Hi Greg, Sasha,
Could you cherry-pick the follow patch into 6.3.x? Thanks.
commit f057b63bc11d86a98176de31b437e46789f44d8f Author: Florian Westphal fw@strlen.de Date: Wed May 3 12:00:18 2023 +0200
netfilter: nf_tables: fix ct untracked match breakage
"ct untracked" no longer works properly due to erroneous NFT_BREAK. We have to check ctinfo enum first.
Fixes: d9e789147605 ("netfilter: nf_tables: avoid retpoline overhead for some ct expression calls") Reported-by: Rvfg i@rvf6.com Link: https://marc.info/?l=netfilter&m=168294996212038&w=2 Signed-off-by: Florian Westphal fw@strlen.de Signed-off-by: Pablo Neira Ayuso pablo@netfilter.org