From: Pablo Neira Ayuso <pablo@netfilter.org>
To: kernel test robot <oliver.sang@intel.com>
Cc: Sven Auhagen <Sven.Auhagen@voleatech.de>,
0day robot <lkp@intel.com>, LKML <linux-kernel@vger.kernel.org>,
lkp@lists.01.org, netfilter-devel@vger.kernel.org
Subject: Re: [nf_flowtable] 2cd764935d: kernel-selftests.netfilter.nft_flowtable.sh.ipsec_tunnel_mode_for_ns1/ns2.fail
Date: Tue, 10 May 2022 11:58:45 +0200 [thread overview]
Message-ID: <Yno3VXOUEzAOSdDe@salvia> (raw)
In-Reply-To: <20220510092803.GA3969@xsang-OptiPlex-9020>
Hi,
On Tue, May 10, 2022 at 05:28:03PM +0800, kernel test robot wrote:
[...]
> # selftests: netfilter: nft_flowtable.sh
> # PASS: netns routing/connectivity: ns1 can reach ns2
> # FAIL: file mismatch for ns1 -> ns2
> # -rw------- 1 root root 227328 May 8 22:05 /tmp/tmp.fnnwOCWcA4
> # -rw------- 1 root root 99388 May 8 22:05 /tmp/tmp.LL8ohakyGQ
> # FAIL: file mismatch for ns1 <- ns2
> # -rw------- 1 root root 296960 May 8 22:05 /tmp/tmp.1DlwdJLSUX
> # -rw------- 1 root root 15584 May 8 22:05 /tmp/tmp.HnObAriWng
> # FAIL: flow offload for ns1/ns2:
> # table inet filter {
> # flowtable f1 {
> # hook ingress priority 0
> # devices = { veth0, veth1 }
> # }
> #
> # chain forward {
> # type filter hook forward priority 0; policy drop;
> # oif "veth1" tcp dport 12345 flow offload @f1 counter packets 0 bytes 0
> # tcp dport 12345 meta length > 200 ct mark set 0x00000001 counter packets 14 bytes 103660
> # tcp flags fin,rst ct mark set 0x00000000 accept
> # meta length > 1500 accept comment "something-to-grep-for"
> # tcp sport 12345 ct mark 0x00000001 counter packets 57 bytes 8220 log prefix "mark failure " drop
> # ct state established,related accept
> # meta length < 200 oif "veth1" tcp dport 12345 counter packets 1 bytes 60 accept
> # meta l4proto icmp accept
> # meta l4proto ipv6-icmp accept
> # }
> # }
> # /dev/stdin:4:73-74: Error: syntax error, unexpected to, expecting newline or semicolon
> # meta iif "veth0" ip daddr 10.6.6.6 tcp dport 1666 counter dnat ip to 10.0.2.99:12345
> # ^^
What nftables userspace version is kbuild robot using?
It seems this rule fails to load, looks like a unrelated issue?
next prev parent reply other threads:[~2022-05-10 9:59 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
[not found] <20220427071515.qfgqbs6uzoowwnkg@SvensMacbookPro.hq.voleatech.com>
2022-05-10 9:28 ` [nf_flowtable] 2cd764935d: kernel-selftests.netfilter.nft_flowtable.sh.ipsec_tunnel_mode_for_ns1/ns2.fail kernel test robot
2022-05-10 9:58 ` Pablo Neira Ayuso [this message]
2022-05-12 6:03 ` Oliver Sang
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=Yno3VXOUEzAOSdDe@salvia \
--to=pablo@netfilter.org \
--cc=Sven.Auhagen@voleatech.de \
--cc=linux-kernel@vger.kernel.org \
--cc=lkp@intel.com \
--cc=lkp@lists.01.org \
--cc=netfilter-devel@vger.kernel.org \
--cc=oliver.sang@intel.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).