Hi, The following patchset contains Netfilter enhancements for *net-next*: First patch gets rid of refcounting for dying list dumping, use a cookie value instead of keeping the object around. Remaining patches extend nftables pipapo (concatenated ranges) set type. Make the AVX2 optimized version available from the control plane as well, then use it during insert. This gives a nice speedup for large sets. All from myself. On PREEMPT_RT, we can't rely on local_bh_disable to protect the access to the percpu scratch maps. Use nested-BH locking for this, >From Sebastian Siewior. Please, pull these changes from: The following changes since commit 5c69e0b395c1ffb37fd6fbdbd428353fc0894005: Merge branch 'stmmac-stop-silently-dropping-bad-checksum-packets' (2025-08-19 18:33:09 -0700) are available in the Git repository at: https://git.kernel.org/pub/scm/linux/kernel/git/netfilter/nf-next.git tags/nf-next-25-08-20 for you to fetch changes up to 456010c8b99e65231160d4c706122ac5502fbcff: netfilter: nft_set_pipapo: Use nested-BH locking for nft_pipapo_scratch (2025-08-20 13:52:37 +0200) ---------------------------------------------------------------- netfilter pull request nf-next-25-08-20 ---------------------------------------------------------------- Florian Westphal (3): netfilter: ctnetlink: remove refcounting in dying list dumping netfilter: nft_set_pipapo_avx2: split lookup function in two parts netfilter: nft_set_pipapo: use avx2 algorithm for insertions too Sebastian Andrzej Siewior (3): netfilter: nft_set_pipapo_avx2: Drop the comment regarding protection netfilter: nft_set_pipapo: Store real pointer, adjust later. netfilter: nft_set_pipapo: Use nested-BH locking for nft_pipapo_scratch net/netfilter/nf_conntrack_netlink.c | 39 ++------ net/netfilter/nft_set_pipapo.c | 90 ++++++++++------- net/netfilter/nft_set_pipapo.h | 8 +- net/netfilter/nft_set_pipapo_avx2.c | 138 ++++++++++++++++----------- net/netfilter/nft_set_pipapo_avx2.h | 4 + 5 files changed, 155 insertions(+), 124 deletions(-) -- 2.49.1
