Bug 79601

Summary: nftable : bridge mac address filter segfault
Product: Networking Reporter: Alexandre DERUMIER (aderumier)
Component: Netfilter/IptablesAssignee: networking_netfilter-iptables (networking_netfilter-iptables)
Status: NEW ---    
Severity: normal CC: szg00000
Priority: P1    
Hardware: All   
OS: Linux   
Kernel Version: 3.15.3 Subsystem:
Regression: No Bisected commit-id:
Attachments: gdb trace

Description Alexandre DERUMIER 2014-07-07 16:16:02 UTC
kernel : 3.15.3
nftables : 0.3
libnft : 1.0.2


#nft add rule bridge filter forward @ll,48,48 00:15:e9:f0:10:f8 counter
Segmentation fault

kernel: [  931.733570] nft[8125]: segfault at 0 ip 000000000040c647 sp 00007fffe448d200 error 4 in nft[400000+44000]
Comment 1 Alexandre DERUMIER 2014-07-07 17:02:57 UTC

[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".

warning: no loadable sections found in added symbol-file system-supplied DSO at 0x7fffe2dfe000
Core was generated by `nft add rule bridge filter input @ll,48,48 00:15:e9:f0:10:f8 counter'.
Program terminated with signal 11, Segmentation fault.
#0  expr_evaluate_payload (expr=0x8d4750, ctx=0x7fffe2d3ef08) at src/evaluate.c:284
284			return expr_error(ctx->msgs, payload,
(gdb) bt full
#0  expr_evaluate_payload (expr=0x8d4750, ctx=0x7fffe2d3ef08) at src/evaluate.c:284
        payload = 0x8d45b0
        base = PROTO_BASE_LL_HDR
        nstmt = <optimized out>
        nexpr = <optimized out>
#1  expr_evaluate (ctx=ctx@entry=0x7fffe2d3ef08, expr=expr@entry=0x8d4750) at src/evaluate.c:1071
        __PRETTY_FUNCTION__ = "expr_evaluate"
#2  0x000000000040c5ef in expr_evaluate_relational (expr=0x8d47b8, ctx=0x7fffe2d3ef08) at src/evaluate.c:874
        rel = 0x8d46f0
        left = <optimized out>
        right = <optimized out>
#3  expr_evaluate (ctx=0x7fffe2d3ef08, expr=0x8d47b8) at src/evaluate.c:1093
        __PRETTY_FUNCTION__ = "expr_evaluate"
#4  0x000000000040d4c2 in stmt_evaluate_expr (stmt=<optimized out>, ctx=<optimized out>) at src/evaluate.c:1102
No locals.
#5  stmt_evaluate (ctx=ctx@entry=0x7fffe2d39540, stmt=stmt@entry=0x7fffe2d39748) at src/evaluate.c:1198
        __PRETTY_FUNCTION__ = "stmt_evaluate"
#6  0x000000000040d5d8 in rule_evaluate (ctx=0x7fffe2d39540, rule=0x8d4850) at src/evaluate.c:1283
        stmt = <optimized out>
        tstmt = 0x0
        erec = <optimized out>
#7  0x000000000040e107 in cmd_evaluate_add (cmd=<optimized out>, ctx=<optimized out>) at src/evaluate.c:1380
No locals.
#8  cmd_evaluate (ctx=ctx@entry=0x7fffe2d3ef08, cmd=<optimized out>) at src/evaluate.c:1424
        __PRETTY_FUNCTION__ = "cmd_evaluate"
#9  0x000000000041d766 in nft_parse (scanner=scanner@entry=0x8d4490, state=state@entry=0x7fffe2d3e920) at src/parser.y:591
        list = {next = 0x8d48f0, prev = 0x8d48f0}
        nft_char = -2
        nft_lval = {val = 9258544, string = 0x8d4630 "filter", list = 0x8d4630, cmd = 0x8d4630, handle = {family = 9258544, table = 0x0, chain = 0x0, set = 0x0, handle = 0, position = 0, set_id = 0, comment = 0x0}, table = 0x8d4630, 
          chain = 0x8d4630, rule = 0x8d4630, stmt = 0x8d4630, expr = 0x8d4630, set = 0x8d4630}
        nft_lloc = {indesc = 0x7fffe2d3e928, {{token_offset = 64, line_offset = 0, first_line = 1, last_line = 1, first_column = 65, last_column = 65}, {nle = 0x40}}}
        nft_nerrs = <optimized out>
        yystate = <optimized out>
        yyerrstatus = 0
        yyssa = {0, 1, 32, 161, 44, 223, 420, 475, 524, 567, 602, 0 <repeats 189 times>}
        yyss = 0x7fffe2d39540
        yyssp = <optimized out>
        yyvsa = {{val = 0, string = 0x0, list = 0x0, cmd = 0x0, handle = {family = 0, table = 0x0, chain = 0x0, set = 0x0, handle = 0, position = 0, set_id = 0, comment = 0x0}, table = 0x0, chain = 0x0, rule = 0x0, stmt = 0x0, 
            expr = 0x0, set = 0x0}, {val = 0, string = 0x0, list = 0x0, cmd = 0x0, handle = {family = 0, table = 0x0, chain = 0x0, set = 0x0, handle = 0, position = 0, set_id = 0, comment = 0x0}, table = 0x0, chain = 0x0, rule = 0x0, 
