er.org, netfilter-devel@vger.kernel.org, Pablo Neira Ayuso , stable@vger.kernel.org, regressions@lists.linux.dev, "Kris Karas (Bug Reporting)" Subject: Re: [REGRESSION] 6.19.4 stable netfilter / nftables [resolved] Message-ID: References: <45f03b0b-fe8f-4942-bad1-3fbde03d4be1@leemhuis.info> <143e1a402ad78dd7076516a6ceb637f378310b16.camel@sapience.com> <10537f2b74da2b8a5cb8dc939f723291db39ff84.camel@sapience.com> <2026022755-quail-graveyard-93e8@gregkh> <9d110d860c0c7e110d018ea53a7666eba275da20.camel@gmail.com> Precedence: bulk X-Mailing-List: stable@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: X-Spam-Score: 0.5 (/) X-Spam-Report: Spam detection software, running on the system "witcher.mxrouting.net", has performed the tests listed below against this email. Information: https://docs.mxroute.com/docs/expert-spam-filtering.html --- Content analysis details: (0.5 points) --- pts rule name description ---- ---------------------- ----------------------------------------- 0.0 RCVD_IN_ZEN_BLOCKED_OPENDNS RBL: ADMINISTRATOR NOTICE: The query to zen.spamhaus.org was blocked due to usage of an open resolver. See https://www.spamhaus.org/returnc/pub/ [172.234.253.10 listed in zen.spamhaus.org] 0.0 RCVD_IN_DNSWL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to DNSWL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#DnsBlocklists-dnsbl-block for more information. [172.234.253.10 listed in list.dnswl.org] 1.5 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail domains are different -1.0 MAILING_LIST_MULTI Multiple indicators imply a widely-seen list manager SpamTally: Final spam score: 5 Jindrich Makovicka wrote: > > > commit 12b1681793e9b7552495290785a3570c539f409d > > > Author: Pablo Neira Ayuso > > > Date:   Fri Feb 6 13:33:46 2026 +0100 > > > > > >     netfilter: nft_set_rbtree: validate open interval overlap > > > > > > Example set definition is here: > > > > > > https://bugzilla.kernel.org/show_bug.cgi?id=221158 > > > > Does that problem happen with 7.0-rc2 as well? This is important to > > know > > to determine if this is a general problem or a backporting problem. > > > > Yes, the same problem shows up with 7.0-rc2. I updated the bugzilla > attachment to reproduce the bug just by feeding it to nft, > > # uname -a > Linux holly 7.0.0-rc2 #25 SMP PREEMPT_DYNAMIC Tue Mar 3 18:17:21 CET > 2026 x86_64 GNU/Linux > # nft -f test-full.nft > test-full.nft:1643:1-25: Error: Could not process rule: File exists > 12.14.179.24-12.14.179.31, > ^^^^^^^^^^^^^^^^^^^^^^^^^ Pablo, it looks like the is a discrepancy between the comment and the code. Comment talks about 'open interval', but it checks that some start interval was found instead of checking that the OPEN_INTERVAL bit is raised: diff --git a/net/netfilter/nft_set_rbtree.c b/net/netfilter/nft_set_rbtree.c --- a/net/netfilter/nft_set_rbtree.c +++ b/net/netfilter/nft_set_rbtree.c @@ -556,7 +556,8 @@ static int __nft_rbtree_insert(const struct net *net, const struct nft_set *set, /* - start element overlaps an open interval but end element is new: * partial overlap, reported as -ENOEMPTY. */ - if (!rbe_ge && priv->start_rbe_cookie && nft_rbtree_interval_end(new)) + if (!rbe_ge && priv->start_rbe_cookie & NFT_RBTREE_OPEN_INTERVAL && + nft_rbtree_interval_end(new)) return -ENOTEMPTY; Does that look correct to you? From - Tue Mar 03 18:46:54 2026 X-Mozilla-Status: 0001 X-Mozilla-Status2: 00000000 Return-Path: Delivered-To: hi@josie.lol Received: from witcher.mxrouting.net by witcher.mxrouting.net with LMTP id wDTxFJosp2n8KgkAYBR5ng (envelope-from ) for ; Tue, 03 Mar 2026 18:46:50 +0000 Return-path: Envelope-to: hi@josie.lol Delivery-date: Tue, 03 Mar 2026 18:46:50 +0000 Received: from sea.lore.kernel.org ([172.234.253.10]) by witcher.mxrouting.net with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384 (Exim 4.98) (envelope-from ) id 1vxUld-00000002azp-2G0Q for hi@josie.lol; Tue, 03 Mar 2026 18:46:49 +0000 Received: from smtp.subspace.kernel.org (conduit.subspace.kernel.org [100.90.174.1]) by sea.lore.kernel.org (Postfix) with ESMTP id 23C86300D30D for ; Tue, 3 Mar 2026 18:46:32 +0000 (UTC) Received: from localhost.localdomain (localhost.localdomain [127.0.0.1]) by smtp.subspace.kernel.org (Postfix) with ESMTP id 941F1392C28; Tue, 3 Mar 2026 18:46:30 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org header.b="GJWf+JK4" X-Original-To: stable@vger.kernel.org Received: from smtp.kernel.org (aws-us-west-2-korg-mail-1.web.codeaurora.org [10.30.226.201]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 0F7843D3D14; Tue, 3 Mar 2026 18:46:29 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=10.30.226.201 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1772563590; cv=none; b=UxmmxuVp/NKL0xnQ0VeUFJ2QOxbLRa8C/sjtfKasCXc4DRUOG1oLXMUv5IZeHbkfw04um1rwBg4fjQE3C0F390rP771oaiMRfAYHMfQ4DSLSC2uRrSOumlRm7QPMNCDZol3u5zmUmFqLZ7Ze14gdvIvsM4XXrlj9HLQOzSCH4Tw= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1772563590; c=relaxed/simple; bh=A7VQ47JPD0dcWakw/nXrIrJvGERHKkkoZ6q76JjQd90=; h=Date:From:To:Cc:Subject:Message-ID:References:MIME-Version: Content-Type:Content-Disposition:In-Reply-To; b=fZogZOgunW76wJtkRzhK/xGx5UHRNsnUtiLXPdHt99pZKvbO4RbfBIc/Pd3nA2QVb1ch0Mzlha+gQZmznzXalhNHnMslrlgPzkauF94E/JYhvOozc5QxeNny3StyAKLRyHC2YmWqeIF2h2x7HE4WOvbf9t5Ou7BC1eG0u+87BGc= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org header.b=GJWf+JK4; arc=none smtp.client-ip=10.30.226.201 Received: by smtp.kernel.org (Postfix) with ESMTPSA id 9C5E1C116C6; Tue, 3 Mar 2026 18:46:25 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=kernel.org; s=k20201202; t=1772563589; bh=A7VQ47JPD0dcWakw/nXrIrJvGERHKkkoZ6q76JjQd90=; h=Date:From:To:Cc:Subject:References:In-Reply-To:From; b=GJWf+JK43fArZQhbAIYHmg+5w9JKiQ2JbC3dgKMVOgo/hzVHToaSN8LAJXLob7hdB 9DlT07sZrE0tb7GqLpxRG2HWZo/abDFI1cnjiblc0CEbTOw6DI+Q9+nAZXg90f5HuJ /IqwXQtWaLOhBN227aNxhGVTBPZ9imXfl92tMm0f2EXdlvKlFtAA/tdx7s5Gkm3kYt hjT2dCtsu7tMLOd2yrMrwuXKE9f/D0NRm7g4xF3H3OcmwQ9sJC6ZJqD/4GKjsWDIPE bUROmJeRmMo4+2jSDeigFbcGWYAGBYDZMXqQmy+Yh/Eu2X4ErDD2caTlim1s6B0ZER dkI3n6zs2LnNg== Date: Tue, 3 Mar 2026 18:46:22 +0000 From: Mark Brown To: Sasha Levin Cc: linux-kernel@vger.kernel.org, stable@vger.kernel.org, gregkh@linuxfoundation.org, patches@lists.linux.dev, torvalds@linux-foundation.org:false},"sourceToolAssistantUUID":"cadfff9e-a55a-41b5-9517-82ca07cd8c75"} {"parentUuid":"e0105b45-4679-4710-9569-2e523648b8ff","isSidechain":false,"userType":"external","cwd":"/home/josie/development/personal/soju-operator","sessionId":"6aab76e0-34b7-41ad-8632-4c3705d47bfc","version":"2.1.63","gitBranch":"HEAD","slug":"delightful-watching-hamming","message":{"model":"claude-opus-4-6","id":"msg_013gr5mXL9W3KhDaqyqAHaV1","type":"message","role":"assistant","content":[{"type":"tool_use","id":"toolu_01HwuqKbjeiEKkxUe1seMvF7","name":"Bash","input":{"command":"oc get all 2>&1","description":"Check current resources in namespace"},"caller":{"type":"direct"}}],"stop_reason":"tool_use","stop_sequence":null,"usage":{"input_tokens":1,"cache_creation_input_tokens":134,"cache_read_input_tokens":153548,"output_tokens":80,"server_tool_use":{"web_search_requests":0,"web_fetch_requests":0},"service_tier":"standard","cache_creation":{"ephemeral_1h_input_tokens":134,"ephemeral_5m_input_tokens":0},"inference_geo":"","iterations":[],"speed":"standard"}},"requestId":"req_011CYgeKfqPy1c3Hoq2qvM3g","type":"assistant","uuid":"4c9bbad7-833e-4b61-b7a0-9384f3728117","timestamp":"2026-03-03T18:46:51.258Z"} {"parentUuid":"4c9bbad7-833e-4b61-b7a0-9384f3728117","isSidechain":false,"userType":"external","cwd":"/home/josie/development/personal/soju-operator","sessionId":"6aab76e0-34b7-41ad-8632-4c3705d47bfc","version":"2.1.63","gitBranch":"HEAD","slug":"delightful-watching-hamming","type":"progress","data":{"type":"hook_progress","hookEvent":"PreToolUse","hookName":"PreToolUse:Bash","command":"python3 ${CLAUDE_PLUGIN_ROOT}/hooks/pretooluse.py"},"toolUseID":"toolu_01HwuqKbjeiEKkxUe1seMvF7","parentToolUseID":"toolu_01HwuqKbjeiEKkxUe1seMvF7","uuid":"3fc9e7fe-02a9-480e-9ab7-d42472295bca","timestamp":"2026-03-03T18:46:51.260Z"} {"parentUuid":"3fc9e7fe-02a9-480e-9ab7-d42472295bca","isSidechain":false,"userType":"external","cwd":"/home/josie/development/personal/soju-operator","sessionId":"6aab76e0-34b7-41ad-8632-4c3705d47bfc","version":"2.1.63","gitBranch":"HEAD","slug":"delightful-watching-hamming","type":"progress","data":{"type":"bash_progress","output":"","fullOutput":"","elapsedTimeSeconds":3,"totalLines":0,"totalBytes":0,"taskId":"bsp051yj2"},"toolUseID":"bash-progress-0","parentToolUseID":"toolu_01HwuqKbjeiEKkxUe1seMvF7","uuid":"d7de7e0d-12f5-4b9b-bd02-9c83b1919b71","timestamp":"2026-03-03T18:48:00.865Z"} {"parentUuid":"d7de7e0d-12f5-4b9b-bd02-9c83b1919b71","isSidechain":false,"userType":"external","cwd":"/home/josie/development/personal/soju-operator","sessionId":"6aab76e0-34b7-41ad-8632-4c3705d47bfc","version":"2.1.63","gitBranch":"HEAD","slug":"delightful-watching-hamming","type":"progress","data":{"type":"bash_progress","output":"","fullOutput":"","elapsedTimeSeconds":4,"totalLines":0,"totalBytes":0,"taskId":"bsp051yj2"},"toolUseID":"bash-progress-1","parentToolUseID":"toolu_01HwuqKbjeiEKkxUe1seMvF7","uuid":"5f0491b7-d02a-428a-b4d2-284614464cd9","timestamp":"2026-03-03T18:48:01.863Z"} {"parentUuid":"5f0491b7-d02a-428a-b4d2-284614464cd9","isSidechain":false,"userType":"external","cwd":"/home/josie/development/personal/soju-operator","sessionId":"6aab76e0-34b7-41ad-8632-4c3705d47bfc","version":"2.1.63","gitBranch":"HEAD","slug":"delightful-watching-hamming","type":"progress","data":{"type":"bash_progress","output":"Warning: apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+\n","fullOutput":"Warning: apps.openshift.io/v1 DeploymentConfig is deprecated in v4.14+, unavailable in v4.10000+\n","elapsedTimeSeconds":5,"totalLines":2,"totalBytes":0,"taskId":"bsp051yj2"},"toolUseID":"bash-progress-2","parentToolUseID":"toolu_01HwuqKbjeiEKkxUe1seMvF7","uuid":"62bf3381-0eac-4ec6-9f07-8583cfb7fa58","timestamp":"2026-03-03T18:48:02.863Z"} {"parentUuid":"62bf3381-0eac-4ec6-9f07-8583cfb7fa58","isSidechain":false,"userType":"external","cwd":"/home/josie/development/personal/soju-operator","sessionId":"6aab76e0-34b7-41ad-8632-4c3705d47bfc","version":"2.1.63","gitBranch":"HEAD","slug":"delightful-watching-hamming","type":"progress",, akpm@linux-foundation.org, linux@roeck-us.net, shuah@kernel.org, patches@kernelci.org, lkft-triage@lists.linaro.org, pavel@nabladev.com, jonathanh@nvidia.com, f.fainelli@gmail.com, sudipm.mukherjee@gmail.com, rwarsow@gmx.de, conor@kernel.org, hargar@microsoft.com, achill@achill.org, sr@sladewatkins.com Subject: Re: [PATCH 6.12 000/956] 6.12.75-rc2 review Message-ID: <94d53832-c600-428c-a459-c61f1db6653b@sirena.org.uk> References: <20260302160918.2520730-1-sashal@kernel.org> Precedence: bulk X-Mailing-List: stable@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="dSU/brgqprMWfVi3" Content-Disposition: inline In-Reply-To: <20260302160918.2520730-1-sashal@kernel.org> X-Cookie: Use the Force, Luke. X-DKIM: signer='kernel.org' status='pass' reason='' DKIMCheck: Server passes DKIM test, 0 Spam score X-Spam-Score: -1.2 (-) X-Spam-Report: Spam detection software, running on the system "witcher.mxrouting.net", has performed the tests listed below against this email. Information: https://docs.mxroute.com/docs/expert-spam-filtering.html --- Content analysis details: (-1.2 points) --- pts rule name description ---- ---------------------- ----------------------------------------- 0.0 RCVD_IN_ZEN_BLOCKED_OPENDNS RBL: ADMINISTRATOR NOTICE: The query to zen.spamhaus.org was blocked due to usage of an open resolver. See https://www.spamhaus.org/returnc/pub/ [172.234.253.10 listed in zen.spamhaus.org] 0.0 RCVD_IN_DNSWL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to DNSWL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#DnsBlocklists-dnsbl-block for more information. [172.234.253.10 listed in list.dnswl.org] -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's domain -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid -0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from envelope-from domain -1.0 MAILING_LIST_MULTI Multiple indicators imply a widely-seen list manager -0.0 DKIMWL_WL_HIGH DKIMwl.org - High trust sender SpamTally: Final spam score: -11 --dSU/brgqprMWfVi3 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Mon, Mar 02, 2026 at 11:09:18AM -0500, Sasha Levin wrote: >=20 > This is the start of the stable review cycle for the 6.12.75 release. > There are 956 patches in this series, all will be posted as a response > to this one. If anyone has any issues with these being applied, please > let me know. Tested-by: Mark Brown --dSU/brgqprMWfVi3 Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAABCgAdFiEEreZoqmdXGLWf4p/qJNaLcl1Uh9AFAmmnLH4ACgkQJNaLcl1U h9DRCwf8DkvnpvSAnjpPJ4gasAt3U1yf4v/EDIb4x5/NVeh6Uo2uD8Q6tPNGXAG6 2ViLcxb0yZlqwBY5ovKqpfWjtSN9IYANK9MVMLTav6pIXXGzYsl4fw8Mchb7VEP6 bVP8c2r9azoA77zoMeZMm3BCvye4iaIuXfhM0xNMQDiuI4CCRh9yLqPhZPYhkKZb DpRuG86JfEjy/m2MI27vVF9hgXo7bCWjNis6qOyePsOxQ9HZALlhmNMz5r+7y2m8 AYFWm3raO9qFcqqP9W1WOsienGrQtuWEwSb5jG0cSAYEGBn6VMWj/3bOhveTb+FV D+BBYIHuJY70Wy87+JC6d6ausv5CLg== =rpA3 -----END PGP SIGNATURE----- --dSU/brgqprMWfVi3-- From - Tue Mar 03 19:03:04 2026 X-Mozilla-Status: 0001 X-Mozilla-Status2: 00000000 Return-Path: