er.org, netfilter-devel@vger.kernel.org,
	Pablo Neira Ayuso <pablo@netfilter.org>, stable@vger.kernel.org,
	regressions@lists.linux.dev,
	"Kris Karas (Bug Reporting)" <bugs-a21@moonlit-rail.com>
Subject: Re: [REGRESSION] 6.19.4 stable netfilter / nftables [resolved]
Message-ID: <aacsJnLwaAuKZIrf@strlen.de>
References: <a529a6a9a2755d45765f20b58c5c11e2f790eacb.camel@sapience.com>
 <45f03b0b-fe8f-4942-bad1-3fbde03d4be1@leemhuis.info>
 <143e1a402ad78dd7076516a6ceb637f378310b16.camel@sapience.com>
 <10537f2b74da2b8a5cb8dc939f723291db39ff84.camel@sapience.com>
 <2026022755-quail-graveyard-93e8@gregkh>
 <b231fcdb6c66a7b24dcef3ee5c35c5f612d5c1a7.camel@sapience.com>
 <9d110d860c0c7e110d018ea53a7666eba275da20.camel@gmail.com>
 <d43b9da4-99ee-4516-9bec-71a9de19618e@leemhuis.info>
 <ce07b65b86473acac101c4854f6201d05597d48c.camel@gmail.com>
Precedence: bulk
X-Mailing-List: stable@vger.kernel.org
List-Id: <stable.vger.kernel.org>
List-Subscribe: <mailto:stable+subscribe@vger.kernel.org>
List-Unsubscribe: <mailto:stable+unsubscribe@vger.kernel.org>
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <ce07b65b86473acac101c4854f6201d05597d48c.camel@gmail.com>
X-Spam-Score: 0.5 (/)
X-Spam-Report: Spam detection software, running on the system "witcher.mxrouting.net", has
 performed the tests listed below against this email.
 Information: https://docs.mxroute.com/docs/expert-spam-filtering.html
 ---
 Content analysis details:   (0.5 points)
 ---
  pts rule name              description
 ---- ---------------------- -----------------------------------------
  0.0 RCVD_IN_ZEN_BLOCKED_OPENDNS RBL: ADMINISTRATOR NOTICE: The query
                              to zen.spamhaus.org was blocked due to
                             usage of an open resolver. See
                             https://www.spamhaus.org/returnc/pub/
                             [172.234.253.10 listed in zen.spamhaus.org]
  0.0 RCVD_IN_DNSWL_BLOCKED  RBL: ADMINISTRATOR NOTICE: The query to
                             DNSWL was blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#DnsBlocklists-dnsbl-block
                              for more information.
                             [172.234.253.10 listed in list.dnswl.org]
  1.5 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
                             mail domains are different
 -1.0 MAILING_LIST_MULTI     Multiple indicators imply a widely-seen list
                             manager
SpamTally: Final spam score: 5

Jindrich Makovicka <makovick@gmail.com> wrote:
> > > commit 12b1681793e9b7552495290785a3570c539f409d
> > > Author: Pablo Neira Ayuso <pablo@netfilter.org>
> > > Date:   Fri Feb 6 13:33:46 2026 +0100
> > > 
> > >     netfilter: nft_set_rbtree: validate open interval overlap
> > > 
> > > Example set definition is here:
> > > 
> > > https://bugzilla.kernel.org/show_bug.cgi?id=221158
> > 
> > Does that problem happen with 7.0-rc2 as well? This is important to
> > know
> > to determine if this is a general problem or a backporting problem.
> > 
> 
> Yes, the same problem shows up with 7.0-rc2. I updated the bugzilla
> attachment to reproduce the bug just by feeding it to nft,
> 
> # uname -a
> Linux holly 7.0.0-rc2 #25 SMP PREEMPT_DYNAMIC Tue Mar  3 18:17:21 CET
> 2026 x86_64 GNU/Linux
> # nft -f test-full.nft
> test-full.nft:1643:1-25: Error: Could not process rule: File exists
> 12.14.179.24-12.14.179.31,
> ^^^^^^^^^^^^^^^^^^^^^^^^^

