<html>
    <head>
      <base href="https://bugzilla.netfilter.org/" />
    </head>
    <body><table border="1" cellspacing="0" cellpadding="8">
        <tr>
          <th>Bug ID</th>
          <td><a class="bz_bug_link 
          bz_status_NEW "
   title="NEW - nf_tables_check_loops error on adding element to vmap"
   href="https://bugzilla.netfilter.org/show_bug.cgi?id=1120">1120</a>
          </td>
        </tr>

        <tr>
          <th>Summary</th>
          <td>nf_tables_check_loops error on adding element to vmap
          </td>
        </tr>

        <tr>
          <th>Product</th>
          <td>nftables
          </td>
        </tr>

        <tr>
          <th>Version</th>
          <td>unspecified
          </td>
        </tr>

        <tr>
          <th>Hardware</th>
          <td>x86_64
          </td>
        </tr>

        <tr>
          <th>OS</th>
          <td>Ubuntu
          </td>
        </tr>

        <tr>
          <th>Status</th>
          <td>NEW
          </td>
        </tr>

        <tr>
          <th>Severity</th>
          <td>trivial
          </td>
        </tr>

        <tr>
          <th>Priority</th>
          <td>P5
          </td>
        </tr>

        <tr>
          <th>Component</th>
          <td>kernel
          </td>
        </tr>

        <tr>
          <th>Assignee</th>
          <td>pablo@netfilter.org
          </td>
        </tr>

        <tr>
          <th>Reporter</th>
          <td>c.marquis@viapass.com
          </td>
        </tr></table>
      <p>
        <div>
        <pre>Created <span class=""><a href="attachment.cgi?id=493" name="attach_493" title="Kernel Logs">attachment 493</a> <a href="attachment.cgi?id=493&action=edit" title="Kernel Logs">[details]</a></span>
Kernel Logs

Dear NetFilter team,

I'm facing an strange issue, and I had no idea where to put the information so
I came here



I've a simple configuration, like this :


table ip filter {
        map ok {
                type mark : verdict
                elements = { 0x00000001 : jump group_1, 0x00000002 : jump
group_2}
        }

        chain group_1 {
                limit rate 100 kbytes/second counter accept
                counter drop
        }

        chain group_2 {
                limit rate 200 kbytes/second counter accept
                counter drop
        }

        chain group_3 {
                limit rate 300 kbytes/second counter accept
                counter drop
        }

        chain forward {
                type filter hook forward priority 0; policy accept;
                counter
                ct mark vmap @ok
        }
}

(loaded by nft -f) 


As you can see the map "ok" is already and perfectly populated with a few
values, working just fine

now if I add a new element after that, with:
-> nft add element filter ok {3: jump group_3}

Then the kernel crash occurs, I'm attaching the logs here
Any information on this would be greatly appreciated

Thanks in advance, and really nice job around this new nftables flexibility,

King Regards,
Cedric</pre>
        </div>
      </p>
      <hr>
      <span>You are receiving this mail because:</span>
      
      <ul>
          <li>You are watching all bug changes.</li>
      </ul>
    </body>
</html>