* [PATCH nf v2] netfilter: nft_reject: prevent unbounded recursion in output hooks
@ 2026-09-22 9:25 Fernando Fernandez Mancera
2026-09-22 10:25 ` Florian Westphal
` (2 more replies)
0 siblings, 3 replies; 4+ messages in thread
From: Fernando Fernandez Mancera @ 2026-09-22 9:25 UTC (permalink / raw)
To: netfilter-devel
Cc: coreteam, pablo, fw, phil, eric, Fernando Fernandez Mancera,
Yu Junzhe
nftables payload-mangling rules can rewrite packet contents (such as TCP
flags) before they are evaluated by reject targets. This defeats the
content-based loop guards, allowing unbounded hook recursion that leads
to kernel stack exhaustion and panics.
Fix this by extracting the per-CPU xmit recursion limit previously used
by the netdev duplication/forwarding paths into a shared header, and
apply it to the inet and inet6 reject transmit functions. It disables BH
while transmitting the skb to address a possible migration to different
CPU leading to imbalanced decrementation of the recursion counters.
Note that the dev_queue_xmit() path used when CONFIG_BRIDGE_NETFILTER is
enabled does not require this recursion guard. In that scenario, the
generated reset packet is transmitted directly at Layer 2. Because the
packet egresses from a different hook, it cannot synchronously loop. In
addition nf_send_unreach() and nf_send_unreach6() are safe as the ICMP
transmit functions are protected against recursion by the
icmp_xmit_lock() and icmpv6_xmit_lock() guards.
Reported-by: Yu Junzhe <junzheyu1@gmail.com>
Closes: https://lore.kernel.org/netfilter-devel/20260921061320.543-1-junzheyu1@gmail.com/
Fixes: bee11dc78fc8 ("netfilter: nft_reject: support for IPv6 and TCP reset")
Signed-off-by: Fernando Fernandez Mancera <fmancera@suse.de>
---
include/net/netfilter/nf_dup_netdev.h | 35 ----------------------
include/net/netfilter/nf_recursion.h | 42 +++++++++++++++++++++++++++
net/ipv4/netfilter/nf_reject_ipv4.c | 12 ++++++++
net/ipv6/netfilter/nf_reject_ipv6.c | 13 +++++++++
net/netfilter/nf_dup_netdev.c | 1 +
net/netfilter/nft_fwd_netdev.c | 1 +
6 files changed, 69 insertions(+), 35 deletions(-)
create mode 100644 include/net/netfilter/nf_recursion.h
diff --git a/include/net/netfilter/nf_dup_netdev.h b/include/net/netfilter/nf_dup_netdev.h
index f6b05bd80c3f..a39411264614 100644
--- a/include/net/netfilter/nf_dup_netdev.h
+++ b/include/net/netfilter/nf_dup_netdev.h
@@ -9,41 +9,6 @@
void nf_dup_netdev_egress(const struct nft_pktinfo *pkt, int oif);
void nf_fwd_netdev_egress(const struct nft_pktinfo *pkt, int oif);
-#define NF_RECURSION_LIMIT 2
-
-#ifndef CONFIG_PREEMPT_RT
-static inline bool nf_dev_xmit_recursion(void)
-{
- return unlikely(__this_cpu_read(softnet_data.xmit.nf_dup_skb_recursion) >
- NF_RECURSION_LIMIT);
-}
-
-static inline void nf_dev_xmit_recursion_inc(void)
-{
- __this_cpu_inc(softnet_data.xmit.nf_dup_skb_recursion);
-}
-
-static inline void nf_dev_xmit_recursion_dec(void)
-{
- __this_cpu_dec(softnet_data.xmit.nf_dup_skb_recursion);
-}
-#else
-static inline bool nf_dev_xmit_recursion(void)
-{
- return unlikely(current->net_xmit.nf_dup_skb_recursion > NF_RECURSION_LIMIT);
-}
-
-static inline void nf_dev_xmit_recursion_inc(void)
-{
- current->net_xmit.nf_dup_skb_recursion++;
-}
-
-static inline void nf_dev_xmit_recursion_dec(void)
-{
- current->net_xmit.nf_dup_skb_recursion--;
-}
-#endif
-
struct nft_offload_ctx;
struct nft_flow_rule;
diff --git a/include/net/netfilter/nf_recursion.h b/include/net/netfilter/nf_recursion.h
new file mode 100644
index 000000000000..3e91b78e21b3
--- /dev/null
+++ b/include/net/netfilter/nf_recursion.h
@@ -0,0 +1,42 @@
+/* SPDX-License-Identifier: GPL-2.0 */
+#ifndef _NF_RECURSION_H_
+#define _NF_RECURSION_H_
+
+#include <linux/netdevice.h>
+
+#define NF_RECURSION_LIMIT 2
+
+#ifndef CONFIG_PREEMPT_RT
+static inline bool nf_dev_xmit_recursion(void)
+{
+ return unlikely(__this_cpu_read(softnet_data.xmit.nf_dup_skb_recursion) >
+ NF_RECURSION_LIMIT);
+}
+
+static inline void nf_dev_xmit_recursion_inc(void)
+{
+ __this_cpu_inc(softnet_data.xmit.nf_dup_skb_recursion);
+}
+
+static inline void nf_dev_xmit_recursion_dec(void)
+{
+ __this_cpu_dec(softnet_data.xmit.nf_dup_skb_recursion);
+}
+#else
+static inline bool nf_dev_xmit_recursion(void)
+{
+ return unlikely(current->net_xmit.nf_dup_skb_recursion > NF_RECURSION_LIMIT);
+}
+
+static inline void nf_dev_xmit_recursion_inc(void)
+{
+ current->net_xmit.nf_dup_skb_recursion++;
+}
+
+static inline void nf_dev_xmit_recursion_dec(void)
+{
+ current->net_xmit.nf_dup_skb_recursion--;
+}
+#endif
+
+#endif /* _NF_RECURSION_H_ */
diff --git a/net/ipv4/netfilter/nf_reject_ipv4.c b/net/ipv4/netfilter/nf_reject_ipv4.c
index 59ec465a9df9..3f227a094312 100644
--- a/net/ipv4/netfilter/nf_reject_ipv4.c
+++ b/net/ipv4/netfilter/nf_reject_ipv4.c
@@ -10,6 +10,7 @@
#include <net/dst.h>
#include <net/dst_metadata.h>
#include <net/netfilter/ipv4/nf_reject.h>
+#include <net/netfilter/nf_recursion.h>
#include <linux/netfilter_ipv4.h>
#include <linux/netfilter_bridge.h>
@@ -336,7 +337,18 @@ void nf_send_reset(struct net *net, struct sock *sk, struct sk_buff *oldskb,
dev_queue_xmit(nskb);
} else
#endif
+ {
+ local_bh_disable();
+ if (nf_dev_xmit_recursion()) {
+ local_bh_enable();
+ goto free_nskb;
+ }
+
+ nf_dev_xmit_recursion_inc();
ip_local_out(net, nskb->sk, nskb);
+ nf_dev_xmit_recursion_dec();
+ local_bh_enable();
+ }
return;
diff --git a/net/ipv6/netfilter/nf_reject_ipv6.c b/net/ipv6/netfilter/nf_reject_ipv6.c
index 07cdaa10da0d..f69ddfe72030 100644
--- a/net/ipv6/netfilter/nf_reject_ipv6.c
+++ b/net/ipv6/netfilter/nf_reject_ipv6.c
@@ -10,6 +10,7 @@
#include <net/ip6_checksum.h>
#include <net/dst_metadata.h>
#include <net/netfilter/ipv6/nf_reject.h>
+#include <net/netfilter/nf_recursion.h>
#include <linux/netfilter_ipv6.h>
#include <linux/netfilter_bridge.h>
@@ -409,7 +410,19 @@ void nf_send_reset6(struct net *net, struct sock *sk, struct sk_buff *oldskb,
dev_queue_xmit(nskb);
} else
#endif
+ {
+ local_bh_disable();
+ if (nf_dev_xmit_recursion()) {
+ local_bh_enable();
+ kfree_skb(nskb);
+ return;
+ }
+
+ nf_dev_xmit_recursion_inc();
ip6_local_out(net, sk, nskb);
+ nf_dev_xmit_recursion_dec();
+ local_bh_enable();
+ }
}
EXPORT_SYMBOL_GPL(nf_send_reset6);
diff --git a/net/netfilter/nf_dup_netdev.c b/net/netfilter/nf_dup_netdev.c
index c6bd5c29bed6..918716629c15 100644
--- a/net/netfilter/nf_dup_netdev.c
+++ b/net/netfilter/nf_dup_netdev.c
@@ -12,6 +12,7 @@
#include <net/netfilter/nf_tables.h>
#include <net/netfilter/nf_tables_offload.h>
#include <net/netfilter/nf_dup_netdev.h>
+#include <net/netfilter/nf_recursion.h>
static void nf_do_netdev_egress(struct sk_buff *skb, struct net_device *dev,
enum nf_dev_hooks hook)
diff --git a/net/netfilter/nft_fwd_netdev.c b/net/netfilter/nft_fwd_netdev.c
index a48c2f765bba..7447da931a95 100644
--- a/net/netfilter/nft_fwd_netdev.c
+++ b/net/netfilter/nft_fwd_netdev.c
@@ -14,6 +14,7 @@
#include <net/netfilter/nf_tables.h>
#include <net/netfilter/nf_tables_offload.h>
#include <net/netfilter/nf_dup_netdev.h>
+#include <net/netfilter/nf_recursion.h>
#include <net/neighbour.h>
#include <net/ip.h>
--
2.55.0
^ permalink raw reply related [flat|nested] 4+ messages in thread
* Re: [PATCH nf v2] netfilter: nft_reject: prevent unbounded recursion in output hooks
2026-09-22 9:25 [PATCH nf v2] netfilter: nft_reject: prevent unbounded recursion in output hooks Fernando Fernandez Mancera
@ 2026-09-22 10:25 ` Florian Westphal
2026-09-23 21:00 ` kernel test robot
2026-09-23 22:06 ` kernel test robot
2 siblings, 0 replies; 4+ messages in thread
From: Florian Westphal @ 2026-09-22 10:25 UTC (permalink / raw)
To: Fernando Fernandez Mancera
Cc: netfilter-devel, coreteam, pablo, phil, eric, Yu Junzhe
Fernando Fernandez Mancera <fmancera@suse.de> wrote:
> nftables payload-mangling rules can rewrite packet contents (such as TCP
> flags) before they are evaluated by reject targets. This defeats the
> content-based loop guards, allowing unbounded hook recursion that leads
> to kernel stack exhaustion and panics.
