Florian Westphal <fw@xxxxxxxxx> wrote:
> Trigger cloned skbs leaving softirq protection.
> This triggers splat without the preceeding change
> ("netfilter: nf_queue: drop packets with cloned unconfirmed
> conntracks"):
>
> WARNING: at net/netfilter/nf_conntrack_core.c:1198 __nf_conntrack_confirm..
>
> because local delivery and forwarding will race for confirmation.
>
> Based on a reproducer script from Yi Chen.
>
> Signed-off-by: Florian Westphal <fw@xxxxxxxxx>
> ---
> tools/testing/selftests/net/netfilter/lib.sh | 16 +++++
> .../selftests/net/netfilter/nft_queue.sh | 16 -----
Those two files should be unchanged. I'll send a v2 of the
selftest script tomorrow.
