Re: [REGRESSION] 6.19.4 stable netfilter / nftables [resolved]

[Genes Lists <lists@sapience.com>]

[-- Attachment #1: Type: text/plain, Size: 1729 bytes --]

On Fri, 2026-02-27 at 05:17 -0800, Greg KH wrote:
> On Fri, Feb 27, 2026 at 08:12:59AM -0500, Genes Lists wrote:
> > On Fri, 2026-02-27 at 07:23 -0500, Genes Lists wrote:
> > > On Fri, 2026-02-27 at 09:00 +0100, Thorsten Leemhuis wrote:
> > > > Lo!
> > > > 
> > > 
> > > Repeating the nft error message here for simplicity:
> > > 
> > >  Linux version 7.0.0-rc1-custom-1-00124-g3f4a08e64442 ...
> > >   ...
> > >   In file included from /etc/nftables.conf:134:2-44:
> > >   ./etc/nftables.d/set_filter.conf:1746:7-21: Error:
> > >   Could not process rule: File exists
> > >                  xx.xxx.xxx.x/23,
> > >                  ^^^^^^^^^^^^^^^
> > > 
> > 
> > Resolved by updating userspace.
> > 
> > I can reproduce this error on non-production machine and found this
> > error is resolved by re-bulding updated nftables, libmnl and
> > libnftnl:
> > 
> > With these versions nft rules now load without error:
> > 
> >  - nftables commit de904e22faa2e450d0d4802e1d9bc22013044f93
> >  - libmnl   commit 54dea548d796653534645c6e3c8577eaf7d77411
> >  - libnftnl commit 5c5a8385dc974ea7887119963022ae988e2a16cc
> > 
> > All were compiled on machine running 6.19.4.
> 
> Odd, that shouldn't be an issue, as why would the kernel version you
> build this on matter?
> 
> What about trying commit f175b46d9134 ("netfilter: nf_tables: add
> .abort_skip_removal flag for set types")?
> 
> thanks,
> 
> greg k-h

- all were rebuilt from git head 
  Have not had time to explore what specific change(s)
  triggered the issue yet.

- commit f175b46d9134
  I can reproduce on non-production machine - will check this and
report back.

gene


[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 228 bytes --]