Pablo, it looks like the is a discrepancy between the comment and the
code.  Comment talks about 'open interval', but it checks that some
start interval was found instead of checking that the OPEN_INTERVAL
bit is raised:

diff --git a/net/netfilter/nft_set_rbtree.c b/net/netfilter/nft_set_rbtree.c
--- a/net/netfilter/nft_set_rbtree.c
+++ b/net/netfilter/nft_set_rbtree.c
@@ -556,7 +556,8 @@ static int __nft_rbtree_insert(const struct net *net, const struct nft_set *set,
        /* - start element overlaps an open interval but end element is new:
         *   partial overlap, reported as -ENOEMPTY.
         */
-       if (!rbe_ge && priv->start_rbe_cookie && nft_rbtree_interval_end(new))
+       if (!rbe_ge && priv->start_rbe_cookie & NFT_RBTREE_OPEN_INTERVAL &&
+           nft_rbtree_interval_end(new))
                return -ENOTEMPTY;


Does that look correct to you?


From - Tue Mar 03 18:46:54 2026
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-Path: <stable+bounces-222927-hi=josie.lol@vger.kernel.org>
Delivered-To: hi@josie.lol
Received: from witcher.mxrouting.net
	by witcher.mxrouting.net with LMTP
	id wDTxFJosp2n8KgkAYBR5ng
	(envelope-from <stable+bounces-222927-hi=josie.lol@vger.kernel.org>)
	for <hi@josie.lol>; Tue, 03 Mar 2026 18:46:50 +0000
Return-path: <stable+bounces-222927-hi=josie.lol@vger.kernel.org>
Envelope-to: hi@josie.lol
Delivery-date: Tue, 03 Mar 2026 18:46:50 +0000
Received: from sea.lore.kernel.org ([172.234.253.10])
	by witcher.mxrouting.net with esmtps  (TLS1.3) tls TLS_AES_256_GCM_SHA384
	(Exim 4.98)
	(envelope-from <stable+bounces-222927-hi=josie.lol@vger.kernel.org>)
	id 1vxUld-00000002azp-2G0Q
	for hi@josie.lol;
	Tue, 03 Mar 2026 18:46:49 +0000
Received: from smtp.subspace.kernel.org (conduit.subspace.kernel.org [100.90.174.1])
	by sea.lore.kernel.org (Postfix) with ESMTP id 23C86300D30D
	for <hi@josie.lol>; Tue,  3 Mar 2026 18:46:32 +0000 (UTC)
Received: from localhost.localdomain (localhost.localdomain [127.0.0.1])
	by smtp.subspace.kernel.org (Postfix) with ESMTP id 941F1392C28;
	Tue,  3 Mar 2026 18:46:30 +0000 (UTC)
Authentication-Results: smtp.subspace.kernel.org;
	dkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org header.b="GJWf+JK4"
X-Original-To: stable@vger.kernel.org
Received: from smtp.kernel.org (aws-us-west-2-korg-mail-1.web.codeaurora.org [10.30.226.201])
	(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by smtp.subspace.kernel.org (Postfix) with ESMTPS id 0F7843D3D14;
	Tue,  3 Mar 2026 18:46:29 +0000 (UTC)
Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=10.30.226.201
ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116;
	t=1772563590; cv=none; b=UxmmxuVp/NKL0xnQ0VeUFJ2QOxbLRa8C/sjtfKasCXc4DRUOG1oLXMUv5IZeHbkfw04um1rwBg4fjQE3C0F390rP771oaiMRfAYHMfQ4DSLSC2uRrSOumlRm7QPMNCDZol3u5zmUmFqLZ7Ze14gdvIvsM4XXrlj9HLQOzSCH4Tw=
ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org;
	s=arc-20240116; t=1772563590; c=relaxed/simple;
	bh=A7VQ47JPD0dcWakw/nXrIrJvGERHKkkoZ6q76JjQd90=;
	h=Date:From:To:Cc:Subject:Message-ID:References:MIME-Version:
	 Content-Type:Content-Disposition:In-Reply-To; b=fZogZOgunW76wJtkRzhK/xGx5UHRNsnUtiLXPdHt99pZKvbO4RbfBIc/Pd3nA2QVb1ch0Mzlha+gQZmznzXalhNHnMslrlgPzkauF94E/JYhvOozc5QxeNny3StyAKLRyHC2YmWqeIF2h2x7HE4WOvbf9t5Ou7BC1eG0u+87BGc=
ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org header.b=GJWf+JK4; arc=none smtp.client-ip=10.30.226.201
Received: by smtp.kernel.org (Postfix) with ESMTPSA id 9C5E1C116C6;
	Tue,  3 Mar 2026 18:46:25 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=kernel.org;
	s=k20201202; t=1772563589;
	bh=A7VQ47JPD0dcWakw/nXrIrJvGERHKkkoZ6q76JjQd90=;
