* [PATCH net v2 0/3] {net,bpf}: nd_tbl fixes for when ipv6.disable=1
@ 2026-03-05 20:37 Ricardo B. Marlière
2026-03-05 20:37 ` [PATCH net v2 1/3] bpf: bpf_out_neigh_v4: Fix nd_tbl NULL dereference when IPv6 is disabled Ricardo B. Marlière
` (2 more replies)
0 siblings, 3 replies; 6+ messages in thread
From: Ricardo B. Marlière @ 2026-03-05 20:37 UTC (permalink / raw)
To: Martin KaFai Lau, Daniel Borkmann, John Fastabend,
Stanislav Fomichev, Alexei Starovoitov, Andrii Nakryiko,
Eduard Zingerman, Song Liu, Yonghong Song, KP Singh, Hao Luo,
Jiri Olsa, David S. Miller, Eric Dumazet, Jakub Kicinski,
Paolo Abeni, Simon Horman, Toke Høiland-Jørgensen,
David Ahern, Jay Vosburgh, Andrew Lunn, Hangbin Liu
Cc: Fernando Fernandez Mancera, bpf, netdev, linux-kernel,
Ricardo B. Marlière
Signed-off-by: Ricardo B. Marlière <rbm@suse.com>
---
Changes in v2:
- Used ipv6_mod_enabled() helper, guarded by unlikely().
- Link to v1: https://lore.kernel.org/r/20260228-net-nd_tbl_fixes-v1-0-2b2a274df9bb@suse.com
---
Ricardo B. Marlière (3):
bpf: bpf_out_neigh_v4: Fix nd_tbl NULL dereference when IPv6 is disabled
bpf: bpf_out_neigh_v6: Fix nd_tbl NULL dereference when IPv6 is disabled
net: bonding: Fix nd_tbl NULL dereference when IPv6 is disabled
drivers/net/bonding/bond_main.c | 3 +++
net/core/filter.c | 7 +++++++
2 files changed, 10 insertions(+)
---
base-commit: b824c3e16c1904bf80df489e293d1e3cbf98896d
change-id: 20260228-net-nd_tbl_fixes-ce81ca1e0bf2
Best regards,
--
Ricardo B. Marlière <rbm@suse.com>
^ permalink raw reply [flat|nested] 6+ messages in thread
* [PATCH net v2 1/3] bpf: bpf_out_neigh_v4: Fix nd_tbl NULL dereference when IPv6 is disabled
2026-03-05 20:37 [PATCH net v2 0/3] {net,bpf}: nd_tbl fixes for when ipv6.disable=1 Ricardo B. Marlière
@ 2026-03-05 20:37 ` Ricardo B. Marlière
2026-03-05 20:37 ` [PATCH net v2 2/3] bpf: bpf_out_neigh_v6: " Ricardo B. Marlière
2026-03-05 20:37 ` [PATCH net v2 3/3] net: bonding: " Ricardo B. Marlière
2 siblings, 0 replies; 6+ messages in thread
From: Ricardo B. Marlière @ 2026-03-05 20:37 UTC (permalink / raw)
To: Martin KaFai Lau, Daniel Borkmann, John Fastabend,
Stanislav Fomichev, Alexei Starovoitov, Andrii Nakryiko,
Eduard Zingerman, Song Liu, Yonghong Song, KP Singh, Hao Luo,
Jiri Olsa, David S. Miller, Eric Dumazet, Jakub Kicinski,
Paolo Abeni, Simon Horman, Toke Høiland-Jørgensen,
David Ahern, Jay Vosburgh, Andrew Lunn, Hangbin Liu
Cc: Fernando Fernandez Mancera, bpf, netdev, linux-kernel,
Ricardo B. Marlière
When booting with the 'ipv6.disable=1' parameter, the nd_tbl is never
initialized because inet6_init() exits before ndisc_init() is called which
initializes it. If bpf_redirect_neigh() is called from tc with an explicit
nexthop of nh_family == AF_INET6, bpf_out_neigh_v4() takes the AF_INET6
branch and calls ip_neigh_gw6(), which relies on ipv6_stub->nd_tbl.
