git: 798605131350 - main - pf tests: make mbuf:inet6_in_mbuf_len more robust

The branch main has been updated by kp:

URL: https://cgit.FreeBSD.org/src/commit/?id=7986051313507636e7bd971e9db03dce8d723e32

commit 7986051313507636e7bd971e9db03dce8d723e32
Author:     Kristof Provost <kp@FreeBSD.org>
AuthorDate: 2025-07-18 09:54:25 +0000
Commit:     Kristof Provost <kp@FreeBSD.org>
CommitDate: 2025-07-18 19:12:18 +0000

    pf tests: make mbuf:inet6_in_mbuf_len more robust
    
    The mbuf:inet6_in_mbuf_len test sometimes fails because it encountered
    unexpected extra packets. These turn out to be MLD packets, so block these
    packets on the host with pf so they don't disturb what we're actually trying
    to test.
    
    Reviewed by:    igoro
    Sponsored by:   Rubicon Communications, LLC ("Netgate")
    Differential Revision:  https://reviews.freebsd.org/D51408
---
 tests/sys/netpfil/pf/mbuf.sh | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/tests/sys/netpfil/pf/mbuf.sh b/tests/sys/netpfil/pf/mbuf.sh
index d845f793a969..e3f138bb73b9 100644
--- a/tests/sys/netpfil/pf/mbuf.sh
+++ b/tests/sys/netpfil/pf/mbuf.sh
@@ -105,6 +105,12 @@ inet6_in_mbuf_len_body()
 	epair=$(vnet_mkepair)
 	ifconfig ${epair}a inet6 2001:db8::1/64 up no_dad
 
+	# Ensure we don't unintentionally send MLD packets to alcatraz
+	pfctl -e
+	echo "block
+	pass out inet6 proto icmp6 icmp6-type { neighbrsol, neighbradv, echoreq, echorep }
+	" | pfctl -g -f -
+
 	# Set up a simple jail with one interface
 	vnet_mkjail alcatraz ${epair}b
 	jexec alcatraz ifconfig ${epair}b inet6 2001:db8::2/64 up no_dad