Hi, The following patchset contains Netfilter fixes for net: 1) Do not allow to add conntrack helper extension for confirmed conntracks in the nf_tables ct expectation support. 2) Fix bogus EBUSY in nfnetlink_cthelper when NFCTH_PRIV_DATA_LEN is passed on userspace helper updates. Please, pull these changes from: git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf.git Thank you! ---------------------------------------------------------------- The following changes since commit b000372627ce9dbbe641dafbf40db0718276ab77: MAINTAINERS: nfc mailing lists are subscribers-only (2021-06-01 17:09:28 -0700) are available in the Git repository at: git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf.git HEAD for you to fetch changes up to 8971ee8b087750a23f3cd4dc55bff2d0303fd267: netfilter: nfnetlink_cthelper: hit EBUSY on updates if size mismatches (2021-06-02 12:43:50 +0200) ---------------------------------------------------------------- Pablo Neira Ayuso (2): netfilter: nft_ct: skip expectations for confirmed conntrack netfilter: nfnetlink_cthelper: hit EBUSY on updates if size mismatches net/netfilter/nfnetlink_cthelper.c | 8 ++++++-- net/netfilter/nft_ct.c | 2 +- 2 files changed, 7 insertions(+), 3 deletions(-)