bpfilter: write fail messages with 5.15.x and centos 7.9.2009 (fwd)

bpfilter: write fail messages with 5.15.x and centos 7.9.2009 (fwd)

[Holger Kiehl]

Hello,

hope I am now sending it to the correct list.

Please, what else can I do to solve this?

Thanks,
Holger

---------- Forwarded message ----------
Date: Wed, 29 Dec 2021 13:27:58 +0000 (GMT)
From: Holger Kiehl <Holger.Kiehl@dwd.de>
To: linux-kernel <linux-kernel@vger.kernel.org>
Cc: Christoph Hellwig <hch@lst.de>
Subject: bpfilter: write fail messages with 5.15.x and centos 7.9.2009

Hello,

I just upgraded the kernel from 5.10.x to 5.15.12 on an old Centos
7.9.2009 server. The kernel is build on a new fedora 35 system
via 'make binrpm-pkg'. With this I see the following errors:

    [  232.140766] bpfilter: Loaded bpfilter_umh pid 6327
    [  232.152144] bpfilter: write fail -32
    [  232.187175] bpfilter: Loaded bpfilter_umh pid 6330
    [  232.198540] bpfilter: write fail -32
    [  232.234604] bpfilter: Loaded bpfilter_umh pid 6332
    [  232.245916] bpfilter: write fail -32
    [  232.281883] bpfilter: Loaded bpfilter_umh pid 6337
    [  232.293222] bpfilter: write fail -32
    [  232.335798] bpfilter: Loaded bpfilter_umh pid 6380
    [  232.347157] bpfilter: write fail -32
    [  244.411821] bpfilter: Loaded bpfilter_umh pid 6712
    [  244.423216] bpfilter: write fail -32

These appear as soon as something is done via iptables (setting
something or just viewing). Is this something I need to worry
about? Under 5.10.81 I did not see these messages.

In Jul 2020 I see a similar report 'bpfilter logging write errors in
dmesg', but could not find a solution.

Any hint what I can do to fix this?

Thanks,
Holger

Re: bpfilter: write fail messages with 5.15.x and centos 7.9.2009 (fwd)

[Alexei Starovoitov]

On Fri, Dec 31, 2021 at 1:23 AM Holger Kiehl <Holger.Kiehl@dwd.de> wrote:
>
> Hello,
>
> hope I am now sending it to the correct list.
>
> Please, what else can I do to solve this?

Turn that kconfig off. It shouldn't be used in production kernels.

Re: bpfilter: write fail messages with 5.15.x and centos 7.9.2009 (fwd)

[Holger Kiehl]

On Fri, 31 Dec 2021, Alexei Starovoitov wrote:

> On Fri, Dec 31, 2021 at 1:23 AM Holger Kiehl <Holger.Kiehl@dwd.de> wrote:
>>
>> Hello,
>>
>> hope I am now sending it to the correct list.
>>
>> Please, what else can I do to solve this?
>
> Turn that kconfig off. It shouldn't be used in production kernels.
>
Correct. This is what I did when I noticed it was not used at all.

Many thanks!

Holger