            stmt = 0x0, expr = 0x0, set = 0x0}, {val = 9259248, string = 0x8d48f0 "\200\224\323\342\377\177", list = 0x8d48f0, cmd = 0x8d48f0, handle = {family = 9259248, table = 0x0, chain = 0x0, set = 0x0, handle = 0, position = 0, 
              set_id = 0, comment = 0x0}, table = 0x8d48f0, chain = 0x8d48f0, rule = 0x8d48f0, stmt = 0x8d48f0, expr = 0x8d48f0, set = 0x8d48f0}, {val = 9258544, string = 0x8d4630 "filter", list = 0x8d4630, cmd = 0x8d4630, handle = {
              family = 9258544, table = 0x0, chain = 0x0, set = 0x0, handle = 0, position = 0, set_id = 0, comment = 0x0}, table = 0x8d4630, chain = 0x8d4630, rule = 0x8d4630, stmt = 0x8d4630, expr = 0x8d4630, set = 0x8d4630}, {val = 7, 
            string = 0x7 <Address 0x7 out of bounds>, list = 0x7, cmd = 0x7, handle = {family = 7, table = 0x8d4450 "filter", chain = 0x8d4590 "input", set = 0x0, handle = 0, position = 0, set_id = 0, comment = 0x0}, table = 0x7, 
            chain = 0x7, rule = 0x7, stmt = 0x7, expr = 0x7, set = 0x7}, {val = 9259088, string = 0x8d4850 "PH\215", list = 0x8d4850, cmd = 0x8d4850, handle = {family = 9259088, table = 0x0, chain = 0x0, set = 0x0, handle = 0, 
              position = 0, set_id = 0, comment = 0x0}, table = 0x8d4850, chain = 0x8d4850, rule = 0x8d4850, stmt = 0x8d4850, expr = 0x8d4850, set = 0x8d4850}, {val = 0, string = 0x0, list = 0x0, cmd = 0x0, handle = {family = 0, 
              table = 0x0, chain = 0x0, set = 0x0, handle = 0, position = 0, set_id = 0, comment = 0x0}, table = 0x0, chain = 0x0, rule = 0x0, stmt = 0x0, expr = 0x0, set = 0x0}, {val = 9258384, string = 0x8d4590 "input", 
            list = 0x8d4590, cmd = 0x8d4590, handle = {family = 9258384, table = 0x0, chain = 0x0, set = 0x0, handle = 0, position = 0, set_id = 0, comment = 0x0}, table = 0x8d4590, chain = 0x8d4590, rule = 0x8d4590, stmt = 0x8d4590, 
            expr = 0x8d4590, set = 0x8d4590}, {val = 48, string = 0x30 <Address 0x30 out of bounds>, list = 0x30, cmd = 0x30, handle = {family = 48, table = 0x0, chain = 0x0, set = 0x0, handle = 0, position = 0, set_id = 0, 
              comment = 0x0}, table = 0x30, chain = 0x30, rule = 0x30, stmt = 0x30, expr = 0x30, set = 0x30}, {val = 48, string = 0x30 <Address 0x30 out of bounds>, list = 0x30, cmd = 0x30, handle = {family = 48, table = 0x0, 
              chain = 0x0, set = 0x0, handle = 0, position = 0, set_id = 0, comment = 0x0}, table = 0x30, chain = 0x30, rule = 0x30, stmt = 0x30, expr = 0x30, set = 0x30}, {val = 48, string = 0x30 <Address 0x30 out of bounds>, 
            list = 0x30, cmd = 0x30, handle = {family = 48, table = 0x0, chain = 0x0, set = 0x0, handle = 0, position = 0, set_id = 0, comment = 0x0}, table = 0x30, chain = 0x30, rule = 0x30, stmt = 0x30, expr = 0x30, set = 0x30}, {
            val = 0, string = 0x0, list = 0x0, cmd = 0x0, handle = {family = 0, table = 0x0, chain = 0x0, set = 0x0, handle = 0, position = 0, set_id = 0, comment = 0x0}, table = 0x0, chain = 0x0, rule = 0x0, stmt = 0x0, expr = 0x0, 
            set = 0x0} <repeats 144 times>, {val = 0, string = 0x0, list = 0x0, cmd = 0x0, handle = {family = 0, table = 0x0, chain = 0x0, set = 0x0, handle = 0, position = 139765206460493, set_id = 0, 
              comment = 0x7f1d9e2e8448 "libc.so.6"}, table = 0x0, chain = 0x0, rule = 0x0, stmt = 0x0, expr = 0x0, set = 0x0}, {val = 0, string = 0x0, list = 0x0, cmd = 0x0, handle = {family = 0, 
              table = 0x7f1d9f7b3842 "\205\300t\312H\201\304\370\003", chain = 0x0, set = 0x0, handle = 0, position = 0, set_id = 0, comment = 0x0}, table = 0x0, chain = 0x0, rule = 0x0, stmt = 0x0, expr = 0x0, set = 0x0}, {val = 0, 
            string = 0x0, list = 0x0, cmd = 0x0, handle = {family = 0, table = 0x0, chain = 0x100000000 <Address 0x100000000 out of bounds>, set = 0x0, handle = 0, position = 0, set_id = 0, comment = 0x0}, table = 0x0, chain = 0x0, 
            rule = 0x0, stmt = 0x0, expr = 0x0, set = 0x0}, {val = 0, string = 0x0, list = 0x0, cmd = 0x0, handle = {family = 0, table = 0x0, chain = 0x0, set = 0x0, handle = 0, position = 0, set_id = 0, comment = 0x0}, table = 0x0, 
