From: Eric Dumazet <edumazet@xxxxxxxxxx> commit 75063c9294fb239bbe64eb72141b6871fe526d29 upstream. Calling nf_defrag_ipv4_disable() instead of nf_defrag_ipv6_disable() was probably not the intent. I found this by code inspection, while chasing a possible issue in TPROXY. Fixes: de8c12110a13 ("netfilter: disable defrag once its no longer needed") Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx> Reviewed-by: Florian Westphal <fw@xxxxxxxxx> Signed-off-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> --- net/netfilter/xt_socket.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) --- a/net/netfilter/xt_socket.c +++ b/net/netfilter/xt_socket.c @@ -221,7 +221,7 @@ static void socket_mt_destroy(const stru if (par->family == NFPROTO_IPV4) nf_defrag_ipv4_disable(par->net); else if (par->family == NFPROTO_IPV6) - nf_defrag_ipv4_disable(par->net); + nf_defrag_ipv6_disable(par->net); } static struct xt_match socket_mt_reg[] __read_mostly = { Patches currently in stable-queue which might be from edumazet@xxxxxxxxxx are queue-5.15/drop_monitor-fix-data-race-in-dropmon_net_event-trace_napi_poll_hit.patch queue-5.15/ipv4-fix-data-races-in-fib_alias_hw_flags_set.patch queue-5.15/net_sched-add-__rcu-annotation-to-netdev-qdisc.patch queue-5.15/netfilter-xt_socket-fix-a-typo-in-socket_mt_destroy.patch queue-5.15/bonding-fix-data-races-around-agg_select_timer.patch queue-5.15/ipv6-fix-data-race-in-fib6_info_hw_flags_set-fib6_purge_rt.patch