[PATCH 0/5] Netfilter/IPVS fixes for net

[Pablo Neira Ayuso <pablo@netfilter.org>]

Hi,

The following patchset contains Netfilter/IPVS fixes for net:

1) Fix crash on flowtable due to race between garbage collection
   and insertion.

2) Restore callback unbinding in netfilter offloads.

3) Fix races on IPVS module removal, from Davide Caratti.

4) Make old_secure_tcp per-netns to fix sysbot report,
   from Eric Dumazet.

5) Validate matching length in netfilter offloads, from wenxu.

You can pull these changes from:

  git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf.git

Thank you.

----------------------------------------------------------------

The following changes since commit 6c5d9c2a6bedbb3c3c14253776320c0ee564f064:

  ipv6: include <net/addrconf.h> for missing declarations (2019-10-22 15:17:03 -0700)

are available in the git repository at:

  git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf.git HEAD

for you to fetch changes up to 52b33b4f8186669ab88b56cf5b2812e3996ef289:

  Merge tag 'ipvs-fixes-for-v5.4' of https://git.kernel.org/pub/scm/linux/kernel/git/horms/ipvs (2019-10-26 12:42:45 +0200)

----------------------------------------------------------------
Davide Caratti (1):
      ipvs: don't ignore errors in case refcounting ip_vs module fails

Eric Dumazet (1):
      ipvs: move old_secure_tcp into struct netns_ipvs

Pablo Neira Ayuso (3):
      netfilter: nf_flow_table: set timeout before insertion into hashes
      netfilter: nf_tables_offload: restore basechain deletion
      Merge tag 'ipvs-fixes-for-v5.4' of https://git.kernel.org/.../horms/ipvs

wenxu (1):
      netfilter: nft_payload: fix missing check for matching length in offloads

 include/net/ip_vs.h                |  1 +
 net/netfilter/ipvs/ip_vs_app.c     | 12 ++++++++++--
 net/netfilter/ipvs/ip_vs_ctl.c     | 29 +++++++++++------------------
 net/netfilter/ipvs/ip_vs_pe.c      |  3 ++-
 net/netfilter/ipvs/ip_vs_sched.c   |  3 ++-
 net/netfilter/ipvs/ip_vs_sync.c    | 13 ++++++++++---
 net/netfilter/nf_flow_table_core.c |  3 ++-
 net/netfilter/nf_tables_offload.c  |  2 +-
 net/netfilter/nft_payload.c        | 38 ++++++++++++++++++++++++++++++++++++++
 9 files changed, 77 insertions(+), 27 deletions(-)