On Fri, Dec 30, 2022 at 01:24:36PM +0100, Jozsef Kadlecsik wrote: > Hi Pablo, > > Please pull the next patches into your nf tree. > > - The first patch fixes a hang when 0/0 subnets is added to a > hash:net,port,net type of set. Except hash:net,port,net and > hash:net,iface, the set types don't support 0/0 and the auxiliary > functions rely on this fact. So 0/0 needs a special handling in > hash:net,port,net which was missing (hash:net,iface was not affected > by this bug). > - When adding/deleting large number of elements in one step in ipset, > it can take a reasonable amount of time and can result in soft lockup > errors. This patch is a complete rework of the previous version in order > to use a smaller internal batch limit and at the same time removing > the external hard limit to add arbitrary number of elements in one step. Series applied to nf.git I added a Fixes: tag to the first patch and removed a duplicated Signed-off-by: line in the second. Just a minor nitpick, nothing important. Thanks for your fixes.