On Thu, 20 Apr 2023 19:06:55 +0200 Pablo Neira Ayuso wrote: > 1) Set on IPS_CONFIRMED before change_status() otherwise EBUSY is > bogusly hit. This bug was introduced in the 6.3 release cycle. > > 2) Fix nfnetlink_queue conntrack support: Set/dump timeout > accordingly for unconfirmed conntrack entries. Make sure this > is done after IPS_CONFIRMED is set on. This is an old bug, it > happens since the introduction of this feature. It missed our PR anyway so please resend with a signed tag.