>
> Fix this by extracting the per-CPU xmit recursion limit previously used
> by the netdev duplication/forwarding paths into a shared header, and
> apply it to the inet and inet6 reject transmit functions. It disables BH
> while transmitting the skb to address a possible migration to different
> CPU leading to imbalanced decrementation of the recursion counters.
>
> Note that the dev_queue_xmit() path used when CONFIG_BRIDGE_NETFILTER is
> enabled does not require this recursion guard. In that scenario, the
> generated reset packet is transmitted directly at Layer 2. Because the
> packet egresses from a different hook, it cannot synchronously loop. In
> addition nf_send_unreach() and nf_send_unreach6() are safe as the ICMP
> transmit functions are protected against recursion by the
> icmp_xmit_lock() and icmpv6_xmit_lock() guards.
I see, thanks for explaining.
^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: [PATCH nf v2] netfilter: nft_reject: prevent unbounded recursion in output hooks
2026-09-22 9:25 [PATCH nf v2] netfilter: nft_reject: prevent unbounded recursion in output hooks Fernando Fernandez Mancera
2026-09-22 10:25 ` Florian Westphal
@ 2026-09-23 21:00 ` kernel test robot
2026-09-23 22:06 ` kernel test robot
2 siblings, 0 replies; 4+ messages in thread
From: kernel test robot @ 2026-09-23 21:00 UTC (permalink / raw)
To: Fernando Fernandez Mancera, netfilter-devel
Cc: oe-kbuild-all, coreteam, pablo, fw, phil, eric,
Fernando Fernandez Mancera, Yu Junzhe
Hi Fernando,
kernel test robot noticed the following build errors:
[auto build test ERROR on netfilter-nf/main]
url: https://github.com/intel-lab-lkp/linux/commits/Fernando-Fernandez-Mancera/netfilter-nft_reject-prevent-unbounded-recursion-in-output-hooks/20260922-112503
base: https://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf.git main
patch link: https://lore.kernel.org/r/20260922092503.3238-1-fmancera%40suse.de
patch subject: [PATCH nf v2] netfilter: nft_reject: prevent unbounded recursion in output hooks
config: arm-randconfig-1000-20260924 (https://download.01.org/0day-ci/archive/20260924/202609240424.i9W3b2H2-lkp@intel.com/config)
compiler: arm-linux-gnueabi-gcc (GCC) 10.5.0
reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20260924/202609240424.i9W3b2H2-lkp@intel.com/reproduce)
If you fix the issue in a separate patch/commit (i.e. not just a new version of
the same patch/commit), kindly add following tags
| Reported-by: kernel test robot <lkp@intel.com>
| Closes: https://lore.kernel.org/oe-kbuild-all/202609240424.i9W3b2H2-lkp@intel.com/
All errors (new ones prefixed by >>):
In file included from include/linux/build_bug.h:5,
from include/linux/container_of.h:5,
from include/linux/list.h:5,
from include/linux/module.h:12,
from net/ipv4/netfilter/nf_reject_ipv4.c:6:
include/net/netfilter/nf_recursion.h: In function 'nf_dev_xmit_recursion':
>> include/net/netfilter/nf_recursion.h:12:51: error: 'struct netdev_xmit' has no member named 'nf_dup_skb_recursion'
12 | return unlikely(__this_cpu_read(softnet_data.xmit.nf_dup_skb_recursion) >
| ^
include/linux/compiler.h:77:42: note: in definition of macro 'unlikely'
77 | # define unlikely(x) __builtin_expect(!!(x), 0)
| ^
include/linux/percpu-defs.h:317:2: note: in expansion of macro 'TYPEOF_UNQUAL'
317 | TYPEOF_UNQUAL(variable) pscr_ret__; \
| ^~~~~~~~~~~~~
include/linux/percpu-defs.h:407:28: note: in expansion of macro '__pcpu_size_call_return'
407 | #define raw_cpu_read(pcp) __pcpu_size_call_return(raw_cpu_read_, pcp)
| ^~~~~~~~~~~~~~~~~~~~~~~
include/linux/percpu-defs.h:432:2: note: in expansion of macro 'raw_cpu_read'
432 | raw_cpu_read(pcp); \
| ^~~~~~~~~~~~
include/net/netfilter/nf_recursion.h:12:18: note: in expansion of macro '__this_cpu_read'
12 | return unlikely(__this_cpu_read(softnet_data.xmit.nf_dup_skb_recursion) >
| ^~~~~~~~~~~~~~~
>> include/net/netfilter/nf_recursion.h:12:51: error: 'struct netdev_xmit' has no member named 'nf_dup_skb_recursion'
12 | return unlikely(__this_cpu_read(softnet_data.xmit.nf_dup_skb_recursion) >
| ^
include/linux/compiler.h:77:42: note: in definition of macro 'unlikely'
77 | # define unlikely(x) __builtin_expect(!!(x), 0)
| ^
include/linux/percpu-defs.h:318:2: note: in expansion of macro '__verify_pcpu_ptr'
318 | __verify_pcpu_ptr(&(variable)); \
| ^~~~~~~~~~~~~~~~~
include/linux/percpu-defs.h:407:28: note: in expansion of macro '__pcpu_size_call_return'
407 | #define raw_cpu_read(pcp) __pcpu_size_call_return(raw_cpu_read_, pcp)
| ^~~~~~~~~~~~~~~~~~~~~~~
include/linux/percpu-defs.h:432:2: note: in expansion of macro 'raw_cpu_read'
432 | raw_cpu_read(pcp); \
| ^~~~~~~~~~~~
include/net/netfilter/nf_recursion.h:12:18: note: in expansion of macro '__this_cpu_read'
12 | return unlikely(__this_cpu_read(softnet_data.xmit.nf_dup_skb_recursion) >
| ^~~~~~~~~~~~~~~
>> include/net/netfilter/nf_recursion.h:12:51: error: 'struct netdev_xmit' has no member named 'nf_dup_skb_recursion'
12 | return unlikely(__this_cpu_read(softnet_data.xmit.nf_dup_skb_recursion) >
| ^
include/linux/compiler.h:77:42: note: in definition of macro 'unlikely'
77 | # define unlikely(x) __builtin_expect(!!(x), 0)
| ^
include/linux/percpu-defs.h:407:28: note: in expansion of macro '__pcpu_size_call_return'
407 | #define raw_cpu_read(pcp) __pcpu_size_call_return(raw_cpu_read_, pcp)
| ^~~~~~~~~~~~~~~~~~~~~~~
include/linux/percpu-defs.h:432:2: note: in expansion of macro 'raw_cpu_read'
432 | raw_cpu_read(pcp); \
| ^~~~~~~~~~~~
include/net/netfilter/nf_recursion.h:12:18: note: in expansion of macro '__this_cpu_read'
12 | return unlikely(__this_cpu_read(softnet_data.xmit.nf_dup_skb_recursion) >
| ^~~~~~~~~~~~~~~
>> include/net/netfilter/nf_recursion.h:12:51: error: 'struct netdev_xmit' has no member named 'nf_dup_skb_recursion'
12 | return unlikely(__this_cpu_read(softnet_data.xmit.nf_dup_skb_recursion) >
| ^
include/linux/compiler.h:77:42: note: in definition of macro 'unlikely'
77 | # define unlikely(x) __builtin_expect(!!(x), 0)
| ^
include/linux/percpu-defs.h:259:2: note: in expansion of macro '__verify_pcpu_ptr'
259 | __verify_pcpu_ptr(ptr); \
| ^~~~~~~~~~~~~~~~~
include/linux/percpu-defs.h:263:26: note: in expansion of macro 'per_cpu_ptr'
263 | #define raw_cpu_ptr(ptr) per_cpu_ptr(ptr, 0)
| ^~~~~~~~~~~
include/asm-generic/percpu.h:82:3: note: in expansion of macro 'raw_cpu_ptr'
82 | *raw_cpu_ptr(&(pcp)); \
| ^~~~~~~~~~~
include/asm-generic/percpu.h:217:30: note: in expansion of macro 'raw_cpu_generic_read'
217 | #define raw_cpu_read_1(pcp) raw_cpu_generic_read(pcp)
| ^~~~~~~~~~~~~~~~~~~~
include/linux/percpu-defs.h:320:23: note: in expansion of macro 'raw_cpu_read_1'
320 | case 1: pscr_ret__ = stem##1(variable); break; \
| ^~~~
include/linux/percpu-defs.h:407:28: note: in expansion of macro '__pcpu_size_call_return'
407 | #define raw_cpu_read(pcp) __pcpu_size_call_return(raw_cpu_read_, pcp)
| ^~~~~~~~~~~~~~~~~~~~~~~
include/linux/percpu-defs.h:432:2: note: in expansion of macro 'raw_cpu_read'
432 | raw_cpu_read(pcp); \
| ^~~~~~~~~~~~
include/net/netfilter/nf_recursion.h:12:18: note: in expansion of macro '__this_cpu_read'
12 | return unlikely(__this_cpu_read(softnet_data.xmit.nf_dup_skb_recursion) >
| ^~~~~~~~~~~~~~~
>> include/net/netfilter/nf_recursion.h:12:51: error: 'struct netdev_xmit' has no member named 'nf_dup_skb_recursion'
12 | return unlikely(__this_cpu_read(softnet_data.xmit.nf_dup_skb_recursion) >
| ^
include/linux/compiler.h:77:42: note: in definition of macro 'unlikely'
77 | # define unlikely(x) __builtin_expect(!!(x), 0)
| ^
include/linux/percpu-defs.h:221:3: note: in expansion of macro 'TYPEOF_UNQUAL'
221 | (TYPEOF_UNQUAL(*(__p)) __force __kernel *)((__force unsigned long)(__p))
| ^~~~~~~~~~~~~
include/linux/percpu-defs.h:260:2: note: in expansion of macro 'PERCPU_PTR'
260 | PERCPU_PTR(ptr); \
| ^~~~~~~~~~
include/linux/percpu-defs.h:263:26: note: in expansion of macro 'per_cpu_ptr'
263 | #define raw_cpu_ptr(ptr) per_cpu_ptr(ptr, 0)
| ^~~~~~~~~~~
include/asm-generic/percpu.h:82:3: note: in expansion of macro 'raw_cpu_ptr'
82 | *raw_cpu_ptr(&(pcp)); \
| ^~~~~~~~~~~
include/asm-generic/percpu.h:217:30: note: in expansion of macro 'raw_cpu_generic_read'
217 | #define raw_cpu_read_1(pcp) raw_cpu_generic_read(pcp)
| ^~~~~~~~~~~~~~~~~~~~
include/linux/percpu-defs.h:320:23: note: in expansion of macro 'raw_cpu_read_1'
320 | case 1: pscr_ret__ = stem##1(variable); break; \
| ^~~~
include/linux/percpu-defs.h:407:28: note: in expansion of macro '__pcpu_size_call_return'
407 | #define raw_cpu_read(pcp) __pcpu_size_call_return(raw_cpu_read_, pcp)
| ^~~~~~~~~~~~~~~~~~~~~~~
include/linux/percpu-defs.h:432:2: note: in expansion of macro 'raw_cpu_read'
432 | raw_cpu_read(pcp); \
| ^~~~~~~~~~~~
include/net/netfilter/nf_recursion.h:12:18: note: in expansion of macro '__this_cpu_read'
12 | return unlikely(__this_cpu_read(softnet_data.xmit.nf_dup_skb_recursion) >
| ^~~~~~~~~~~~~~~
>> include/net/netfilter/nf_recursion.h:12:51: error: 'struct netdev_xmit' has no member named 'nf_dup_skb_recursion'
12 | return unlikely(__this_cpu_read(softnet_data.xmit.nf_dup_skb_recursion) >
| ^
include/linux/compiler.h:77:42: note: in definition of macro 'unlikely'
77 | # define unlikely(x) __builtin_expect(!!(x), 0)
| ^
include/linux/percpu-defs.h:260:2: note: in expansion of macro 'PERCPU_PTR'
260 | PERCPU_PTR(ptr); \
| ^~~~~~~~~~
include/linux/percpu-defs.h:263:26: note: in expansion of macro 'per_cpu_ptr'
263 | #define raw_cpu_ptr(ptr) per_cpu_ptr(ptr, 0)
| ^~~~~~~~~~~
include/asm-generic/percpu.h:82:3: note: in expansion of macro 'raw_cpu_ptr'
82 | *raw_cpu_ptr(&(pcp)); \
| ^~~~~~~~~~~
include/asm-generic/percpu.h:217:30: note: in expansion of macro 'raw_cpu_generic_read'
217 | #define raw_cpu_read_1(pcp) raw_cpu_generic_read(pcp)
| ^~~~~~~~~~~~~~~~~~~~
include/linux/percpu-defs.h:320:23: note: in expansion of macro 'raw_cpu_read_1'
320 | case 1: pscr_ret__ = stem##1(variable); break; \
| ^~~~
include/linux/percpu-defs.h:407:28: note: in expansion of macro '__pcpu_size_call_return'
407 | #define raw_cpu_read(pcp) __pcpu_size_call_return(raw_cpu_read_, pcp)
| ^~~~~~~~~~~~~~~~~~~~~~~
include/linux/percpu-defs.h:432:2: note: in expansion of macro 'raw_cpu_read'
432 | raw_cpu_read(pcp); \
| ^~~~~~~~~~~~
include/net/netfilter/nf_recursion.h:12:18: note: in expansion of macro '__this_cpu_read'
12 | return unlikely(__this_cpu_read(softnet_data.xmit.nf_dup_skb_recursion) >
| ^~~~~~~~~~~~~~~
>> include/net/netfilter/nf_recursion.h:12:51: error: 'struct netdev_xmit' has no member named 'nf_dup_skb_recursion'
12 | return unlikely(__this_cpu_read(softnet_data.xmit.nf_dup_skb_recursion) >
| ^
include/linux/compiler.h:77:42: note: in definition of macro 'unlikely'
77 | # define unlikely(x) __builtin_expect(!!(x), 0)
| ^
include/linux/percpu-defs.h:259:2: note: in expansion of macro '__verify_pcpu_ptr'
259 | __verify_pcpu_ptr(ptr); \
| ^~~~~~~~~~~~~~~~~
include/linux/percpu-defs.h:263:26: note: in expansion of macro 'per_cpu_ptr'
263 | #define raw_cpu_ptr(ptr) per_cpu_ptr(ptr, 0)
| ^~~~~~~~~~~
include/asm-generic/percpu.h:82:3: note: in expansion of macro 'raw_cpu_ptr'
82 | *raw_cpu_ptr(&(pcp)); \
| ^~~~~~~~~~~
include/asm-generic/percpu.h:220:30: note: in expansion of macro 'raw_cpu_generic_read'
220 | #define raw_cpu_read_2(pcp) raw_cpu_generic_read(pcp)
| ^~~~~~~~~~~~~~~~~~~~
include/linux/percpu-defs.h:321:23: note: in expansion of macro 'raw_cpu_read_2'
321 | case 2: pscr_ret__ = stem##2(variable); break; \
| ^~~~
include/linux/percpu-defs.h:407:28: note: in expansion of macro '__pcpu_size_call_return'
407 | #define raw_cpu_read(pcp) __pcpu_size_call_return(raw_cpu_read_, pcp)
| ^~~~~~~~~~~~~~~~~~~~~~~
include/linux/percpu-defs.h:432:2: note: in expansion of macro 'raw_cpu_read'
432 | raw_cpu_read(pcp); \
| ^~~~~~~~~~~~
include/net/netfilter/nf_recursion.h:12:18: note: in expansion of macro '__this_cpu_read'
12 | return unlikely(__this_cpu_read(softnet_data.xmit.nf_dup_skb_recursion) >
| ^~~~~~~~~~~~~~~
>> include/net/netfilter/nf_recursion.h:12:51: error: 'struct netdev_xmit' has no member named 'nf_dup_skb_recursion'
12 | return unlikely(__this_cpu_read(softnet_data.xmit.nf_dup_skb_recursion) >
| ^
include/linux/compiler.h:77:42: note: in definition of macro 'unlikely'
77 | # define unlikely(x) __builtin_expect(!!(x), 0)
| ^
include/linux/percpu-defs.h:221:3: note: in expansion of macro 'TYPEOF_UNQUAL'
221 | (TYPEOF_UNQUAL(*(__p)) __force __kernel *)((__force unsigned long)(__p))
| ^~~~~~~~~~~~~
include/linux/percpu-defs.h:260:2: note: in expansion of macro 'PERCPU_PTR'
260 | PERCPU_PTR(ptr); \
| ^~~~~~~~~~
include/linux/percpu-defs.h:263:26: note: in expansion of macro 'per_cpu_ptr'
263 | #define raw_cpu_ptr(ptr) per_cpu_ptr(ptr, 0)
| ^~~~~~~~~~~
include/asm-generic/percpu.h:82:3: note: in expansion of macro 'raw_cpu_ptr'
82 | *raw_cpu_ptr(&(pcp)); \
| ^~~~~~~~~~~
include/asm-generic/percpu.h:220:30: note: in expansion of macro 'raw_cpu_generic_read'
220 | #define raw_cpu_read_2(pcp) raw_cpu_generic_read(pcp)
| ^~~~~~~~~~~~~~~~~~~~
include/linux/percpu-defs.h:321:23: note: in expansion of macro 'raw_cpu_read_2'
321 | case 2: pscr_ret__ = stem##2(variable); break; \
| ^~~~
include/linux/percpu-defs.h:407:28: note: in expansion of macro '__pcpu_size_call_return'
407 | #define raw_cpu_read(pcp) __pcpu_size_call_return(raw_cpu_read_, pcp)
| ^~~~~~~~~~~~~~~~~~~~~~~
include/linux/percpu-defs.h:432:2: note: in expansion of macro 'raw_cpu_read'
432 | raw_cpu_read(pcp); \
| ^~~~~~~~~~~~
include/net/netfilter/nf_recursion.h:12:18: note: in expansion of macro '__this_cpu_read'
12 | return unlikely(__this_cpu_read(softnet_data.xmit.nf_dup_skb_recursion) >
| ^~~~~~~~~~~~~~~
>> include/net/netfilter/nf_recursion.h:12:51: error: 'struct netdev_xmit' has no member named 'nf_dup_skb_recursion'
12 | return unlikely(__this_cpu_read(softnet_data.xmit.nf_dup_skb_recursion) >
| ^
include/linux/compiler.h:77:42: note: in definition of macro 'unlikely'
77 | # define unlikely(x) __builtin_expect(!!(x), 0)
| ^
include/linux/percpu-defs.h:260:2: note: in expansion of macro 'PERCPU_PTR'
260 | PERCPU_PTR(ptr); \
| ^~~~~~~~~~
include/linux/percpu-defs.h:263:26: note: in expansion of macro 'per_cpu_ptr'
263 | #define raw_cpu_ptr(ptr) per_cpu_ptr(ptr, 0)
| ^~~~~~~~~~~
include/asm-generic/percpu.h:82:3: note: in expansion of macro 'raw_cpu_ptr'
82 | *raw_cpu_ptr(&(pcp)); \
| ^~~~~~~~~~~
include/asm-generic/percpu.h:220:30: note: in expansion of macro 'raw_cpu_generic_read'
220 | #define raw_cpu_read_2(pcp) raw_cpu_generic_read(pcp)
| ^~~~~~~~~~~~~~~~~~~~
include/linux/percpu-defs.h:321:23: note: in expansion of macro 'raw_cpu_read_2'
321 | case 2: pscr_ret__ = stem##2(variable); break; \
| ^~~~
include/linux/percpu-defs.h:407:28: note: in expansion of macro '__pcpu_size_call_return'
407 | #define raw_cpu_read(pcp) __pcpu_size_call_return(raw_cpu_read_, pcp)
| ^~~~~~~~~~~~~~~~~~~~~~~
include/linux/percpu-defs.h:432:2: note: in expansion of macro 'raw_cpu_read'
432 | raw_cpu_read(pcp); \
| ^~~~~~~~~~~~
include/net/netfilter/nf_recursion.h:12:18: note: in expansion of macro '__this_cpu_read'
12 | return unlikely(__this_cpu_read(softnet_data.xmit.nf_dup_skb_recursion) >
| ^~~~~~~~~~~~~~~
>> include/net/netfilter/nf_recursion.h:12:51: error: 'struct netdev_xmit' has no member named 'nf_dup_skb_recursion'
12 | return unlikely(__this_cpu_read(softnet_data.xmit.nf_dup_skb_recursion) >
| ^
include/linux/compiler.h:77:42: note: in definition of macro 'unlikely'
77 | # define unlikely(x) __builtin_expect(!!(x), 0)
| ^
include/linux/percpu-defs.h:259:2: note: in expansion of macro '__verify_pcpu_ptr'
259 | __verify_pcpu_ptr(ptr); \
| ^~~~~~~~~~~~~~~~~
include/linux/percpu-defs.h:263:26: note: in expansion of macro 'per_cpu_ptr'
263 | #define raw_cpu_ptr(ptr) per_cpu_ptr(ptr, 0)
| ^~~~~~~~~~~
include/asm-generic/percpu.h:82:3: note: in expansion of macro 'raw_cpu_ptr'
82 | *raw_cpu_ptr(&(pcp)); \
| ^~~~~~~~~~~
include/asm-generic/percpu.h:223:30: note: in expansion of macro 'raw_cpu_generic_read'
223 | #define raw_cpu_read_4(pcp) raw_cpu_generic_read(pcp)
| ^~~~~~~~~~~~~~~~~~~~
include/linux/percpu-defs.h:322:23: note: in expansion of macro 'raw_cpu_read_4'
322 | case 4: pscr_ret__ = stem##4(variable); break; \
| ^~~~
include/linux/percpu-defs.h:407:28: note: in expansion of macro '__pcpu_size_call_return'
407 | #define raw_cpu_read(pcp) __pcpu_size_call_return(raw_cpu_read_, pcp)
| ^~~~~~~~~~~~~~~~~~~~~~~
include/linux/percpu-defs.h:432:2: note: in expansion of macro 'raw_cpu_read'
432 | raw_cpu_read(pcp); \
| ^~~~~~~~~~~~
include/net/netfilter/nf_recursion.h:12:18: note: in expansion of macro '__this_cpu_read'
12 | return unlikely(__this_cpu_read(softnet_data.xmit.nf_dup_skb_recursion) >
| ^~~~~~~~~~~~~~~
>> include/net/netfilter/nf_recursion.h:12:51: error: 'struct netdev_xmit' has no member named 'nf_dup_skb_recursion'
12 | return unlikely(__this_cpu_read(softnet_data.xmit.nf_dup_skb_recursion) >
| ^
include/linux/compiler.h:77:42: note: in definition of macro 'unlikely'
77 | # define unlikely(x) __builtin_expect(!!(x), 0)
| ^
include/linux/percpu-defs.h:221:3: note: in expansion of macro 'TYPEOF_UNQUAL'
221 | (TYPEOF_UNQUAL(*(__p)) __force __kernel *)((__force unsigned long)(__p))
| ^~~~~~~~~~~~~
include/linux/percpu-defs.h:260:2: note: in expansion of macro 'PERCPU_PTR'
260 | PERCPU_PTR(ptr); \
| ^~~~~~~~~~
include/linux/percpu-defs.h:263:26: note: in expansion of macro 'per_cpu_ptr'
263 | #define raw_cpu_ptr(ptr) per_cpu_ptr(ptr, 0)
| ^~~~~~~~~~~
include/asm-generic/percpu.h:82:3: note: in expansion of macro 'raw_cpu_ptr'
82 | *raw_cpu_ptr(&(pcp)); \
| ^~~~~~~~~~~
include/asm-generic/percpu.h:223:30: note: in expansion of macro 'raw_cpu_generic_read'
223 | #define raw_cpu_read_4(pcp) raw_cpu_generic_read(pcp)
| ^~~~~~~~~~~~~~~~~~~~
include/linux/percpu-defs.h:322:23: note: in expansion of macro 'raw_cpu_read_4'
322 | case 4: pscr_ret__ = stem##4(variable); break; \
| ^~~~
include/linux/percpu-defs.h:407:28: note: in expansion of macro '__pcpu_size_call_return'
407 | #define raw_cpu_read(pcp) __pcpu_size_call_return(raw_cpu_read_, pcp)
| ^~~~~~~~~~~~~~~~~~~~~~~
include/linux/percpu-defs.h:432:2: note: in expansion of macro 'raw_cpu_read'
432 | raw_cpu_read(pcp); \
| ^~~~~~~~~~~~
include/net/netfilter/nf_recursion.h:12:18: note: in expansion of macro '__this_cpu_read'
12 | return unlikely(__this_cpu_read(softnet_data.xmit.nf_dup_skb_recursion) >
| ^~~~~~~~~~~~~~~
>> include/net/netfilter/nf_recursion.h:12:51: error: 'struct netdev_xmit' has no member named 'nf_dup_skb_recursion'
12 | return unlikely(__this_cpu_read(softnet_data.xmit.nf_dup_skb_recursion) >
| ^
include/linux/compiler.h:77:42: note: in definition of macro 'unlikely'
77 | # define unlikely(x) __builtin_expect(!!(x), 0)
| ^
include/linux/percpu-defs.h:260:2: note: in expansion of macro 'PERCPU_PTR'
260 | PERCPU_PTR(ptr); \
| ^~~~~~~~~~
include/linux/percpu-defs.h:263:26: note: in expansion of macro 'per_cpu_ptr'
263 | #define raw_cpu_ptr(ptr) per_cpu_ptr(ptr, 0)
| ^~~~~~~~~~~
include/asm-generic/percpu.h:82:3: note: in expansion of macro 'raw_cpu_ptr'
82 | *raw_cpu_ptr(&(pcp)); \
| ^~~~~~~~~~~
include/asm-generic/percpu.h:223:30: note: in expansion of macro 'raw_cpu_generic_read'
223 | #define raw_cpu_read_4(pcp) raw_cpu_generic_read(pcp)
| ^~~~~~~~~~~~~~~~~~~~
include/linux/percpu-defs.h:322:23: note: in expansion of macro 'raw_cpu_read_4'
322 | case 4: pscr_ret__ = stem##4(variable); break; \
| ^~~~
include/linux/percpu-defs.h:407:28: note: in expansion of macro '__pcpu_size_call_return'
407 | #define raw_cpu_read(pcp) __pcpu_size_call_return(raw_cpu_read_, pcp)
| ^~~~~~~~~~~~~~~~~~~~~~~
include/linux/percpu-defs.h:432:2: note: in expansion of macro 'raw_cpu_read'
432 | raw_cpu_read(pcp); \
| ^~~~~~~~~~~~
include/net/netfilter/nf_recursion.h:12:18: note: in expansion of macro '__this_cpu_read'
12 | return unlikely(__this_cpu_read(softnet_data.xmit.nf_dup_skb_recursion) >
| ^~~~~~~~~~~~~~~
>> include/net/netfilter/nf_recursion.h:12:51: error: 'struct netdev_xmit' has no member named 'nf_dup_skb_recursion'
12 | return unlikely(__this_cpu_read(softnet_data.xmit.nf_dup_skb_recursion) >
| ^
include/linux/compiler.h:77:42: note: in definition of macro 'unlikely'
77 | # define unlikely(x) __builtin_expect(!!(x), 0)
| ^
include/linux/percpu-defs.h:259:2: note: in expansion of macro '__verify_pcpu_ptr'
259 | __verify_pcpu_ptr(ptr); \
| ^~~~~~~~~~~~~~~~~
include/linux/percpu-defs.h:263:26: note: in expansion of macro 'per_cpu_ptr'
263 | #define raw_cpu_ptr(ptr) per_cpu_ptr(ptr, 0)
| ^~~~~~~~~~~
include/asm-generic/percpu.h:82:3: note: in expansion of macro 'raw_cpu_ptr'
82 | *raw_cpu_ptr(&(pcp)); \
| ^~~~~~~~~~~
include/asm-generic/percpu.h:226:30: note: in expansion of macro 'raw_cpu_generic_read'
226 | #define raw_cpu_read_8(pcp) raw_cpu_generic_read(pcp)
| ^~~~~~~~~~~~~~~~~~~~
include/linux/percpu-defs.h:323:23: note: in expansion of macro 'raw_cpu_read_8'
323 | case 8: pscr_ret__ = stem##8(variable); break; \
| ^~~~
include/linux/percpu-defs.h:407:28: note: in expansion of macro '__pcpu_size_call_return'
407 | #define raw_cpu_read(pcp) __pcpu_size_call_return(raw_cpu_read_, pcp)
| ^~~~~~~~~~~~~~~~~~~~~~~
include/linux/percpu-defs.h:432:2: note: in expansion of macro 'raw_cpu_read'
432 | raw_cpu_read(pcp); \
| ^~~~~~~~~~~~
include/net/netfilter/nf_recursion.h:12:18: note: in expansion of macro '__this_cpu_read'
12 | return unlikely(__this_cpu_read(softnet_data.xmit.nf_dup_skb_recursion) >
| ^~~~~~~~~~~~~~~
>> include/net/netfilter/nf_recursion.h:12:51: error: 'struct netdev_xmit' has no member named 'nf_dup_skb_recursion'
12 | return unlikely(__this_cpu_read(softnet_data.xmit.nf_dup_skb_recursion) >
| ^
include/linux/compiler.h:77:42: note: in definition of macro 'unlikely'
77 | # define unlikely(x) __builtin_expect(!!(x), 0)
| ^
include/linux/percpu-defs.h:221:3: note: in expansion of macro 'TYPEOF_UNQUAL'
221 | (TYPEOF_UNQUAL(*(__p)) __force __kernel *)((__force unsigned long)(__p))
| ^~~~~~~~~~~~~
include/linux/percpu-defs.h:260:2: note: in expansion of macro 'PERCPU_PTR'
260 | PERCPU_PTR(ptr); \
| ^~~~~~~~~~
include/linux/percpu-defs.h:263:26: note: in expansion of macro 'per_cpu_ptr'
263 | #define raw_cpu_ptr(ptr) per_cpu_ptr(ptr, 0)
| ^~~~~~~~~~~
include/asm-generic/percpu.h:82:3: note: in expansion of macro 'raw_cpu_ptr'
82 | *raw_cpu_ptr(&(pcp)); \
| ^~~~~~~~~~~
include/asm-generic/percpu.h:226:30: note: in expansion of macro 'raw_cpu_generic_read'
