yahoo-eng-team team mailing list archive

[yatin <2038541@xxxxxxxxxxxxxxxxxx>]

Public bug reported:

Tests fails while running ebtables(['-D', chain] + rule.split()) with:-
2023-10-05 12:09:19.307 41358 ERROR neutron.agent.linux.utils [None req-defd197a-c4e2-4761-a4cc-cc960a3ff71a - - - - - -] Exit code: 4; Cmd: ['ip', 'netns', 'exec', 'test-b58b5cf9-5018-4801-aacb-8b00fae3fe37', 'ebtables', '-t', 'nat', '--concurrent', '-D', 'neutronMAC-test-veth09e6dc', '-i', 'test-veth09e6dc', '--among-src', 'fa:16:3e:ac:fd:b6', '-j', 'RETURN']; Stdin: ; Stdout: ; Stderr: ebtables v1.8.7 (nf_tables):  RULE_DELETE failed (Invalid argument): rule in chain neutronMAC-test-veth09e6dc

2023-10-05 12:09:29.576 41358 ERROR neutron.agent.linux.utils [None req-
defd197a-c4e2-4761-a4cc-cc960a3ff71a - - - - - -] Exit code: 4; Cmd:
['ip', 'netns', 'exec', 'test-b58b5cf9-5018-4801-aacb-8b00fae3fe37',
'ebtables', '-t', 'nat', '--concurrent', '-D', 'neutronMAC-test-
veth09e6dc', '-i', 'test-veth09e6dc', '--among-src',
'fa:16:3e:ac:fd:b6', '-j', 'RETURN']; Stdin: ; Stdout: ; Stderr:
ebtables v1.8.7 (nf_tables):  RULE_DELETE failed (Invalid argument):
rule in chain neutronMAC-test-veth09e6dc

2023-10-05 12:09:50.099 41358 ERROR neutron.agent.linux.utils [None req-
defd197a-c4e2-4761-a4cc-cc960a3ff71a - - - - - -] Exit code: 4; Cmd:
['ip', 'netns', 'exec', 'test-b58b5cf9-5018-4801-aacb-8b00fae3fe37',
'ebtables', '-t', 'nat', '--concurrent', '-D', 'neutronMAC-test-
veth09e6dc', '-i', 'test-veth09e6dc', '--among-src',
'fa:16:3e:ac:fd:b6', '-j', 'RETURN']; Stdin: ; Stdout: ; Stderr:
ebtables v1.8.7 (nf_tables):  RULE_DELETE failed (Invalid argument):
rule in chain neutronMAC-test-veth09e6dc

The new kernel includes below changes which have triggered this, described in https://launchpad.net/ubuntu/+source/linux/5.15.0-86.96:-
    - netfilter: nf_tables: disallow element updates of bound anonymous sets
    - netfilter: nf_tables: reject unbound anonymous set before commit phase
    - netfilter: nf_tables: reject unbound chain set before commit phase
    - netfilter: nf_tables: disallow updates of anonymous sets

Following two test fails:-
- test_arp_protection_update
- test_arp_fails_incorrect_mac_protection

** Affects: neutron
     Importance: Critical
         Status: Triaged


** Tags: functional-tests gate-failure

** Tags added: functional-tests gate-failure

** Changed in: neutron
       Status: New => Triaged

** Changed in: neutron
   Importance: Undecided => Critical

** Description changed:

  Tests fails while running ebtables(['-D', chain] + rule.split()) with:-
  2023-10-05 12:09:19.307 41358 ERROR neutron.agent.linux.utils [None req-defd197a-c4e2-4761-a4cc-cc960a3ff71a - - - - - -] Exit code: 4; Cmd: ['ip', 'netns', 'exec', 'test-b58b5cf9-5018-4801-aacb-8b00fae3fe37', 'ebtables', '-t', 'nat', '--concurrent', '-D', 'neutronMAC-test-veth09e6dc', '-i', 'test-veth09e6dc', '--among-src', 'fa:16:3e:ac:fd:b6', '-j', 'RETURN']; Stdin: ; Stdout: ; Stderr: ebtables v1.8.7 (nf_tables):  RULE_DELETE failed (Invalid argument): rule in chain neutronMAC-test-veth09e6dc
  
  2023-10-05 12:09:29.576 41358 ERROR neutron.agent.linux.utils [None req-
  defd197a-c4e2-4761-a4cc-cc960a3ff71a - - - - - -] Exit code: 4; Cmd:
  ['ip', 'netns', 'exec', 'test-b58b5cf9-5018-4801-aacb-8b00fae3fe37',
  'ebtables', '-t', 'nat', '--concurrent', '-D', 'neutronMAC-test-
  veth09e6dc', '-i', 'test-veth09e6dc', '--among-src',
  'fa:16:3e:ac:fd:b6', '-j', 'RETURN']; Stdin: ; Stdout: ; Stderr:
  ebtables v1.8.7 (nf_tables):  RULE_DELETE failed (Invalid argument):
  rule in chain neutronMAC-test-veth09e6dc
  
  2023-10-05 12:09:50.099 41358 ERROR neutron.agent.linux.utils [None req-
  defd197a-c4e2-4761-a4cc-cc960a3ff71a - - - - - -] Exit code: 4; Cmd:
  ['ip', 'netns', 'exec', 'test-b58b5cf9-5018-4801-aacb-8b00fae3fe37',
  'ebtables', '-t', 'nat', '--concurrent', '-D', 'neutronMAC-test-
  veth09e6dc', '-i', 'test-veth09e6dc', '--among-src',
  'fa:16:3e:ac:fd:b6', '-j', 'RETURN']; Stdin: ; Stdout: ; Stderr:
  ebtables v1.8.7 (nf_tables):  RULE_DELETE failed (Invalid argument):
  rule in chain neutronMAC-test-veth09e6dc
  
- The new kernel includes below changes which have triggered this:-
-     - netfilter: nf_tables: disallow element updates of bound anonymous sets
-     - netfilter: nf_tables: reject unbound anonymous set before commit phase
-     - netfilter: nf_tables: reject unbound chain set before commit phase
-     - netfilter: nf_tables: disallow updates of anonymous sets
+ The new kernel includes below changes which have triggered this, described in https://launchpad.net/ubuntu/+source/linux/5.15.0-86.96:-
+     - netfilter: nf_tables: disallow element updates of bound anonymous sets
+     - netfilter: nf_tables: reject unbound anonymous set before commit phase
+     - netfilter: nf_tables: reject unbound chain set before commit phase
+     - netfilter: nf_tables: disallow updates of anonymous sets
  
  Following two test fails:-
  - test_arp_protection_update
  - test_arp_fails_incorrect_mac_protection

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/2038541

Title:
  LinuxBridgeARPSpoofTestCase functional tests fails with latest jammy
  kernel 5.15.0-86.96

Status in neutron:
  Triaged

Bug description:
  Tests fails while running ebtables(['-D', chain] + rule.split()) with:-
  2023-10-05 12:09:19.307 41358 ERROR neutron.agent.linux.utils [None req-defd197a-c4e2-4761-a4cc-cc960a3ff71a - - - - - -] Exit code: 4; Cmd: ['ip', 'netns', 'exec', 'test-b58b5cf9-5018-4801-aacb-8b00fae3fe37', 'ebtables', '-t', 'nat', '--concurrent', '-D', 'neutronMAC-test-veth09e6dc', '-i', 'test-veth09e6dc', '--among-src', 'fa:16:3e:ac:fd:b6', '-j', 'RETURN']; Stdin: ; Stdout: ; Stderr: ebtables v1.8.7 (nf_tables):  RULE_DELETE failed (Invalid argument): rule in chain neutronMAC-test-veth09e6dc

  2023-10-05 12:09:29.576 41358 ERROR neutron.agent.linux.utils [None
  req-defd197a-c4e2-4761-a4cc-cc960a3ff71a - - - - - -] Exit code: 4;
  Cmd: ['ip', 'netns', 'exec',
  'test-b58b5cf9-5018-4801-aacb-8b00fae3fe37', 'ebtables', '-t', 'nat',
  '--concurrent', '-D', 'neutronMAC-test-veth09e6dc', '-i', 'test-
  veth09e6dc', '--among-src', 'fa:16:3e:ac:fd:b6', '-j', 'RETURN'];
  Stdin: ; Stdout: ; Stderr: ebtables v1.8.7 (nf_tables):  RULE_DELETE
  failed (Invalid argument): rule in chain neutronMAC-test-veth09e6dc

  2023-10-05 12:09:50.099 41358 ERROR neutron.agent.linux.utils [None
  req-defd197a-c4e2-4761-a4cc-cc960a3ff71a - - - - - -] Exit code: 4;
  Cmd: ['ip', 'netns', 'exec',
  'test-b58b5cf9-5018-4801-aacb-8b00fae3fe37', 'ebtables', '-t', 'nat',
  '--concurrent', '-D', 'neutronMAC-test-veth09e6dc', '-i', 'test-
  veth09e6dc', '--among-src', 'fa:16:3e:ac:fd:b6', '-j', 'RETURN'];
  Stdin: ; Stdout: ; Stderr: ebtables v1.8.7 (nf_tables):  RULE_DELETE
  failed (Invalid argument): rule in chain neutronMAC-test-veth09e6dc

  The new kernel includes below changes which have triggered this, described in https://launchpad.net/ubuntu/+source/linux/5.15.0-86.96:-
      - netfilter: nf_tables: disallow element updates of bound anonymous sets
      - netfilter: nf_tables: reject unbound anonymous set before commit phase
      - netfilter: nf_tables: reject unbound chain set before commit phase
      - netfilter: nf_tables: disallow updates of anonymous sets

  Following two test fails:-
  - test_arp_protection_update
  - test_arp_fails_incorrect_mac_protection

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/2038541/+subscriptions