[ 
https://issues.apache.org/jira/browse/MESOS-4646?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16682116#comment-16682116
 ] 

Till Toenshoff edited comment on MESOS-4646 at 11/10/18 1:58 AM:
-----------------------------------------------------------------

Just observed this again on Ubuntu16.04 (4.4 kernel) within our internal CI.

The problems I see here manifest consistently as below:
{noformat}
01:45:21 [ RUN      ] PortMappingIsolatorTest.ROOT_NC_ContainerToContainerTCP
01:45:21 I1110 01:45:21.625305 32279 port_mapping_tests.cpp:238] Using ens3 as 
the public interface
01:45:21 I1110 01:45:21.625555 32279 port_mapping_tests.cpp:246] Using lo as 
the loopback interface
01:45:21 I1110 01:45:21.641434 32279 port_mapping.cpp:1570] Using ens3 as the 
public interface
01:45:21 I1110 01:45:21.641729 32279 port_mapping.cpp:1596] Using lo as the 
loopback interface
01:45:21 I1110 01:45:21.642727 32279 port_mapping.cpp:1895] 
/proc/sys/net/ipv4/neigh/default/gc_thresh3 = '1024'
01:45:21 I1110 01:45:21.642773 32279 port_mapping.cpp:1895] 
/proc/sys/net/ipv4/neigh/default/gc_thresh1 = '128'
01:45:21 I1110 01:45:21.642808 32279 port_mapping.cpp:1895] 
/proc/sys/net/ipv4/tcp_wmem = '4096 16384   4194304'
01:45:21 I1110 01:45:21.642840 32279 port_mapping.cpp:1895] 
/proc/sys/net/ipv4/tcp_synack_retries = '5'
01:45:21 I1110 01:45:21.642879 32279 port_mapping.cpp:1895] 
/proc/sys/net/core/rmem_max = '212992'
01:45:21 I1110 01:45:21.642911 32279 port_mapping.cpp:1895] 
/proc/sys/net/core/somaxconn = '128'
01:45:21 I1110 01:45:21.642933 32279 port_mapping.cpp:1895] 
/proc/sys/net/core/wmem_max = '212992'
01:45:21 I1110 01:45:21.642961 32279 port_mapping.cpp:1895] 
/proc/sys/net/ipv4/tcp_rmem = '4096 87380   6291456'
01:45:21 I1110 01:45:21.642983 32279 port_mapping.cpp:1895] 
/proc/sys/net/ipv4/tcp_keepalive_time = '7200'
01:45:21 I1110 01:45:21.643013 32279 port_mapping.cpp:1895] 
/proc/sys/net/ipv4/neigh/default/gc_thresh2 = '512'
01:45:21 I1110 01:45:21.643033 32279 port_mapping.cpp:1895] 
/proc/sys/net/core/netdev_max_backlog = '1000'
01:45:21 I1110 01:45:21.643064 32279 port_mapping.cpp:1895] 
/proc/sys/net/ipv4/tcp_keepalive_intvl = '75'
01:45:21 I1110 01:45:21.643085 32279 port_mapping.cpp:1895] 
/proc/sys/net/ipv4/tcp_keepalive_probes = '9'
01:45:21 I1110 01:45:21.643112 32279 port_mapping.cpp:1895] 
/proc/sys/net/ipv4/tcp_max_syn_backlog = '512'
01:45:21 I1110 01:45:21.643139 32279 port_mapping.cpp:1895] 
/proc/sys/net/ipv4/tcp_retries2 = '15'
01:45:21 I1110 01:45:21.646045 32279 linux_launcher.cpp:144] Using 
/sys/fs/cgroup/freezer as the freezer hierarchy for the Linux launcher
01:45:21 I1110 01:45:21.646473 27877 port_mapping.cpp:2537] Using non-ephemeral 
ports {} and ephemeral ports [30016,30032) for container 
0cb621ab-78d9-419a-9189-ff2856d4e559 of executor ''
01:45:21 I1110 01:45:21.647001 27878 linux_launcher.cpp:492] Launching 
container 0cb621ab-78d9-419a-9189-ff2856d4e559 and cloning with namespaces 
CLONE_NEWNS | CLONE_NEWNET
01:45:21 I1110 01:45:21.672200 27881 port_mapping.cpp:2602] Bind mounted 
'/proc/10192/ns/net' to '/run/netns/10192' for container 
0cb621ab-78d9-419a-9189-ff2856d4e559
01:45:21 I1110 01:45:21.672251 27881 port_mapping.cpp:2618] Created network 
namespace handle symlink 
'/var/run/mesos/netns/0cb621ab-78d9-419a-9189-ff2856d4e559' -> 
'/run/netns/10192'
01:45:21 I1110 01:45:21.672857 27881 port_mapping.cpp:2678] Adding IP packet 
filters with ports [30016,30031] for container 
0cb621ab-78d9-419a-9189-ff2856d4e559
01:45:21 Executing pre-exec command '{"shell":true,"value":"#!/bin/sh\nset 
-xe\nmount --make-rslave /run/netns\ntest -f 
/proc/sys/net/ipv6/conf/all/disable_ipv6 && echo 1 > 
/proc/sys/net/ipv6/conf/all/disable_ipv6\nip link set lo address 
12:3b:cf:2b:ed:2a mtu 9001 up\nethtool -K ens3 rx off\nip link set ens3 address 
12:3b:cf:2b:ed:2a mtu 9001 up\nip addr add 172.16.10.54/24 dev ens3\nip route 
add default via 172.16.10.1\necho 30016 30031 > 
/proc/sys/net/ipv4/ip_local_port_range\necho 1 > 
/proc/sys/net/ipv4/conf/ens3/accept_local\necho 1 > 
/proc/sys/net/ipv4/conf/lo/accept_local\necho 1 > 
/proc/sys/net/ipv4/conf/lo/route_localnet\nif [ -f 
\"/proc/sys/net/ipv4/tcp_retries2\" ]; then\n echo '15' > 
/proc/sys/net/ipv4/tcp_retries2\nfi\nif [ -f 
\"/proc/sys/net/ipv4/tcp_max_syn_backlog\" ]; then\n echo '512' > 
/proc/sys/net/ipv4/tcp_max_syn_backlog\nfi\nif [ -f 
\"/proc/sys/net/ipv4/tcp_keepalive_probes\" ]; then\n echo '9' > 
/proc/sys/net/ipv4/tcp_keepalive_probes\nfi\nif [ -f 
\"/proc/sys/net/ipv4/tcp_synack_retries\" ]; then\n echo '5' > 
/proc/sys/net/ipv4/tcp_synack_retries\nfi\nif [ -f 
\"/proc/sys/net/ipv4/tcp_wmem\" ]; then\n echo '4096\t16384\t4194304' > 
/proc/sys/net/ipv4/tcp_wmem\nfi\nif [ -f 
\"/proc/sys/net/ipv4/neigh/default/gc_thresh1\" ]; then\n echo '128' > 
/proc/sys/net/ipv4/neigh/default/gc_thresh1\nfi\nif [ -f 
\"/proc/sys/net/ipv4/tcp_keepalive_intvl\" ]; then\n echo '75' > 
/proc/sys/net/ipv4/tcp_keepalive_intvl\nfi\nif [ -f 
\"/proc/sys/net/core/netdev_max_backlog\" ]; then\n echo '1000' > 
/proc/sys/net/core/netdev_max_backlog\nfi\nif [ -f 
\"/proc/sys/net/ipv4/neigh/default/gc_thresh2\" ]; then\n echo '512' > 
/proc/sys/net/ipv4/neigh/default/gc_thresh2\nfi\nif [ -f 
\"/proc/sys/net/ipv4/neigh/default/gc_thresh3\" ]; then\n echo '1024' > 
/proc/sys/net/ipv4/neigh/default/gc_thresh3\nfi\nif [ -f 
\"/proc/sys/net/core/rmem_max\" ]; then\n echo '212992' > 
/proc/sys/net/core/rmem_max\nfi\nif [ -f \"/proc/sys/net/core/somaxconn\" ]; 
then\n echo '128' > /proc/sys/net/core/somaxconn\nfi\nif [ -f 
\"/proc/sys/net/core/wmem_max\" ]; then\n echo '212992' > 
/proc/sys/net/core/wmem_max\nfi\nif [ -f \"/proc/sys/net/ipv4/tcp_rmem\" ]; 
then\n echo '4096\t87380\t6291456' > /proc/sys/net/ipv4/tcp_rmem\nfi\nif [ -f 
\"/proc/sys/net/ipv4/tcp_keepalive_time\" ]; then\n echo '7200' > 
/proc/sys/net/ipv4/tcp_keepalive_time\nfi\ntc qdisc add dev lo ingress\ntc 
qdisc add dev ens3 ingress\ntc filter add dev lo parent ffff:0 protocol ip prio 
770 u32 flowid ffff:0 match ip dst 172.16.10.54 action mirred egress redirect 
dev ens3\ntc filter add dev lo parent ffff:0 protocol ip prio 770 u32 flowid 
ffff:0 match ip dst 127.0.0.1 action mirred egress redirect dev ens3\ntc filter 
add dev lo parent ffff:0 protocol ip prio 769 u32 flowid ffff:0 match ip dport 
30016 fff0\ntc filter add dev ens3 parent ffff:0 protocol ip prio 770 u32 
flowid ffff:0 match ip dst 127.0.0.1 match ip dport 30016 fff0 action mirred 
egress redirect dev lo\ntc filter add dev lo parent ffff:0 protocol ip prio 514 
u32 flowid ffff:0 match ip protocol 1 0xff match ip dst 172.16.10.54\ntc filter 
add dev lo parent ffff:0 protocol ip prio 514 u32 flowid ffff:0 match ip 
protocol 1 0xff match ip dst 127.0.0.1\ntc filter show dev ens3 parent 
ffff:0\ntc filter show dev lo parent ffff:0\n"}'
01:45:21 + mount --make-rslave /run/netns
01:45:21 + test -f /proc/sys/net/ipv6/conf/all/disable_ipv6
01:45:21 + echo 1
01:45:21 + ip link set lo address 12:3b:cf:2b:ed:2a mtu 9001 up
01:45:21 + ethtool -K ens3 rx off
01:45:21 + ip link set ens3 address 12:3b:cf:2b:ed:2a mtu 9001 up
01:45:21 + ip addr add 172.16.10.54/24 dev ens3
01:45:21 + ip route add default via 172.16.10.1
01:45:21 + echo 30016 30031
01:45:21 + echo 1
01:45:21 + echo 1
01:45:21 + echo 1
01:45:21 + [ -f /proc/sys/net/ipv4/tcp_retries2 ]
01:45:21 + [ -f /proc/sys/net/ipv4/tcp_max_syn_backlog ]
01:45:21 + [ -f /proc/sys/net/ipv4/tcp_keepalive_probes ]
01:45:21 + [ -f /proc/sys/net/ipv4/tcp_synack_retries ]
01:45:21 + [ -f /proc/sys/net/ipv4/tcp_wmem ]
01:45:21 + [ -f /proc/sys/net/ipv4/neigh/default/gc_thresh1 ]
01:45:21 + [ -f /proc/sys/net/ipv4/tcp_keepalive_intvl ]
01:45:21 + [ -f /proc/sys/net/core/netdev_max_backlog ]
01:45:21 + [ -f /proc/sys/net/ipv4/neigh/default/gc_thresh2 ]