BUG: kernel NULL pointer dereference, address: 0000000000000248
Oops: Oops: 0000 [#1] SMP NOPTI
RIP: 0010:skb_do_redirect+0xb93/0xf00
Call Trace:
<TASK>
? srso_alias_return_thunk+0x5/0xfbef5
? __tcf_classify.constprop.0+0x83/0x160
? srso_alias_return_thunk+0x5/0xfbef5
? tcf_classify+0x2b/0x50
? srso_alias_return_thunk+0x5/0xfbef5
? tc_run+0xb8/0x120
? srso_alias_return_thunk+0x5/0xfbef5
__dev_queue_xmit+0x6fa/0x1000
? srso_alias_return_thunk+0x5/0xfbef5
? srso_alias_return_thunk+0x5/0xfbef5
? alloc_skb_with_frags+0x58/0x200
packet_sendmsg+0x10da/0x1700
? srso_alias_return_thunk+0x5/0xfbef5
__sys_sendto+0x1f3/0x220
__x64_sys_sendto+0x24/0x30
do_syscall_64+0x101/0xf80
? exc_page_fault+0x6e/0x170
? srso_alias_return_thunk+0x5/0xfbef5
entry_SYSCALL_64_after_hwframe+0x77/0x7f
</TASK>
Fix this by adding an early check in the AF_INET6 branch of
bpf_out_neigh_v4(). If ipv6_stub->nd_tbl is NULL, unlock RCU and drop the
packet.
Suggested-by: Fernando Fernandez Mancera <fmancera@suse.de>
Fixes: ba452c9e996d ("bpf: Fix bpf_redirect_neigh helper api to support supplying nexthop")
Signed-off-by: Ricardo B. Marlière <rbm@suse.com>
---
net/core/filter.c | 4 ++++
1 file changed, 4 insertions(+)
diff --git a/net/core/filter.c b/net/core/filter.c
index 0d5d5a17acb2..ff02dbe4c94f 100644
--- a/net/core/filter.c
+++ b/net/core/filter.c
@@ -2335,6 +2335,10 @@ static int bpf_out_neigh_v4(struct net *net, struct sk_buff *skb,
neigh = ip_neigh_for_gw(rt, skb, &is_v6gw);
} else if (nh->nh_family == AF_INET6) {
+ if (unlikely(!ipv6_mod_enabled())) {
+ rcu_read_unlock();
+ goto out_drop;
+ }
neigh = ip_neigh_gw6(dev, &nh->ipv6_nh);
is_v6gw = true;
} else if (nh->nh_family == AF_INET) {
--
2.53.0
^ permalink raw reply related [flat|nested] 6+ messages in thread
* [PATCH net v2 2/3] bpf: bpf_out_neigh_v6: Fix nd_tbl NULL dereference when IPv6 is disabled
2026-03-05 20:37 [PATCH net v2 0/3] {net,bpf}: nd_tbl fixes for when ipv6.disable=1 Ricardo B. Marlière
2026-03-05 20:37 ` [PATCH net v2 1/3] bpf: bpf_out_neigh_v4: Fix nd_tbl NULL dereference when IPv6 is disabled Ricardo B. Marlière
@ 2026-03-05 20:37 ` Ricardo B. Marlière
2026-03-05 21:26 ` Fernando Fernandez Mancera
2026-03-05 20:37 ` [PATCH net v2 3/3] net: bonding: " Ricardo B. Marlière
2 siblings, 1 reply; 6+ messages in thread
From: Ricardo B. Marlière @ 2026-03-05 20:37 UTC (permalink / raw)
To: Martin KaFai Lau, Daniel Borkmann, John Fastabend,
Stanislav Fomichev, Alexei Starovoitov, Andrii Nakryiko,
Eduard Zingerman, Song Liu, Yonghong Song, KP Singh, Hao Luo,
Jiri Olsa, David S. Miller, Eric Dumazet, Jakub Kicinski,
Paolo Abeni, Simon Horman, Toke Høiland-Jørgensen,
David Ahern, Jay Vosburgh, Andrew Lunn, Hangbin Liu
Cc: Fernando Fernandez Mancera, bpf, netdev, linux-kernel,
Ricardo B. Marlière
When booting with the 'ipv6.disable=1' parameter, the nd_tbl is never
initialized because inet6_init() exits before ndisc_init() is called which
initializes it. If bpf_redirect_neigh() is called with explicit AF_INET6
nexthop parameters, __bpf_redirect_neigh_v6() can skip the IPv6 FIB lookup
and call bpf_out_neigh_v6() directly. bpf_out_neigh_v6() then calls
ip_neigh_gw6(), which uses ipv6_stub->nd_tbl.
BUG: kernel NULL pointer dereference, address: 0000000000000248
Oops: Oops: 0000 [#1] SMP NOPTI
RIP: 0010:skb_do_redirect+0x44f/0xf40
Call Trace:
<TASK>
? srso_alias_return_thunk+0x5/0xfbef5
? __tcf_classify.constprop.0+0x83/0x160
? srso_alias_return_thunk+0x5/0xfbef5
? tcf_classify+0x2b/0x50
? srso_alias_return_thunk+0x5/0xfbef5
? tc_run+0xb8/0x120
? srso_alias_return_thunk+0x5/0xfbef5
__dev_queue_xmit+0x6fa/0x1000
? srso_alias_return_thunk+0x5/0xfbef5
packet_sendmsg+0x10da/0x1700
? srso_alias_return_thunk+0x5/0xfbef5
__sys_sendto+0x1f3/0x220
__x64_sys_sendto+0x24/0x30
do_syscall_64+0x101/0xf80
? exc_page_fault+0x6e/0x170
? srso_alias_return_thunk+0x5/0xfbef5
entry_SYSCALL_64_after_hwframe+0x77/0x7f
</TASK>
Fix this by adding an early check in bpf_out_neigh_v6(). If
ipv6_stub->nd_tbl is NULL, drop the packet before neighbor lookup.
Suggested-by: Fernando Fernandez Mancera <fmancera@suse.de>
Fixes: ba452c9e996d ("bpf: Fix bpf_redirect_neigh helper api to support supplying nexthop")
Signed-off-by: Ricardo B. Marlière <rbm@suse.com>
---
net/core/filter.c | 3 +++
1 file changed, 3 insertions(+)
diff --git a/net/core/filter.c b/net/core/filter.c
index ff02dbe4c94f..3344fa0789f0 100644
--- a/net/core/filter.c
+++ b/net/core/filter.c
@@ -2228,6 +2228,9 @@ static int bpf_out_neigh_v6(struct net *net, struct sk_buff *skb,
return -ENOMEM;
}
+ if (unlikely(!ipv6_mod_enabled()))
+ goto out_drop;
+
rcu_read_lock();
if (!nh) {
dst = skb_dst(skb);
--
2.53.0
^ permalink raw reply related [flat|nested] 6+ messages in thread
* [PATCH net v2 3/3] net: bonding: Fix nd_tbl NULL dereference when IPv6 is disabled
2026-03-05 20:37 [PATCH net v2 0/3] {net,bpf}: nd_tbl fixes for when ipv6.disable=1 Ricardo B. Marlière
2026-03-05 20:37 ` [PATCH net v2 1/3] bpf: bpf_out_neigh_v4: Fix nd_tbl NULL dereference when IPv6 is disabled Ricardo B. Marlière
2026-03-05 20:37 ` [PATCH net v2 2/3] bpf: bpf_out_neigh_v6: " Ricardo B. Marlière
@ 2026-03-05 20:37 ` Ricardo B. Marlière
2026-03-06 2:31 ` Hangbin Liu
2 siblings, 1 reply; 6+ messages in thread
From: Ricardo B. Marlière @ 2026-03-05 20:37 UTC (permalink / raw)
To: Martin KaFai Lau, Daniel Borkmann, John Fastabend,
Stanislav Fomichev, Alexei Starovoitov, Andrii Nakryiko,
Eduard Zingerman, Song Liu, Yonghong Song, KP Singh, Hao Luo,
Jiri Olsa, David S. Miller, Eric Dumazet, Jakub Kicinski,
Paolo Abeni, Simon Horman, Toke Høiland-Jørgensen,
David Ahern, Jay Vosburgh, Andrew Lunn, Hangbin Liu
Cc: Fernando Fernandez Mancera, bpf, netdev, linux-kernel,
Ricardo B. Marlière
When booting with the 'ipv6.disable=1' parameter, the nd_tbl is never
initialized because inet6_init() exits before ndisc_init() is called
which initializes it. If bonding ARP/NS validation is enabled, an IPv6
NS/NA packet received on a slave can reach bond_validate_na(), which
calls bond_has_this_ip6(). That path calls ipv6_chk_addr() and can
crash in __ipv6_chk_addr_and_flags().
