make -C tools/testing/selftests TARGETS=net/netfilter TEST_PROGS=nft_flowttable.sh TEST_GEN_PROGS="" run_tests make: Entering directory '/home/virtme/testing-16/tools/testing/selftests' make[1]: Entering directory '/home/virtme/testing-16/tools/testing/selftests/net/netfilter' make[1]: Nothing to be done for 'all'. make[1]: Leaving directory '/home/virtme/testing-16/tools/testing/selftests/net/netfilter' make[1]: Entering directory '/home/virtme/testing-16/tools/testing/selftests/net/netfilter' TAP version 13 1..1 # overriding timeout to 3600 # selftests: net/netfilter: nft_flowtable.sh # 2024/05/10 23:33:50 socat[12197] E write(7, 0x55867a7b6000, 8192): Broken pipe # FAIL: file mismatch for ns1 -> ns2 # -rw------- 1 root root 23699456 May 10 23:33 /tmp/tmp.ugHicZri6r # -rw------- 1 root root 19925432 May 10 23:33 /tmp/tmp.QmJzhLa1Qt # FAIL: file mismatch for ns1 <- ns2 # -rw------- 1 root root 23699456 May 10 23:33 /tmp/tmp.ugHicZri6r # -rw------- 1 root root 21069824 May 10 23:33 /tmp/tmp.oiyDHjKRba # FAIL: flow offload for ns1/ns2: # table inet filter { # counter routed_orig { # packets 1246 bytes 23259152 # } # # counter routed_repl { # packets 10669 bytes 21309324 # } # # flowtable f1 { # hook ingress priority filter # devices = { veth0, veth1 } # } # # chain forward { # type filter hook forward priority filter; policy drop; # oif "veth1" tcp dport 12345 ct mark set 0x00000001 flow add @f1 counter name "routed_orig" accept # ct mark 0x00000001 counter name ct direction map { original : "routed_orig", reply : "routed_repl" } accept # ct state established,related accept # meta l4proto icmp accept # meta l4proto ipv6-icmp accept # } # } # PASS: dscp_none: dscp packet counters match # 2024/05/10 23:34:04 socat[12229] E write(7, 0x5595c06d9000, 8192): Broken pipe # FAIL: file mismatch for ns1 -> ns2 # -rw------- 1 root root 23699456 May 10 23:33 /tmp/tmp.ugHicZri6r # -rw------- 1 root root 17453552 May 10 23:34 /tmp/tmp.QmJzhLa1Qt # FAIL: file mismatch for ns1 <- ns2 # -rw------- 1 root root 23699456 May 10 23:33 /tmp/tmp.ugHicZri6r # -rw------- 1 root root 17571840 May 10 23:34 /tmp/tmp.oiyDHjKRba # PASS: dscp_ingress: dscp packet counters match # 2024/05/10 23:34:17 socat[12253] E write(7, 0x5633620db000, 8192): Broken pipe # FAIL: file mismatch for ns1 -> ns2 # -rw------- 1 root root 23699456 May 10 23:33 /tmp/tmp.ugHicZri6r # -rw------- 1 root root 21168128 May 10 23:34 /tmp/tmp.QmJzhLa1Qt # FAIL: file mismatch for ns1 <- ns2 # -rw------- 1 root root 23699456 May 10 23:33 /tmp/tmp.ugHicZri6r # -rw------- 1 root root 19898368 May 10 23:34 /tmp/tmp.oiyDHjKRba # PASS: dscp_egress: dscp packet counters match # 2024/05/10 23:34:30 socat[12277] E write(7, 0x556537038000, 8192): Broken pipe # FAIL: file mismatch for ns1 -> ns2 # -rw------- 1 root root 23699456 May 10 23:33 /tmp/tmp.ugHicZri6r # -rw------- 1 root root 16850944 May 10 23:34 /tmp/tmp.QmJzhLa1Qt # FAIL: file mismatch for ns1 <- ns2 # -rw------- 1 root root 23699456 May 10 23:33 /tmp/tmp.ugHicZri6r # -rw------- 1 root root 17686528 May 10 23:34 /tmp/tmp.oiyDHjKRba # PASS: dscp_fwd: dscp packet counters match # 2024/05/10 23:34:42 socat[12299] E write(7, 0x5586489d1000, 8192): Broken pipe # FAIL: file mismatch for ns1 -> ns2 # -rw------- 1 root root 23699456 May 10 23:33 /tmp/tmp.ugHicZri6r # -rw------- 