01:45:21 + [ -f /proc/sys/net/ipv4/neigh/default/gc_thresh3 ]
01:45:21 + [ -f /proc/sys/net/core/rmem_max ]
01:45:21 + [ -f /proc/sys/net/core/somaxconn ]
01:45:21 + echo 128
01:45:21 + [ -f /proc/sys/net/core/wmem_max ]
01:45:21 + [ -f /proc/sys/net/ipv4/tcp_rmem ]
01:45:21 + [ -f /proc/sys/net/ipv4/tcp_keepalive_time ]
01:45:21 + tc qdisc add dev lo ingress
01:45:21 + tc qdisc add dev ens3 ingress
01:45:21 + tc filter add dev lo parent ffff:0 protocol ip prio 770 u32 flowid 
ffff:0 match ip dst 172.16.10.54 action mirred egress redirect dev ens3
01:45:21 + tc filter add dev lo parent ffff:0 protocol ip prio 770 u32 flowid 
ffff:0 match ip dst 127.0.0.1 action mirred egress redirect dev ens3
01:45:21 + tc filter add dev lo parent ffff:0 protocol ip prio 769 u32 flowid 
ffff:0 match ip dport 30016 fff0
01:45:21 + tc filter add dev ens3 parent ffff:0 protocol ip prio 770 u32 flowid 
ffff:0 match ip dst 127.0.0.1 match ip dport 30016 fff0 action mirred egress 
redirect dev lo
01:45:21 + tc filter add dev lo parent ffff:0 protocol ip prio 514 u32 flowid 
ffff:0 match ip protocol 1 0xff match ip dst 172.16.10.54
01:45:21 + tc filter add dev lo parent ffff:0 protocol ip prio 514 u32 flowid 
ffff:0 match ip protocol 1 0xff match ip dst 127.0.0.1
01:45:21 + tc filter show dev ens3 parent ffff:0
01:45:21 filter protocol ip pref 770 u32 
01:45:21 filter protocol ip pref 770 u32 fh 800: ht divisor 1 
01:45:21 filter protocol ip pref 770 u32 fh 800::800 order 2048 key ht 800 bkt 
0 flowid ffff: 
01:45:21   match 7f000001/ffffffff at 16
01:45:21   match 00007540/0000fff0 at 20
01:45:21        action order 1: mirred (Egress Redirect to device lo) stolen
01:45:21        index 1427 ref 1 bind 1
01:45:21  
01:45:21 + tc filter show dev lo parent ffff:0
01:45:21 filter protocol ip pref 514 u32 
01:45:21 filter protocol ip pref 514 u32 fh 802: ht divisor 1 
01:45:21 filter protocol ip pref 514 u32 fh 802::800 order 2048 key ht 802 bkt 
0 flowid ffff: 
01:45:21   match 00010000/00ff0000 at 8
01:45:21   match ac100a36/ffffffff at 16
01:45:21 filter protocol ip pref 514 u32 fh 802::801 order 2049 key ht 802 bkt 
0 flowid ffff: 
01:45:21   match 00010000/00ff0000 at 8
01:45:21   match 7f000001/ffffffff at 16
01:45:21 filter protocol ip pref 769 u32 
01:45:21 filter protocol ip pref 769 u32 fh 801: ht divisor 1 
01:45:21 filter protocol ip pref 769 u32 fh 801::800 order 2048 key ht 801 bkt 
0 flowid ffff: 
01:45:21   match 00007540/0000fff0 at 20
01:45:21 filter protocol ip pref 770 u32 
01:45:21 filter protocol ip pref 770 u32 fh 800: ht divisor 1 
01:45:21 filter protocol ip pref 770 u32 fh 800::800 order 2048 key ht 800 bkt 
0 flowid ffff: 
01:45:21   match ac100a36/ffffffff at 16
01:45:21        action order 1: mirred (Egress Redirect to device ens3) stolen
01:45:21        index 1425 ref 1 bind 1
01:45:21  
01:45:21 filter protocol ip pref 770 u32 fh 800::801 order 2049 key ht 800 bkt 
0 flowid ffff: 
01:45:21   match 7f000001/ffffffff at 16
01:45:21        action order 1: mirred (Egress Redirect to device ens3) stolen
01:45:21        index 1426 ref 1 bind 1
01:45:21  
01:45:21 I1110 01:45:21.776726 27883 port_mapping.cpp:2537] Using non-ephemeral 
ports {} and ephemeral ports [30032,30048) for container 
cfb2fe74-7ddb-4981-bd56-cde103694ee9 of executor ''
01:45:21 I1110 01:45:21.777269 27880 linux_launcher.cpp:492] Launching 
container cfb2fe74-7ddb-4981-bd56-cde103694ee9 and cloning with namespaces 
CLONE_NEWNS | CLONE_NEWNET
01:45:21 I1110 01:45:21.791940 27877 port_mapping.cpp:2602] Bind mounted 
'/proc/10252/ns/net' to '/run/netns/10252' for container 
cfb2fe74-7ddb-4981-bd56-cde103694ee9
01:45:21 I1110 01:45:21.792047 27877 port_mapping.cpp:2618] Created network 
namespace handle symlink 
'/var/run/mesos/netns/cfb2fe74-7ddb-4981-bd56-cde103694ee9' -> 
'/run/netns/10252'
01:45:21 I1110 01:45:21.793022 27877 port_mapping.cpp:2678] Adding IP packet 
filters with ports [30032,30047] for container 
cfb2fe74-7ddb-4981-bd56-cde103694ee9
01:45:21 Executing pre-exec command '{"shell":true,"value":"#!/bin/sh\nset 
-xe\nmount --make-rslave /run/netns\ntest -f 
/proc/sys/net/ipv6/conf/all/disable_ipv6 && echo 1 > 
/proc/sys/net/ipv6/conf/all/disable_ipv6\nip link set lo address 
12:3b:cf:2b:ed:2a mtu 9001 up\nethtool -K ens3 rx off\nip link set ens3 address 
12:3b:cf:2b:ed:2a mtu 9001 up\nip addr add 172.16.10.54/24 dev ens3\nip route 
add default via 172.16.10.1\necho 30032 30047 > 
/proc/sys/net/ipv4/ip_local_port_range\necho 1 > 
/proc/sys/net/ipv4/conf/ens3/accept_local\necho 1 > 
/proc/sys/net/ipv4/conf/lo/accept_local\necho 1 > 
/proc/sys/net/ipv4/conf/lo/route_localnet\nif [ -f 
\"/proc/sys/net/ipv4/tcp_retries2\" ]; then\n echo '15' > 
/proc/sys/net/ipv4/tcp_retries2\nfi\nif [ -f 
\"/proc/sys/net/ipv4/tcp_max_syn_backlog\" ]; then\n echo '512' > 
/proc/sys/net/ipv4/tcp_max_syn_backlog\nfi\nif [ -f 
\"/proc/sys/net/ipv4/tcp_keepalive_probes\" ]; then\n echo '9' > 
/proc/sys/net/ipv4/tcp_keepalive_probes\nfi\nif [ -f 
\"/proc/sys/net/ipv4/tcp_synack_retries\" ]; then\n echo '5' > 
/proc/sys/net/ipv4/tcp_synack_retries\nfi\nif [ -f 
\"/proc/sys/net/ipv4/tcp_wmem\" ]; then\n echo '4096\t16384\t4194304' > 
/proc/sys/net/ipv4/tcp_wmem\nfi\nif [ -f 
\"/proc/sys/net/ipv4/neigh/default/gc_thresh1\" ]; then\n echo '128' > 
/proc/sys/net/ipv4/neigh/default/gc_thresh1\nfi\nif [ -f 
\"/proc/sys/net/ipv4/tcp_keepalive_intvl\" ]; then\n echo '75' > 
/proc/sys/net/ipv4/tcp_keepalive_intvl\nfi\nif [ -f 
\"/proc/sys/net/core/netdev_max_backlog\" ]; then\n echo '1000' > 
/proc/sys/net/core/netdev_max_backlog\nfi\nif [ -f 
\"/proc/sys/net/ipv4/neigh/default/gc_thresh2\" ]; then\n echo '512' > 
/proc/sys/net/ipv4/neigh/default/gc_thresh2\nfi\nif [ -f 
\"/proc/sys/net/ipv4/neigh/default/gc_thresh3\" ]; then\n echo '1024' > 
/proc/sys/net/ipv4/neigh/default/gc_thresh3\nfi\nif [ -f 
\"/proc/sys/net/core/rmem_max\" ]; then\n echo '212992' > 
/proc/sys/net/core/rmem_max\nfi\nif [ -f \"/proc/sys/net/core/somaxconn\" ]; 
then\n echo '128' > /proc/sys/net/core/somaxconn\nfi\nif [ -f 
\"/proc/sys/net/core/wmem_max\" ]; then\n echo '212992' > 
/proc/sys/net/core/wmem_max\nfi\nif [ -f \"/proc/sys/net/ipv4/tcp_rmem\" ]; 
then\n echo '4096\t87380\t6291456' > /proc/sys/net/ipv4/tcp_rmem\nfi\nif [ -f 
\"/proc/sys/net/ipv4/tcp_keepalive_time\" ]; then\n echo '7200' > 
/proc/sys/net/ipv4/tcp_keepalive_time\nfi\ntc qdisc add dev lo ingress\ntc 
qdisc add dev ens3 ingress\ntc filter add dev lo parent ffff:0 protocol ip prio 
770 u32 flowid ffff:0 match ip dst 172.16.10.54 action mirred egress redirect 
dev ens3\ntc filter add dev lo parent ffff:0 protocol ip prio 770 u32 flowid 
ffff:0 match ip dst 127.0.0.1 action mirred egress redirect dev ens3\ntc filter 
add dev lo parent ffff:0 protocol ip prio 769 u32 flowid ffff:0 match ip dport 
30032 fff0\ntc filter add dev ens3 parent ffff:0 protocol ip prio 770 u32 
flowid ffff:0 match ip dst 127.0.0.1 match ip dport 30032 fff0 action mirred 
egress redirect dev lo\ntc filter add dev lo parent ffff:0 protocol ip prio 514 
u32 flowid ffff:0 match ip protocol 1 0xff match ip dst 172.16.10.54\ntc filter 
add dev lo parent ffff:0 protocol ip prio 514 u32 flowid ffff:0 match ip 
protocol 1 0xff match ip dst 127.0.0.1\ntc filter show dev ens3 parent 
ffff:0\ntc filter show dev lo parent ffff:0\n"}'
01:45:21 + mount --make-rslave /run/netns
01:45:21 + test -f /proc/sys/net/ipv6/conf/all/disable_ipv6
01:45:21 + echo 1
01:45:21 + ip link set lo address 12:3b:cf:2b:ed:2a mtu 9001 up
01:45:21 + ethtool -K ens3 rx off
01:45:21 + ip link set ens3 address 12:3b:cf:2b:ed:2a mtu 9001 up
01:45:21 + ip addr add 172.16.10.54/24 dev ens3
01:45:21 + ip route add default via 172.16.10.1
01:45:21 + echo 30032 30047
01:45:21 + echo 1
01:45:21 + echo 1
01:45:21 + echo 1
01:45:21 + [ -f /proc/sys/net/ipv4/tcp_retries2 ]
01:45:21 + [ -f /proc/sys/net/ipv4/tcp_max_syn_backlog ]
01:45:21 + [ -f /proc/sys/net/ipv4/tcp_keepalive_probes ]
01:45:21 + [ -f /proc/sys/net/ipv4/tcp_synack_retries ]
01:45:21 + [ -f /proc/sys/net/ipv4/tcp_wmem ]
01:45:21 + [ -f /proc/sys/net/ipv4/neigh/default/gc_thresh1 ]
01:45:21 + [ -f /proc/sys/net/ipv4/tcp_keepalive_intvl ]
01:45:21 + [ -f /proc/sys/net/core/netdev_max_backlog ]
01:45:21 + [ -f /proc/sys/net/ipv4/neigh/default/gc_thresh2 ]
01:45:21 + [ -f /proc/sys/net/ipv4/neigh/default/gc_thresh3 ]
01:45:21 + [ -f /proc/sys/net/core/rmem_max ]
01:45:21 + [ -f /proc/sys/net/core/somaxconn ]
01:45:21 + echo 128
01:45:21 + [ -f /proc/sys/net/core/wmem_max ]
01:45:21 + [ -f /proc/sys/net/ipv4/tcp_rmem ]
01:45:21 + [ -f /proc/sys/net/ipv4/tcp_keepalive_time ]
01:45:21 + tc qdisc add dev lo ingress
01:45:21 + tc qdisc add dev ens3 ingress
01:45:21 + tc filter add dev lo parent ffff:0 protocol ip prio 770 u32 flowid 
ffff:0 match ip dst 172.16.10.54 action mirred egress redirect dev ens3
01:45:21 + tc filter add dev lo parent ffff:0 protocol ip prio 770 u32 flowid 
ffff:0 match ip dst 127.0.0.1 action mirred egress redirect dev ens3
01:45:21 + tc filter add dev lo parent ffff:0 protocol ip prio 769 u32 flowid 
ffff:0 match ip dport 30032 fff0
01:45:21 + tc filter add dev ens3 parent ffff:0 protocol ip prio 770 u32 flowid 
ffff:0 match ip dst 127.0.0.1 match ip dport 30032 fff0 action mirred egress 
redirect dev lo
01:45:21 + tc filter add dev lo parent ffff:0 protocol ip prio 514 u32 flowid 
ffff:0 match ip protocol 1 0xff match ip dst 172.16.10.54
01:45:21 + tc filter add dev lo parent ffff:0 protocol ip prio 514 u32 flowid 
ffff:0 match ip protocol 1 0xff match ip dst 127.0.0.1
01:45:21 + tc filter show dev ens3 parent ffff:0
01:45:21 filter protocol ip pref 770 u32 
01:45:21 filter protocol ip pref 770 u32 fh 800: ht divisor 1 
01:45:21 filter protocol ip pref 770 u32 fh 800::800 order 2048 key ht 800 bkt 
0 flowid ffff: 
01:45:21   match 7f000001/ffffffff at 16
01:45:21   match 00007550/0000fff0 at 20
01:45:21        action order 1: mirred (Egress Redirect to device lo) stolen
01:45:21        index 1441 ref 1 bind 1
01:45:21  
01:45:21 + tc filter show dev lo parent ffff:0
01:45:21 filter protocol ip pref 514 u32 
01:45:21 filter protocol ip pref 514 u32 fh 802: ht divisor 1 
01:45:21 filter protocol ip pref 514 u32 fh 802::800 order 2048 key ht 802 bkt 
0 flowid ffff: 
01:45:21   match 00010000/00ff0000 at 8
01:45:21   match ac100a36/ffffffff at 16
01:45:21 filter protocol ip pref 514 u32 fh 802::801 order 2049 key ht 802 bkt 
0 flowid ffff: 
01:45:21   match 00010000/00ff0000 at 8
01:45:21   match 7f000001/ffffffff at 16
01:45:21 filter protocol ip pref 769 u32 
01:45:21 filter protocol ip pref 769 u32 fh 801: ht divisor 1 
01:45:21 filter protocol ip pref 769 u32 fh 801::800 order 2048 key ht 801 bkt 
0 flowid ffff: 
01:45:21   match 00007550/0000fff0 at 20
01:45:21 filter protocol ip pref 770 u32 
01:45:21 filter protocol ip pref 770 u32 fh 800: ht divisor 1 
01:45:21 filter protocol ip pref 770 u32 fh 800::800 order 2048 key ht 800 bkt 
0 flowid ffff: 
01:45:21   match ac100a36/ffffffff at 16
01:45:21        action order 1: mirred (Egress Redirect to device ens3) stolen
01:45:21        index 1439 ref 1 bind 1
01:45:21  
01:45:21 filter protocol ip pref 770 u32 fh 800::801 order 2049 key ht 800 bkt 
0 flowid ffff: 
01:45:21   match 7f000001/ffffffff at 16
01:45:21        action order 1: mirred (Egress Redirect to device ens3) stolen
01:45:21        index 1440 ref 1 bind 1
01:45:21  
01:45:22 ../../src/tests/containerizer/port_mapping_tests.cpp:606: Failure
01:45:22 Value of: (os::read(trafficViaLoopback)).get()
01:45:22   Actual: ""
01:45:22 Expected: "hello1"
01:45:22 Which is: "hello1"
01:45:22 ../../src/tests/containerizer/port_mapping_tests.cpp:607: Failure
01:45:22 Value of: (os::read(trafficViaPublic)).get()
01:45:22   Actual: ""
01:45:22 Expected: "hello3"
01:45:22 Which is: "hello3"
01:45:22 I1110 01:45:21.960525 27880 linux_launcher.cpp:580] Asked to destroy 
container 0cb621ab-78d9-419a-9189-ff2856d4e559
01:45:22 I1110 01:45:21.960592 27880 linux_launcher.cpp:622] Destroying cgroup 
'/sys/fs/cgroup/freezer/mesos/0cb621ab-78d9-419a-9189-ff2856d4e559'
01:45:22 I1110 01:45:21.960850 27883 cgroups.cpp:2851] Freezing cgroup 
/sys/fs/cgroup/freezer/mesos/0cb621ab-78d9-419a-9189-ff2856d4e559
01:45:22 I1110 01:45:21.961045 27881 cgroups.cpp:1242] Successfully froze 
cgroup /sys/fs/cgroup/freezer/mesos/0cb621ab-78d9-419a-9189-ff2856d4e559 after 
144128ns
01:45:22 I1110 01:45:21.961282 27878 cgroups.cpp:2869] Thawing cgroup 
/sys/fs/cgroup/freezer/mesos/0cb621ab-78d9-419a-9189-ff2856d4e559
01:45:22 I1110 01:45:21.961396 27878 cgroups.cpp:1271] Successfully thawed 
cgroup /sys/fs/cgroup/freezer/mesos/0cb621ab-78d9-419a-9189-ff2856d4e559 after 
78080ns
01:45:22 I1110 01:45:22.061120 27879 linux_launcher.cpp:580] Asked to destroy 
container cfb2fe74-7ddb-4981-bd56-cde103694ee9
01:45:22 I1110 01:45:22.061162 27879 linux_launcher.cpp:622] Destroying cgroup 
'/sys/fs/cgroup/freezer/mesos/cfb2fe74-7ddb-4981-bd56-cde103694ee9'
01:45:22 I1110 01:45:22.061355 27881 cgroups.cpp:2851] Freezing cgroup 
/sys/fs/cgroup/freezer/mesos/cfb2fe74-7ddb-4981-bd56-cde103694ee9
01:45:22 I1110 01:45:22.061488 27883 cgroups.cpp:1242] Successfully froze 
cgroup /sys/fs/cgroup/freezer/mesos/cfb2fe74-7ddb-4981-bd56-cde103694ee9 after 
92160ns
01:45:22 I1110 01:45:22.061614 27877 cgroups.cpp:2869] Thawing cgroup 
/sys/fs/cgroup/freezer/mesos/cfb2fe74-7ddb-4981-bd56-cde103694ee9
01:45:22 I1110 01:45:22.061694 27877 cgroups.cpp:1271] Successfully thawed 
cgroup /sys/fs/cgroup/freezer/mesos/cfb2fe74-7ddb-4981-bd56-cde103694ee9 after 
49152ns
01:45:22 I1110 01:45:22.062072 27878 port_mapping.cpp:3366] Freed ephemeral 
ports [30016,30032) used by container 0cb621ab-78d9-419a-9189-ff2856d4e559 with 
pid 10192
01:45:22 I1110 01:45:22.062099 27878 port_mapping.cpp:3395] Removing IP packet 
filters with ports [30016,30031] for container with pid 10192
01:45:22 I1110 01:45:22.110688 27878 port_mapping.cpp:3619] Successfully 
performed cleanup for pid 10192
01:45:22 I1110 01:45:22.110865 27881 port_mapping.cpp:3366] Freed ephemeral 
ports [30032,30048) used by container cfb2fe74-7ddb-4981-bd56-cde103694ee9 with 
pid 10252
01:45:22 I1110 01:45:22.110899 27881 port_mapping.cpp:3395] Removing IP packet 
filters with ports [30032,30047] for container with pid 10252
01:45:22 I1110 01:45:22.166695 27881 port_mapping.cpp:3619] Successfully 
performed cleanup for pid 10252
01:45:22 [  FAILED  ] PortMappingIsolatorTest.ROOT_NC_ContainerToContainerTCP 
(545 ms)
01:45:22 [ RUN      ] PortMappingIsolatorTest.ROOT_NC_ContainerToContainerUDP
01:45:22 I1110 01:45:22.170173 32279 port_mapping_tests.cpp:238] Using ens3 as 
the public interface
01:45:22 I1110 01:45:22.170409 32279 port_mapping_tests.cpp:246] Using lo as 
the loopback interface
01:45:22 I1110 01:45:22.187602 32279 port_mapping.cpp:1570] Using ens3 as the 
public interface
01:45:22 I1110 01:45:22.187891 32279 port_mapping.cpp:1596] Using lo as the 
loopback interface
01:45:22 I1110 01:45:22.188690 32279 port_mapping.cpp:1895] 
/proc/sys/net/ipv4/neigh/default/gc_thresh3 = '1024'
01:45:22 I1110 01:45:22.188735 32279 port_mapping.cpp:1895] 
/proc/sys/net/ipv4/neigh/default/gc_thresh1 = '128'
01:45:22 I1110 01:45:22.188769 32279 port_mapping.cpp:1895] 
/proc/sys/net/ipv4/tcp_wmem = '4096 16384   4194304'
01:45:22 I1110 01:45:22.188803 32279 port_mapping.cpp:1895] 
/proc/sys/net/ipv4/tcp_synack_retries = '5'
01:45:22 I1110 01:45:22.188843 32279 port_mapping.cpp:1895] 
/proc/sys/net/core/rmem_max = '212992'
01:45:22 I1110 01:45:22.188877 32279 port_mapping.cpp:1895] 
/proc/sys/net/core/somaxconn = '128'
01:45:22 I1110 01:45:22.188908 32279 port_mapping.cpp:1895] 
/proc/sys/net/core/wmem_max = '212992'
01:45:22 I1110 01:45:22.188931 32279 port_mapping.cpp:1895] 
/proc/sys/net/ipv4/tcp_rmem = '4096 87380   6291456'
01:45:22 I1110 01:45:22.188951 32279 port_mapping.cpp:1895] 
/proc/sys/net/ipv4/tcp_keepalive_time = '7200'
01:45:22 I1110 01:45:22.188980 32279 port_mapping.cpp:1895] 
/proc/sys/net/ipv4/neigh/default/gc_thresh2 = '512'
01:45:22 I1110 01:45:22.189002 32279 port_mapping.cpp:1895] 
/proc/sys/net/core/netdev_max_backlog = '1000'
01:45:22 I1110 01:45:22.189054 32279 port_mapping.cpp:1895] 
/proc/sys/net/ipv4/tcp_keepalive_intvl = '75'
01:45:22 I1110 01:45:22.189086 32279 port_mapping.cpp:1895] 
/proc/sys/net/ipv4/tcp_keepalive_probes = '9'
01:45:22 I1110 01:45:22.189108 32279 port_mapping.cpp:1895] 
/proc/sys/net/ipv4/tcp_max_syn_backlog = '512'
01:45:22 I1110 01:45:22.189152 32279 port_mapping.cpp:1895] 
/proc/sys/net/ipv4/tcp_retries2 = '15'
01:45:22 I1110 01:45:22.192106 32279 linux_launcher.cpp:144] Using 
/sys/fs/cgroup/freezer as the freezer hierarchy for the Linux launcher
01:45:22 I1110 01:45:22.192456 27882 port_mapping.cpp:2537] Using non-ephemeral 
ports {} and ephemeral ports [30016,30032) for container 
17887ae1-a782-44cd-8b7b-e0aafaa31962 of executor ''
01:45:22 I1110 01:45:22.192945 27880 linux_launcher.cpp:492] Launching 
container 17887ae1-a782-44cd-8b7b-e0aafaa31962 and cloning with namespaces 
CLONE_NEWNS | CLONE_NEWNET
01:45:22 I1110 01:45:22.288069 27878 port_mapping.cpp:2602] Bind mounted 
'/proc/10333/ns/net' to '/run/netns/10333' for container 
17887ae1-a782-44cd-8b7b-e0aafaa31962
01:45:22 I1110 01:45:22.288162 27878 port_mapping.cpp:2618] Created network 
namespace handle symlink 
'/var/run/mesos/netns/17887ae1-a782-44cd-8b7b-e0aafaa31962' -> 
'/run/netns/10333'
01:45:22 I1110 01:45:22.289125 27878 port_mapping.cpp:2678] Adding IP packet 
filters with ports [30016,30031] for container 
17887ae1-a782-44cd-8b7b-e0aafaa31962
01:45:22 Executing pre-exec command '{"shell":true,"value":"#!/bin/sh\nset 
-xe\nmount --make-rslave /run/netns\ntest -f 
/proc/sys/net/ipv6/conf/all/disable_ipv6 && echo 1 > 
/proc/sys/net/ipv6/conf/all/disable_ipv6\nip link set lo address 
12:3b:cf:2b:ed:2a mtu 9001 up\nethtool -K ens3 rx off\nip link set ens3 address 
12:3b:cf:2b:ed:2a mtu 9001 up\nip addr add 172.16.10.54/24 dev ens3\nip route 
add default via 172.16.10.1\necho 30016 30031 > 
/proc/sys/net/ipv4/ip_local_port_range\necho 1 > 
/proc/sys/net/ipv4/conf/ens3/accept_local\necho 1 > 
/proc/sys/net/ipv4/conf/lo/accept_local\necho 1 > 
/proc/sys/net/ipv4/conf/lo/route_localnet\nif [ -f 
\"/proc/sys/net/ipv4/tcp_retries2\" ]; then\n echo '15' > 
/proc/sys/net/ipv4/tcp_retries2\nfi\nif [ -f 
\"/proc/sys/net/ipv4/tcp_max_syn_backlog\" ]; then\n echo '512' > 
/proc/sys/net/ipv4/tcp_max_syn_backlog\nfi\nif [ -f 
\"/proc/sys/net/ipv4/tcp_keepalive_probes\" ]; then\n echo '9' > 
/proc/sys/net/ipv4/tcp_keepalive_probes\nfi\nif [ -f 
\"/proc/sys/net/ipv4/tcp_synack_retries\" ]; then\n echo '5' > 
/proc/sys/net/ipv4/tcp_synack_retries\nfi\nif [ -f 
\"/proc/sys/net/ipv4/tcp_wmem\" ]; then\n echo '4096\t16384\t4194304' > 
/proc/sys/net/ipv4/tcp_wmem\nfi\nif [ -f 
\"/proc/sys/net/ipv4/neigh/default/gc_thresh1\" ]; then\n echo '128' > 
/proc/sys/net/ipv4/neigh/default/gc_thresh1\nfi\nif [ -f 
\"/proc/sys/net/ipv4/tcp_keepalive_intvl\" ]; then\n echo '75' > 
/proc/sys/net/ipv4/tcp_keepalive_intvl\nfi\nif [ -f 
\"/proc/sys/net/core/netdev_max_backlog\" ]; then\n echo '1000' > 
/proc/sys/net/core/netdev_max_backlog\nfi\nif [ -f 
\"/proc/sys/net/ipv4/neigh/default/gc_thresh2\" ]; then\n echo '512' > 
/proc/sys/net/ipv4/neigh/default/gc_thresh2\nfi\nif [ -f 
\"/proc/sys/net/ipv4/neigh/default/gc_thresh3\" ]; then\n echo '1024' > 
/proc/sys/net/ipv4/neigh/default/gc_thresh3\nfi\nif [ -f 
\"/proc/sys/net/core/rmem_max\" ]; then\n echo '212992' > 
/proc/sys/net/core/rmem_max\nfi\nif [ -f \"/proc/sys/net/core/somaxconn\" ]; 
then\n echo '128' > /proc/sys/net/core/somaxconn\nfi\nif [ -f 
\"/proc/sys/net/core/wmem_max\" ]; then\n echo '212992' > 
/proc/sys/net/core/wmem_max\nfi\nif [ -f \"/proc/sys/net/ipv4/tcp_rmem\" ]; 
then\n echo '4096\t87380\t6291456' > /proc/sys/net/ipv4/tcp_rmem\nfi\nif [ -f 
\"/proc/sys/net/ipv4/tcp_keepalive_time\" ]; then\n echo '7200' > 
/proc/sys/net/ipv4/tcp_keepalive_time\nfi\ntc qdisc add dev lo ingress\ntc 
qdisc add dev ens3 ingress\ntc filter add dev lo parent ffff:0 protocol ip prio 
770 u32 flowid ffff:0 match ip dst 172.16.10.54 action mirred egress redirect 
dev ens3\ntc filter add dev lo parent ffff:0 protocol ip prio 770 u32 flowid 
ffff:0 match ip dst 127.0.0.1 action mirred egress redirect dev ens3\ntc filter 
add dev lo parent ffff:0 protocol ip prio 769 u32 flowid ffff:0 match ip dport 
30016 fff0\ntc filter add dev ens3 parent ffff:0 protocol ip prio 770 u32 
flowid ffff:0 match ip dst 127.0.0.1 match ip dport 30016 fff0 action mirred 
egress redirect dev lo\ntc filter add dev lo parent ffff:0 protocol ip prio 514 
u32 flowid ffff:0 match ip protocol 1 0xff match ip dst 172.16.10.54\ntc filter 
add dev lo parent ffff:0 protocol ip prio 514 u32 flowid ffff:0 match ip 
protocol 1 0xff match ip dst 127.0.0.1\ntc filter show dev ens3 parent 
ffff:0\ntc filter show dev lo parent ffff:0\n"}'
01:45:22 + mount --make-rslave /run/netns
01:45:22 + test -f /proc/sys/net/ipv6/conf/all/disable_ipv6
01:45:22 + echo 1
01:45:22 + ip link set lo address 12:3b:cf:2b:ed:2a mtu 9001 up
01:45:22 + ethtool -K ens3 rx off
01:45:22 + ip link set ens3 address 12:3b:cf:2b:ed:2a mtu 9001 up
01:45:22 + ip addr add 172.16.10.54/24 dev ens3
01:45:22 + ip route add default via 172.16.10.1
01:45:22 + echo 30016 30031
01:45:22 + echo 1
01:45:22 + echo 1
01:45:22 + echo 1
01:45:22 + [ -f /proc/sys/net/ipv4/tcp_retries2 ]
01:45:22 + [ -f /proc/sys/net/ipv4/tcp_max_syn_backlog ]
01:45:22 + [ -f /proc/sys/net/ipv4/tcp_keepalive_probes ]
01:45:22 + [ -f /proc/sys/net/ipv4/tcp_synack_retries ]
01:45:22 + [ -f /proc/sys/net/ipv4/tcp_wmem ]
01:45:22 + [ -f /proc/sys/net/ipv4/neigh/default/gc_thresh1 ]
01:45:22 + [ -f /proc/sys/net/ipv4/tcp_keepalive_intvl ]
01:45:22 + [ -f /proc/sys/net/core/netdev_max_backlog ]
01:45:22 + [ -f /proc/sys/net/ipv4/neigh/default/gc_thresh2 ]
01:45:22 + [ -f /proc/sys/net/ipv4/neigh/default/gc_thresh3 ]
01:45:22 + [ -f /proc/sys/net/core/rmem_max ]
01:45:22 + [ -f /proc/sys/net/core/somaxconn ]
01:45:22 + echo 128
01:45:22 + [ -f /proc/sys/net/core/wmem_max ]
01:45:22 + [ -f /proc/sys/net/ipv4/tcp_rmem ]
01:45:22 + [ -f /proc/sys/net/ipv4/tcp_keepalive_time ]
01:45:22 + tc qdisc add dev lo ingress
01:45:22 + tc qdisc add dev ens3 ingress
01:45:22 + tc filter add dev lo parent ffff:0 protocol ip prio 770 u32 flowid 
ffff:0 match ip dst 172.16.10.54 action mirred egress redirect dev ens3
01:45:22 + tc filter add dev lo parent ffff:0 protocol ip prio 770 u32 flowid 
ffff:0 match ip dst 127.0.0.1 action mirred egress redirect dev ens3
01:45:22 + tc filter add dev lo parent ffff:0 protocol ip prio 769 u32 flowid 
ffff:0 match ip dport 30016 fff0
01:45:22 + tc filter add dev ens3 parent ffff:0 protocol ip prio 770 u32 flowid 
ffff:0 match ip dst 127.0.0.1 match ip dport 30016 fff0 action mirred egress 
redirect dev lo
01:45:22 + tc filter add dev lo parent ffff:0 protocol ip prio 514 u32 flowid 
ffff:0 match ip protocol 1 0xff match ip dst 172.16.10.54
01:45:22 + tc filter add dev lo parent ffff:0 protocol ip prio 514 u32 flowid 
ffff:0 match ip protocol 1 0xff match ip dst 127.0.0.1
01:45:22 + tc filter show dev ens3 parent ffff:0
01:45:22 filter protocol ip pref 770 u32 
01:45:22 filter protocol ip pref 770 u32 fh 800: ht divisor 1 
01:45:22 filter protocol ip pref 770 u32 fh 800::800 order 2048 key ht 800 bkt 
0 flowid ffff: 
01:45:22   match 7f000001/ffffffff at 16
01:45:22   match 00007540/0000fff0 at 20
