Syzbot CI

Subject	netfilter: harden conntrack vs ingress pipeline rewrites
Author	fw@strlen.de
Date	2026-09-17 13:09:17 +0000 UTC
Version
Cc	fw@strlen.de kylebot@openai.com netfilter-devel@vger.kernel.org

Patches (6)

Expand

Name	Content [All]
[PATCH v2 nf 1/6] netfilter: nf_conntrack: validate skb->_nfct and packet headers	[Body]
[PATCH v2 nf 2/6] netfilter: nf_conntrack: refactor helper call logic in nf_confirm()	[Body]
[PATCH v2 nf 3/6] netfilter: nf_conntrack: verify L4 protocol before calling helper	[Body]
[PATCH v2 nf 4/6] netfilter: conntrack: replace open-coded helper invocation	[Body]
[PATCH v2 nf 5/6] netfilter: nf_conntrack: harden helper invocation with tuple revalidation	[Body]
[PATCH v2 nf 6/6] netfilter: nft_ct: validate timeout object protocol	[Body]

Series Summary

Passed

✓ All tests passed. No findings.

Sessions

Session 2026-09-17

Passed

ID (for dev)	3f51ff1d-59c8-4a5d-a325-4e5b406fcc47
Status	finished
Triaged	OK [Log] [Trajectory]
Execution Log	[Link]

Test	Base	Patched	Verdict
[KASAN] Build Base	ceac0de741bfb47ca255eee075257b3bb31f0651 [Config]		passed [Log]
[KASAN] Boot test: Base	ceac0de741bfb47ca255eee075257b3bb31f0651 [Config]		passed [Log]
[KASAN] Build Patched		ceac0de741bfb47ca255eee075257b3bb31f0651 [Config] [patched]	passed [Log]
[KASAN] Boot test: Patched		ceac0de741bfb47ca255eee075257b3bb31f0651 [Config] [patched]	passed [Log]
[KASAN] Fuzz	ceac0de741bfb47ca255eee075257b3bb31f0651 [Config]	ceac0de741bfb47ca255eee075257b3bb31f0651 [Config] [patched]	passed [Log] [Artifacts]