{"id":2225110,"url":"http://patchwork.ozlabs.org/api/1.1/patches/2225110/?format=json","web_url":"http://patchwork.ozlabs.org/project/netfilter-devel/patch/20260420105816.72168-3-mahe.tardy@gmail.com/","project":{"id":26,"url":"http://patchwork.ozlabs.org/api/1.1/projects/26/?format=json","name":"Netfilter Development","link_name":"netfilter-devel","list_id":"netfilter-devel.vger.kernel.org","list_email":"netfilter-devel@vger.kernel.org","web_url":null,"scm_url":null,"webscm_url":null},"msgid":"<20260420105816.72168-3-mahe.tardy@gmail.com>","date":"2026-04-20T10:58:12","name":"[bpf-next,v4,2/6] net: move netfilter nf_reject6_fill_skb_dst to core ipv6","commit_ref":null,"pull_url":null,"state":"new","archived":false,"hash":"86f3472e91b87905edf6f373fa85f42e11ada43a","submitter":{"id":91349,"url":"http://patchwork.ozlabs.org/api/1.1/people/91349/?format=json","name":"Mahe Tardy","email":"mahe.tardy@gmail.com"},"delegate":null,"mbox":"http://patchwork.ozlabs.org/project/netfilter-devel/patch/20260420105816.72168-3-mahe.tardy@gmail.com/mbox/","series":[{"id":500597,"url":"http://patchwork.ozlabs.org/api/1.1/series/500597/?format=json","web_url":"http://patchwork.ozlabs.org/project/netfilter-devel/list/?series=500597","date":"2026-04-20T10:58:10","name":"bpf: add icmp_send_unreach kfunc","version":4,"mbox":"http://patchwork.ozlabs.org/series/500597/mbox/"}],"comments":"http://patchwork.ozlabs.org/api/patches/2225110/comments/","check":"pending","checks":"http://patchwork.ozlabs.org/api/patches/2225110/checks/","tags":{},"headers":{"Return-Path":"\n ","X-Original-To":["incoming@patchwork.ozlabs.org","netfilter-devel@vger.kernel.org"],"Delivered-To":"patchwork-incoming@legolas.ozlabs.org","Authentication-Results":["legolas.ozlabs.org;\n\tdkim=pass (2048-bit key;\n unprotected) header.d=gmail.com header.i=@gmail.com header.a=rsa-sha256\n header.s=20251104 header.b=b8N8Uv9c;\n\tdkim-atps=neutral","legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=vger.kernel.org\n (client-ip=104.64.211.4; helo=sin.lore.kernel.org;\n envelope-from=netfilter-devel+bounces-12041-incoming=patchwork.ozlabs.org@vger.kernel.org;\n receiver=patchwork.ozlabs.org)","smtp.subspace.kernel.org;\n\tdkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com\n header.b=\"b8N8Uv9c\"","smtp.subspace.kernel.org;\n arc=none smtp.client-ip=209.85.128.47","smtp.subspace.kernel.org;\n dmarc=pass (p=none dis=none) header.from=gmail.com","smtp.subspace.kernel.org;\n spf=pass smtp.mailfrom=gmail.com"],"Received":["from sin.lore.kernel.org (sin.lore.kernel.org [104.64.211.4])\n\t(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n\t key-exchange x25519)\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4fzjCp3gk8z1yGs\n\tfor ; Mon, 20 Apr 2026 20:59:02 +1000 (AEST)","from smtp.subspace.kernel.org (conduit.subspace.kernel.org\n [100.90.174.1])\n\tby sin.lore.kernel.org (Postfix) with ESMTP id D200A3013FFF\n\tfor ; Mon, 20 Apr 2026 10:58:43 +0000 (UTC)","from localhost.localdomain (localhost.localdomain [127.0.0.1])\n\tby smtp.subspace.kernel.org (Postfix) with ESMTP id 46F9039D6D3;\n\tMon, 20 Apr 2026 10:58:35 +0000 (UTC)","from mail-wm1-f47.google.com (mail-wm1-f47.google.com\n [209.85.128.47])\n\t(using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))\n\t(No client certificate requested)\n\tby smtp.subspace.kernel.org (Postfix) with ESMTPS id 0265B39B94A\n\tfor ; Mon, 20 Apr 2026 10:58:32 +0000 (UTC)","by mail-wm1-f47.google.com with SMTP id\n 5b1f17b1804b1-48909558b3aso19108005e9.0\n for ;\n Mon, 20 Apr 2026 03:58:32 -0700 (PDT)","from mtardy-friendly-lvh-runner.local ([2600:1900:4010:1a8::])\n by smtp.googlemail.com with ESMTPSA id\n 5b1f17b1804b1-488fc1cfbf2sm290929495e9.15.2026.04.20.03.58.30\n (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);\n Mon, 20 Apr 2026 03:58:30 -0700 (PDT)"],"ARC-Seal":"i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116;\n\tt=1776682714; cv=none;\n b=EgVfr4AqV76V6vxV/TjyL7dWjP3ZQ8t80Yx81f0nXBMsSEAsMGt+VzrD5rmjj/FARD9k4mZPqMGi8xAqTfVwKG/wwAS9yN+2aLZLAPN2LjvZFTgB1mIxljceVg/jnjw6Nr2aLk0SAb1w/4Ge0s2oXRzs2benwc6r3ejLJ9wG7Lo=","ARC-Message-Signature":"i=1; a=rsa-sha256; d=subspace.kernel.org;\n\ts=arc-20240116; t=1776682714; c=relaxed/simple;\n\tbh=eM+kBof0ulZSr5/cYF9WFtvW3e7WM/D2dX633xCjEDo=;\n\th=From:To:Cc:Subject:Date:Message-Id:In-Reply-To:References:\n\t MIME-Version;\n b=d27xnxmlcm9WEgiFCOjk/pKvsTcUKzc7Ig1AT6HJK6N5t0tt2LmGlf6QrlFKiXqwrJdfc0sjTJTNjnxXNZvwP/lDI8y1h92uO1jYk0wur044CUgfy2O//vxWIYSjfB7wFH44ORtAhgpLj+vqlbM/bJ4UM15xd12LExjdIYsctnY=","ARC-Authentication-Results":"i=1; smtp.subspace.kernel.org;\n dmarc=pass (p=none dis=none) header.from=gmail.com;\n spf=pass smtp.mailfrom=gmail.com;\n dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com\n header.b=b8N8Uv9c; arc=none smtp.client-ip=209.85.128.47","DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed;\n d=gmail.com; s=20251104; t=1776682711; x=1777287511;\n darn=vger.kernel.org;\n h=content-transfer-encoding:mime-version:references:in-reply-to\n :message-id:date:subject:cc:to:from:from:to:cc:subject:date\n :message-id:reply-to;\n bh=pIn4y25U9iTbZ6u0/nqOP41USOI/jaT9h/eIclbE8HQ=;\n b=b8N8Uv9ckYN9oVUXD/7//phbUkLfbtPGrLcQAtf35oj318gCD2yyiDFVEuTYq40e6d\n bUb1p5Qqji2+StrZTqqu9UvUz+31sJ7BJxt6Z5o3H0LdJA+Rtk4ZwQ7ErGFc4aBkN11Y\n TCDm3lLqeeW2AAF7F1bxT2Ik5+8Hzr4n1RzW3U2sG8Dcpnn/3T+wKPp4QmO5WZgphRSP\n gC771MiQJ2x2oEB9Y+4s+/+gk8OF2cAlJEycw3keE3MAARsih3WgtzTc2/77c0EfzJp9\n CGoFCdXrNbPZ5ufaRGA+BGq1f6p0aD/dqp3BX83s7rdth1CV9rVUbExMg3J1Sld3NDHg\n N2tg==","X-Google-DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed;\n d=1e100.net; s=20251104; t=1776682711; x=1777287511;\n h=content-transfer-encoding:mime-version:references:in-reply-to\n :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from\n :to:cc:subject:date:message-id:reply-to;\n bh=pIn4y25U9iTbZ6u0/nqOP41USOI/jaT9h/eIclbE8HQ=;\n b=r2YAL2DScHm85fdbfd6P1FKXMntYilsE5fIgz0or2VV88IHdIntfxM4PcMzZEKety5\n MV1cDn+5CXZAGv7zQLz0JWlGRjBT8nMOk9ovHOiwpH5y7yFvhY3/7jQ9ShAiaboYLOMn\n hDVgY4rZh7kaHiLZmjdc1g5Z3ADRQYXWB21/x6aoOYk2NosotzUd4MEKMAfl0SWpXF8S\n /8MSRqu1im08exha1h2ONAL6CkNVgr7q+poihsP10fVCzPeri92bTianXXo2canTVCXj\n lIs5lam2Wn3ZERT66hhfEzlznZ9Zh5zxlnMCEc4M+m8d5qUcNbDkwVUwbAQsxDe5UDca\n iXOA==","X-Forwarded-Encrypted":"i=1;\n AFNElJ8K2Iv6UFHeN3q52idwax3Yg9byGM114LJKS3Gk2ETAX8JzDCMfpnFC13qPB3/Ghx3wG73jRy0EciXQGU2a6VA=@vger.kernel.org","X-Gm-Message-State":"AOJu0YzS5KYoYZt8DQkpBLkRG5giNequ0j+a2ei10bRqE1Rao1KufZFd\n\t20Wy4bCYr7hIEoJkuT32Q5Uc88q6GAs+HJ+J5I0juoozydUehRGqIJ4+","X-Gm-Gg":"AeBDietihejAF5MvLbAf4k573zWGRGecLWYFzx2W6wv31u9YqdZHGWG/cPE01lDyJkB\n\tY60AS+Ho55A5EJwCjte3IKrHMz0TZ6YUvJxHzLUhXAnrRaLa8Rdm90UxDmh6Q8MaHP9OjI/pNGE\n\tWyo/61m3GJBLuwJyQaUPUVWthlPdwtzxv+tIytc8k8OZ0zi7q3y+KXb+yCkWtLhQ3P05+K5VFbw\n\tUe+BG4sdkecV5hm3gQo0rWSY78XtGhA1vdlXh87+WIIF7GhOv2NeRzGc5b6xDoDan6Xos7T/Y3E\n\tEgopWtIweRfXaBZgt6OzWpyrimfWGCV/B+AMnBofqoXXie2WEv8ZPl3VHSdTDkE76gbScHKORm2\n\t6M7fY9xAVTE/djDLHVMWZJ74Vc8S/hPR9vlv1roT3AWItAm7iYGrXhTo0VrlQLQggQhTO0/Nrya\n\tdZ7DUyUPYPjo2RJ2F7sGQhvq2dMBPIiMXOz9tcKA==","X-Received":"by 2002:a05:600c:530e:b0:485:4eaf:eb53 with SMTP id\n 5b1f17b1804b1-488fb768db3mr193873925e9.19.1776682711203;\n Mon, 20 Apr 2026 03:58:31 -0700 (PDT)","From":"Mahe Tardy ","To":"mahe.tardy@gmail.com","Cc":"alexei.starovoitov@gmail.com,\n\tandrii@kernel.org,\n\tast@kernel.org,\n\tbpf@vger.kernel.org,\n\tcoreteam@netfilter.org,\n\tdaniel@iogearbox.net,\n\tfw@strlen.de,\n\tjohn.fastabend@gmail.com,\n\tlkp@intel.com,\n\tmartin.lau@linux.dev,\n\tnetdev@vger.kernel.org,\n\tnetfilter-devel@vger.kernel.org,\n\toe-kbuild-all@lists.linux.dev,\n\tpablo@netfilter.org","Subject":"[PATCH bpf-next v4 2/6] net: move netfilter nf_reject6_fill_skb_dst\n to core ipv6","Date":"Mon, 20 Apr 2026 10:58:12 +0000","Message-Id":"<20260420105816.72168-3-mahe.tardy@gmail.com>","X-Mailer":"git-send-email 2.34.1","In-Reply-To":"<20260420105816.72168-1-mahe.tardy@gmail.com>","References":"\n <20260420105816.72168-1-mahe.tardy@gmail.com>","Precedence":"bulk","X-Mailing-List":"netfilter-devel@vger.kernel.org","List-Id":"","List-Subscribe":"","List-Unsubscribe":"","MIME-Version":"1.0","Content-Transfer-Encoding":"8bit"},"content":"Move and rename nf_reject6_fill_skb_dst from\nipv6/netfilter/nf_reject_ipv6 to ip6_route_reply_fetch_dst in\nipv6/route.c so that it can be reused in the following patches by BPF\nkfuncs.\n\nNetfilter uses nf_ip6_route that is almost a transparent wrapper around\nip6_route_output so this patch inlines it.\n\nSigned-off-by: Mahe Tardy \n---\n include/net/ip6_route.h | 2 ++\n net/ipv6/netfilter/nf_reject_ipv6.c | 17 +----------------\n net/ipv6/route.c | 18 ++++++++++++++++++\n 3 files changed, 21 insertions(+), 16 deletions(-)\n\n--\n2.34.1","diff":"diff --git a/include/net/ip6_route.h b/include/net/ip6_route.h\nindex 09ffe0f13ce7..3652efec7081 100644\n--- a/include/net/ip6_route.h\n+++ b/include/net/ip6_route.h\n@@ -100,6 +100,8 @@ static inline struct dst_entry *ip6_route_output(struct net *net,\n \treturn ip6_route_output_flags(net, sk, fl6, 0);\n }\n\n+int ip6_route_reply_fetch_dst(struct sk_buff *skb);\n+\n /* Only conditionally release dst if flags indicates\n * !RT6_LOOKUP_F_DST_NOREF or dst is in uncached_list.\n */\ndiff --git a/net/ipv6/netfilter/nf_reject_ipv6.c b/net/ipv6/netfilter/nf_reject_ipv6.c\nindex ef5b7e85cffa..9663d1db6d80 100644\n--- a/net/ipv6/netfilter/nf_reject_ipv6.c\n+++ b/net/ipv6/netfilter/nf_reject_ipv6.c\n@@ -293,21 +293,6 @@ nf_reject_ip6_tcphdr_put(struct sk_buff *nskb,\n \t\t\t\t\t\t sizeof(struct tcphdr), 0));\n }\n\n-static int nf_reject6_fill_skb_dst(struct sk_buff *skb_in)\n-{\n-\tstruct dst_entry *dst = NULL;\n-\tstruct flowi fl;\n-\n-\tmemset(&fl, 0, sizeof(struct flowi));\n-\tfl.u.ip6.daddr = ipv6_hdr(skb_in)->saddr;\n-\tnf_ip6_route(dev_net(skb_in->dev), &dst, &fl, false);\n-\tif (!dst)\n-\t\treturn -1;\n-\n-\tskb_dst_set(skb_in, dst);\n-\treturn 0;\n-}\n-\n void nf_send_reset6(struct net *net, struct sock *sk, struct sk_buff *oldskb,\n \t\t int hook)\n {\n@@ -440,7 +425,7 @@ void nf_send_unreach6(struct net *net, struct sk_buff *skb_in,\n \tif (hooknum == NF_INET_LOCAL_OUT && skb_in->dev == NULL)\n \t\tskb_in->dev = net->loopback_dev;\n\n-\tif (!skb_dst(skb_in) && nf_reject6_fill_skb_dst(skb_in) < 0)\n+\tif (!skb_dst(skb_in) && ip6_route_reply_fetch_dst(skb_in) < 0)\n \t\treturn;\n\n \ticmpv6_send(skb_in, ICMPV6_DEST_UNREACH, code, 0);\ndiff --git a/net/ipv6/route.c b/net/ipv6/route.c\nindex 19eb6b702227..41871fddec4d 100644\n--- a/net/ipv6/route.c\n+++ b/net/ipv6/route.c\n@@ -2721,6 +2721,24 @@ struct dst_entry *ip6_route_output_flags(struct net *net,\n }\n EXPORT_SYMBOL_GPL(ip6_route_output_flags);\n\n+int ip6_route_reply_fetch_dst(struct sk_buff *skb)\n+{\n+\tstruct dst_entry *result;\n+\tstruct flowi6 fl = {\n+\t\t.daddr = ipv6_hdr(skb)->saddr\n+\t};\n+\tint err;\n+\n+\tresult = ip6_route_output(dev_net(skb->dev), NULL, &fl);\n+\terr = result->error;\n+\tif (err)\n+\t\tdst_release(result);\n+\telse\n+\t\tskb_dst_set(skb, result);\n+\treturn err;\n+}\n+EXPORT_SYMBOL_GPL(ip6_route_reply_fetch_dst);\n+\n struct dst_entry *ip6_blackhole_route(struct net *net, struct dst_entry *dst_orig)\n {\n \tstruct rt6_info *rt, *ort = dst_rt6_info(dst_orig);\n","prefixes":["bpf-next","v4","2/6"]}