BUG: kernel NULL pointer dereference, address: 00000000000005d8
Oops: Oops: 0000 [#1] SMP NOPTI
RIP: 0010:__ipv6_chk_addr_and_flags+0x69/0x170
Call Trace:
<IRQ>
ipv6_chk_addr+0x1f/0x30
bond_validate_na+0x12e/0x1d0 [bonding]
? __pfx_bond_handle_frame+0x10/0x10 [bonding]
bond_rcv_validate+0x1a0/0x450 [bonding]
bond_handle_frame+0x5e/0x290 [bonding]
? srso_alias_return_thunk+0x5/0xfbef5
__netif_receive_skb_core.constprop.0+0x3e8/0xe50
? srso_alias_return_thunk+0x5/0xfbef5
? update_cfs_rq_load_avg+0x1a/0x240
? srso_alias_return_thunk+0x5/0xfbef5
? __enqueue_entity+0x5e/0x240
__netif_receive_skb_one_core+0x39/0xa0
process_backlog+0x9c/0x150
__napi_poll+0x30/0x200
? srso_alias_return_thunk+0x5/0xfbef5
net_rx_action+0x338/0x3b0
handle_softirqs+0xc9/0x2a0
do_softirq+0x42/0x60
</IRQ>
<TASK>
__local_bh_enable_ip+0x62/0x70
__dev_queue_xmit+0x2d3/0x1000
? srso_alias_return_thunk+0x5/0xfbef5
? srso_alias_return_thunk+0x5/0xfbef5
? packet_parse_headers+0x10a/0x1a0
packet_sendmsg+0x10da/0x1700
? kick_pool+0x5f/0x140
? srso_alias_return_thunk+0x5/0xfbef5
? __queue_work+0x12d/0x4f0
__sys_sendto+0x1f3/0x220
__x64_sys_sendto+0x24/0x30
do_syscall_64+0x101/0xf80
? exc_page_fault+0x6e/0x170
? srso_alias_return_thunk+0x5/0xfbef5
entry_SYSCALL_64_after_hwframe+0x77/0x7f
</TASK>
Fix this by adding an early check in bond_confirm_addr6(). If
ipv6_stub->nd_tbl is NULL, return before calling ipv6_chk_addr().
Suggested-by: Fernando Fernandez Mancera <fmancera@suse.de>
Fixes: 4e24be018eb9 ("bonding: add new parameter ns_targets")
Signed-off-by: Ricardo B. Marlière <rbm@suse.com>
---
drivers/net/bonding/bond_main.c | 3 +++
1 file changed, 3 insertions(+)
diff --git a/drivers/net/bonding/bond_main.c b/drivers/net/bonding/bond_main.c
index 14ed91391fcc..7d32cd231633 100644
--- a/drivers/net/bonding/bond_main.c
+++ b/drivers/net/bonding/bond_main.c
@@ -3256,6 +3256,9 @@ static int bond_confirm_addr6(struct net_device *dev,
{
struct in6_addr *addr = (struct in6_addr *)priv->data;
+ if (unlikely(!ipv6_mod_enabled()))
+ return 0;
+
return ipv6_chk_addr(dev_net(dev), addr, dev, 0);
}
--
2.53.0
^ permalink raw reply related [flat|nested] 6+ messages in thread
* Re: [PATCH net v2 2/3] bpf: bpf_out_neigh_v6: Fix nd_tbl NULL dereference when IPv6 is disabled
2026-03-05 20:37 ` [PATCH net v2 2/3] bpf: bpf_out_neigh_v6: " Ricardo B. Marlière
@ 2026-03-05 21:26 ` Fernando Fernandez Mancera
0 siblings, 0 replies; 6+ messages in thread
From: Fernando Fernandez Mancera @ 2026-03-05 21:26 UTC (permalink / raw)
To: Ricardo B. Marlière, Martin KaFai Lau, Daniel Borkmann,
John Fastabend, Stanislav Fomichev, Alexei Starovoitov,
Andrii Nakryiko, Eduard Zingerman, Song Liu, Yonghong Song,
KP Singh, Hao Luo, Jiri Olsa, David S. Miller, Eric Dumazet,
Jakub Kicinski, Paolo Abeni, Simon Horman,
Toke Høiland-Jørgensen, David Ahern, Jay Vosburgh,
Andrew Lunn, Hangbin Liu
Cc: bpf, netdev, linux-kernel
On 3/5/26 9:37 PM, Ricardo B. Marlière wrote:
> When booting with the 'ipv6.disable=1' parameter, the nd_tbl is never
> initialized because inet6_init() exits before ndisc_init() is called which
> initializes it. If bpf_redirect_neigh() is called with explicit AF_INET6
> nexthop parameters, __bpf_redirect_neigh_v6() can skip the IPv6 FIB lookup
> and call bpf_out_neigh_v6() directly. bpf_out_neigh_v6() then calls
> ip_neigh_gw6(), which uses ipv6_stub->nd_tbl.
>
> BUG: kernel NULL pointer dereference, address: 0000000000000248
> Oops: Oops: 0000 [#1] SMP NOPTI
> RIP: 0010:skb_do_redirect+0x44f/0xf40
> Call Trace:
> <TASK>
> ? srso_alias_return_thunk+0x5/0xfbef5
> ? __tcf_classify.constprop.0+0x83/0x160
> ? srso_alias_return_thunk+0x5/0xfbef5
> ? tcf_classify+0x2b/0x50
> ? srso_alias_return_thunk+0x5/0xfbef5
> ? tc_run+0xb8/0x120
> ? srso_alias_return_thunk+0x5/0xfbef5
> __dev_queue_xmit+0x6fa/0x1000
> ? srso_alias_return_thunk+0x5/0xfbef5
> packet_sendmsg+0x10da/0x1700
> ? srso_alias_return_thunk+0x5/0xfbef5
> __sys_sendto+0x1f3/0x220
> __x64_sys_sendto+0x24/0x30
> do_syscall_64+0x101/0xf80
> ? exc_page_fault+0x6e/0x170
> ? srso_alias_return_thunk+0x5/0xfbef5
> entry_SYSCALL_64_after_hwframe+0x77/0x7f
> </TASK>
>
> Fix this by adding an early check in bpf_out_neigh_v6(). If
> ipv6_stub->nd_tbl is NULL, drop the packet before neighbor lookup.
>
> Suggested-by: Fernando Fernandez Mancera <fmancera@suse.de>
> Fixes: ba452c9e996d ("bpf: Fix bpf_redirect_neigh helper api to support supplying nexthop")
> Signed-off-by: Ricardo B. Marlière <rbm@suse.com>
> ---
> net/core/filter.c | 3 +++
> 1 file changed, 3 insertions(+)
>
> diff --git a/net/core/filter.c b/net/core/filter.c
> index ff02dbe4c94f..3344fa0789f0 100644
> --- a/net/core/filter.c
> +++ b/net/core/filter.c
> @@ -2228,6 +2228,9 @@ static int bpf_out_neigh_v6(struct net *net, struct sk_buff *skb,
> return -ENOMEM;
> }
>
> + if (unlikely(!ipv6_mod_enabled()))
> + goto out_drop;
> +
I don't think this is possible here if ipv6=m is set. Could you check
that, please? A NULL check will be needed. See this similar situation:
https://web.git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/?id=168ff39e4758897d2eee4756977d036d52884c7e
Bonding is fine as it enforces `depends on IPV6 || IPV6=n`.
Thanks,
Fernando.
> rcu_read_lock();
> if (!nh) {
> dst = skb_dst(skb);
>
^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: [PATCH net v2 3/3] net: bonding: Fix nd_tbl NULL dereference when IPv6 is disabled
2026-03-05 20:37 ` [PATCH net v2 3/3] net: bonding: " Ricardo B. Marlière
@ 2026-03-06 2:31 ` Hangbin Liu
0 siblings, 0 replies; 6+ messages in thread
From: Hangbin Liu @ 2026-03-06 2:31 UTC (permalink / raw)
To: Ricardo B. Marlière
Cc: Martin KaFai Lau, Daniel Borkmann, John Fastabend,
Stanislav Fomichev, Alexei Starovoitov, Andrii Nakryiko,
Eduard Zingerman, Song Liu, Yonghong Song, KP Singh, Hao Luo,
Jiri Olsa, David S. Miller, Eric Dumazet, Jakub Kicinski,
Paolo Abeni, Simon Horman, Toke Høiland-Jørgensen,
David Ahern, Jay Vosburgh, Andrew Lunn,
Fernando Fernandez Mancera, bpf, netdev, linux-kernel
On Thu, Mar 05, 2026 at 05:37:41PM -0300, Ricardo B. Marlière wrote:
> When booting with the 'ipv6.disable=1' parameter, the nd_tbl is never
> initialized because inet6_init() exits before ndisc_init() is called
> which initializes it. If bonding ARP/NS validation is enabled, an IPv6
> NS/NA packet received on a slave can reach bond_validate_na(), which
> calls bond_has_this_ip6(). That path calls ipv6_chk_addr() and can
> crash in __ipv6_chk_addr_and_flags().