1 root root 16992156 May 10 23:34 /tmp/tmp.QmJzhLa1Qt # FAIL: file mismatch for ns1 <- ns2 # -rw------- 1 root root 23699456 May 10 23:33 /tmp/tmp.ugHicZri6r # -rw------- 1 root root 17670144 May 10 23:34 /tmp/tmp.oiyDHjKRba # FAIL: flow offload for ns1/ns2 with NAT # table inet filter { # counter routed_orig { # packets 5701 bytes 101774464 # } # # counter routed_repl { # packets 46675 bytes 93204664 # } # # flowtable f1 { # hook ingress priority filter # devices = { veth0, veth1 } # } # # chain forward { # type filter hook forward priority filter; policy drop; # ip dscp set cs3 # oif "veth1" tcp dport 12345 ct mark set 0x00000001 flow add @f1 counter name "routed_orig" accept # ct mark 0x00000001 counter name ct direction map { original : "routed_orig", reply : "routed_repl" } accept # ct state established,related accept # meta l4proto icmp accept # meta l4proto ipv6-icmp accept # } # } # table ip nat { # chain prerouting { # type nat hook prerouting priority filter; policy accept; # iif "veth0" ip daddr 10.6.6.6 tcp dport 1666 counter packets 0 bytes 0 dnat to 10.0.2.99:12345 # } # # chain postrouting { # type nat hook postrouting priority filter; policy accept; # oifname "veth1" counter packets 4 bytes 240 masquerade # } # } # table netdev dscpmangle { # chain setdscp0 { # type filter hook egress device "veth1" priority filter; policy accept; # } # } # PASS: flow offload for ns1/ns2 with masquerade and pmtu discovery # PASS: flow offload for ns1/ns2 with dnat and pmtu discovery ns1 <- ns2 # PASS: flow offload for ns1/ns2 with masquerade and pmtu discovery on bridge # PASS: flow offload for ns1/ns2 with dnat and pmtu discovery ns1 <- ns2 # PASS: flow offload for ns1/ns2 with masquerade and pmtu discovery bridge and VLAN # PASS: flow offload for ns1/ns2 with dnat and pmtu discovery ns1 <- ns2 # 2024/05/10 23:35:29 socat[12524] E write(7, 0x55ea2c755000, 8192): Broken pipe # FAIL: file mismatch for ns1 -> ns2 # -rw------- 1 root root 23699456 May 10 23:33 /tmp/tmp.ugHicZri6r # -rw------- 1 root root 14557184 May 10 23:35 /tmp/tmp.QmJzhLa1Qt # FAIL: file mismatch for ns1 <- ns2 # -rw------- 1 root root 23699456 May 10 23:33 /tmp/tmp.ugHicZri6r # -rw------- 1 root root 16408576 May 10 23:35 /tmp/tmp.oiyDHjKRba # FAIL: ipsec tunnel mode for ns1/ns2 # table inet filter { # counter routed_orig { # packets 3 bytes 164 # } # # counter routed_repl { # packets 4 bytes 204 # } # # flowtable f1 { # hook ingress priority filter # devices = { veth0, veth1 } # } # # chain forward { # type filter hook forward priority filter; policy drop; # ip dscp set cs3 # oif "veth1" tcp dport 12345 ct mark set 0x00000001 flow add @f1 counter name "routed_orig" accept # ct mark 0x00000001 counter name ct direction map { original : "routed_orig", reply : "routed_repl" } accept # ct state established,related accept # meta l4proto icmp accept # meta l4proto ipv6-icmp accept # } # } # table netdev dscpmangle { # chain setdscp0 { # type filter hook egress device "veth1" priority filter; policy accept; # } # } # XfrmInError 0 # XfrmInBufferError 0 # XfrmInHdrError 0 # XfrmInNoStates 0 # XfrmInStateProtoError 0 # XfrmInStateModeError 0 # XfrmInStateSeqError 0 # XfrmInStateExpired 0 # XfrmInStateMismatch 0 # XfrmInStateInvalid 0 # XfrmInTmplMismatch 0 # XfrmInNoPols 0 # XfrmInPolBlock 0 # XfrmInPolError 