	h=Date:From:To:Cc:Subject:References:In-Reply-To:From;
	b=GJWf+JK43fArZQhbAIYHmg+5w9JKiQ2JbC3dgKMVOgo/hzVHToaSN8LAJXLob7hdB
	 9DlT07sZrE0tb7GqLpxRG2HWZo/abDFI1cnjiblc0CEbTOw6DI+Q9+nAZXg90f5HuJ
	 /IqwXQtWaLOhBN227aNxhGVTBPZ9imXfl92tMm0f2EXdlvKlFtAA/tdx7s5Gkm3kYt
	 hjT2dCtsu7tMLOd2yrMrwuXKE9f/D0NRm7g4xF3H3OcmwQ9sJC6ZJqD/4GKjsWDIPE
	 bUROmJeRmMo4+2jSDeigFbcGWYAGBYDZMXqQmy+Yh/Eu2X4ErDD2caTlim1s6B0ZER
	 dkI3n6zs2LnNg==
Date: Tue, 3 Mar 2026 18:46:22 +0000
From: Mark Brown <broonie@kernel.org>
To: Sasha Levin <sashal@kernel.org>
Cc: linux-kernel@vger.kernel.org, stable@vger.kernel.org,
	gregkh@linuxfoundation.org, patches@lists.linux.dev,
	torvalds@linux-foundation.org:false},"sourceToolAssistantUUID":"cadfff9e-a55a-41b5-9517-82ca07cd8c75"}
{"parentUuid":"e0105b45-4679-4710-9569-2e523648b8ff","isSidechain":false,"userType":"external","cwd":"/home/josie/development/personal/soju-operator","sessionId":"6aab76e0-34b7-41ad-8632-4c3705d47bfc","version":"2.1.63","gitBranch":"HEAD","slug":"delightful-watching-hamming","message":{"model":"claude-opus-4-6","id":"msg_013gr5mXL9W3KhDaqyqAHaV1","type":"message","role":"assistant","content":[{"type":"tool_use","id":"toolu_01HwuqKbjeiEKkxUe1seMvF7","name":"Bash","input":{"command":"oc get all 2>&1","description":"Check current resources in namespace"},"caller":{"type":"direct"}}],"stop_reason":"tool_use","stop_sequence":null,"usage":{"input_tokens":1,"cache_creation_input_tokens":134,"cache_read_input_tokens":153548,"output_tokens":80,"server_tool_use":{"web_search_requests":0,"web_fetch_requests":0},"service_tier":"standard","cache_creation":{"ephemeral_1h_input_tokens":134,"ephemeral_5m_input_tokens":0},"inference_geo":"","iterations":[],"speed":"standard"}},"requestId":"req_011CYgeKfqPy1c3Hoq2qvM3g","type":"assistant","uuid":"4c9bbad7-833e-4b61-b7a0-9384f3728117","timestamp":"2026-03-03T18:46:51.258Z"}
{"parentUuid":"4c9bbad7-833e-4b61-b7a0-9384f3728117","isSidechain":false,"userType":"external","cwd":"/home/josie/development/personal/soju-operator","sessionId":"6aab76e0-34b7-41ad-8632-4c3705d47bfc","version":"2.1.63","gitBranch":"HEAD","slug":"delightful-watching-hamming","type":"progress","data":{"type":"hook_progress","hookEvent":"PreToolUse","hookName":"PreToolUse:Bash","command":"python3 ${CLAUDE_PLUGIN_ROOT}/hooks/pretooluse.py"},"toolUseID":"toolu_01HwuqKbjeiEKkxUe1seMvF7","parentToolUseID":"toolu_01HwuqKbjeiEKkxUe1seMvF7","uuid":"3fc9e7fe-02a9-480e-9ab7-d42472295bca","timestamp":"2026-03-03T18:46:51.260Z"}
{"parentUuid":"3fc9e7fe-02a9-480e-9ab7-d42472295bca","isSidechain":false,"userType":"external","cwd":"/home/josie/development/personal/soju-operator","sessionId":"6aab76e0-34b7-41ad-8632-4c3705d47bfc","version":"2.1.63","gitBranch":"HEAD","slug":"delightful-watching-hamming","type":"progress","data":{"type":"bash_progress","output":"","fullOutput":"","elapsedTimeSeconds":3,"totalLines":0,"totalBytes":0,"taskId":"bsp051yj2"},"toolUseID":"bash-progress-0","parentToolUseID":"toolu_01HwuqKbjeiEKkxUe1seMvF7","uuid":"d7de7e0d-12f5-4b9b-bd02-9c83b1919b71","timestamp":"2026-03-03T18:48:00.865Z"}
{"parentUuid":"d7de7e0d-12f5-4b9b-bd02-9c83b1919b71","isSidechain":false,"userType":"external","cwd":"/home/josie/development/personal/soju-operator","sessionId":"6aab76e0-34b7-41ad-8632-4c3705d47bfc","version":"2.1.63","gitBranch":"HEAD","slug":"delightful-watching-hamming","type":"progress","data":{"type":"bash_progress","output":"","fullOutput":"","elapsedTimeSeconds":4,"totalLines":0,"totalBytes":0,"taskId":"bsp051yj2"},"toolUseID":"bash-progress-1","parentToolUseID":"toolu_01HwuqKbjeiEKkxUe1seMvF7","uuid":"5f0491b7-d02a-428a-b4d2-284614464cd9","timestamp":"2026-03-03T18:48:01.863Z"}
{"parentUuid":"5f0491b7-d02a-428a-b4d2-284614464cd9","isSidechain":false,"userType":"external","cwd":"/home/josie/development/personal/soju-operator","sessionId":"6aab76e0-34b7-41ad-8632-4c3705d47bfc","version":"2.1.63","gitBranch":"HEAD","slug":"delightful-watching-hamming","type":"progress","data":{"type":"bash_progress","output":"Warning: apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+\n","fullOutput":"Warning: apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+\n","elapsedTimeSeconds":5,"totalLines":2,"totalBytes":0,"taskId":"bsp051yj2"},"toolUseID":"bash-progress-2","parentToolUseID":"toolu_01HwuqKbjeiEKkxUe1seMvF7","uuid":"62bf3381-0eac-4ec6-9f07-8583cfb7fa58","timestamp":"2026-03-03T18:48:02.863Z"}
{"parentUuid":"62bf3381-0eac-4ec6-9f07-8583cfb7fa58","isSidechain":false,"userType":"external","cwd":"/home/josie/development/personal/soju-operator","sessionId":"6aab76e0-34b7-41ad-8632-4c3705d47bfc","version":"2.1.63","gitBranch":"HEAD","slug":"delightful-watching-hamming","type":"progress",, akpm@linux-foundation.org,
	linux@roeck-us.net, shuah@kernel.org, patches@kernelci.org,
	lkft-triage@lists.linaro.org, pavel@nabladev.com,
	jonathanh@nvidia.com, f.fainelli@gmail.com,
	sudipm.mukherjee@gmail.com, rwarsow@gmx.de, conor@kernel.org,
	hargar@microsoft.com, achill@achill.org, sr@sladewatkins.com
Subject: Re: [PATCH 6.12 000/956] 6.12.75-rc2 review
Message-ID: <94d53832-c600-428c-a459-c61f1db6653b@sirena.org.uk>
References: <20260302160918.2520730-1-sashal@kernel.org>
Precedence: bulk
X-Mailing-List: stable@vger.kernel.org
List-Id: <stable.vger.kernel.org>
List-Subscribe: <mailto:stable+subscribe@vger.kernel.org>
List-Unsubscribe: <mailto:stable+unsubscribe@vger.kernel.org>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha512;
	protocol="application/pgp-signature"; boundary="dSU/brgqprMWfVi3"
Content-Disposition: inline
In-Reply-To: <20260302160918.2520730-1-sashal@kernel.org>
X-Cookie: Use the Force, Luke.
X-DKIM: signer='kernel.org' status='pass' reason=''
DKIMCheck: Server passes DKIM test, 0 Spam score
X-Spam-Score: -1.2 (-)
X-Spam-Report: Spam detection software, running on the system "witcher.mxrouting.net", has
 performed the tests listed below against this email.
 Information: https://docs.mxroute.com/docs/expert-spam-filtering.html
 ---
 Content analysis details:   (-1.2 points)
 ---
  pts rule name              description
 ---- ---------------------- -----------------------------------------
  0.0 RCVD_IN_ZEN_BLOCKED_OPENDNS RBL: ADMINISTRATOR NOTICE: The query
                              to zen.spamhaus.org was blocked due to
                             usage of an open resolver. See
                             https://www.spamhaus.org/returnc/pub/
                             [172.234.253.10 listed in zen.spamhaus.org]
  0.0 RCVD_IN_DNSWL_BLOCKED  RBL: ADMINISTRATOR NOTICE: The query to
                             DNSWL was blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#DnsBlocklists-dnsbl-block
                              for more information.
                             [172.234.253.10 listed in list.dnswl.org]
 -0.1 DKIM_VALID_AU          Message has a valid DKIM or DK signature from
                             author's domain
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                             valid
 -0.1 DKIM_VALID_EF          Message has a valid DKIM or DK signature from
                             envelope-from domain
 -1.0 MAILING_LIST_MULTI     Multiple indicators imply a widely-seen list
                             manager
 -0.0 DKIMWL_WL_HIGH         DKIMwl.org - High trust sender
SpamTally: Final spam score: -11


