Subject: Re: [PATCH nf] netfilter: nf_conntrack: Add allow_clash to generic protocol handler

From: Florian Westphal <[email-masked]>
Date: Sat, 20 Dec 2025 21:05:59 +0100

Yuto Hamaguchi <[email-masked]> wrote:
> The upstream commit, 71d8c47fc653711c41bc3282e5b0e605b3727956
>  ("netfilter: conntrack: introduce clash resolution on insertion race"),
> sets allow_clash=true in the UDP/UDPLITE protocol handler
> but does not set it in the generic protocol handler.
> 
> As a result, packets composed of connectionless protocols at each layer,
> such as UDP over IP-in-IP, still drop packets due to conflicts during conntrack insertion.
> 
> To resolve this, this patch sets allow_clash in the nf_conntrack_l4proto_generic.

Makes sense to me, thanks.
I'll apply this for the next batch.