Hi, The following patchset contains Netfilter fixes for net: 1) Restore ctnetlink zero mark in events and dump, from Ivan Delalande. 2) Fix deadlock due to missing disabled bh in tproxy, from Florian Westphal. 3) Safer maximum chain load in conntrack, from Eric Dumazet. Please, pull these changes from: git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf.git Thanks. ---------------------------------------------------------------- The following changes since commit 528125268588a18a2f257002af051b62b14bb282: Merge branch 'nfp-ipsec-csum' (2023-03-03 08:28:44 +0000) are available in the Git repository at: git://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf.git HEAD for you to fetch changes up to c77737b736ceb50fdf150434347dbd81ec76dbb1: netfilter: conntrack: adopt safer max chain length (2023-03-07 10:58:06 +0100) ---------------------------------------------------------------- Eric Dumazet (1): netfilter: conntrack: adopt safer max chain length Florian Westphal (1): netfilter: tproxy: fix deadlock due to missing BH disable Ivan Delalande (1): netfilter: ctnetlink: revert to dumping mark regardless of event type include/net/netfilter/nf_tproxy.h | 7 +++++++ net/ipv4/netfilter/nf_tproxy_ipv4.c | 2 +- net/ipv6/netfilter/nf_tproxy_ipv6.c | 2 +- net/netfilter/nf_conntrack_core.c | 4 ++-- net/netfilter/nf_conntrack_netlink.c | 14 +++++++------- 5 files changed, 18 insertions(+), 11 deletions(-)