{"id":2215857,"url":"http://patchwork.ozlabs.org/api/patches/2215857/?format=json","web_url":"http://patchwork.ozlabs.org/project/netfilter-devel/patch/20260325131108.23045-3-fw@strlen.de/","project":{"id":26,"url":"http://patchwork.ozlabs.org/api/projects/26/?format=json","name":"Netfilter Development","link_name":"netfilter-devel","list_id":"netfilter-devel.vger.kernel.org","list_email":"netfilter-devel@vger.kernel.org","web_url":null,"scm_url":null,"webscm_url":null,"list_archive_url":"","list_archive_url_format":"","commit_url_format":""},"msgid":"<20260325131108.23045-3-fw@strlen.de>","list_archive_url":null,"date":"2026-03-25T13:10:56","name":"[net,02/14] selftests: netfilter: nft_concat_range.sh: add check for flush+reload bug","commit_ref":null,"pull_url":null,"state":"handled-elsewhere","archived":true,"hash":"a41b0911d285ed5cea9f99e9409c6930520bc439","submitter":{"id":1025,"url":"http://patchwork.ozlabs.org/api/people/1025/?format=json","name":"Florian Westphal","email":"fw@strlen.de"},"delegate":null,"mbox":"http://patchwork.ozlabs.org/project/netfilter-devel/patch/20260325131108.23045-3-fw@strlen.de/mbox/","series":[{"id":497441,"url":"http://patchwork.ozlabs.org/api/series/497441/?format=json","web_url":"http://patchwork.ozlabs.org/project/netfilter-devel/list/?series=497441","date":"2026-03-25T13:10:55","name":"[net,01/14] netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry","version":1,"mbox":"http://patchwork.ozlabs.org/series/497441/mbox/"}],"comments":"http://patchwork.ozlabs.org/api/patches/2215857/comments/","check":"pending","checks":"http://patchwork.ozlabs.org/api/patches/2215857/checks/","tags":{},"related":[],"headers":{"Return-Path":"\n ","X-Original-To":["incoming@patchwork.ozlabs.org","netfilter-devel@vger.kernel.org"],"Delivered-To":"patchwork-incoming@legolas.ozlabs.org","Authentication-Results":["legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=vger.kernel.org\n (client-ip=104.64.211.4; helo=sin.lore.kernel.org;\n envelope-from=netfilter-devel+bounces-11395-incoming=patchwork.ozlabs.org@vger.kernel.org;\n receiver=patchwork.ozlabs.org)","smtp.subspace.kernel.org;\n arc=none smtp.client-ip=91.216.245.30","smtp.subspace.kernel.org;\n dmarc=none (p=none dis=none) header.from=strlen.de","smtp.subspace.kernel.org;\n spf=pass smtp.mailfrom=Chamillionaire.breakpoint.cc"],"Received":["from sin.lore.kernel.org (sin.lore.kernel.org [104.64.211.4])\n\t(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n\t key-exchange x25519)\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4fgnsF1nwHz1xy3\n\tfor ; Thu, 26 Mar 2026 00:32:49 +1100 (AEDT)","from smtp.subspace.kernel.org (conduit.subspace.kernel.org\n [100.90.174.1])\n\tby sin.lore.kernel.org (Postfix) with ESMTP id C21C93175D65\n\tfor ; Wed, 25 Mar 2026 13:12:06 +0000 (UTC)","from localhost.localdomain (localhost.localdomain [127.0.0.1])\n\tby smtp.subspace.kernel.org (Postfix) with ESMTP id 46A993D9DC4;\n\tWed, 25 Mar 2026 13:11:46 +0000 (UTC)","from Chamillionaire.breakpoint.cc (Chamillionaire.breakpoint.cc\n [91.216.245.30])\n\t(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))\n\t(No client certificate requested)\n\tby smtp.subspace.kernel.org (Postfix) with ESMTPS id 5109D3D8129;\n\tWed, 25 Mar 2026 13:11:44 +0000 (UTC)","by Chamillionaire.breakpoint.cc (Postfix, from userid 1003)\n\tid 0815D60A0F; Wed, 25 Mar 2026 14:11:41 +0100 (CET)"],"ARC-Seal":"i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116;\n\tt=1774444305; cv=none;\n b=pQIxj4B+dn80U+VHZGjiPX+2gSpynvyHUmuOdz0XJqhTAkjEpwSLwdIrmMfqzrSkw3WIsp3s5AenyGf3xqu7x945NHcalViSBODUORupUkxVduVfdHj6UQhRFMDEw4EjbSBIdNSr/jkp/lPtfSJNIhCHhVlfHXfo05/FXgy9aVY=","ARC-Message-Signature":"i=1; a=rsa-sha256; d=subspace.kernel.org;\n\ts=arc-20240116; t=1774444305; c=relaxed/simple;\n\tbh=wyirzOaifRVpofa3XyhHv0r4PAfN2d9M6Y4+MC9Ltio=;\n\th=From:To:Cc:Subject:Date:Message-ID:In-Reply-To:References:\n\t MIME-Version;\n b=UeRoHuQLHK86PcW9aP+S+ZX8YjA8XDgGFN/O+GZUzcrgSlszYw89+TszO38H91nCxHmYRJlo3DFiQISf7Y1HshDw4nBwOts3AxxTdkVvHoqkBT6jUGd8Q+IKOVZqlFZvUY8SLsOpcxRJErru1K4z6Y9ejyAxheV59ty0Sku6GyM=","ARC-Authentication-Results":"i=1; smtp.subspace.kernel.org;\n dmarc=none (p=none dis=none) header.from=strlen.de;\n spf=pass smtp.mailfrom=Chamillionaire.breakpoint.cc;\n arc=none smtp.client-ip=91.216.245.30","From":"Florian Westphal ","To":"","Cc":"Paolo Abeni ,\n\t\"David S. Miller\" ,\n\tEric Dumazet ,\n\tJakub Kicinski ,\n\t,\n\tpablo@netfilter.org","Subject":"[PATCH net 02/14] selftests: netfilter: nft_concat_range.sh: add\n check for flush+reload bug","Date":"Wed, 25 Mar 2026 14:10:56 +0100","Message-ID":"<20260325131108.23045-3-fw@strlen.de>","X-Mailer":"git-send-email 2.52.0","In-Reply-To":"<20260325131108.23045-1-fw@strlen.de>","References":"<20260325131108.23045-1-fw@strlen.de>","Precedence":"bulk","X-Mailing-List":"netfilter-devel@vger.kernel.org","List-Id":"","List-Subscribe":"","List-Unsubscribe":"","MIME-Version":"1.0","Content-Transfer-Encoding":"8bit"},"content":"This test will fail without\nthe preceding commit (\"netfilter: nft_set_pipapo_avx2: fix match retart if found element is expired\"):\n\n reject overlapping range on add 0s [ OK ]\n reload with flush /dev/stdin:59:32-52: Error: Could not process rule: File exists\nadd element inet filter test { 10.0.0.29 . 10.0.2.29 }\n\nReviewed-by: Stefano Brivio \nSigned-off-by: Florian Westphal \n---\n .../net/netfilter/nft_concat_range.sh | 70 ++++++++++++++++++-\n 1 file changed, 69 insertions(+), 1 deletion(-)","diff":"diff --git a/tools/testing/selftests/net/netfilter/nft_concat_range.sh b/tools/testing/selftests/net/netfilter/nft_concat_range.sh\nindex 394166f224a4..ffdc6ccc6511 100755\n--- a/tools/testing/selftests/net/netfilter/nft_concat_range.sh\n+++ b/tools/testing/selftests/net/netfilter/nft_concat_range.sh\n@@ -29,7 +29,8 @@ TYPES=\"net_port port_net net6_port port_proto net6_port_mac net6_port_mac_proto\n net6_port_net6_port net_port_mac_proto_net\"\n \n # Reported bugs, also described by TYPE_ variables below\n-BUGS=\"flush_remove_add reload net_port_proto_match avx2_mismatch doublecreate insert_overlap\"\n+BUGS=\"flush_remove_add reload net_port_proto_match avx2_mismatch doublecreate\n+ insert_overlap load_flush_load4 load_flush_load8\"\n \n # List of possible paths to pktgen script from kernel tree for performance tests\n PKTGEN_SCRIPT_PATHS=\"\n@@ -432,6 +433,30 @@ race_repeat\t0\n perf_duration\t0\n \"\n \n+TYPE_load_flush_load4=\"\n+display\t\treload with flush, 4bit groups\n+type_spec\tipv4_addr . ipv4_addr\n+chain_spec\tip saddr . ip daddr\n+dst\t\taddr4\n+proto\t\ticmp\n+\n+race_repeat\t0\n+\n+perf_duration\t0\n+\"\n+\n+TYPE_load_flush_load8=\"\n+display\t\treload with flush, 8bit groups\n+type_spec\tipv4_addr . ipv4_addr\n+chain_spec\tip saddr . ip daddr\n+dst\t\taddr4\n+proto\t\ticmp\n+\n+race_repeat\t0\n+\n+perf_duration\t0\n+\"\n+\n # Set template for all tests, types and rules are filled in depending on test\n set_template='\n flush ruleset\n@@ -1997,6 +2022,49 @@ test_bug_insert_overlap()\n \treturn 0\n }\n \n+test_bug_load_flush_load4()\n+{\n+\tlocal i\n+\n+\tsetup veth send_\"${proto}\" set || return ${ksft_skip}\n+\n+\tfor i in $(seq 0 255); do\n+\t\tlocal addelem=\"add element inet filter test\"\n+\t\tlocal j\n+\n+\t\tfor j in $(seq 0 20); do\n+\t\t\techo \"$addelem { 10.$j.0.$i . 10.$j.1.$i }\"\n+\t\t\techo \"$addelem { 10.$j.0.$i . 10.$j.2.$i }\"\n+\t\tdone\n+\tdone > \"$tmp\"\n+\n+\tnft -f \"$tmp\" || return 1\n+\n+\t( echo \"flush set inet filter test\";cat \"$tmp\") | nft -f -\n+\t[ $? -eq 0 ] || return 1\n+\n+\treturn 0\n+}\n+\n+test_bug_load_flush_load8()\n+{\n+\tlocal i\n+\n+\tsetup veth send_\"${proto}\" set || return ${ksft_skip}\n+\n+\tfor i in $(seq 1 100); do\n+\t\techo \"add element inet filter test { 10.0.0.$i . 10.0.1.$i }\"\n+\t\techo \"add element inet filter test { 10.0.0.$i . 10.0.2.$i }\"\n+\tdone > \"$tmp\"\n+\n+\tnft -f \"$tmp\" || return 1\n+\n+\t( echo \"flush set inet filter test\";cat \"$tmp\") | nft -f -\n+\t[ $? -eq 0 ] || return 1\n+\n+\treturn 0\n+}\n+\n test_reported_issues() {\n \teval test_bug_\"${subtest}\"\n }\n","prefixes":["net","02/14"]}