steps to reproduce: # ipset -N SET_TEST hash:ip counters # iptables -I OUTPUT -m set --match-set SET_TEST dst -j RETURN # ipset -A SET_TEST 10.1.1.1 # ping -c1 10.1.1.1 # ipset -L SET_TEST|grep 10.1.1.1 10.1.1.1 packets 72057594037927936 bytes 6052837899185946624 counters works with 4.1
Clarification. It works with 4.4.13, but not works with 4.4.30. ipset v6.29.
More clarification: the bug was introduced in 4.4.19
It seems that the problem was in ipset. It works now with 4.4.68 after update ipset to 6.32.