01:45:22        action order 1: mirred (Egress Redirect to device lo) stolen
01:45:22        index 1455 ref 1 bind 1
01:45:22  
01:45:22 + tc filter show dev lo parent ffff:0
01:45:22 filter protocol ip pref 514 u32 
01:45:22 filter protocol ip pref 514 u32 fh 802: ht divisor 1 
01:45:22 filter protocol ip pref 514 u32 fh 802::800 order 2048 key ht 802 bkt 
0 flowid ffff: 
01:45:22   match 00010000/00ff0000 at 8
01:45:22   match ac100a36/ffffffff at 16
01:45:22 filter protocol ip pref 514 u32 fh 802::801 order 2049 key ht 802 bkt 
0 flowid ffff: 
01:45:22   match 00010000/00ff0000 at 8
01:45:22   match 7f000001/ffffffff at 16
01:45:22 filter protocol ip pref 769 u32 
01:45:22 filter protocol ip pref 769 u32 fh 801: ht divisor 1 
01:45:22 filter protocol ip pref 769 u32 fh 801::800 order 2048 key ht 801 bkt 
0 flowid ffff: 
01:45:22   match 00007540/0000fff0 at 20
01:45:22 filter protocol ip pref 770 u32 
01:45:22 filter protocol ip pref 770 u32 fh 800: ht divisor 1 
01:45:22 filter protocol ip pref 770 u32 fh 800::800 order 2048 key ht 800 bkt 
0 flowid ffff: 
01:45:22   match ac100a36/ffffffff at 16
01:45:22        action order 1: mirred (Egress Redirect to device ens3) stolen
01:45:22        index 1453 ref 1 bind 1
01:45:22  
01:45:22 filter protocol ip pref 770 u32 fh 800::801 order 2049 key ht 800 bkt 
0 flowid ffff: 
01:45:22   match 7f000001/ffffffff at 16
01:45:22        action order 1: mirred (Egress Redirect to device ens3) stolen
01:45:22        index 1454 ref 1 bind 1
01:45:22  
01:45:22 I1110 01:45:22.392458 27879 port_mapping.cpp:2537] Using non-ephemeral 
ports {} and ephemeral ports [30032,30048) for container 
17211825-a2a4-4d00-b36a-53ea585add5a of executor ''
01:45:22 I1110 01:45:22.393014 27881 linux_launcher.cpp:492] Launching 
container 17211825-a2a4-4d00-b36a-53ea585add5a and cloning with namespaces 
CLONE_NEWNS | CLONE_NEWNET
01:45:22 I1110 01:45:22.468039 27882 port_mapping.cpp:2602] Bind mounted 
'/proc/10394/ns/net' to '/run/netns/10394' for container 
17211825-a2a4-4d00-b36a-53ea585add5a
01:45:22 I1110 01:45:22.468124 27882 port_mapping.cpp:2618] Created network 
namespace handle symlink 
'/var/run/mesos/netns/17211825-a2a4-4d00-b36a-53ea585add5a' -> 
'/run/netns/10394'
01:45:22 I1110 01:45:22.468832 27882 port_mapping.cpp:2678] Adding IP packet 
filters with ports [30032,30047] for container 
17211825-a2a4-4d00-b36a-53ea585add5a
01:45:22 Executing pre-exec command '{"shell":true,"value":"#!/bin/sh\nset 
-xe\nmount --make-rslave /run/netns\ntest -f 
/proc/sys/net/ipv6/conf/all/disable_ipv6 && echo 1 > 
/proc/sys/net/ipv6/conf/all/disable_ipv6\nip link set lo address 
12:3b:cf:2b:ed:2a mtu 9001 up\nethtool -K ens3 rx off\nip link set ens3 address 
12:3b:cf:2b:ed:2a mtu 9001 up\nip addr add 172.16.10.54/24 dev ens3\nip route 
add default via 172.16.10.1\necho 30032 30047 > 
/proc/sys/net/ipv4/ip_local_port_range\necho 1 > 
/proc/sys/net/ipv4/conf/ens3/accept_local\necho 1 > 
/proc/sys/net/ipv4/conf/lo/accept_local\necho 1 > 
/proc/sys/net/ipv4/conf/lo/route_localnet\nif [ -f 
\"/proc/sys/net/ipv4/tcp_retries2\" ]; then\n echo '15' > 
/proc/sys/net/ipv4/tcp_retries2\nfi\nif [ -f 
\"/proc/sys/net/ipv4/tcp_max_syn_backlog\" ]; then\n echo '512' > 
/proc/sys/net/ipv4/tcp_max_syn_backlog\nfi\nif [ -f 
\"/proc/sys/net/ipv4/tcp_keepalive_probes\" ]; then\n echo '9' > 
/proc/sys/net/ipv4/tcp_keepalive_probes\nfi\nif [ -f 
\"/proc/sys/net/ipv4/tcp_synack_retries\" ]; then\n echo '5' > 
/proc/sys/net/ipv4/tcp_synack_retries\nfi\nif [ -f 
\"/proc/sys/net/ipv4/tcp_wmem\" ]; then\n echo '4096\t16384\t4194304' > 
/proc/sys/net/ipv4/tcp_wmem\nfi\nif [ -f 
\"/proc/sys/net/ipv4/neigh/default/gc_thresh1\" ]; then\n echo '128' > 
/proc/sys/net/ipv4/neigh/default/gc_thresh1\nfi\nif [ -f 
\"/proc/sys/net/ipv4/tcp_keepalive_intvl\" ]; then\n echo '75' > 
/proc/sys/net/ipv4/tcp_keepalive_intvl\nfi\nif [ -f 
\"/proc/sys/net/core/netdev_max_backlog\" ]; then\n echo '1000' > 
/proc/sys/net/core/netdev_max_backlog\nfi\nif [ -f 
\"/proc/sys/net/ipv4/neigh/default/gc_thresh2\" ]; then\n echo '512' > 
/proc/sys/net/ipv4/neigh/default/gc_thresh2\nfi\nif [ -f 
\"/proc/sys/net/ipv4/neigh/default/gc_thresh3\" ]; then\n echo '1024' > 
/proc/sys/net/ipv4/neigh/default/gc_thresh3\nfi\nif [ -f 
\"/proc/sys/net/core/rmem_max\" ]; then\n echo '212992' > 
/proc/sys/net/core/rmem_max\nfi\nif [ -f \"/proc/sys/net/core/somaxconn\" ]; 
then\n echo '128' > /proc/sys/net/core/somaxconn\nfi\nif [ -f 
\"/proc/sys/net/core/wmem_max\" ]; then\n echo '212992' > 
/proc/sys/net/core/wmem_max\nfi\nif [ -f \"/proc/sys/net/ipv4/tcp_rmem\" ]; 
then\n echo '4096\t87380\t6291456' > /proc/sys/net/ipv4/tcp_rmem\nfi\nif [ -f 
\"/proc/sys/net/ipv4/tcp_keepalive_time\" ]; then\n echo '7200' > 
/proc/sys/net/ipv4/tcp_keepalive_time\nfi\ntc qdisc add dev lo ingress\ntc 
qdisc add dev ens3 ingress\ntc filter add dev lo parent ffff:0 protocol ip prio 
770 u32 flowid ffff:0 match ip dst 172.16.10.54 action mirred egress redirect 
dev ens3\ntc filter add dev lo parent ffff:0 protocol ip prio 770 u32 flowid 
ffff:0 match ip dst 127.0.0.1 action mirred egress redirect dev ens3\ntc filter 
add dev lo parent ffff:0 protocol ip prio 769 u32 flowid ffff:0 match ip dport 
30032 fff0\ntc filter add dev ens3 parent ffff:0 protocol ip prio 770 u32 
flowid ffff:0 match ip dst 127.0.0.1 match ip dport 30032 fff0 action mirred 
egress redirect dev lo\ntc filter add dev lo parent ffff:0 protocol ip prio 514 
u32 flowid ffff:0 match ip protocol 1 0xff match ip dst 172.16.10.54\ntc filter 
add dev lo parent ffff:0 protocol ip prio 514 u32 flowid ffff:0 match ip 
protocol 1 0xff match ip dst 127.0.0.1\ntc filter show dev ens3 parent 
ffff:0\ntc filter show dev lo parent ffff:0\n"}'
01:45:22 + mount --make-rslave /run/netns
01:45:22 + test -f /proc/sys/net/ipv6/conf/all/disable_ipv6
01:45:22 + echo 1
01:45:22 + ip link set lo address 12:3b:cf:2b:ed:2a mtu 9001 up
01:45:22 + ethtool -K ens3 rx off
01:45:22 + ip link set ens3 address 12:3b:cf:2b:ed:2a mtu 9001 up
01:45:22 + ip addr add 172.16.10.54/24 dev ens3
01:45:22 + ip route add default via 172.16.10.1
01:45:22 + echo 30032 30047
01:45:22 + echo 1
01:45:22 + echo 1
01:45:22 + echo 1
01:45:22 + [ -f /proc/sys/net/ipv4/tcp_retries2 ]
01:45:22 + [ -f /proc/sys/net/ipv4/tcp_max_syn_backlog ]
01:45:22 + [ -f /proc/sys/net/ipv4/tcp_keepalive_probes ]
01:45:22 + [ -f /proc/sys/net/ipv4/tcp_synack_retries ]
01:45:22 + [ -f /proc/sys/net/ipv4/tcp_wmem ]
01:45:22 + [ -f /proc/sys/net/ipv4/neigh/default/gc_thresh1 ]
01:45:22 + [ -f /proc/sys/net/ipv4/tcp_keepalive_intvl ]
01:45:22 + [ -f /proc/sys/net/core/netdev_max_backlog ]
01:45:22 + [ -f /proc/sys/net/ipv4/neigh/default/gc_thresh2 ]
01:45:22 + [ -f /proc/sys/net/ipv4/neigh/default/gc_thresh3 ]
01:45:22 + [ -f /proc/sys/net/core/rmem_max ]
01:45:22 + [ -f /proc/sys/net/core/somaxconn ]
01:45:22 + echo 128
01:45:22 + [ -f /proc/sys/net/core/wmem_max ]
01:45:22 + [ -f /proc/sys/net/ipv4/tcp_rmem ]
01:45:22 + [ -f /proc/sys/net/ipv4/tcp_keepalive_time ]
01:45:22 + tc qdisc add dev lo ingress
01:45:22 + tc qdisc add dev ens3 ingress
01:45:22 + tc filter add dev lo parent ffff:0 protocol ip prio 770 u32 flowid 
ffff:0 match ip dst 172.16.10.54 action mirred egress redirect dev ens3
01:45:22 + tc filter add dev lo parent ffff:0 protocol ip prio 770 u32 flowid 
ffff:0 match ip dst 127.0.0.1 action mirred egress redirect dev ens3
01:45:22 + tc filter add dev lo parent ffff:0 protocol ip prio 769 u32 flowid 
ffff:0 match ip dport 30032 fff0
01:45:22 + tc filter add dev ens3 parent ffff:0 protocol ip prio 770 u32 flowid 
ffff:0 match ip dst 127.0.0.1 match ip dport 30032 fff0 action mirred egress 
redirect dev lo
01:45:22 + tc filter add dev lo parent ffff:0 protocol ip prio 514 u32 flowid 
ffff:0 match ip protocol 1 0xff match ip dst 172.16.10.54
01:45:22 + tc filter add dev lo parent ffff:0 protocol ip prio 514 u32 flowid 
ffff:0 match ip protocol 1 0xff match ip dst 127.0.0.1
01:45:22 + tc filter show dev ens3 parent ffff:0
01:45:22 filter protocol ip pref 770 u32 
01:45:22 filter protocol ip pref 770 u32 fh 800: ht divisor 1 
01:45:22 filter protocol ip pref 770 u32 fh 800::800 order 2048 key ht 800 bkt 
0 flowid ffff: 
01:45:22   match 7f000001/ffffffff at 16
01:45:22   match 00007550/0000fff0 at 20
01:45:22        action order 1: mirred (Egress Redirect to device lo) stolen
01:45:22        index 1469 ref 1 bind 1
01:45:22  
01:45:22 + tc filter show dev lo parent ffff:0
01:45:22 filter protocol ip pref 514 u32 
01:45:22 filter protocol ip pref 514 u32 fh 802: ht divisor 1 
01:45:22 filter protocol ip pref 514 u32 fh 802::800 order 2048 key ht 802 bkt 
0 flowid ffff: 
01:45:22   match 00010000/00ff0000 at 8
01:45:22   match ac100a36/ffffffff at 16
01:45:22 filter protocol ip pref 514 u32 fh 802::801 order 2049 key ht 802 bkt 
0 flowid ffff: 
01:45:22   match 00010000/00ff0000 at 8
01:45:22   match 7f000001/ffffffff at 16
01:45:22 filter protocol ip pref 769 u32 
01:45:22 filter protocol ip pref 769 u32 fh 801: ht divisor 1 
01:45:22 filter protocol ip pref 769 u32 fh 801::800 order 2048 key ht 801 bkt 
0 flowid ffff: 
01:45:22   match 00007550/0000fff0 at 20
01:45:22 filter protocol ip pref 770 u32 
01:45:22 filter protocol ip pref 770 u32 fh 800: ht divisor 1 
01:45:22 filter protocol ip pref 770 u32 fh 800::800 order 2048 key ht 800 bkt 
0 flowid ffff: 
01:45:22   match ac100a36/ffffffff at 16
01:45:22        action order 1: mirred (Egress Redirect to device ens3) stolen
01:45:22        index 1467 ref 1 bind 1
01:45:22  
01:45:22 filter protocol ip pref 770 u32 fh 800::801 order 2049 key ht 800 bkt 
0 flowid ffff: 
01:45:22   match 7f000001/ffffffff at 16
01:45:22        action order 1: mirred (Egress Redirect to device ens3) stolen
01:45:22        index 1468 ref 1 bind 1
01:45:22  
01:45:26 ../../src/tests/containerizer/port_mapping_tests.cpp:771: Failure
01:45:26 Value of: (os::read(trafficViaLoopback)).get()
01:45:26   Actual: ""
01:45:26 Expected: "hello1"
01:45:26 Which is: "hello1"
01:45:26 ../../src/tests/containerizer/port_mapping_tests.cpp:772: Failure
01:45:26 Value of: (os::read(trafficViaPublic)).get()
01:45:26   Actual: ""
01:45:26 Expected: "hello3"
01:45:26 Which is: "hello3"
01:45:26 I1110 01:45:26.582499 27882 linux_launcher.cpp:580] Asked to destroy 
container 17887ae1-a782-44cd-8b7b-e0aafaa31962
01:45:26 I1110 01:45:26.582576 27882 linux_launcher.cpp:622] Destroying cgroup 
'/sys/fs/cgroup/freezer/mesos/17887ae1-a782-44cd-8b7b-e0aafaa31962'
01:45:26 I1110 01:45:26.582832 27877 cgroups.cpp:2851] Freezing cgroup 
/sys/fs/cgroup/freezer/mesos/17887ae1-a782-44cd-8b7b-e0aafaa31962
01:45:26 I1110 01:45:26.583032 27883 cgroups.cpp:1242] Successfully froze 
cgroup /sys/fs/cgroup/freezer/mesos/17887ae1-a782-44cd-8b7b-e0aafaa31962 after 
151808ns
01:45:26 I1110 01:45:26.583253 27876 cgroups.cpp:2869] Thawing cgroup 
/sys/fs/cgroup/freezer/mesos/17887ae1-a782-44cd-8b7b-e0aafaa31962
01:45:26 I1110 01:45:26.583395 27876 cgroups.cpp:1271] Successfully thawed 
cgroup /sys/fs/cgroup/freezer/mesos/17887ae1-a782-44cd-8b7b-e0aafaa31962 after 
99328ns
01:45:26 I1110 01:45:26.680584 27876 linux_launcher.cpp:580] Asked to destroy 
container 17211825-a2a4-4d00-b36a-53ea585add5a
01:45:26 I1110 01:45:26.680630 27876 linux_launcher.cpp:622] Destroying cgroup 
'/sys/fs/cgroup/freezer/mesos/17211825-a2a4-4d00-b36a-53ea585add5a'
01:45:26 I1110 01:45:26.680843 27880 cgroups.cpp:2851] Freezing cgroup 
/sys/fs/cgroup/freezer/mesos/17211825-a2a4-4d00-b36a-53ea585add5a
01:45:26 I1110 01:45:26.680959 27883 cgroups.cpp:1242] Successfully froze 
cgroup /sys/fs/cgroup/freezer/mesos/17211825-a2a4-4d00-b36a-53ea585add5a after 
74752ns
01:45:26 I1110 01:45:26.681090 27876 cgroups.cpp:2869] Thawing cgroup 
/sys/fs/cgroup/freezer/mesos/17211825-a2a4-4d00-b36a-53ea585add5a
01:45:26 I1110 01:45:26.681202 27876 cgroups.cpp:1271] Successfully thawed 
cgroup /sys/fs/cgroup/freezer/mesos/17211825-a2a4-4d00-b36a-53ea585add5a after 
71680ns
01:45:26 I1110 01:45:26.681584 27879 port_mapping.cpp:3366] Freed ephemeral 
ports [30016,30032) used by container 17887ae1-a782-44cd-8b7b-e0aafaa31962 with 
pid 10333
01:45:26 I1110 01:45:26.681614 27879 port_mapping.cpp:3395] Removing IP packet 
filters with ports [30016,30031] for container with pid 10333
01:45:26 I1110 01:45:26.750728 27879 port_mapping.cpp:3619] Successfully 
performed cleanup for pid 10333
01:45:26 I1110 01:45:26.751004 27883 port_mapping.cpp:3366] Freed ephemeral 
ports [30032,30048) used by container 17211825-a2a4-4d00-b36a-53ea585add5a with 
pid 10394
01:45:26 I1110 01:45:26.751032 27883 port_mapping.cpp:3395] Removing IP packet 
filters with ports [30032,30047] for container with pid 10394
01:45:26 I1110 01:45:26.786705 27883 port_mapping.cpp:3619] Successfully 
performed cleanup for pid 10394
01:45:26 [  FAILED  ] PortMappingIsolatorTest.ROOT_NC_ContainerToContainerUDP 
(4620 ms)
01:45:26 [ RUN      ] PortMappingIsolatorTest.ROOT_NC_HostToContainerUDP
01:45:26 I1110 01:45:26.790237 32279 port_mapping_tests.cpp:238] Using ens3 as 
the public interface
01:45:26 I1110 01:45:26.790508 32279 port_mapping_tests.cpp:246] Using lo as 
the loopback interface
01:45:26 I1110 01:45:26.807349 32279 port_mapping.cpp:1570] Using ens3 as the 
public interface
01:45:26 I1110 01:45:26.807683 32279 port_mapping.cpp:1596] Using lo as the 
loopback interface
01:45:26 I1110 01:45:26.808553 32279 port_mapping.cpp:1895] 
/proc/sys/net/ipv4/neigh/default/gc_thresh3 = '1024'
01:45:26 I1110 01:45:26.808604 32279 port_mapping.cpp:1895] 
/proc/sys/net/ipv4/neigh/default/gc_thresh1 = '128'
01:45:26 I1110 01:45:26.808663 32279 port_mapping.cpp:1895] 
/proc/sys/net/ipv4/tcp_wmem = '4096 16384   4194304'
01:45:26 I1110 01:45:26.808719 32279 port_mapping.cpp:1895] 
/proc/sys/net/ipv4/tcp_synack_retries = '5'
01:45:26 I1110 01:45:26.808786 32279 port_mapping.cpp:1895] 
/proc/sys/net/core/rmem_max = '212992'
01:45:26 I1110 01:45:26.808845 32279 port_mapping.cpp:1895] 
/proc/sys/net/core/somaxconn = '128'
01:45:26 I1110 01:45:26.808899 32279 port_mapping.cpp:1895] 
/proc/sys/net/core/wmem_max = '212992'
01:45:26 I1110 01:45:26.808957 32279 port_mapping.cpp:1895] 
/proc/sys/net/ipv4/tcp_rmem = '4096 87380   6291456'
01:45:26 I1110 01:45:26.809013 32279 port_mapping.cpp:1895] 
/proc/sys/net/ipv4/tcp_keepalive_time = '7200'
01:45:26 I1110 01:45:26.809067 32279 port_mapping.cpp:1895] 
/proc/sys/net/ipv4/neigh/default/gc_thresh2 = '512'
01:45:26 I1110 01:45:26.809123 32279 port_mapping.cpp:1895] 
/proc/sys/net/core/netdev_max_backlog = '1000'
01:45:26 I1110 01:45:26.809180 32279 port_mapping.cpp:1895] 
/proc/sys/net/ipv4/tcp_keepalive_intvl = '75'
01:45:26 I1110 01:45:26.809226 32279 port_mapping.cpp:1895] 
/proc/sys/net/ipv4/tcp_keepalive_probes = '9'
01:45:26 I1110 01:45:26.809278 32279 port_mapping.cpp:1895] 
/proc/sys/net/ipv4/tcp_max_syn_backlog = '512'
01:45:26 I1110 01:45:26.809325 32279 port_mapping.cpp:1895] 
/proc/sys/net/ipv4/tcp_retries2 = '15'
01:45:26 I1110 01:45:26.812307 32279 linux_launcher.cpp:144] Using 
/sys/fs/cgroup/freezer as the freezer hierarchy for the Linux launcher
01:45:26 I1110 01:45:26.812687 27878 port_mapping.cpp:2537] Using non-ephemeral 
ports {} and ephemeral ports [30016,30032) for container 
555f3df2-dfe3-4323-8286-b011c23a2614 of executor ''
01:45:26 I1110 01:45:26.813184 27881 linux_launcher.cpp:492] Launching 
container 555f3df2-dfe3-4323-8286-b011c23a2614 and cloning with namespaces 
CLONE_NEWNS | CLONE_NEWNET
01:45:26 I1110 01:45:26.912220 27883 port_mapping.cpp:2602] Bind mounted 
'/proc/10475/ns/net' to '/run/netns/10475' for container 
555f3df2-dfe3-4323-8286-b011c23a2614