            chain = 0x0, rule = 0x0, stmt = 0x0, expr = 0x0, set = 0x0}, {val = 0, string = 0x0, list = 0x0, cmd = 0x0, handle = {family = 0, table = 0x0, chain = 0x0, set = 0x0, handle = 0, position = 139765206460493, set_id = 0, 
              comment = 0x7f1d9e4f6ffb "ld-linux-x86-64.so.2"}, table = 0x0, chain = 0x0, rule = 0x0, stmt = 0x0, expr = 0x0, set = 0x0}, {val = 0, string = 0x0, list = 0x0, cmd = 0x0, handle = {family = 0, 
              table = 0x7f1d9f7b3842 "\205\300t\312H\201\304\370\003", chain = 0x0, set = 0x0, handle = 0, position = 0, set_id = 0, comment = 0x0}, table = 0x0, chain = 0x0, rule = 0x0, stmt = 0x0, expr = 0x0, set = 0x0}, {val = 0, 
            string = 0x0, list = 0x0, cmd = 0x0, handle = {family = 0, table = 0x0, chain = 0x100000000 <Address 0x100000000 out of bounds>, set = 0x0, handle = 0, position = 0, set_id = 0, comment = 0x0}, table = 0x0, chain = 0x0, 
            rule = 0x0, stmt = 0x0, expr = 0x0, set = 0x0}, {val = 0, string = 0x0, list = 0x0, cmd = 0x0, handle = {family = 0, table = 0x0, chain = 0x0, set = 0x0, handle = 0, position = 0, set_id = 0, comment = 0x0}, table = 0x0, 
            chain = 0x0, rule = 0x0, stmt = 0x0, expr = 0x0, set = 0x0}, {val = 0, string = 0x0, list = 0x0, cmd = 0x0, handle = {family = 0, table = 0x0, chain = 0x0, set = 0x0, handle = 0, position = 0, set_id = 0, 
              comment = 0x7f1d9f7ba84d "\205\300u\347H\203\304\b\270\001"}, table = 0x0, chain = 0x0, rule = 0x0, stmt = 0x0, expr = 0x0, set = 0x0}, {val = 0, string = 0x0, list = 0x0, cmd = 0x0, handle = {family = 0, 
              table = 0x7f1d9e710419 "libc.so.6", chain = 0x0, set = 0x7f1d9f7b3842 "\205\300t\312H\201\304\370\003", handle = 0, position = 0, set_id = 0, comment = 0x0}, table = 0x0, chain = 0x0, rule = 0x0, stmt = 0x0, expr = 0x0, 
            set = 0x0}, {val = 0, string = 0x0, list = 0x0, cmd = 0x0, handle = {family = 0, table = 0x0, chain = 0x0, set = 0x0, handle = 4294967296, position = 0, set_id = 0, comment = 0x0}, table = 0x0, chain = 0x0, rule = 0x0, 
            stmt = 0x0, expr = 0x0, set = 0x0}, {val = 0, string = 0x0, list = 0x0, cmd = 0x0, handle = {family = 0, table = 0x0, chain = 0x0, set = 0x0, handle = 0, position = 0, set_id = 0, comment = 0x0}, table = 0x0, chain = 0x0, 
            rule = 0x0, stmt = 0x0, expr = 0x0, set = 0x0}, {val = 0, string = 0x0, list = 0x0, cmd = 0x0, handle = {family = 0, table = 0x0, chain = 0x0, set = 0x0, handle = 0, position = 139765206460493, set_id = 0, 
---Type <return> to continue, or q <return> to quit---
              comment = 0x7f1d9e91c54f "libc.so.6"}, table = 0x0, chain = 0x0, rule = 0x0, stmt = 0x0, expr = 0x0, set = 0x0}, {val = 0, string = 0x0, list = 0x0, cmd = 0x0, handle = {family = 0, 
              table = 0x7f1d9f7b3842 "\205\300t\312H\201\304\370\003", chain = 0x0, set = 0x0, handle = 0, position = 0, set_id = 0, comment = 0x0}, table = 0x0, chain = 0x0, rule = 0x0, stmt = 0x0, expr = 0x0, set = 0x0}, {val = 0, 
            string = 0x0, list = 0x0, cmd = 0x0, handle = {family = 0, table = 0x0, chain = 0x100000000 <Address 0x100000000 out of bounds>, set = 0x0, handle = 0, position = 139765206428290, set_id = 0, comment = 0x0}, table = 0x0, 
            chain = 0x0, rule = 0x0, stmt = 0x0, expr = 0x0, set = 0x0}, {val = 0, string = 0x0, list = 0x0, cmd = 0x0, handle = {family = 0, table = 0x0, chain = 0x0, 
              set = 0x7f1d9f7b25af "A\213V(H\213\215\360\376\377\377L\213\205\350\376\377\377L\213\225\340\376\377\377\366\302\002\017\204\\\b", handle = 0, position = 0, set_id = 0, comment = 0x17000 <Address 0x17000 out of bounds>}, 
            table = 0x0, chain = 0x0, rule = 0x0, stmt = 0x0, expr = 0x0, set = 0x0}, {val = 92548, string = 0x16984 <Address 0x16984 out of bounds>, list = 0x16984, cmd = 0x16984, handle = {family = 92548, 