226 | #define raw_cpu_read_8(pcp) raw_cpu_generic_read(pcp)
| ^~~~~~~~~~~~~~~~~~~~
include/linux/percpu-defs.h:323:23: note: in expansion of macro 'raw_cpu_read_8'
323 | case 8: pscr_ret__ = stem##8(variable); break; \
| ^~~~
include/linux/percpu-defs.h:407:28: note: in expansion of macro '__pcpu_size_call_return'
407 | #define raw_cpu_read(pcp) __pcpu_size_call_return(raw_cpu_read_, pcp)
| ^~~~~~~~~~~~~~~~~~~~~~~
include/linux/percpu-defs.h:432:2: note: in expansion of macro 'raw_cpu_read'
432 | raw_cpu_read(pcp); \
| ^~~~~~~~~~~~
include/net/netfilter/nf_recursion.h:12:18: note: in expansion of macro '__this_cpu_read'
12 | return unlikely(__this_cpu_read(softnet_data.xmit.nf_dup_skb_recursion) >
| ^~~~~~~~~~~~~~~
>> include/net/netfilter/nf_recursion.h:12:51: error: 'struct netdev_xmit' has no member named 'nf_dup_skb_recursion'
12 | return unlikely(__this_cpu_read(softnet_data.xmit.nf_dup_skb_recursion) >
| ^
include/linux/compiler.h:77:42: note: in definition of macro 'unlikely'
77 | # define unlikely(x) __builtin_expect(!!(x), 0)
| ^
include/linux/percpu-defs.h:260:2: note: in expansion of macro 'PERCPU_PTR'
260 | PERCPU_PTR(ptr); \
| ^~~~~~~~~~
include/linux/percpu-defs.h:263:26: note: in expansion of macro 'per_cpu_ptr'
263 | #define raw_cpu_ptr(ptr) per_cpu_ptr(ptr, 0)
| ^~~~~~~~~~~
include/asm-generic/percpu.h:82:3: note: in expansion of macro 'raw_cpu_ptr'
82 | *raw_cpu_ptr(&(pcp)); \
| ^~~~~~~~~~~
include/asm-generic/percpu.h:226:30: note: in expansion of macro 'raw_cpu_generic_read'
226 | #define raw_cpu_read_8(pcp) raw_cpu_generic_read(pcp)
| ^~~~~~~~~~~~~~~~~~~~
include/linux/percpu-defs.h:323:23: note: in expansion of macro 'raw_cpu_read_8'
323 | case 8: pscr_ret__ = stem##8(variable); break; \
| ^~~~
include/linux/percpu-defs.h:407:28: note: in expansion of macro '__pcpu_size_call_return'
407 | #define raw_cpu_read(pcp) __pcpu_size_call_return(raw_cpu_read_, pcp)
| ^~~~~~~~~~~~~~~~~~~~~~~
include/linux/percpu-defs.h:432:2: note: in expansion of macro 'raw_cpu_read'
432 | raw_cpu_read(pcp); \
| ^~~~~~~~~~~~
include/net/netfilter/nf_recursion.h:12:18: note: in expansion of macro '__this_cpu_read'
12 | return unlikely(__this_cpu_read(softnet_data.xmit.nf_dup_skb_recursion) >
| ^~~~~~~~~~~~~~~
In file included from include/asm-generic/percpu.h:9,
from arch/arm/include/asm/percpu.h:68,
from include/linux/irqflags.h:19,
from arch/arm/include/asm/bitops.h:28,
from include/linux/bitops.h:67,
from include/linux/log2.h:12,
from include/asm-generic/div64.h:55,
from arch/arm/include/asm/div64.h:114,
from include/linux/math.h:6,
from include/linux/math64.h:6,
from include/linux/time.h:6,
from include/linux/stat.h:19,
from include/linux/module.h:13,
from net/ipv4/netfilter/nf_reject_ipv4.c:6:
include/net/netfilter/nf_recursion.h: In function 'nf_dev_xmit_recursion_inc':
include/net/netfilter/nf_recursion.h:18:34: error: 'struct netdev_xmit' has no member named 'nf_dup_skb_recursion'
18 | __this_cpu_inc(softnet_data.xmit.nf_dup_skb_recursion);
| ^
include/linux/percpu-defs.h:216:47: note: in definition of macro '__verify_pcpu_ptr'
216 | const void __percpu *__vpp_verify = (typeof((ptr) + 0))NULL; \
| ^~~
include/linux/percpu-defs.h:409:32: note: in expansion of macro '__pcpu_size_call'
409 | #define raw_cpu_add(pcp, val) __pcpu_size_call(raw_cpu_add_, pcp, val)
| ^~~~~~~~~~~~~~~~
include/linux/percpu-defs.h:444:2: note: in expansion of macro 'raw_cpu_add'
444 | raw_cpu_add(pcp, val); \
| ^~~~~~~~~~~
include/linux/percpu-defs.h:484:30: note: in expansion of macro '__this_cpu_add'
484 | #define __this_cpu_inc(pcp) __this_cpu_add(pcp, 1)
| ^~~~~~~~~~~~~~
include/net/netfilter/nf_recursion.h:18:2: note: in expansion of macro '__this_cpu_inc'
18 | __this_cpu_inc(softnet_data.xmit.nf_dup_skb_recursion);
| ^~~~~~~~~~~~~~
include/net/netfilter/nf_recursion.h:18:34: error: 'struct netdev_xmit' has no member named 'nf_dup_skb_recursion'
18 | __this_cpu_inc(softnet_data.xmit.nf_dup_skb_recursion);
| ^
include/linux/percpu-defs.h:363:16: note: in definition of macro '__pcpu_size_call'
363 | switch(sizeof(variable)) { \
| ^~~~~~~~
include/linux/percpu-defs.h:444:2: note: in expansion of macro 'raw_cpu_add'
444 | raw_cpu_add(pcp, val); \
| ^~~~~~~~~~~
include/linux/percpu-defs.h:484:30: note: in expansion of macro '__this_cpu_add'
484 | #define __this_cpu_inc(pcp) __this_cpu_add(pcp, 1)
| ^~~~~~~~~~~~~~
include/net/netfilter/nf_recursion.h:18:2: note: in expansion of macro '__this_cpu_inc'
18 | __this_cpu_inc(softnet_data.xmit.nf_dup_skb_recursion);
| ^~~~~~~~~~~~~~
include/net/netfilter/nf_recursion.h:18:34: error: 'struct netdev_xmit' has no member named 'nf_dup_skb_recursion'
18 | __this_cpu_inc(softnet_data.xmit.nf_dup_skb_recursion);
| ^
include/linux/percpu-defs.h:216:47: note: in definition of macro '__verify_pcpu_ptr'
216 | const void __percpu *__vpp_verify = (typeof((ptr) + 0))NULL; \
| ^~~
include/linux/percpu-defs.h:263:26: note: in expansion of macro 'per_cpu_ptr'
263 | #define raw_cpu_ptr(ptr) per_cpu_ptr(ptr, 0)
| ^~~~~~~~~~~
include/asm-generic/percpu.h:87:3: note: in expansion of macro 'raw_cpu_ptr'
87 | *raw_cpu_ptr(&(pcp)) op val; \
| ^~~~~~~~~~~
include/asm-generic/percpu.h:243:34: note: in expansion of macro 'raw_cpu_generic_to_op'
243 | #define raw_cpu_add_1(pcp, val) raw_cpu_generic_to_op(pcp, val, +=)
| ^~~~~~~~~~~~~~~~~~~~~
include/linux/percpu-defs.h:364:11: note: in expansion of macro 'raw_cpu_add_1'
364 | case 1: stem##1(variable, __VA_ARGS__);break; \
| ^~~~
include/linux/percpu-defs.h:409:32: note: in expansion of macro '__pcpu_size_call'
409 | #define raw_cpu_add(pcp, val) __pcpu_size_call(raw_cpu_add_, pcp, val)
| ^~~~~~~~~~~~~~~~
include/linux/percpu-defs.h:444:2: note: in expansion of macro 'raw_cpu_add'
444 | raw_cpu_add(pcp, val); \
vim +12 include/net/netfilter/nf_recursion.h
8
9 #ifndef CONFIG_PREEMPT_RT
10 static inline bool nf_dev_xmit_recursion(void)
11 {
> 12 return unlikely(__this_cpu_read(softnet_data.xmit.nf_dup_skb_recursion) >
13 NF_RECURSION_LIMIT);
14 }
15
--
0-DAY CI Kernel Test Service
https://github.com/intel/lkp-tests/wiki
^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: [PATCH nf v2] netfilter: nft_reject: prevent unbounded recursion in output hooks
2026-09-22 9:25 [PATCH nf v2] netfilter: nft_reject: prevent unbounded recursion in output hooks Fernando Fernandez Mancera
2026-09-22 10:25 ` Florian Westphal
2026-09-23 21:00 ` kernel test robot
@ 2026-09-23 22:06 ` kernel test robot
2 siblings, 0 replies; 4+ messages in thread
From: kernel test robot @ 2026-09-23 22:06 UTC (permalink / raw)
To: Fernando Fernandez Mancera, netfilter-devel
Cc: llvm, oe-kbuild-all, coreteam, pablo, fw, phil, eric,
Fernando Fernandez Mancera, Yu Junzhe
Hi Fernando,
kernel test robot noticed the following build errors:
[auto build test ERROR on netfilter-nf/main]
url: https://github.com/intel-lab-lkp/linux/commits/Fernando-Fernandez-Mancera/netfilter-nft_reject-prevent-unbounded-recursion-in-output-hooks/20260922-112503
base: https://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf.git main
patch link: https://lore.kernel.org/r/20260922092503.3238-1-fmancera%40suse.de
patch subject: [PATCH nf v2] netfilter: nft_reject: prevent unbounded recursion in output hooks
config: i386-defconfig (https://download.01.org/0day-ci/archive/20260924/202609240611.MRXjmn1k-lkp@intel.com/config)
compiler: clang version 22.1.3 (https://github.com/llvm/llvm-project e9846648fd6183ee6d8cbdb4502213fcf902a211)
reproduce (this is a W=1 build): (https://download.01.org/0day-ci/archive/20260924/202609240611.MRXjmn1k-lkp@intel.com/reproduce)
If you fix the issue in a separate patch/commit (i.e. not just a new version of
the same patch/commit), kindly add following tags
| Reported-by: kernel test robot <lkp@intel.com>
| Closes: https://lore.kernel.org/oe-kbuild-all/202609240611.MRXjmn1k-lkp@intel.com/
All errors (new ones prefixed by >>):
In file included from net/ipv4/netfilter/nf_reject_ipv4.c:13:
>> include/net/netfilter/nf_recursion.h:12:52: error: no member named 'nf_dup_skb_recursion' in 'struct netdev_xmit'
12 | return unlikely(__this_cpu_read(softnet_data.xmit.nf_dup_skb_recursion) >
| ~~~~~~~~~~~~~~~~~ ^
include/linux/percpu-defs.h:432:15: note: expanded from macro '__this_cpu_read'
432 | raw_cpu_read(pcp); \
| ^~~
include/linux/percpu-defs.h:407:67: note: expanded from macro 'raw_cpu_read'
407 | #define raw_cpu_read(pcp) __pcpu_size_call_return(raw_cpu_read_, pcp)
| ^~~
include/linux/percpu-defs.h:317:16: note: expanded from macro '__pcpu_size_call_return'
317 | TYPEOF_UNQUAL(variable) pscr_ret__; \
| ^~~~~~~~
include/linux/compiler.h:237:47: note: expanded from macro 'TYPEOF_UNQUAL'
237 | # define TYPEOF_UNQUAL(exp) __typeof_unqual__(exp)
| ^~~
include/linux/compiler.h:77:42: note: expanded from macro 'unlikely'
77 | # define unlikely(x) __builtin_expect(!!(x), 0)
| ^
In file included from net/ipv4/netfilter/nf_reject_ipv4.c:13:
>> include/net/netfilter/nf_recursion.h:12:52: error: no member named 'nf_dup_skb_recursion' in 'struct netdev_xmit'
12 | return unlikely(__this_cpu_read(softnet_data.xmit.nf_dup_skb_recursion) >
| ~~~~~~~~~~~~~~~~~ ^
include/linux/percpu-defs.h:432:15: note: expanded from macro '__this_cpu_read'
432 | raw_cpu_read(pcp); \
| ^~~
include/linux/percpu-defs.h:407:67: note: expanded from macro 'raw_cpu_read'
407 | #define raw_cpu_read(pcp) __pcpu_size_call_return(raw_cpu_read_, pcp)
| ^~~
include/linux/percpu-defs.h:318:22: note: expanded from macro '__pcpu_size_call_return'
318 | __verify_pcpu_ptr(&(variable)); \
| ^~~~~~~~
include/linux/percpu-defs.h:216:47: note: expanded from macro '__verify_pcpu_ptr'
216 | const void __percpu *__vpp_verify = (typeof((ptr) + 0))NULL; \
| ^~~
include/linux/compiler.h:77:42: note: expanded from macro 'unlikely'
77 | # define unlikely(x) __builtin_expect(!!(x), 0)
| ^
In file included from net/ipv4/netfilter/nf_reject_ipv4.c:13:
>> include/net/netfilter/nf_recursion.h:12:52: error: no member named 'nf_dup_skb_recursion' in 'struct netdev_xmit'
12 | return unlikely(__this_cpu_read(softnet_data.xmit.nf_dup_skb_recursion) >
| ~~~~~~~~~~~~~~~~~ ^
include/linux/percpu-defs.h:432:15: note: expanded from macro '__this_cpu_read'
432 | raw_cpu_read(pcp); \
| ^~~
include/linux/percpu-defs.h:407:67: note: expanded from macro 'raw_cpu_read'
407 | #define raw_cpu_read(pcp) __pcpu_size_call_return(raw_cpu_read_, pcp)
| ^~~
include/linux/percpu-defs.h:319:16: note: expanded from macro '__pcpu_size_call_return'
319 | switch(sizeof(variable)) { \
| ^~~~~~~~
include/linux/compiler.h:77:42: note: expanded from macro 'unlikely'
77 | # define unlikely(x) __builtin_expect(!!(x), 0)
| ^
In file included from net/ipv4/netfilter/nf_reject_ipv4.c:13:
>> include/net/netfilter/nf_recursion.h:12:52: error: no member named 'nf_dup_skb_recursion' in 'struct netdev_xmit'
12 | return unlikely(__this_cpu_read(softnet_data.xmit.nf_dup_skb_recursion) >
| ~~~~~~~~~~~~~~~~~ ^
include/linux/percpu-defs.h:432:15: note: expanded from macro '__this_cpu_read'
432 | raw_cpu_read(pcp); \
| ^~~
include/linux/percpu-defs.h:407:67: note: expanded from macro 'raw_cpu_read'
407 | #define raw_cpu_read(pcp) __pcpu_size_call_return(raw_cpu_read_, pcp)
| ^~~
include/linux/percpu-defs.h:320:31: note: expanded from macro '__pcpu_size_call_return'
320 | case 1: pscr_ret__ = stem##1(variable); break; \
| ^~~~~~~~
note: (skipping 3 expansions in backtrace; use -fmacro-backtrace-limit=0 to see all)
arch/x86/include/asm/percpu.h:94:45: note: expanded from macro '__my_cpu_ptr'
94 | # define __my_cpu_ptr(ptr) (__my_cpu_type(*(ptr))*)(__force uintptr_t)(ptr)
| ^~~
arch/x86/include/asm/percpu.h:93:36: note: expanded from macro '__my_cpu_type'
93 | # define __my_cpu_type(var) typeof(var) __percpu_seg_override
| ^~~
include/linux/compiler.h:77:42: note: expanded from macro 'unlikely'
77 | # define unlikely(x) __builtin_expect(!!(x), 0)
| ^
In file included from net/ipv4/netfilter/nf_reject_ipv4.c:13:
>> include/net/netfilter/nf_recursion.h:12:52: error: no member named 'nf_dup_skb_recursion' in 'struct netdev_xmit'
12 | return unlikely(__this_cpu_read(softnet_data.xmit.nf_dup_skb_recursion) >
| ~~~~~~~~~~~~~~~~~ ^
include/linux/percpu-defs.h:432:15: note: expanded from macro '__this_cpu_read'
432 | raw_cpu_read(pcp); \
| ^~~
include/linux/percpu-defs.h:407:67: note: expanded from macro 'raw_cpu_read'
407 | #define raw_cpu_read(pcp) __pcpu_size_call_return(raw_cpu_read_, pcp)
| ^~~
include/linux/percpu-defs.h:320:31: note: expanded from macro '__pcpu_size_call_return'
320 | case 1: pscr_ret__ = stem##1(variable); break; \
| ^~~~~~~~
note: (skipping 2 expansions in backtrace; use -fmacro-backtrace-limit=0 to see all)
arch/x86/include/asm/percpu.h:95:45: note: expanded from macro '__my_cpu_var'
95 | # define __my_cpu_var(var) (*__my_cpu_ptr(&(var)))
| ^~~
arch/x86/include/asm/percpu.h:94:72: note: expanded from macro '__my_cpu_ptr'
94 | # define __my_cpu_ptr(ptr) (__my_cpu_type(*(ptr))*)(__force uintptr_t)(ptr)
| ^~~
include/linux/compiler.h:77:42: note: expanded from macro 'unlikely'
77 | # define unlikely(x) __builtin_expect(!!(x), 0)
| ^
In file included from net/ipv4/netfilter/nf_reject_ipv4.c:13:
>> include/net/netfilter/nf_recursion.h:12:52: error: no member named 'nf_dup_skb_recursion' in 'struct netdev_xmit'
12 | return unlikely(__this_cpu_read(softnet_data.xmit.nf_dup_skb_recursion) >
| ~~~~~~~~~~~~~~~~~ ^
include/linux/percpu-defs.h:432:15: note: expanded from macro '__this_cpu_read'
432 | raw_cpu_read(pcp); \
| ^~~
include/linux/percpu-defs.h:407:67: note: expanded from macro 'raw_cpu_read'
407 | #define raw_cpu_read(pcp) __pcpu_size_call_return(raw_cpu_read_, pcp)
| ^~~
include/linux/percpu-defs.h:320:31: note: expanded from macro '__pcpu_size_call_return'
320 | case 1: pscr_ret__ = stem##1(variable); break; \
| ^~~~~~~~
arch/x86/include/asm/percpu.h:450:52: note: expanded from macro 'raw_cpu_read_1'
450 | #define raw_cpu_read_1(pcp) __raw_cpu_read(1, , pcp)
| ^~~
arch/x86/include/asm/percpu.h:156:10: note: expanded from macro '__raw_cpu_read'
156 | (typeof(_var))(unsigned long) pfo_val__; \
| ^~~~
include/linux/compiler.h:77:42: note: expanded from macro 'unlikely'
77 | # define unlikely(x) __builtin_expect(!!(x), 0)
| ^
In file included from net/ipv4/netfilter/nf_reject_ipv4.c:13:
>> include/net/netfilter/nf_recursion.h:12:52: error: no member named 'nf_dup_skb_recursion' in 'struct netdev_xmit'
12 | return unlikely(__this_cpu_read(softnet_data.xmit.nf_dup_skb_recursion) >
| ~~~~~~~~~~~~~~~~~ ^
include/linux/percpu-defs.h:432:15: note: expanded from macro '__this_cpu_read'
432 | raw_cpu_read(pcp); \
| ^~~
include/linux/percpu-defs.h:407:67: note: expanded from macro 'raw_cpu_read'
407 | #define raw_cpu_read(pcp) __pcpu_size_call_return(raw_cpu_read_, pcp)
| ^~~
include/linux/percpu-defs.h:321:31: note: expanded from macro '__pcpu_size_call_return'
321 | case 2: pscr_ret__ = stem##2(variable); break; \
| ^~~~~~~~
note: (skipping 3 expansions in backtrace; use -fmacro-backtrace-limit=0 to see all)
arch/x86/include/asm/percpu.h:94:45: note: expanded from macro '__my_cpu_ptr'
94 | # define __my_cpu_ptr(ptr) (__my_cpu_type(*(ptr))*)(__force uintptr_t)(ptr)
| ^~~
arch/x86/include/asm/percpu.h:93:36: note: expanded from macro '__my_cpu_type'
93 | # define __my_cpu_type(var) typeof(var) __percpu_seg_override
| ^~~
include/linux/compiler.h:77:42: note: expanded from macro 'unlikely'
77 | # define unlikely(x) __builtin_expect(!!(x), 0)
| ^
In file included from net/ipv4/netfilter/nf_reject_ipv4.c:13:
>> include/net/netfilter/nf_recursion.h:12:52: error: no member named 'nf_dup_skb_recursion' in 'struct netdev_xmit'
12 | return unlikely(__this_cpu_read(softnet_data.xmit.nf_dup_skb_recursion) >
| ~~~~~~~~~~~~~~~~~ ^
include/linux/percpu-defs.h:432:15: note: expanded from macro '__this_cpu_read'
432 | raw_cpu_read(pcp); \
| ^~~
include/linux/percpu-defs.h:407:67: note: expanded from macro 'raw_cpu_read'
407 | #define raw_cpu_read(pcp) __pcpu_size_call_return(raw_cpu_read_, pcp)
| ^~~
include/linux/percpu-defs.h:321:31: note: expanded from macro '__pcpu_size_call_return'
321 | case 2: pscr_ret__ = stem##2(variable); break; \
| ^~~~~~~~
note: (skipping 2 expansions in backtrace; use -fmacro-backtrace-limit=0 to see all)
arch/x86/include/asm/percpu.h:95:45: note: expanded from macro '__my_cpu_var'
95 | # define __my_cpu_var(var) (*__my_cpu_ptr(&(var)))
| ^~~
arch/x86/include/asm/percpu.h:94:72: note: expanded from macro '__my_cpu_ptr'
94 | # define __my_cpu_ptr(ptr) (__my_cpu_type(*(ptr))*)(__force uintptr_t)(ptr)
| ^~~
include/linux/compiler.h:77:42: note: expanded from macro 'unlikely'
77 | # define unlikely(x) __builtin_expect(!!(x), 0)
| ^
In file included from net/ipv4/netfilter/nf_reject_ipv4.c:13:
>> include/net/netfilter/nf_recursion.h:12:52: error: no member named 'nf_dup_skb_recursion' in 'struct netdev_xmit'
12 | return unlikely(__this_cpu_read(softnet_data.xmit.nf_dup_skb_recursion) >
| ~~~~~~~~~~~~~~~~~ ^
include/linux/percpu-defs.h:432:15: note: expanded from macro '__this_cpu_read'
432 | raw_cpu_read(pcp); \
| ^~~
include/linux/percpu-defs.h:407:67: note: expanded from macro 'raw_cpu_read'
407 | #define raw_cpu_read(pcp) __pcpu_size_call_return(raw_cpu_read_, pcp)
| ^~~
include/linux/percpu-defs.h:321:31: note: expanded from macro '__pcpu_size_call_return'
321 | case 2: pscr_ret__ = stem##2(variable); break; \
| ^~~~~~~~
arch/x86/include/asm/percpu.h:451:52: note: expanded from macro 'raw_cpu_read_2'
451 | #define raw_cpu_read_2(pcp) __raw_cpu_read(2, , pcp)
| ^~~
arch/x86/include/asm/percpu.h:156:10: note: expanded from macro '__raw_cpu_read'
156 | (typeof(_var))(unsigned long) pfo_val__; \
| ^~~~
include/linux/compiler.h:77:42: note: expanded from macro 'unlikely'
77 | # define unlikely(x) __builtin_expect(!!(x), 0)
| ^
In file included from net/ipv4/netfilter/nf_reject_ipv4.c:13:
>> include/net/netfilter/nf_recursion.h:12:52: error: no member named 'nf_dup_skb_recursion' in 'struct netdev_xmit'
12 | return unlikely(__this_cpu_read(softnet_data.xmit.nf_dup_skb_recursion) >
| ~~~~~~~~~~~~~~~~~ ^
include/linux/percpu-defs.h:432:15: note: expanded from macro '__this_cpu_read'
432 | raw_cpu_read(pcp); \
| ^~~
include/linux/percpu-defs.h:407:67: note: expanded from macro 'raw_cpu_read'
407 | #define raw_cpu_read(pcp) __pcpu_size_call_return(raw_cpu_read_, pcp)
| ^~~
include/linux/percpu-defs.h:322:31: note: expanded from macro '__pcpu_size_call_return'
322 | case 4: pscr_ret__ = stem##4(variable); break; \
| ^~~~~~~~
note: (skipping 3 expansions in backtrace; use -fmacro-backtrace-limit=0 to see all)
arch/x86/include/asm/percpu.h:94:45: note: expanded from macro '__my_cpu_ptr'
94 | # define __my_cpu_ptr(ptr) (__my_cpu_type(*(ptr))*)(__force uintptr_t)(ptr)
| ^~~
arch/x86/include/asm/percpu.h:93:36: note: expanded from macro '__my_cpu_type'
93 | # define __my_cpu_type(var) typeof(var) __percpu_seg_override
| ^~~
include/linux/compiler.h:77:42: note: expanded from macro 'unlikely'
77 | # define unlikely(x) __builtin_expect(!!(x), 0)
| ^
In file included from net/ipv4/netfilter/nf_reject_ipv4.c:13:
>> include/net/netfilter/nf_recursion.h:12:52: error: no member named 'nf_dup_skb_recursion' in 'struct netdev_xmit'
12 | return unlikely(__this_cpu_read(softnet_data.xmit.nf_dup_skb_recursion) >
| ~~~~~~~~~~~~~~~~~ ^
include/linux/percpu-defs.h:432:15: note: expanded from macro '__this_cpu_read'
432 | raw_cpu_read(pcp); \
| ^~~
include/linux/percpu-defs.h:407:67: note: expanded from macro 'raw_cpu_read'
407 | #define raw_cpu_read(pcp) __pcpu_size_call_return(raw_cpu_read_, pcp)
| ^~~
include/linux/percpu-defs.h:322:31: note: expanded from macro '__pcpu_size_call_return'
322 | case 4: pscr_ret__ = stem##4(variable); break; \
| ^~~~~~~~
note: (skipping 2 expansions in backtrace; use -fmacro-backtrace-limit=0 to see all)
arch/x86/include/asm/percpu.h:95:45: note: expanded from macro '__my_cpu_var'
95 | # define __my_cpu_var(var) (*__my_cpu_ptr(&(var)))
| ^~~
arch/x86/include/asm/percpu.h:94:72: note: expanded from macro '__my_cpu_ptr'
94 | # define __my_cpu_ptr(ptr) (__my_cpu_type(*(ptr))*)(__force uintptr_t)(ptr)
| ^~~
include/linux/compiler.h:77:42: note: expanded from macro 'unlikely'
77 | # define unlikely(x) __builtin_expect(!!(x), 0)
| ^
In file included from net/ipv4/netfilter/nf_reject_ipv4.c:13:
>> include/net/netfilter/nf_recursion.h:12:52: error: no member named 'nf_dup_skb_recursion' in 'struct netdev_xmit'
12 | return unlikely(__this_cpu_read(softnet_data.xmit.nf_dup_skb_recursion) >
| ~~~~~~~~~~~~~~~~~ ^
include/linux/percpu-defs.h:432:15: note: expanded from macro '__this_cpu_read'
432 | raw_cpu_read(pcp); \
| ^~~
include/linux/percpu-defs.h:407:67: note: expanded from macro 'raw_cpu_read'
407 | #define raw_cpu_read(pcp) __pcpu_size_call_return(raw_cpu_read_, pcp)
| ^~~
include/linux/percpu-defs.h:322:31: note: expanded from macro '__pcpu_size_call_return'
322 | case 4: pscr_ret__ = stem##4(variable); break; \
| ^~~~~~~~
arch/x86/include/asm/percpu.h:452:52: note: expanded from macro 'raw_cpu_read_4'
452 | #define raw_cpu_read_4(pcp) __raw_cpu_read(4, , pcp)
| ^~~
arch/x86/include/asm/percpu.h:156:10: note: expanded from macro '__raw_cpu_read'
156 | (typeof(_var))(unsigned long) pfo_val__; \
| ^~~~
include/linux/compiler.h:77:42: note: expanded from macro 'unlikely'
77 | # define unlikely(x) __builtin_expect(!!(x), 0)
| ^
In file included from net/ipv4/netfilter/nf_reject_ipv4.c:13:
>> include/net/netfilter/nf_recursion.h:12:52: error: no member named 'nf_dup_skb_recursion' in 'struct netdev_xmit'
12 | return unlikely(__this_cpu_read(softnet_data.xmit.nf_dup_skb_recursion) >
| ~~~~~~~~~~~~~~~~~ ^
include/linux/percpu-defs.h:432:15: note: expanded from macro '__this_cpu_read'
432 | raw_cpu_read(pcp); \
| ^~~
include/linux/percpu-defs.h:407:67: note: expanded from macro 'raw_cpu_read'
407 | #define raw_cpu_read(pcp) __pcpu_size_call_return(raw_cpu_read_, pcp)
| ^~~
include/linux/percpu-defs.h:323:31: note: expanded from macro '__pcpu_size_call_return'
323 | case 8: pscr_ret__ = stem##8(variable); break; \
| ^~~~~~~~
note: (skipping 2 expansions in backtrace; use -fmacro-backtrace-limit=0 to see all)
include/linux/percpu-defs.h:240:20: note: expanded from macro 'raw_cpu_ptr'
240 | __verify_pcpu_ptr(ptr); \
| ^~~
include/linux/percpu-defs.h:216:47: note: expanded from macro '__verify_pcpu_ptr'
216 | const void __percpu *__vpp_verify = (typeof((ptr) + 0))NULL; \
| ^~~
include/linux/compiler.h:77:42: note: expanded from macro 'unlikely'
77 | # define unlikely(x) __builtin_expect(!!(x), 0)
| ^
In file included from net/ipv4/netfilter/nf_reject_ipv4.c:13:
>> include/net/netfilter/nf_recursion.h:12:52: error: no member named 'nf_dup_skb_recursion' in 'struct netdev_xmit'
12 | return unlikely(__this_cpu_read(softnet_data.xmit.nf_dup_skb_recursion) >
| ~~~~~~~~~~~~~~~~~ ^
include/linux/percpu-defs.h:432:15: note: expanded from macro '__this_cpu_read'
432 | raw_cpu_read(pcp); \
| ^~~
include/linux/percpu-defs.h:407:67: note: expanded from macro 'raw_cpu_read'
407 | #define raw_cpu_read(pcp) __pcpu_size_call_return(raw_cpu_read_, pcp)
| ^~~
include/linux/percpu-defs.h:323:31: note: expanded from macro '__pcpu_size_call_return'
323 | case 8: pscr_ret__ = stem##8(variable); break; \
| ^~~~~~~~
note: (skipping 2 expansions in backtrace; use -fmacro-backtrace-limit=0 to see all)
include/linux/percpu-defs.h:241:19: note: expanded from macro 'raw_cpu_ptr'
241 | arch_raw_cpu_ptr(ptr); \
| ^~~
arch/x86/include/asm/percpu.h:66:39: note: expanded from macro 'arch_raw_cpu_ptr'
66 | tcp_ptr__ += (__force unsigned long)(_ptr); \
| ^~~~
include/linux/compiler.h:77:42: note: expanded from macro 'unlikely'
77 | # define unlikely(x) __builtin_expect(!!(x), 0)
| ^
In file included from net/ipv4/netfilter/nf_reject_ipv4.c:13:
>> include/net/netfilter/nf_recursion.h:12:52: error: no member named 'nf_dup_skb_recursion' in 'struct netdev_xmit'
12 | return unlikely(__this_cpu_read(softnet_data.xmit.nf_dup_skb_recursion) >
| ~~~~~~~~~~~~~~~~~ ^
include/linux/percpu-defs.h:432:15: note: expanded from macro '__this_cpu_read'
432 | raw_cpu_read(pcp); \
| ^~~
include/linux/percpu-defs.h:407:67: note: expanded from macro 'raw_cpu_read'
407 | #define raw_cpu_read(pcp) __pcpu_size_call_return(raw_cpu_read_, pcp)
| ^~~
include/linux/percpu-defs.h:323:31: note: expanded from macro '__pcpu_size_call_return'
323 | case 8: pscr_ret__ = stem##8(variable); break; \
| ^~~~~~~~
note: (skipping 3 expansions in backtrace; use -fmacro-backtrace-limit=0 to see all)
arch/x86/include/asm/percpu.h:67:19: note: expanded from macro 'arch_raw_cpu_ptr'
67 | (TYPEOF_UNQUAL(*(_ptr)) __force __kernel *)tcp_ptr__; \
| ^~~~
include/linux/compiler.h:237:47: note: expanded from macro 'TYPEOF_UNQUAL'
237 | # define TYPEOF_UNQUAL(exp) __typeof_unqual__(exp)
| ^~~
include/linux/compiler.h:77:42: note: expanded from macro 'unlikely'
77 | # define unlikely(x) __builtin_expect(!!(x), 0)
| ^
In file included from net/ipv4/netfilter/nf_reject_ipv4.c:13:
include/net/netfilter/nf_recursion.h:18:35: error: no member named 'nf_dup_skb_recursion' in 'struct netdev_xmit'
18 | __this_cpu_inc(softnet_data.xmit.nf_dup_skb_recursion);
| ~~~~~~~~~~~~~~~~~ ^
include/linux/percpu-defs.h:484:45: note: expanded from macro '__this_cpu_inc'
484 | #define __this_cpu_inc(pcp) __this_cpu_add(pcp, 1)
| ^~~
include/linux/percpu-defs.h:444:14: note: expanded from macro '__this_cpu_add'
444 | raw_cpu_add(pcp, val); \
| ^~~
include/linux/percpu-defs.h:409:63: note: expanded from macro 'raw_cpu_add'
409 | #define raw_cpu_add(pcp, val) __pcpu_size_call(raw_cpu_add_, pcp, val)
| ^~~
include/linux/percpu-defs.h:362:22: note: expanded from macro '__pcpu_size_call'
362 | __verify_pcpu_ptr(&(variable)); \
| ^~~~~~~~
include/linux/percpu-defs.h:216:47: note: expanded from macro '__verify_pcpu_ptr'
216 | const void __percpu *__vpp_verify = (typeof((ptr) + 0))NULL; \
| ^~~
In file included from net/ipv4/netfilter/nf_reject_ipv4.c:13:
include/net/netfilter/nf_recursion.h:18:35: error: no member named 'nf_dup_skb_recursion' in 'struct netdev_xmit'
18 | __this_cpu_inc(softnet_data.xmit.nf_dup_skb_recursion);
| ~~~~~~~~~~~~~~~~~ ^
include/linux/percpu-defs.h:484:45: note: expanded from macro '__this_cpu_inc'
484 | #define __this_cpu_inc(pcp) __this_cpu_add(pcp, 1)
| ^~~
include/linux/percpu-defs.h:444:14: note: expanded from macro '__this_cpu_add'
444 | raw_cpu_add(pcp, val); \
| ^~~
include/linux/percpu-defs.h:409:63: note: expanded from macro 'raw_cpu_add'
409 | #define raw_cpu_add(pcp, val) __pcpu_size_call(raw_cpu_add_, pcp, val)
| ^~~
include/linux/percpu-defs.h:363:16: note: expanded from macro '__pcpu_size_call'
363 | switch(sizeof(variable)) { \
| ^~~~~~~~
In file included from net/ipv4/netfilter/nf_reject_ipv4.c:13:
include/net/netfilter/nf_recursion.h:18:35: error: no member named 'nf_dup_skb_recursion' in 'struct netdev_xmit'
18 | __this_cpu_inc(softnet_data.xmit.nf_dup_skb_recursion);
| ~~~~~~~~~~~~~~~~~ ^
include/linux/percpu-defs.h:484:45: note: expanded from macro '__this_cpu_inc'
484 | #define __this_cpu_inc(pcp) __this_cpu_add(pcp, 1)
| ^~~
include/linux/percpu-defs.h:444:14: note: expanded from macro '__this_cpu_add'
444 | raw_cpu_add(pcp, val); \
| ^~~
include/linux/percpu-defs.h:409:63: note: expanded from macro 'raw_cpu_add'
409 | #define raw_cpu_add(pcp, val) __pcpu_size_call(raw_cpu_add_, pcp, val)
| ^~~
note: (skipping 1 expansions in backtrace; use -fmacro-backtrace-limit=0 to see all)
arch/x86/include/asm/percpu.h:468:56: note: expanded from macro 'raw_cpu_add_1'
468 | #define raw_cpu_add_1(pcp, val) percpu_add_op(1, , (pcp), val)
| ^~~
arch/x86/include/asm/percpu.h:226:17: note: expanded from macro 'percpu_add_op'
226 | TYPEOF_UNQUAL(var) pao_tmp__; \
| ^~~
include/linux/compiler.h:237:47: note: expanded from macro 'TYPEOF_UNQUAL'
237 | # define TYPEOF_UNQUAL(exp) __typeof_unqual__(exp)
| ^~~
In file included from net/ipv4/netfilter/nf_reject_ipv4.c:13:
include/net/netfilter/nf_recursion.h:18:35: error: no member named 'nf_dup_skb_recursion' in 'struct netdev_xmit'
18 | __this_cpu_inc(softnet_data.xmit.nf_dup_skb_recursion);
| ~~~~~~~~~~~~~~~~~ ^
include/linux/percpu-defs.h:484:45: note: expanded from macro '__this_cpu_inc'
484 | #define __this_cpu_inc(pcp) __this_cpu_add(pcp, 1)
| ^~~
include/linux/percpu-defs.h:444:14: note: expanded from macro '__this_cpu_add'
444 | raw_cpu_add(pcp, val); \
| ^~~
include/linux/percpu-defs.h:409:63: note: expanded from macro 'raw_cpu_add'
409 | #define raw_cpu_add(pcp, val) __pcpu_size_call(raw_cpu_add_, pcp, val)
| ^~~
note: (skipping 4 expansions in backtrace; use -fmacro-backtrace-limit=0 to see all)
arch/x86/include/asm/percpu.h:95:45: note: expanded from macro '__my_cpu_var'
95 | # define __my_cpu_var(var) (*__my_cpu_ptr(&(var)))
| ^~~
arch/x86/include/asm/percpu.h:94:45: note: expanded from macro '__my_cpu_ptr'
94 | # define __my_cpu_ptr(ptr) (__my_cpu_type(*(ptr))*)(__force uintptr_t)(ptr)
| ^~~
arch/x86/include/asm/percpu.h:93:36: note: expanded from macro '__my_cpu_type'
vim +12 include/net/netfilter/nf_recursion.h
8
9 #ifndef CONFIG_PREEMPT_RT
10 static inline bool nf_dev_xmit_recursion(void)
11 {
> 12 return unlikely(__this_cpu_read(softnet_data.xmit.nf_dup_skb_recursion) >
13 NF_RECURSION_LIMIT);
14 }
15
--
0-DAY CI Kernel Test Service
https://github.com/intel/lkp-tests/wiki
^ permalink raw reply [flat|nested] 4+ messages in thread
end of thread, other threads:[~2026-09-23 22:07 UTC | newest]
Thread overview: 4+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2026-09-22 9:25 [PATCH nf v2] netfilter: nft_reject: prevent unbounded recursion in output hooks Fernando Fernandez Mancera
2026-09-22 10:25 ` Florian Westphal
2026-09-23 21:00 ` kernel test robot
2026-09-23 22:06 ` kernel test robot
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox