This is a me too to say I think I'm seeing the same bug, but from a different use case: trying to run a Shorewall firewall on Noble.
~$ uname -a Linux xxxxxx 6.8.0-57-generic #59-Ubuntu SMP PREEMPT_DYNAMIC Sat Mar 15 17:40:59 UTC 2025 x86_64 x86_64 x86_64 GNU/Linux I see the following errors: --8<-- Preparing ip6tables-restore input... Running /sbin/ip6tables-restore --wait 60... Warning: Extension MARK revision 0 not supported, missing kernel module? ip6tables-restore v1.8.10 (nf_tables): MARK: bad value for option "--set-mark", or out of range (0-4294967295). Error occurred at line: 48 Try `ip6tables-restore -h' or 'ip6tables-restore --help' for more information. ERROR: ip6tables-restore Failed. Input is in /var/lib/shorewall6/.ip6tables-restore-input --8<-- Line 48 of /var/lib/shorewall6/.ip6tables-restore-input says: --8<-- -A FORWARD -j MARK --set-mark 0/0xff --8<-- Reverting to 6.8.0-55 works. Will try 6.8.0-58.60 when it arrives to confirm fix. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2104282 Title: iptables NFLOG TRACE MARK incompatibility To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2104282/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs