Subject: Re: [PATCH 1/3] netfilter: nat: update hash bucket if nat changed after ct confirmed

From: Florian Westphal <[email-masked]>
Date: Sun, 31 Jul 2016 00:28:02 +0200

[email-masked] <[email-masked]> wrote:
> From: Xiaoping Fan <[email-masked]>
> 
> In some situations, NAT information is created after connection is
> confirmed.

That sounds like a bug.

How can this happen?

nf_nat_setup_info() is only safe for non-confirmed conntracks
(not in hash table).