Control: tags -1 + moreinfo Hi,
On Tue, Aug 01, 2023 at 07:22:17PM +1000, AP wrote: > Package: linux-image-6.1.0-10-amd64 > Severity: important > Tags: patch > > Dear Maintainer, > > Current kernel failed to load modules for MASQUERADE nat rules giving the > following > in dmesg: > > [37404.063872] BPF: [99720] ENUM STROY > [37404.064350] BPF: size=4 vlen=14 > [37404.064699] BPF: > [37404.065000] BPF: Invalid name > [37404.065287] BPF: > [37404.065463] failed to validate module [nf_conntrack] BTF: -22 > [37404.067137] missing module BTF, cannot register kfuncs > > The following upstream patch fixes the issue: > > https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=3de4d22cc9ac7c9f38e10edcf54f9a8891a9c2aa > > And it has been included in upstream stable 6.1 kernel releases since 6.1.39: > > https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/log/?h=linux-6.1.y&ofs=400 > > Please include in Bookworm as its currently preventing netavark from using > iptables > to load the MASQUERADE module and, thus, preventing me from running > containers. > > Thanks. :) > > PS: This, I think, is covered in bug 1003965 but my attempt to email into > that bug appears > to have failed. If it ever succeeds apologies for the dupe report. :( is the assumption that you updated from 6.1.37-1 or 6.1.38-1 to 6.1.38-2 (or any of the combinations which did not bump ABI) but did not reboot before loading the module correct? The particular bug is something which was introduced in 5.18-rc1, and fixed 6.1.39 and 6.4.4 following the fixing in 6.5-rc1. But if the above assumption is correct then you just missed the reboot after the kernel update. Regards, Salvatore