0 # XfrmOutError 0 # XfrmOutBundleGenError 0 # XfrmOutBundleCheckError 0 # XfrmOutNoStates 0 # XfrmOutStateProtoError 0 # XfrmOutStateModeError 0 # XfrmOutStateSeqError 0 # XfrmOutStateExpired 0 # XfrmOutPolBlock 0 # XfrmOutPolDead 0 # XfrmOutPolError 0 # XfrmFwdHdrError 0 # XfrmOutStateInvalid 0 # XfrmAcquireError 0 # XfrmOutStateDirError 0 # XfrmInStateDirError 0 # re-run with random mtus: -o 13374 -l 32851 -r 30087 # PASS: flow offloaded for ns1/ns2 # PASS: dscp_none: dscp packet counters match # PASS: dscp_ingress: dscp packet counters match # PASS: dscp_egress: dscp packet counters match # PASS: dscp_fwd: dscp packet counters match # PASS: flow offload for ns1/ns2 with masquerade # PASS: flow offload for ns1/ns2 with dnat ns1 <- ns2 # PASS: flow offload for ns1/ns2 with masquerade and pmtu discovery # PASS: flow offload for ns1/ns2 with dnat and pmtu discovery ns1 <- ns2 # PASS: flow offload for ns1/ns2 with masquerade and pmtu discovery on bridge # PASS: flow offload for ns1/ns2 with dnat and pmtu discovery ns1 <- ns2 # PASS: flow offload for ns1/ns2 with masquerade and pmtu discovery bridge and VLAN # PASS: flow offload for ns1/ns2 with dnat and pmtu discovery ns1 <- ns2 # 2024/05/10 23:36:51 socat[12893] E write(7, 0x55ea7b224000, 8192): Broken pipe # FAIL: file mismatch for ns1 -> ns2 # -rw------- 1 root root 38088704 May 10 23:35 /tmp/tmp.A2ZAWN7uqY # -rw------- 1 root root 30189664 May 10 23:36 /tmp/tmp.cDtv5h9q52 # FAIL: file mismatch for ns1 <- ns2 # -rw------- 1 root root 38088704 May 10 23:35 /tmp/tmp.A2ZAWN7uqY # -rw------- 1 root root 30638080 May 10 23:36 /tmp/tmp.SefHwtqLYf # FAIL: ipsec tunnel mode for ns1/ns2 # table inet filter { # counter routed_orig { # packets 3 bytes 164 # } # # counter routed_repl { # packets 3 bytes 164 # } # # flowtable f1 { # hook ingress priority filter # devices = { veth0, veth1 } # } # # chain forward { # type filter hook forward priority filter; policy drop; # ip dscp set cs3 # oif "veth1" tcp dport 12345 ct mark set 0x00000001 flow add @f1 counter name "routed_orig" accept # ct mark 0x00000001 counter name ct direction map { original : "routed_orig", reply : "routed_repl" } accept # ct state established,related accept # meta l4proto icmp accept # meta l4proto ipv6-icmp accept # } # } # table netdev dscpmangle { # chain setdscp0 { # type filter hook egress device "veth1" priority filter; policy accept; # } # } # XfrmInError 0 # XfrmInBufferError 0 # XfrmInHdrError 0 # XfrmInNoStates 0 # XfrmInStateProtoError 0 # XfrmInStateModeError 0 # XfrmInStateSeqError 0 # XfrmInStateExpired 0 # XfrmInStateMismatch 0 # XfrmInStateInvalid 0 # XfrmInTmplMismatch 0 # XfrmInNoPols 0 # XfrmInPolBlock 0 # XfrmInPolError 0 # XfrmOutError 0 # XfrmOutBundleGenError 0 # XfrmOutBundleCheckError 0 # XfrmOutNoStates 0 # XfrmOutStateProtoError 0 # XfrmOutStateModeError 0 # XfrmOutStateSeqError 0 # XfrmOutStateExpired 0 # XfrmOutPolBlock 0 # XfrmOutPolDead 0 # XfrmOutPolError 0 # XfrmFwdHdrError 0 # XfrmOutStateInvalid 0 # XfrmAcquireError 0 # XfrmOutStateDirError 0 # XfrmInStateDirError 0 not ok 1 selftests: net/netfilter: nft_flowtable.sh # exit=1 make[1]: Leaving directory '/home/virtme/testing-16/tools/testing/selftests/net/netfilter' make: Leaving directory '/home/virtme/testing-16/tools/testing/selftests' xx__-> echo $? 0 xx__->