              table = 0x16984 <Address 0x16984 out of bounds>, chain = 0x0, set = 0x5 <Address 0x5 out of bounds>, handle = 0, position = 40960, set_id = 40708, comment = 0x9f04 <Address 0x9f04 out of bounds>}, table = 0x16984, 
            chain = 0x16984, rule = 0x16984, stmt = 0x16984, expr = 0x16984, set = 0x16984}, {val = 0, string = 0x0, list = 0x0, cmd = 0x0, handle = {family = 0, table = 0x7fffe2d3ee90 "", 
              chain = 0x7fffe2d3ef00 "\370\356\323\342\377\177", set = 0x7f1d9f9b1000 "", handle = 0, position = 139765184627784, set_id = 3805536912, 
              comment = 0x7f1d9f7b9212 "H\211C [Ð\220\220\220\220\220\220\220AWI\211\377AVAUATA\211\364I\301\344\005USH\203\354XL\003\247(\003"}, table = 0x0, chain = 0x0, rule = 0x0, stmt = 0x0, expr = 0x0, set = 0x0}, {val = 0, 
            string = 0x0, list = 0x0, cmd = 0x0, handle = {family = 0, table = 0x7f1d9f7b9bd6 "H\213\204$\030\001", chain = 0x7f1d9f9cd018 "", set = 0x7fffe2d3eeb8 "", handle = 140736998928064, position = 140736998928079, 
              set_id = 2675675616, comment = 0x7fffe2d3ee90 ""}, table = 0x0, chain = 0x0, rule = 0x0, stmt = 0x0, expr = 0x0, set = 0x0}, {val = 4295004308, string = 0x100009094 <Address 0x100009094 out of bounds>, list = 0x100009094, 
            cmd = 0x100009094, handle = {family = 37012, table = 0x0, chain = 0x2f <Address 0x2f out of bounds>, set = 0x7f1d9e4f1dc0 "\001", handle = 18446679923507593216, position = 139765208518656, set_id = 0, 
              comment = 0x7f1d9e2e8448 "libc.so.6"}, table = 0x100009094, chain = 0x100009094, rule = 0x100009094, stmt = 0x100009094, expr = 0x100009094, set = 0x100009094}, {val = 140736998924944, 
            string = 0x7fffe2d3e290 "\310\071\233\237\035\177", list = 0x7fffe2d3e290, cmd = 0x7fffe2d3e290, handle = {family = 3805536912, table = 0xffffc5a7c2c00000 <Address 0xffffc5a7c2c00000 out of bounds>, 
              chain = 0xfe3b3ef737760000 <Address 0xfe3b3ef737760000 out of bounds>, set = 0x7f1d9f7b69d9 "H\215", <incomplete sequence \355>, handle = 139765208526848, position = 139765208518656, set_id = 3805537136, 
              comment = 0x7f1d9f7b290c "\213\005ޓ!"}, table = 0x7fffe2d3e290, chain = 0x7fffe2d3e290, rule = 0x7fffe2d3e290, stmt = 0x7fffe2d3e290, expr = 0x7fffe2d3e290, set = 0x7fffe2d3e290}, {val = 140736998925216, 
            string = 0x7fffe2d3e3a0 "", list = 0x7fffe2d3e3a0, cmd = 0x7fffe2d3e3a0, handle = {family = 3805537184, table = 0x7fffe2d3ee90 "", chain = 0x7fffe2d3ef00 "\370\356\323\342\377\177", set = 0x7f1d9f9b2a10 "", handle = 1, 
              position = 139765206495778, set_id = 2677750216, comment = 0x7fffe2d3ef00 "\370\356\323\342\377\177"}, table = 0x7fffe2d3e3a0, chain = 0x7fffe2d3e3a0, rule = 0x7fffe2d3e3a0, stmt = 0x7fffe2d3e3a0, expr = 0x7fffe2d3e3a0, 
            set = 0x7fffe2d3e3a0}, {val = 9, string = 0x9 <Address 0x9 out of bounds>, list = 0x9, cmd = 0x9, handle = {family = 9, table = 0x7f1d9f9b1688 "\310\071\233\237\035\177", chain = 0x7f1d9f9b1640 "\310ќ\237\035\177", 
              set = 0x7f1d9f7b87e8 "\213\215", handle = 72340172838076672, position = 65793, set_id = 2677741120, comment = 0x7f1d9f7b8fee "\203}\210\001\017\206\236\370\377\377\351\022\367\377\377H\215\r|\377"}, table = 0x9, 
            chain = 0x9, rule = 0x9, stmt = 0x9, expr = 0x9, set = 0x9}, {val = 139765208529352, string = 0x7f1d9f9b39c8 "", list = 0x7f1d9f9b39c8, cmd = 0x7f1d9f9b39c8, handle = {family = 2677750216, table = 0x0, 
              chain = 0x6 <Address 0x6 out of bounds>, set = 0x7f1d9e709d98 "\001", handle = 18446679923507593216, position = 139765208525328, set_id = 1, comment = 0x7f1d9e4f6ffb "ld-linux-x86-64.so.2"}, table = 0x7f1d9f9b39c8, 
            chain = 0x7f1d9f9b39c8, rule = 0x7f1d9f9b39c8, stmt = 0x7f1d9f9b39c8, expr = 0x7f1d9f9b39c8, set = 0x7f1d9f9b39c8}, {val = 140736998925200, string = 0x7fffe2d3e390 "\310\071\233\237\035\177", list = 0x7fffe2d3e390, 
            cmd = 0x7fffe2d3e390, handle = {family = 3805537168, table = 0xffffc5a7c4c00000 <Address 0xffffc5a7c4c00000 out of bounds>, chain = 0xfe3b3ef737760000 <Address 0xfe3b3ef737760000 out of bounds>, 
