<html>
<head>
<base href="https://bugzilla.netfilter.org/" />
</head>
<body>
<p>
<div>
<b><a class="bz_bug_link
bz_status_ASSIGNED "
title="ASSIGNED - Trying to populate a set raises a netlink error "Could not process rule: No space left on device""
href="https://bugzilla.netfilter.org/show_bug.cgi?id=1464#c16">Comment # 16</a>
on <a class="bz_bug_link
bz_status_ASSIGNED "
title="ASSIGNED - Trying to populate a set raises a netlink error "Could not process rule: No space left on device""
href="https://bugzilla.netfilter.org/show_bug.cgi?id=1464">bug 1464</a>
from <span class="vcard"><a class="email" href="mailto:pablo@netfilter.org" title="Pablo Neira Ayuso <pablo@netfilter.org>"> <span class="fn">Pablo Neira Ayuso</span></a>
</span></b>
<pre>(In reply to kfm from <a href="show_bug.cgi?id=1464#c14">comment #14</a>)
<span class="quote">> Created <span class=""><a href="attachment.cgi?id=620" name="attach_620" title="bug-1464-strace-r2.txt">attachment 620</a> <a href="attachment.cgi?id=620&action=edit" title="bug-1464-strace-r2.txt">[details]</a></span>
> bug-1464-strace-r2.txt
>
> A fresh trace, having applied <span class=""><a href="attachment.cgi?id=619" name="attach_619" title="add NFT_MNL_ACK_MAXSIZE">attachment #619</a> <a href="attachment.cgi?id=619&action=edit" title="add NFT_MNL_ACK_MAXSIZE">[details]</a></span> (the
> NFT_MNL_ACK_MAXSIZE patch). The set was not yet cleared, so most - if not
> all - elements continue to overlap with the payload.</span >
So after the patch, I can see it sends the netlink message:
sendmsg(3, {msg_name={sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000},
msg_namelen=12, msg_iov=[{iov_base=[{{len=20, type=NFNL_MSG_BATCH_BEGIN,
flags=NLM_F_REQUEST, seq=0, pid=0}, {nfgen_family=AF_UNSPEC,
version=NFNETLINK_V0, res_id=htons(2560)}, {{len=40,
type=NFNL_SUBSYS_NFTABLES<<8|NFT_MSG_DELSETELEM, flags=NLM_F_REQUEST, seq=1,
pid=0}, {nfgen_family=AF_INET, version=NFNETLINK_V0, res_id=htons(0),
[{{nla_len=11, nla_type=0x2}, "\x62\x6f\x67\x6f\x6e\x73\x00"}, {{nla_len=8,
nla_type=NFNETLINK_V1}, "\x72\x61\x77\x00"}]}, {{len=51440,
type=NFNL_SUBSYS_NFTABLES<<8|NFT_MSG_NEWSETELEM,
flags=NLM_F_REQUEST|NLM_F_CREATE, seq=2, pid=0}, {nfgen_family=AF_INET,
version=NFNETLINK_V0, res_id=htons(0), [{{nla_len=11, nla_type=0x2},
"\x62\x6f\x67\x6f\x6e\x73\x00"}, {{nla_len=8, nla_type=0x4},
"\x00\x00\x00\x1d"}, {{nla_len=8, nla_type=NFNETLINK_V1}, "\x72\x61\x77\x00"},
{{nla_len=51392, nla_type=NLA_F_NESTED|0x3},
"\x10\x00\x01\x80\x0c\x00\x01\x80\x08\x00\x01\x00\x00\x00\x00\x00\x18\x00\x02\x80\x08\x00\x03\x00\x00\x00\x00\x01\x0c\x00\x01\x80"...}]},
{{len=20, type=NFNL_MSG_BATCH_END, flags=NLM_F_REQUEST, seq=3, pid=0},
{nfgen_family=AF_UNSPEC, version=NFNETLINK_V0, res_id=htons(2560)}],
iov_len=51520}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 51520
I can see NFT_MSG_DELSETELEM (flush) coming before NFT_MSG_NEWSETELEM (add
elements) here above.
select(4, [3], NULL, NULL, {tv_sec=0, tv_usec=0}) = 0 (Timeout)
close(4) = 0
close(3) = 0
And kernel reports no error, nft does not print it either (strace does not show
any write() syscall)
I don't see any error in this trace at quick glance. Still issues on your side?</pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are watching all bug changes.</li>
</ul>
</body>
</html>