01:45:26 I1110 01:45:26.912309 27883 port_mapping.cpp:2618] Created network 
namespace handle symlink 
'/var/run/mesos/netns/555f3df2-dfe3-4323-8286-b011c23a2614' -> 
'/run/netns/10475'
01:45:26 I1110 01:45:26.913125 27883 port_mapping.cpp:2678] Adding IP packet 
filters with ports [30016,30031] for container 
555f3df2-dfe3-4323-8286-b011c23a2614
01:45:27 Executing pre-exec command '{"shell":true,"value":"#!/bin/sh\nset 
-xe\nmount --make-rslave /run/netns\ntest -f 
/proc/sys/net/ipv6/conf/all/disable_ipv6 && echo 1 > 
/proc/sys/net/ipv6/conf/all/disable_ipv6\nip link set lo address 
12:3b:cf:2b:ed:2a mtu 9001 up\nethtool -K ens3 rx off\nip link set ens3 address 
12:3b:cf:2b:ed:2a mtu 9001 up\nip addr add 172.16.10.54/24 dev ens3\nip route 
add default via 172.16.10.1\necho 30016 30031 > 
/proc/sys/net/ipv4/ip_local_port_range\necho 1 > 
/proc/sys/net/ipv4/conf/ens3/accept_local\necho 1 > 
/proc/sys/net/ipv4/conf/lo/accept_local\necho 1 > 
/proc/sys/net/ipv4/conf/lo/route_localnet\nif [ -f 
\"/proc/sys/net/ipv4/tcp_retries2\" ]; then\n echo '15' > 
/proc/sys/net/ipv4/tcp_retries2\nfi\nif [ -f 
\"/proc/sys/net/ipv4/tcp_max_syn_backlog\" ]; then\n echo '512' > 
/proc/sys/net/ipv4/tcp_max_syn_backlog\nfi\nif [ -f 
\"/proc/sys/net/ipv4/tcp_keepalive_probes\" ]; then\n echo '9' > 
/proc/sys/net/ipv4/tcp_keepalive_probes\nfi\nif [ -f 
\"/proc/sys/net/ipv4/tcp_synack_retries\" ]; then\n echo '5' > 
/proc/sys/net/ipv4/tcp_synack_retries\nfi\nif [ -f 
\"/proc/sys/net/ipv4/tcp_wmem\" ]; then\n echo '4096\t16384\t4194304' > 
/proc/sys/net/ipv4/tcp_wmem\nfi\nif [ -f 
\"/proc/sys/net/ipv4/neigh/default/gc_thresh1\" ]; then\n echo '128' > 
/proc/sys/net/ipv4/neigh/default/gc_thresh1\nfi\nif [ -f 
\"/proc/sys/net/ipv4/tcp_keepalive_intvl\" ]; then\n echo '75' > 
/proc/sys/net/ipv4/tcp_keepalive_intvl\nfi\nif [ -f 
\"/proc/sys/net/core/netdev_max_backlog\" ]; then\n echo '1000' > 
/proc/sys/net/core/netdev_max_backlog\nfi\nif [ -f 
\"/proc/sys/net/ipv4/neigh/default/gc_thresh2\" ]; then\n echo '512' > 
/proc/sys/net/ipv4/neigh/default/gc_thresh2\nfi\nif [ -f 
\"/proc/sys/net/ipv4/neigh/default/gc_thresh3\" ]; then\n echo '1024' > 
/proc/sys/net/ipv4/neigh/default/gc_thresh3\nfi\nif [ -f 
\"/proc/sys/net/core/rmem_max\" ]; then\n echo '212992' > 
/proc/sys/net/core/rmem_max\nfi\nif [ -f \"/proc/sys/net/core/somaxconn\" ]; 
then\n echo '128' > /proc/sys/net/core/somaxconn\nfi\nif [ -f 
\"/proc/sys/net/core/wmem_max\" ]; then\n echo '212992' > 
/proc/sys/net/core/wmem_max\nfi\nif [ -f \"/proc/sys/net/ipv4/tcp_rmem\" ]; 
then\n echo '4096\t87380\t6291456' > /proc/sys/net/ipv4/tcp_rmem\nfi\nif [ -f 
\"/proc/sys/net/ipv4/tcp_keepalive_time\" ]; then\n echo '7200' > 
/proc/sys/net/ipv4/tcp_keepalive_time\nfi\ntc qdisc add dev lo ingress\ntc 
qdisc add dev ens3 ingress\ntc filter add dev lo parent ffff:0 protocol ip prio 
770 u32 flowid ffff:0 match ip dst 172.16.10.54 action mirred egress redirect 
dev ens3\ntc filter add dev lo parent ffff:0 protocol ip prio 770 u32 flowid 
ffff:0 match ip dst 127.0.0.1 action mirred egress redirect dev ens3\ntc filter 
add dev lo parent ffff:0 protocol ip prio 769 u32 flowid ffff:0 match ip dport 
30016 fff0\ntc filter add dev ens3 parent ffff:0 protocol ip prio 770 u32 
flowid ffff:0 match ip dst 127.0.0.1 match ip dport 30016 fff0 action mirred 
egress redirect dev lo\ntc filter add dev lo parent ffff:0 protocol ip prio 514 
u32 flowid ffff:0 match ip protocol 1 0xff match ip dst 172.16.10.54\ntc filter 
add dev lo parent ffff:0 protocol ip prio 514 u32 flowid ffff:0 match ip 
protocol 1 0xff match ip dst 127.0.0.1\ntc filter show dev ens3 parent 
ffff:0\ntc filter show dev lo parent ffff:0\n"}'
01:45:27 + mount --make-rslave /run/netns
01:45:27 + test -f /proc/sys/net/ipv6/conf/all/disable_ipv6
01:45:27 + echo 1
01:45:27 + ip link set lo address 12:3b:cf:2b:ed:2a mtu 9001 up
01:45:27 + ethtool -K ens3 rx off
01:45:27 + ip link set ens3 address 12:3b:cf:2b:ed:2a mtu 9001 up
01:45:27 + ip addr add 172.16.10.54/24 dev ens3
01:45:27 + ip route add default via 172.16.10.1
01:45:27 + echo 30016 30031
01:45:27 + echo 1
01:45:27 + echo 1
01:45:27 + echo 1
01:45:27 + [ -f /proc/sys/net/ipv4/tcp_retries2 ]
01:45:27 + [ -f /proc/sys/net/ipv4/tcp_max_syn_backlog ]
01:45:27 + [ -f /proc/sys/net/ipv4/tcp_keepalive_probes ]
01:45:27 + [ -f /proc/sys/net/ipv4/tcp_synack_retries ]
01:45:27 + [ -f /proc/sys/net/ipv4/tcp_wmem ]
01:45:27 + [ -f /proc/sys/net/ipv4/neigh/default/gc_thresh1 ]
01:45:27 + [ -f /proc/sys/net/ipv4/tcp_keepalive_intvl ]
01:45:27 + [ -f /proc/sys/net/core/netdev_max_backlog ]
01:45:27 + [ -f /proc/sys/net/ipv4/neigh/default/gc_thresh2 ]
01:45:27 + [ -f /proc/sys/net/ipv4/neigh/default/gc_thresh3 ]
01:45:27 + [ -f /proc/sys/net/core/rmem_max ]
01:45:27 + [ -f /proc/sys/net/core/somaxconn ]
01:45:27 + echo 128
01:45:27 + [ -f /proc/sys/net/core/wmem_max ]
01:45:27 + [ -f /proc/sys/net/ipv4/tcp_rmem ]
01:45:27 + [ -f /proc/sys/net/ipv4/tcp_keepalive_time ]
01:45:27 + tc qdisc add dev lo ingress
01:45:27 + tc qdisc add dev ens3 ingress
01:45:27 + tc filter add dev lo parent ffff:0 protocol ip prio 770 u32 flowid 
ffff:0 match ip dst 172.16.10.54 action mirred egress redirect dev ens3
01:45:27 + tc filter add dev lo parent ffff:0 protocol ip prio 770 u32 flowid 
ffff:0 match ip dst 127.0.0.1 action mirred egress redirect dev ens3
01:45:27 + tc filter add dev lo parent ffff:0 protocol ip prio 769 u32 flowid 
ffff:0 match ip dport 30016 fff0
01:45:27 + tc filter add dev ens3 parent ffff:0 protocol ip prio 770 u32 flowid 
ffff:0 match ip dst 127.0.0.1 match ip dport 30016 fff0 action mirred egress 
redirect dev lo
01:45:27 + tc filter add dev lo parent ffff:0 protocol ip prio 514 u32 flowid 
ffff:0 match ip protocol 1 0xff match ip dst 172.16.10.54
01:45:27 + tc filter add dev lo parent ffff:0 protocol ip prio 514 u32 flowid 
ffff:0 match ip protocol 1 0xff match ip dst 127.0.0.1
01:45:27 + tc filter show dev ens3 parent ffff:0
01:45:27 filter protocol ip pref 770 u32 
01:45:27 filter protocol ip pref 770 u32 fh 800: ht divisor 1 
01:45:27 filter protocol ip pref 770 u32 fh 800::800 order 2048 key ht 800 bkt 
0 flowid ffff: 
01:45:27   match 7f000001/ffffffff at 16
01:45:27   match 00007540/0000fff0 at 20
01:45:27        action order 1: mirred (Egress Redirect to device lo) stolen
01:45:27        index 1483 ref 1 bind 1
01:45:27  
01:45:27 + tc filter show dev lo parent ffff:0
01:45:27 filter protocol ip pref 514 u32 
01:45:27 filter protocol ip pref 514 u32 fh 802: ht divisor 1 
01:45:27 filter protocol ip pref 514 u32 fh 802::800 order 2048 key ht 802 bkt 
0 flowid ffff: 
01:45:27   match 00010000/00ff0000 at 8
01:45:27   match ac100a36/ffffffff at 16
01:45:27 filter protocol ip pref 514 u32 fh 802::801 order 2049 key ht 802 bkt 
0 flowid ffff: 
01:45:27   match 00010000/00ff0000 at 8
01:45:27   match 7f000001/ffffffff at 16
01:45:27 filter protocol ip pref 769 u32 
01:45:27 filter protocol ip pref 769 u32 fh 801: ht divisor 1 
01:45:27 filter protocol ip pref 769 u32 fh 801::800 order 2048 key ht 801 bkt 
0 flowid ffff: 
01:45:27   match 00007540/0000fff0 at 20
01:45:27 filter protocol ip pref 770 u32 
01:45:27 filter protocol ip pref 770 u32 fh 800: ht divisor 1 
01:45:27 filter protocol ip pref 770 u32 fh 800::800 order 2048 key ht 800 bkt 
0 flowid ffff: 
01:45:27   match ac100a36/ffffffff at 16
01:45:27        action order 1: mirred (Egress Redirect to device ens3) stolen
01:45:27        index 1481 ref 1 bind 1
01:45:27  
01:45:27 filter protocol ip pref 770 u32 fh 800::801 order 2049 key ht 800 bkt 
0 flowid ffff: 
01:45:27   match 7f000001/ffffffff at 16
01:45:27        action order 1: mirred (Egress Redirect to device ens3) stolen
01:45:27        index 1482 ref 1 bind 1
01:45:27  
{noformat}
After that last line, things are stuck.


