Hi, The following patchset contains Netfilter/IPVS fixes for net: 1) Fix crash on flowtable due to race between garbage collection and insertion. 2) Restore callback unbinding in netfilter offloads. 3) Fix races on IPVS module removal, from Davide Caratti. 4) Make old_secure_tcp per-netns to fix sysbot report, from Eric Dumazet. 5) Validate matching length in netfilter offloads, from wenxu. You can pull these changes from: git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf.git Thank you. ---------------------------------------------------------------- The following changes since commit 6c5d9c2a6bedbb3c3c14253776320c0ee564f064: ipv6: include <net/addrconf.h> for missing declarations (2019-10-22 15:17:03 -0700) are available in the git repository at: git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf.git HEAD for you to fetch changes up to 52b33b4f8186669ab88b56cf5b2812e3996ef289: Merge tag 'ipvs-fixes-for-v5.4' of https://git.kernel.org/pub/scm/linux/kernel/git/horms/ipvs (2019-10-26 12:42:45 +0200) ---------------------------------------------------------------- Davide Caratti (1): ipvs: don't ignore errors in case refcounting ip_vs module fails Eric Dumazet (1): ipvs: move old_secure_tcp into struct netns_ipvs Pablo Neira Ayuso (3): netfilter: nf_flow_table: set timeout before insertion into hashes netfilter: nf_tables_offload: restore basechain deletion Merge tag 'ipvs-fixes-for-v5.4' of https://git.kernel.org/.../horms/ipvs wenxu (1): netfilter: nft_payload: fix missing check for matching length in offloads include/net/ip_vs.h | 1 + net/netfilter/ipvs/ip_vs_app.c | 12 ++++++++++-- net/netfilter/ipvs/ip_vs_ctl.c | 29 +++++++++++------------------ net/netfilter/ipvs/ip_vs_pe.c | 3 ++- net/netfilter/ipvs/ip_vs_sched.c | 3 ++- net/netfilter/ipvs/ip_vs_sync.c | 13 ++++++++++--- net/netfilter/nf_flow_table_core.c | 3 ++- net/netfilter/nf_tables_offload.c | 2 +- net/netfilter/nft_payload.c | 38 ++++++++++++++++++++++++++++++++++++++ 9 files changed, 77 insertions(+), 27 deletions(-)
