[Bug 1464] Trying to populate a set raises a netlink error "Could not process rule: No space left on device"

[bugzilla-daemon at netfilter.org]

https://bugzilla.netfilter.org/show_bug.cgi?id=1464

--- Comment #9 from Pablo Neira Ayuso <pablo at netfilter.org> ---
(In reply to kfm from comment #6)
> (In reply to Pablo Neira Ayuso from comment #5)
> > Is this easily reproducible in your testbed? I cannot reproduce it here yet.
> > I can see a fork() call in your nft-enoent binary. Could you attach the
> > strace -f output to track child process?
> 
> Yes. Every time. I can reproduce it simply by applying the attached command
> stream directly with nft(8) so I'll attach a trace of that.

I'm testing with 5.10.0-rc4+

so you there you do:

#1 Add this table

 table ip raw {
    set bogons {
      type ipv4_addr
      flags interval,timeout
      timeout 4h5m
    }
  }

#2 then:

nft -f bug-1464-nft-input-stream.txt

#3 run again:

nft -f bug-1464-nft-input-stream.txt

and you hit the bug?

Maybe I'm overlooking something on the steps to reproduce this.

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20201202/0c4c3d8c/attachment-0001.html>