--dSU/brgqprMWfVi3
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Mon, Mar 02, 2026 at 11:09:18AM -0500, Sasha Levin wrote:
>=20
> This is the start of the stable review cycle for the 6.12.75 release.
> There are 956 patches in this series, all will be posted as a response
> to this one.  If anyone has any issues with these being applied, please
> let me know.

Tested-by: Mark Brown <broonie@kernel.org>

--dSU/brgqprMWfVi3
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----

iQEzBAABCgAdFiEEreZoqmdXGLWf4p/qJNaLcl1Uh9AFAmmnLH4ACgkQJNaLcl1U
h9DRCwf8DkvnpvSAnjpPJ4gasAt3U1yf4v/EDIb4x5/NVeh6Uo2uD8Q6tPNGXAG6
2ViLcxb0yZlqwBY5ovKqpfWjtSN9IYANK9MVMLTav6pIXXGzYsl4fw8Mchb7VEP6
bVP8c2r9azoA77zoMeZMm3BCvye4iaIuXfhM0xNMQDiuI4CCRh9yLqPhZPYhkKZb
DpRuG86JfEjy/m2MI27vVF9hgXo7bCWjNis6qOyePsOxQ9HZALlhmNMz5r+7y2m8
AYFWm3raO9qFcqqP9W1WOsienGrQtuWEwSb5jG0cSAYEGBn6VMWj/3bOhveTb+FV
D+BBYIHuJY70Wy87+JC6d6ausv5CLg==
=rpA3
-----END PGP SIGNATURE-----

--dSU/brgqprMWfVi3--


From - Tue Mar 03 19:03:04 2026
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-Path: <stable+bounces-222928-hi=josie.lol@vger.kernel