              set = 0x1000 <Address 0x1000 out of bounds>, handle = 96, position = 1404748669, set_id = 504622628, comment = 0x4fcb7dff <Address 0x4fcb7dff out of bounds>}, table = 0x7fffe2d3e390, chain = 0x7fffe2d3e390, 
            rule = 0x7fffe2d3e390, stmt = 0x7fffe2d3e390, expr = 0x7fffe2d3e390, set = 0x7fffe2d3e390}, {val = 0, string = 0x0, list = 0x0, cmd = 0x0, handle = {family = 0, table = 0x5322842d <Address 0x5322842d out of bounds>, 
              chain = 0x1a7f1218 <Address 0x1a7f1218 out of bounds>, set = 0x7fffe2d3ee90 "", handle = 140736998928128, position = 139765208524088, set_id = 1, comment = 0x7f1d9e710419 "libc.so.6"}, table = 0x0, chain = 0x0, rule = 0x0, 
            stmt = 0x0, expr = 0x0, set = 0x0}, {val = 140736998925472, string = 0x7fffe2d3e4a0 "\020*\233\237\035\177", list = 0x7fffe2d3e4a0, cmd = 0x7fffe2d3e4a0, handle = {family = 3805537440, 
              table = 0x7f1d9f7b9212 "H\211C [Ð\220\220\220\220\220\220\220AWI\211\377AVAUATA\211\364I\301\344\005USH\203\354XL\003\247(\003", chain = 0x0, set = 0x7f1d9f7b9bd6 "H\213\204$\030\001", handle = 139765208633368, 
              position = 139765188960040, set_id = 3805540096, comment = 0x7f1d9f7b83c5 "I\211\234$\270\003"}, table = 0x7fffe2d3e4a0, chain = 0x7fffe2d3e4a0, rule = 0x7fffe2d3e4a0, stmt = 0x7fffe2d3e4a0, expr = 0x7fffe2d3e4a0, 
            set = 0x7fffe2d3e4a0}, {val = 139765208529352, string = 0x7f1d9f9b39c8 "", list = 0x7f1d9f9b39c8, cmd = 0x7f1d9f9b39c8, handle = {family = 2677750216, table = 0x7f1d9f9cc9d8 "", chain = 0x0, set = 0x0, 
              handle = 139762530779136, position = 139765191119120, set_id = 3724541952, comment = 0x7f1d9f9b2538 ""}, table = 0x7f1d9f9b39c8, chain = 0x7f1d9f9b39c8, rule = 0x7f1d9f9b39c8, stmt = 0x7f1d9f9b39c8, expr = 0x7f1d9f9b39c8, 
            set = 0x7f1d9f9b39c8}, {val = 1, string = 0x1 <Address 0x1 out of bounds>, list = 0x1, cmd = 0x1, handle = {family = 1, table = 0x7f1d9e710419 "libc.so.6", chain = 0x7fffe2d3e4a0 "\020*\233\237\035\177", 
              set = 0xffffc5a7c6e00000 <Address 0xffffc5a7c6e00000 out of bounds>, handle = 18319305140767948800, position = 140736998926191, set_id = 16, comment = 0x0}, table = 0x1, chain = 0x1, rule = 0x1, stmt = 0x1, expr = 0x1, 
            set = 0x1}, {val = 832, string = 0x340 <Address 0x340 out of bounds>, list = 0x340, cmd = 0x340, handle = {family = 832, table = 0x7fffe2d3ee90 "", chain = 0x7fffe2d3ef00 "\370\356\323\342\377\177", set = 0x7f1d9f9b2000 "", 
              handle = 0, position = 139765191132495, set_id = 3805537680, comment = 0x7f1d9f7b9212 "H\211C [Ð\220\220\220\220\220\220\220AWI\211\377AVAUATA\211\364I\301\344\005USH\203\354XL\003\247(\003"}, table = 0x340, 
            chain = 0x340, rule = 0x340, stmt = 0x340, expr = 0x340, set = 0x340}, {val = 0, string = 0x0, list = 0x0, cmd = 0x0, handle = {family = 0, table = 0x7f1d9f7b9bd6 "H\213\204$\030\001", chain = 0x7f1d9f9cd018 "", 
              set = 0x7fffe2d3eeb8 "", handle = 140736998928064, position = 140736998928079, set_id = 2675675616, comment = 0x7f1d9e919260 ""}, table = 0x0, chain = 0x0, rule = 0x0, stmt = 0x0, expr = 0x0, set = 0x0}, {
            val = 140736998928128, string = 0x7fffe2d3ef00 "\370\356\323\342\377\177", list = 0x7fffe2d3ef00, cmd = 0x7fffe2d3ef00, handle = {family = 3805540096, table = 0x7f1d9f7b83c5 "I\211\234$\270\003", chain = 0x7f1d9f9b2a10 "", 
              set = 0x7fffe2d3e948 "", handle = 5, position = 18446744073709551615, set_id = 0, comment = 0x7fffe2d3e9b0 ""}, table = 0x7fffe2d3ef00, chain = 0x7fffe2d3ef00, rule = 0x7fffe2d3ef00, stmt = 0x7fffe2d3ef00, 
            expr = 0x7fffe2d3ef00, set = 0x7fffe2d3ef00}, {val = 140736998926752, string = 0x7fffe2d3e9a0 "", list = 0x7fffe2d3e9a0, cmd = 0x7fffe2d3e9a0, handle = {family = 3805538720, table = 0x7fffe2d3e500 "0", 
              chain = 0x9 <Address 0x9 out of bounds>, set = 0x7f1d9ebb774e "\203\370\377t\017H\213S\b\017\266\002H\203\302\001H\211S\b[\303fff.\017\037\204", handle = 140736998926768, position = 139765193716900, set_id = 48, 