>
> BUG: kernel NULL pointer dereference, address: 00000000000005d8
> Oops: Oops: 0000 [#1] SMP NOPTI
> RIP: 0010:__ipv6_chk_addr_and_flags+0x69/0x170
> Call Trace:
> <IRQ>
> ipv6_chk_addr+0x1f/0x30
> bond_validate_na+0x12e/0x1d0 [bonding]
> ? __pfx_bond_handle_frame+0x10/0x10 [bonding]
> bond_rcv_validate+0x1a0/0x450 [bonding]
> bond_handle_frame+0x5e/0x290 [bonding]
> ? srso_alias_return_thunk+0x5/0xfbef5
> __netif_receive_skb_core.constprop.0+0x3e8/0xe50
> ? srso_alias_return_thunk+0x5/0xfbef5
> ? update_cfs_rq_load_avg+0x1a/0x240
> ? srso_alias_return_thunk+0x5/0xfbef5
> ? __enqueue_entity+0x5e/0x240
> __netif_receive_skb_one_core+0x39/0xa0
> process_backlog+0x9c/0x150
> __napi_poll+0x30/0x200
> ? srso_alias_return_thunk+0x5/0xfbef5
> net_rx_action+0x338/0x3b0
> handle_softirqs+0xc9/0x2a0
> do_softirq+0x42/0x60
> </IRQ>
> <TASK>
> __local_bh_enable_ip+0x62/0x70
> __dev_queue_xmit+0x2d3/0x1000
> ? srso_alias_return_thunk+0x5/0xfbef5
> ? srso_alias_return_thunk+0x5/0xfbef5
> ? packet_parse_headers+0x10a/0x1a0
> packet_sendmsg+0x10da/0x1700
> ? kick_pool+0x5f/0x140
> ? srso_alias_return_thunk+0x5/0xfbef5
> ? __queue_work+0x12d/0x4f0
> __sys_sendto+0x1f3/0x220
> __x64_sys_sendto+0x24/0x30
> do_syscall_64+0x101/0xf80
> ? exc_page_fault+0x6e/0x170
> ? srso_alias_return_thunk+0x5/0xfbef5
> entry_SYSCALL_64_after_hwframe+0x77/0x7f
> </TASK>
>
> Fix this by adding an early check in bond_confirm_addr6(). If
> ipv6_stub->nd_tbl is NULL, return before calling ipv6_chk_addr().
>
> Suggested-by: Fernando Fernandez Mancera <fmancera@suse.de>
> Fixes: 4e24be018eb9 ("bonding: add new parameter ns_targets")
> Signed-off-by: Ricardo B. Marlière <rbm@suse.com>
> ---
> drivers/net/bonding/bond_main.c | 3 +++
> 1 file changed, 3 insertions(+)
>
> diff --git a/drivers/net/bonding/bond_main.c b/drivers/net/bonding/bond_main.c
> index 14ed91391fcc..7d32cd231633 100644
> --- a/drivers/net/bonding/bond_main.c
> +++ b/drivers/net/bonding/bond_main.c
> @@ -3256,6 +3256,9 @@ static int bond_confirm_addr6(struct net_device *dev,
> {
> struct in6_addr *addr = (struct in6_addr *)priv->data;
>
> + if (unlikely(!ipv6_mod_enabled()))
> + return 0;
> +
> return ipv6_chk_addr(dev_net(dev), addr, dev, 0);
> }
Hi Ricardo,
Since the ipv6 has been disabled on the host, I'm a little wonder why
don't we check it more early, e.g. in this if check
#if IS_ENABLED(CONFIG_IPV6)
} else if (is_ipv6) {
return bond_na_rcv(skb, bond, slave);
#endif
Thanks
Hangbin
^ permalink raw reply [flat|nested] 6+ messages in thread
end of thread, other threads:[~2026-03-06 2:31 UTC | newest]
Thread overview: 6+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2026-03-05 20:37 [PATCH net v2 0/3] {net,bpf}: nd_tbl fixes for when ipv6.disable=1 Ricardo B. Marlière
2026-03-05 20:37 ` [PATCH net v2 1/3] bpf: bpf_out_neigh_v4: Fix nd_tbl NULL dereference when IPv6 is disabled Ricardo B. Marlière
2026-03-05 20:37 ` [PATCH net v2 2/3] bpf: bpf_out_neigh_v6: " Ricardo B. Marlière
2026-03-05 21:26 ` Fernando Fernandez Mancera
2026-03-05 20:37 ` [PATCH net v2 3/3] net: bonding: " Ricardo B. Marlière
2026-03-06 2:31 ` Hangbin Liu
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox