From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail.netfilter.org (mail.netfilter.org [217.70.190.124]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id D43AD33EB1A; Sat, 20 Jun 2026 22:32:33 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=217.70.190.124 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1781994755; cv=none; b=hNvp8w0MOoBuGI1qdEo3bb3WiDvwKQWre79DjElGEo0db6gjL7io1aFiggd/azgO+ZmZDPHcaRYksCy5BvSv0PRdYqoDDpgvQ8N0KUzrbql6Rs1vl7jGP8o/+rxgXO/DXVSXyJXEZxzqFVLvWqtKtutHgAY8UuFKU/MSZiA9AmM= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1781994755; c=relaxed/simple; bh=0D/CxwGkasV/g6Fn4md5dHwk/sYDMeNHLsi7l27y9lc=; h=Date:From:To:Cc:Subject:Message-ID:References:MIME-Version: Content-Type:Content-Disposition:In-Reply-To; b=NUp93C50Np41Lmesw3O4qqqtjiXQIAYHWXh4yFyth1bL5rjgSHV9w9iib911+e8EEeZNWxrJM2tc/WL17Rtq3kM2r2Qj1pHJQyJaZX/kHSRtE7LBl6bP9tUvsUSewKH0gt0RSoW9Ypb69cOIn4krHx0EC2WwkJpJlvAXPN0BoV8= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=none (p=none dis=none) header.from=netfilter.org; spf=pass smtp.mailfrom=netfilter.org; dkim=pass (2048-bit key) header.d=netfilter.org header.i=@netfilter.org header.b=jVDePQRg; arc=none smtp.client-ip=217.70.190.124 Authentication-Results: smtp.subspace.kernel.org; dmarc=none (p=none dis=none) header.from=netfilter.org Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=netfilter.org Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=netfilter.org header.i=@netfilter.org header.b="jVDePQRg" Received: from netfilter.org (mail-agni [217.70.190.124]) by mail.netfilter.org (Postfix) with UTF8SMTPSA id DBB716019C; Sun, 21 Jun 2026 00:32:31 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=netfilter.org; s=2025; t=1781994752; bh=/UWY5ZMZTpnmWtOS+qFPwx0OCK+JMtYku+LFJthRfwE=; h=Date:From:To:Cc:Subject:References:In-Reply-To:From; b=jVDePQRg5Aq7bO3IHTjn0IQmUtXZt1PVwW6EPzi87bwGMU4h031XD1NleyQpJvh9F DAMl0j9jh0zJ12xXKchk26oSXJj5MxCwRS5E7NdqVs8ceKYrBdx2bZm3GhKNx6zKQY 7fo+lmaibQ7J1lObgV0WMXzW69QC8SQA0tLeAdrg+k/02R3kXZuocm/pTg3YQtwZAm d5XmBfoW2XQnWfQs2tL+5eW3SFXl3Y8O4OmWXXBKu2t5769qoJ8hvGl4N9/hg/gkfN SQ4IoiMwbpOS1b+xSn7sZYTvGaH3t7rG+Yh+Eiq1/aGANpRO+52vr/TpyjsdVk070T /mQvrP026dpAA== Date: Sun, 21 Jun 2026 00:32:29 +0200 From: Pablo Neira Ayuso To: Salvatore Bonaccorso Cc: Fernando Fernandez Mancera , Thorsten Leemhuis , Alejandro =?utf-8?Q?Oliv=C3=A1n?= Alvarez , 1130336@bugs.debian.org, Florian Westphal , Phil Sutter , "David S. Miller" , Eric Dumazet , Jakub Kicinski , Paolo Abeni , Simon Horman , netfilter-devel@vger.kernel.org, coreteam@netfilter.org, netdev@vger.kernel.org, linux-kernel@vger.kernel.org, regressions@lists.linux.dev, stable@vger.kernel.org Subject: Re: Bug#1130336: [regression] Network failure beyond first connection after 69894e5b4c5e ("netfilter: nft_connlimit: update the count if add was skipped") Message-ID: References: <177322336258.4376.10097494324750307114.reportbug@Desk1.simalex.iccbroadcast.com> <4da571ab-fa1d-4ee6-b71c-24f4a28243ed@suse.de> <8788e351-553f-48da-a6e6-ce082adacb8d@suse.de> <0b8607c8-2d29-4fca-961a-b7a677e968a1@leemhuis.info> Precedence: bulk X-Mailing-List: netfilter-devel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline In-Reply-To: On Sat, Jun 20, 2026 at 10:44:42PM +0200, Salvatore Bonaccorso wrote: > Hi Fernando, > > On Wed, Apr 22, 2026 at 12:32:34PM +0200, Fernando Fernandez Mancera wrote: > > On 4/22/26 11:18 AM, Thorsten Leemhuis wrote: > > > Lo! Top-posting on purpose to make this easy to process. > > > > > > What happened to this regression? It looks a bit like things stalled and > > > fell through the cracks. Or Fernando, did you post a patch like you > > > mentioned? I looked for one referring the commit or the reporter, but > > > could not find anything -- but maybe I missed it. > > > > > > > Yes, it stalled and fell through the cracks. Let me prepare a fix as I > > mentioned. > > Did that happened? On a quick chek at least 7.0.13 upstream seem still > to exhibit the problem (or would it be fair to let this usecase rest?) I still have to take a fix Fernando posted.