Re: [REGRESSION] 6.19.4 stable netfilter / nftables [resolved]

From: Genes Lists

Date: Fri Feb 27 2026 - 08:40:26 EST


On Fri, 2026-02-27 at 05:17 -0800, Greg KH wrote:
> On Fri, Feb 27, 2026 at 08:12:59AM -0500, Genes Lists wrote:
> > On Fri, 2026-02-27 at 07:23 -0500, Genes Lists wrote:
> > > On Fri, 2026-02-27 at 09:00 +0100, Thorsten Leemhuis wrote:
> > > > Lo!
> > > >
> > >
> > > Repeating the nft error message here for simplicity:
> > >
> > >  Linux version 7.0.0-rc1-custom-1-00124-g3f4a08e64442 ...
> > >   ...
> > >   In file included from /etc/nftables.conf:134:2-44:
> > >   ./etc/nftables.d/set_filter.conf:1746:7-21: Error:
> > >   Could not process rule: File exists
> > >                  xx.xxx.xxx.x/23,
> > >                  ^^^^^^^^^^^^^^^
> > >
> >
> > Resolved by updating userspace.
> >
> > I can reproduce this error on non-production machine and found this
> > error is resolved by re-bulding updated nftables, libmnl and
> > libnftnl:
> >
> > With these versions nft rules now load without error:
> >
> >  - nftables commit de904e22faa2e450d0d4802e1d9bc22013044f93
> >  - libmnl   commit 54dea548d796653534645c6e3c8577eaf7d77411
> >  - libnftnl commit 5c5a8385dc974ea7887119963022ae988e2a16cc
> >
> > All were compiled on machine running 6.19.4.
>
> Odd, that shouldn't be an issue, as why would the kernel version you
> build this on matter?
>
> What about trying commit f175b46d9134 ("netfilter: nf_tables: add
> .abort_skip_removal flag for set types")?
>
> thanks,
>
> greg k-h

- all were rebuilt from git head 
  Have not had time to explore what specific change(s)
triggered the issue yet.

- commit f175b46d9134
  I can reproduce on non-production machine - will check this and
report back.

gene

Attachment: signature.asc
Description: This is a digitally signed message part