              comment = 0x1c8 <Address 0x1c8 out of bounds>}, table = 0x7fffe2d3e9a0, chain = 0x7fffe2d3e9a0, rule = 0x7fffe2d3e9a0, stmt = 0x7fffe2d3e9a0, expr = 0x7fffe2d3e9a0, set = 0x7fffe2d3e9a0}, {val = 456, 
            string = 0x1c8 <Address 0x1c8 out of bounds>, list = 0x1c8, cmd = 0x1c8, handle = {family = 456, table = 0x1c8 <Address 0x1c8 out of bounds>, chain = 0x24 <Address 0x24 out of bounds>, 
              set = 0x24 <Address 0x24 out of bounds>, handle = 4, position = 18865251664, set_id = 34904, comment = 0x7fffe2d3ee90 ""}, table = 0x1c8, chain = 0x1c8, rule = 0x1c8, stmt = 0x1c8, expr = 0x1c8, set = 0x1c8}, {
            val = 140736998928128, string = 0x7fffe2d3ef00 "\370\356\323\342\377\177", list = 0x7fffe2d3ef00, cmd = 0x7fffe2d3ef00, handle = {family = 3805540096, table = 0x7f1d9f9b39c8 "", chain = 0x0, 
              set = 0x7f1d9eb58de3 "ld-linux-x86-64.so.2", handle = 140736998926016, position = 139765193383576, set_id = 3805540096, comment = 0x7f1d9f7b83c5 "I\211\234$\270\003"}, table = 0x7fffe2d3ef00, chain = 0x7fffe2d3ef00, 
            rule = 0x7fffe2d3ef00, stmt = 0x7fffe2d3ef00, expr = 0x7fffe2d3ef00, set = 0x7fffe2d3ef00}, {val = 139765208529352, string = 0x7f1d9f9b39c8 "", list = 0x7f1d9f9b39c8, cmd = 0x7f1d9f9b39c8, handle = {family = 2677750216, 
              table = 0x0, chain = 0x7fffe2d3eec0 "", set = 0x7fffe2d3eecf "", handle = 139765206454752, position = 139765206438154, set_id = 2141528, comment = 0x7fffe2d3e650 ""}, table = 0x7f1d9f9b39c8, chain = 0x7f1d9f9b39c8, 
            rule = 0x7f1d9f9b39c8, stmt = 0x7f1d9f9b39c8, expr = 0x7f1d9f9b39c8, set = 0x7f1d9f9b39c8}, {val = 680, string = 0x2a8 <Address 0x2a8 out of bounds>, list = 0x2a8, cmd = 0x2a8, handle = {family = 680, 
              table = 0x7fffe2d3e650 "", chain = 0x7f1d9f9b16c8 "\310\071\233\237\035\177", set = 0xb <Address 0xb out of bounds>, handle = 479443869, position = 139765206439955, set_id = 226670640, comment = 0x0}, table = 0x2a8, 
            chain = 0x2a8, rule = 0x2a8, stmt = 0x2a8, expr = 0x2a8, set = 0x2a8}, {val = 139762530779165, string = 0x7f1d0000001d <Address 0x7f1d0000001d out of bounds>, list = 0x7f1d0000001d, cmd = 0x7f1d0000001d, handle = {
              family = 29, table = 0x724eee <Address 0x724eee out of bounds>, chain = 0x7f1d9eb45638 "\234\273\223\034\026\262\376I\032", set = 0x7fffe2d3e7c0 "@", handle = 139765193403488, position = 0, set_id = 2662642448, 
              comment = 0x7249f8 <Address 0x7249f8 out of bounds>}, table = 0x7f1d0000001d, chain = 0x7f1d0000001d, rule = 0x7f1d0000001d, stmt = 0x7f1d0000001d, expr = 0x7f1d0000001d, set = 0x7f1d0000001d}, {val = 0, string = 0x0, 
            list = 0x0, cmd = 0x0, handle = {family = 0, table = 0x7f1d9f9b1728 "\272\063@", chain = 0x7f1d9f9b39c8 "", set = 0x403200 "strlen", handle = 139765193455616, position = 4198336, set_id = 0, 
              comment = 0x1000002f2 <Address 0x1000002f2 out of bounds>}, table = 0x0, chain = 0x0, rule = 0x0, stmt = 0x0, expr = 0x0, set = 0x0}, {val = 139765208529352, string = 0x7f1d9f9b39c8 "", list = 0x7f1d9f9b39c8, 
            cmd = 0x7f1d9f9b39c8, handle = {family = 2677750216, table = 0x7f1d9f9cd520 "\200Ԝ\237\035\177", chain = 0x7fffe2d3e810 "Ȟ\354\236\035\177", set = 0x7f1d9f9b1728 "\272\063@", handle = 140736998926392, 
              position = 139765208633800, set_id = 479443869, comment = 0x7f1d9f7b5c02 "\205\300~\232H\213E\260H\205\300\017\204\307\006"}, table = 0x7f1d9f9b39c8, chain = 0x7f1d9f9b39c8, rule = 0x7f1d9f9b39c8, stmt = 0x7f1d9f9b39c8, 
            expr = 0x7f1d9f9b39c8, set = 0x7f1d9f9b39c8}, {val = 0, string = 0x0, list = 0x0, cmd = 0x0, handle = {family = 0, table = 0x7f1d9f9b1728 "\272\063@", chain = 0x7fff00000001 <Address 0x7fff00000001 out of bounds>, set = 0x0, 
              handle = 1, position = 139765208633800, set_id = 0, comment = 0x7f1d9f9b1728 "\272\063@"}, table = 0x0, chain = 0x0, rule = 0x0, stmt = 0x0, expr = 0x0, set = 0x0}, {val = 1, string = 0x1 <Address 0x1 out of bounds>, 
            list = 0x1, cmd = 0x1, handle = {family = 1, table = 0x0, chain = 0x0, set = 0x7f1d9f9cd520 "\200Ԝ\237\035\177", handle = 140736998926272, position = 140736998926296, set_id = 3805538256, comment = 0x7fffe2d3e7e8 "\b"}, 
            table = 0x1, chain = 0x1, rule = 0x1, stmt = 0x1, expr = 0x1, set = 0x1}, {val = 0, string = 0x0, list = 0x0, cmd = 0x0, handle = {family = 0, table = 0x403200 "strlen", chain = 0x7fffe2d3e7f0 "\220D\215", 
              set = 0x7fffe2d3e808 "", handle = 8100505936, position = 139765206454802, set_id = 0, comment = 0x40335e "stpcpy"}, table = 0x0, chain = 0x0, rule = 0x0, stmt = 0x0, expr = 0x0, set = 0x0}, {val = 32, 
            string = 0x20 <Address 0x20 out of bounds>, list = 0x20, cmd = 0x20, handle = {family = 32, table = 0x7f1d9eec9eb8 "\260I\215", chain = 0x7f1d9eec9ec8 "\270\236\354\236\035\177", 
              set = 0x7f1d9eb793da "I\211\304H\213\005|\352\064", handle = 8, position = 11256245728, set_id = 64, comment = 0x29f9b39c8 <Address 0x29f9b39c8 out of bounds>}, table = 0x20, chain = 0x20, rule = 0x20, stmt = 0x20, 
            expr = 0x20, set = 0x20}, {val = 80, string = 0x50 <Address 0x50 out of bounds>, list = 0x50, cmd = 0x50, handle = {family = 80, table = 0x8d4490 " \351\323\342\377\177", chain = 0x7f1d9eec9e60 "", 
              set = 0x8 <Address 0x8 out of bounds>, handle = 9258128, position = 9257872, set_id = 3805540656, comment = 0x7f1d9ebbec00 "H\205\300H\211\303\017\204\244"}, table = 0x50, chain = 0x50, rule = 0x50, stmt = 0x50, 
---Type <return> to continue, or q <return> to quit---
            expr = 0x50, set = 0x50}}
        yyvs = 0x7fffe2d3b610
        yyvsp = <optimized out>
        yylsa = {{indesc = 0x0, {{token_offset = 0, line_offset = 0, first_line = 0, last_line = 0, first_column = 0, last_column = 0}, {nle = 0x0}}}, {indesc = 0x0, {{token_offset = 0, line_offset = 0, first_line = 0, last_line = 0, 
                first_column = 0, last_column = 0}, {nle = 0x0}}}, {indesc = 0x7fffe2d3e928, {{token_offset = 3, line_offset = 0, first_line = 1, last_line = 1, first_column = 1, last_column = 64}, {nle = 0x3}}}, {
            indesc = 0x7fffe2d3e928, {{token_offset = 64, line_offset = 0, first_line = 1, last_line = 1, first_column = 65, last_column = 65}, {nle = 0x40}}}, {indesc = 0x7fffe2d3e928, {{token_offset = 15, line_offset = 0, 
                first_line = 1, last_line = 1, first_column = 10, last_column = 28}, {nle = 0xf}}}, {indesc = 0x7fffe2d3e928, {{token_offset = 30, line_offset = 0, first_line = 1, last_line = 1, first_column = 30, last_column = 64}, {
                nle = 0x1e}}}, {indesc = 0x7fffe2d3e928, {{token_offset = 30, line_offset = 0, first_line = 1, last_line = 1, first_column = 64, last_column = 64}, {nle = 0x1e}}}, {indesc = 0x7fffe2d3e928, {{token_offset = 33, 
                line_offset = 0, first_line = 1, last_line = 1, first_column = 33, last_column = 33}, {nle = 0x21}}}, {indesc = 0x7fffe2d3e928, {{token_offset = 35, line_offset = 0, first_line = 1, last_line = 1, first_column = 34, 
                last_column = 35}, {nle = 0x23}}}, {indesc = 0x7fffe2d3e928, {{token_offset = 36, line_offset = 0, first_line = 1, last_line = 1, first_column = 36, last_column = 36}, {nle = 0x24}}}, {indesc = 0x7fffe2d3e928, {{
                token_offset = 38, line_offset = 0, first_line = 1, last_line = 1, first_column = 37, last_column = 38}, {nle = 0x26}}}, {indesc = 0x0, {{token_offset = 0, line_offset = 0, first_line = 0, last_line = 0, 
                first_column = 0, last_column = 0}, {nle = 0x0}}} <repeats 189 times>}
        yyls = 0x7fffe2d396d0
        yylsp = 0x7fffe2d39546
        yystacksize = 200
        yyn = -489450368
        yyresult = <optimized out>
        yytoken = <optimized out>
        yyval = {val = 9259248, string = 0x8d48f0 "\200\224\323\342\377\177", list = 0x8d48f0, cmd = 0x8d48f0, handle = {family = 9259248, table = 0x0, chain = 0x0, set = 0x0, handle = 0, position = 0, set_id = 0, comment = 0x0}, 
