atious test for netdev CI currently :( Could you TAL whenever you have some spare cycles? https://netdev.bots.linux.dev/contest.html?test=nft-flowtable-sh