Eugene Crosser <crosser@xxxxxxxxxxx> wrote: > > Now I am trying to bisect upstream kernel. > > It looks like Jinpu Wang <jinpu.wang@xxxxxxxxx> has found the offending > commit, it's 09e856d54bda5f28 "vrf: Reset skb conntrack connection on VRF > rcv" from Aug 15 2021. This change is very recent, you reported failure between 5.4 and 5.10, or was that already backported? This change doesn't influcence matching either, but it does zap the ct zone association afaics.