          table = 0x8d48f0, chain = 0x8d48f0, rule = 0x8d48f0, stmt = 0x8d48f0, expr = 0x8d48f0, set = 0x8d48f0}
        yyloc = {indesc = 0x7fffe2d3e928, {{token_offset = 3, line_offset = 0, first_line = 1, last_line = 1, first_column = 1, last_column = 65}, {nle = 0x3}}}
        yymsgbuf = '\000' <repeats 127 times>
        yymsg = 0x7fffe2d394c0 ""
        yymsg_alloc = 128
        yylen = 2
#10 0x00000000004063c3 in nft_run (scanner=scanner@entry=0x8d4490, state=state@entry=0x7fffe2d3e920, msgs=msgs@entry=0x7fffe2d3e910) at src/main.c:223
        ret = <optimized out>
#11 0x000000000040603a in main (argc=9, argv=<optimized out>) at src/main.c:334
        state = {indesc = 0x8057e2d3e8d0, indescs = {{location = {indesc = 0x0, {{token_offset = 0, line_offset = 0, first_line = 0, last_line = 0, first_column = 0, last_column = 0}, {nle = 0x0}}}, type = INDESC_BUFFER, 
              name = 0x4269c6 "<cmdline>", {data = 0x8d4390 "add rule bridge filter input @ll,48,48 00:15:e9:f0:10:f8 counter", fd = 9257872}, lineno = 1, column = 66, token_offset = 64, line_offset = 0}, {location = {indesc = 0x0, {{
                    token_offset = 0, line_offset = 0, first_line = 0, last_line = 0, first_column = 0, last_column = 0}, {nle = 0x0}}}, type = INDESC_INVALID, name = 0x0, {data = 0x0, fd = 0}, lineno = 0, column = 0, token_offset = 0, 
              line_offset = 0} <repeats 15 times>}, indesc_idx = 0, msgs = 0x7fffe2d3e910, nerrs = 0, top_scope = {parent = 0x0, symbols = {next = 0x7fffe2d3eec8, prev = 0x7fffe2d3eec8}}, scopes = {0x7fffe2d3eec0, 0x0, 0x0}, scope = 0, 
          cmds = {next = 0x7fffe2d3eef8, prev = 0x7fffe2d3eef8}, ectx = {msgs = 0x7fffe2d3e910, cmd = 0x8d48f0, table = 0x0, set = 0x0, stmt = 0x8d4770, ectx = {dtype = 0x0, len = 0}, pctx = {family = 7, protocol = {{location = {
                    indesc = 0x0, {{token_offset = 0, line_offset = 0, first_line = 0, last_line = 0, first_column = 0, last_column = 0}, {nle = 0x0}}}, desc = 0x0}, {location = {indesc = 0x0, {{token_offset = 0, line_offset = 0, 
                        first_line = 0, last_line = 0, first_column = 0, last_column = 0}, {nle = 0x0}}}, desc = 0x429ac0}, {location = {indesc = 0x0, {{token_offset = 0, line_offset = 0, first_line = 0, last_line = 0, first_column = 0, 
                        last_column = 0}, {nle = 0x0}}}, desc = 0x0}, {location = {indesc = 0x0, {{token_offset = 0, line_offset = 0, first_line = 0, last_line = 0, first_column = 0, last_column = 0}, {nle = 0x0}}}, desc = 0x0}}}}}
        scanner = 0x8d4490
        msgs = {next = 0x7fffe2d3e910, prev = 0x7fffe2d3e910}
        buf = 0x8d4390 "add rule bridge filter input @ll,48,48 00:15:e9:f0:10:f8 counter"
        filename = 0x0
        len = <optimized out>
        interactive = false
        i = <optimized out>
        val = <optimized out>
        rc = 0
(gdb)
Comment 2 Alexandre DERUMIER 2014-07-07 17:04:15 UTC
Created attachment 142291 [details]
gdb trace
Comment 3 Patrick McHardy 2014-07-07 17:11:49 UTC
On 7. Juli 2014 18:16:02 MESZ, bugzilla-daemon@bugzilla.kernel.org wrote:
>https://bugzilla.kernel.org/show_bug.cgi?id=79601
>
>            Bug ID: 79601
>           Summary: nftable : bridge mac address filter segfault
>           Product: Networking
>           Version: 2.5
>    Kernel Version: 3.15.3
>          Hardware: All
>                OS: Linux
>              Tree: Mainline
>            Status: NEW
>          Severity: normal
>          Priority: P1
>         Component: Netfilter/Iptables
>          Assignee: networking_netfilter-iptables@kernel-bugs.osdl.org
>          Reporter: aderumier@odiso.com
>        Regression: No
>
>kernel : 3.15.3
>nftables : 0.3
>libnft : 1.0.2
>
>
>#nft add rule bridge filter forward @ll,48,48 00:15:e9:f0:10:f8 counter
>Segmentation fault
>
>kernel: [  931.733570] nft[8125]: segfault at 0 ip 000000000040c647 sp
>00007fffe448d200 error 4 in nft[400000+44000]

Please send to netfilter-devel, none of the netfilter developers is following bugzilla.