[Bug 2133829] [NEW] iptables-netflow-dkms FTBS in Noble with the linux-6.17-hwe kernel
Launchpad Bug Tracker
2133829 at bugs.launchpad.net
Wed Dec 3 22:54:24 UTC 2025
You have been subscribed to a public bug by John Cabaj (john-cabaj):
[ Impact ]
DKMS make.log for ipt-netflow-2.6 for kernel 6.17.0-7-generic (x86_64)
Wed Dec 3 22:38:35 UTC 2025
./gen_compat_def > compat_def.h
Test symbol xt_family linux/netfilter_ipv4/ip_tables.h declared
Test struct timeval linux/ktime.h undeclared
Test struct proc_ops linux/proc_fs.h declared
Test symbol synchronize_sched linux/rcupdate.h undeclared
Test symbol nf_bridge_info_get linux/netfilter_bridge.h declared
Test struct vlan_dev_priv linux/if_vlan.h declared
Test member nf_ct_event_notifier.ct_event net/netfilter/nf_conntrack_ecache.h declared
Test file exists /lib/modules/6.17.0-7-generic/build/include/asm-generic/unaligned.h
Test file exists /lib/modules/6.17.0-7-generic/build/include/linux/unaligned/generic.h
Test file exists /lib/modules/6.17.0-7-generic/build/include/linux/unaligned.h
Test symbol put_unaligned_be24 linux/unaligned.h declared
Compiling 2.6 for kernel 6.17.0-7-generic
make -C /lib/modules/6.17.0-7-generic/build M=/var/lib/dkms/ipt-netflow/2.6/build modules
make[1]: warning: jobserver unavailable: using -j1. Add '+' to parent make rule.
make[1]: Entering directory '/usr/src/linux-headers-6.17.0-7-generic'
make[2]: Entering directory '/var/lib/dkms/ipt-netflow/2.6/build'
warning: the compiler differs from the one used to build the kernel
The kernel was built by: x86_64-linux-gnu-gcc-13 (Ubuntu 13.3.0-6ubuntu2~24.04) 13.3.0
You are using: gcc-13 (Ubuntu 13.3.0-6ubuntu2~24.04) 13.3.0
CC [M] ipt_NETFLOW.o
In file included from ipt_NETFLOW.c:81:
compat.h:227:15: warning: no previous prototype for ‘timeval_to_jiffies’ [-Wmissing-prototypes]
227 | unsigned long timeval_to_jiffies(const struct timeval *tv)
| ^~~~~~~~~~~~~~~~~~
compat.h:392:20: warning: no previous prototype for ‘compat_hex_to_bin’ [-Wmissing-prototypes]
392 | #define hex_to_bin compat_hex_to_bin
| ^~~~~~~~~~~~~~~~~
compat.h:394:5: note: in expansion of macro ‘hex_to_bin’
394 | int hex_to_bin(char ch)
| ^~~~~~~~~~
compat.h:724:20: warning: no previous prototype for ‘strtoul’ [-Wmissing-prototypes]
724 | unsigned long long strtoul(const char *cp, char **endp, unsigned int base)
| ^~~~~~~
ipt_NETFLOW.c:100:4: warning: #warning "Requested physdev is not compiled." [-Wcpp]
100 | # warning "Requested physdev is not compiled."
| ^~~~~~~
ipt_NETFLOW.c: In function ‘nf_seq_show’:
ipt_NETFLOW.c:766:60: warning: format ‘%lu’ expects argument of type ‘long unsigned int’, but argument 3 has type ‘s64’ {aka ‘long long int’} [-Wformat=]
766 | seq_printf(seq, " Flows selected %lu, discarded %lu.",
| ~~^
| |
| long unsigned int
| %llu
767 | atomic64_read(&flows_selected),
| ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
| |
| s64 {aka long long int}
ipt_NETFLOW.c:766:75: warning: format ‘%lu’ expects argument of type ‘long unsigned int’, but argument 4 has type ‘s64’ {aka ‘long long int’} [-Wformat=]
766 | seq_printf(seq, " Flows selected %lu, discarded %lu.",
| ~~^
| |
| long unsigned int
| %llu
767 | atomic64_read(&flows_selected),
768 | atomic64_read(&flows_observed) - atomic64_read(&flows_selected));
| ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
| |
| s64 {aka long long int}
ipt_NETFLOW.c:770:60: warning: format ‘%lu’ expects argument of type ‘long unsigned int’, but argument 3 has type ‘s64’ {aka ‘long long int’} [-Wformat=]
770 | seq_printf(seq, " Flows selected %lu.", atomic64_read(&flows_selected));
| ~~^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
| | |
| | s64 {aka long long int}
| long unsigned int
| %llu
ipt_NETFLOW.c: In function ‘ipt_netflow_init’:
ipt_NETFLOW.c:5820:9: error: implicit declaration of function ‘del_timer_sync’; did you mean ‘dev_mc_sync’? [-Werror=implicit-function-declaration]
5820 | del_timer_sync(&rate_timer);
| ^~~~~~~~~~~~~~
| dev_mc_sync
cc1: some warnings being treated as errors
make[4]: *** [/usr/src/linux-headers-6.17.0-7-generic/scripts/Makefile.build:287: ipt_NETFLOW.o] Error 1
make[3]: *** [/usr/src/linux-headers-6.17.0-7-generic/Makefile:2016: .] Error 2
make[2]: *** [/usr/src/linux-headers-6.17.0-7-generic/Makefile:248: __sub-make] Error 2
make[2]: Leaving directory '/var/lib/dkms/ipt-netflow/2.6/build'
make[1]: *** [Makefile:248: __sub-make] Error 2
make[1]: Leaving directory '/usr/src/linux-headers-6.17.0-7-generic'
make: *** [Makefile:27: ipt_NETFLOW.ko] Error 2
[ Test case ]
Install the latest linux-6.17 kernel on Noble:
$ sudo add-apt-repository ppa:canonical-kernel-team/ppa3
$ sudo apt install linux-generic-hwe-24.04-edge
Install iptables-netflow-dkms:
$ sudo apt install iptables-netflow-dkms
Module built and installed successfully.
Load the module:
$ sudo modprobe ipt_NETFLOW
Module loaded successfully.
The same procedure can be repeated on linux-6.8 to test for possible
regressions.
[ Fix ]
Apply patch from iptables-netflow-dkms Questing release enabling 6.17
* debian/patches/rename-to-timer_delete_sync-in-Linux-6.15.patch
Also changing build dependency pkg-config => pkgconf
[ Regression potential ]
We may experience regressions in systems that are using the iptables-
netflow drivers, especially with kernels >= 6.8 kernel.
** Affects: iptables-netflow (Ubuntu)
Importance: Undecided
Status: New
** Affects: iptables-netflow (Ubuntu Noble)
Importance: Undecided
Status: New
--
iptables-netflow-dkms FTBS in Noble with the linux-6.17-hwe kernel
https://bugs.launchpad.net/bugs/2133829
You received this bug notification because you are a member of Ubuntu Sponsors, which is subscribed to the bug report.
More information about the Ubuntu-sponsors
mailing list