On Mon, 6 Jun 2022 23:20:55 +0200 Pablo Neira Ayuso wrote: > If user requests for NFT_CHAIN_HW_OFFLOAD, then check if either device > provides the .ndo_setup_tc interface or there is an indirect flow block > that has been registered. Otherwise, bail out early from the preparation > phase. Moreover, validate that family == NFPROTO_NETDEV and hook is > NF_NETDEV_INGRESS. The whole series is pretty light on the "why". This patch is particularly bad, no idea what the user visible bug was here.