was (Author: tillt):
Just observed this again on Ubuntu16.04 (4.4 kernel) within our internal CI.

> PortMappingIsolatorTests get kernel stuck.
> ------------------------------------------
>
>                 Key: MESOS-4646
>                 URL: https://issues.apache.org/jira/browse/MESOS-4646
>             Project: Mesos
>          Issue Type: Bug
>    Affects Versions: 1.8.0
>         Environment: Linux Kernel 3.19.9-49-generic,
> libnl-3.2.27
>            Reporter: Till Toenshoff
>            Priority: Major
>              Labels: flaky, flaky-test
>
> {noformat}
> $ sudo ./bin/mesos-tests.sh --gtest_filter="*PortMappingIsolatorTest*"
> Source directory: /home/till/scratchpad/mesos
> Build directory: /home/till/scratchpad/mesos/build
> -------------------------------------------------------------
> We cannot run any cgroups tests that require mounting
> hierarchies because you have the following hierarchies mounted:
> /sys/fs/cgroup/blkio, /sys/fs/cgroup/cpu, /sys/fs/cgroup/cpuacct, 
> /sys/fs/cgroup/cpuset, /sys/fs/cgroup/devices, /sys/fs/cgroup/freezer, 
> /sys/fs/cgroup/hugetlb, /sys/fs/cgroup/memory, /sys/fs/cgroup/net_cls, 
> /sys/fs/cgroup/net_prio, /sys/fs/cgroup/perf_event, /sys/fs/cgroup/systemd
> We'll disable the CgroupsNoHierarchyTest test fixture for now.
> -------------------------------------------------------------
> WARNING: perf not found for kernel 3.19.0-49
>   You may need to install the following packages for this specific kernel:
>     linux-tools-3.19.0-49-generic
>     linux-cloud-tools-3.19.0-49-generic
>   You may also want to install one of the following packages to keep up to 
> date:
>     linux-tools-generic-lts-<series>
>     linux-cloud-tools-generic-lts-<series>
> -------------------------------------------------------------
> No 'perf' command found so no 'perf' tests will be run
> -------------------------------------------------------------
> WARNING: perf not found for kernel 3.19.0-49
>   You may need to install the following packages for this specific kernel:
>     linux-tools-3.19.0-49-generic
>     linux-cloud-tools-3.19.0-49-generic
>   You may also want to install one of the following packages to keep up to 
> date:
>     linux-tools-generic-lts-<series>
>     linux-cloud-tools-generic-lts-<series>
> -------------------------------------------------------------
> The 'perf' command wasn't found so tests using it
> to sample the 'cycles' hardware event will not be run.
> -------------------------------------------------------------
> /bin/nc
> /usr/local/bin/curl
> Note: Google Test filter = 
> *PortMappingIsolatorTest*-HierarchicalAllocator_BENCHMARK_Test.DeclineOffers:MesosContainerizerSlaveRecoveryTest.CGROUPS_ROOT_PerfRollForward:PerfEventIsolatorTest.ROOT_CGROUPS_Sample:UserCgroupIsolatorTest/0.ROOT_CGROUPS_UserCgroup:UserCgroupIsolatorTest/1.ROOT_CGROUPS_UserCgroup:UserCgroupIsolatorTest/2.ROOT_CGROUPS_UserCgroup:CgroupsNoHierarchyTest.ROOT_CGROUPS_NOHIERARCHY_MountUnmountHierarchy:CgroupsAnyHierarchyWithPerfEventTest.ROOT_CGROUPS_Perf:PerfTest.ROOT_Events:PerfTest.ROOT_Sample:PerfTest.Parse:SlaveAndFrameworkCount/HierarchicalAllocator_BENCHMARK_Test.AddAndUpdateSlave/0:SlaveAndFrameworkCount/HierarchicalAllocator_BENCHMARK_Test.AddAndUpdateSlave/1:SlaveAndFrameworkCount/HierarchicalAllocator_BENCHMARK_Test.AddAndUpdateSlave/2:SlaveAndFrameworkCount/HierarchicalAllocator_BENCHMARK_Test.AddAndUpdateSlave/3:SlaveAndFrameworkCount/HierarchicalAllocator_BENCHMARK_Test.AddAndUpdateSlave/4:SlaveAndFrameworkCount/HierarchicalAllocator_BENCHMARK_Test.AddAndUpdateSlave/5:SlaveAndFrameworkCount/HierarchicalAllocator_BENCHMARK_Test.AddAndUpdateSlave/6:SlaveAndFrameworkCount/HierarchicalAllocator_BENCHMARK_Test.AddAndUpdateSlave/7:SlaveAndFrameworkCount/HierarchicalAllocator_BENCHMARK_Test.AddAndUpdateSlave/8:SlaveAndFrameworkCount/HierarchicalAllocator_BENCHMARK_Test.AddAndUpdateSlave/9:SlaveAndFrameworkCount/HierarchicalAllocator_BENCHMARK_Test.AddAndUpdateSlave/10:SlaveAndFrameworkCount/HierarchicalAllocator_BENCHMARK_Test.AddAndUpdateSlave/11:SlaveAndFrameworkCount/HierarchicalAllocator_BENCHMARK_Test.AddAndUpdateSlave/12:SlaveAndFrameworkCount/HierarchicalAllocator_BENCHMARK_Test.AddAndUpdateSlave/13:SlaveAndFrameworkCount/HierarchicalAllocator_BENCHMARK_Test.AddAndUpdateSlave/14:SlaveAndFrameworkCount/HierarchicalAllocator_BENCHMARK_Test.AddAndUpdateSlave/15:SlaveAndFrameworkCount/HierarchicalAllocator_BENCHMARK_Test.AddAndUpdateSlave/16:SlaveAndFrameworkCount/HierarchicalAllocator_BENCHMARK_Test.AddAndUpdateSlave/17:SlaveAndFrameworkCount/HierarchicalAllocator_BENCHMARK_Test.AddAndUpdateSlave/18:SlaveAndFrameworkCount/HierarchicalAllocator_BENCHMARK_Test.AddAndUpdateSlave/19:SlaveAndFrameworkCount/HierarchicalAllocator_BENCHMARK_Test.AddAndUpdateSlave/20:SlaveAndFrameworkCount/HierarchicalAllocator_BENCHMARK_Test.AddAndUpdateSlave/21:SlaveAndFrameworkCount/HierarchicalAllocator_BENCHMARK_Test.AddAndUpdateSlave/22:SlaveAndFrameworkCount/HierarchicalAllocator_BENCHMARK_Test.AddAndUpdateSlave/23:SlaveAndFrameworkCount/HierarchicalAllocator_BENCHMARK_Test.AddAndUpdateSlave/24:SlaveAndFrameworkCount/HierarchicalAllocator_BENCHMARK_Test.AddAndUpdateSlave/25:SlaveAndFrameworkCount/HierarchicalAllocator_BENCHMARK_Test.AddAndUpdateSlave/26:SlaveAndFrameworkCount/HierarchicalAllocator_BENCHMARK_Test.AddAndUpdateSlave/27:SlaveAndFrameworkCount/HierarchicalAllocator_BENCHMARK_Test.AddAndUpdateSlave/28:SlaveAndFrameworkCount/HierarchicalAllocator_BENCHMARK_Test.AddAndUpdateSlave/29:SlaveAndFrameworkCount/HierarchicalAllocator_BENCHMARK_Test.AddAndUpdateSlave/30:SlaveAndFrameworkCount/HierarchicalAllocator_BENCHMARK_Test.AddAndUpdateSlave/31:SlaveAndFrameworkCount/HierarchicalAllocator_BENCHMARK_Test.AddAndUpdateSlave/32:SlaveAndFrameworkCount/HierarchicalAllocator_BENCHMARK_Test.AddAndUpdateSlave/33:SlaveAndFrameworkCount/HierarchicalAllocator_BENCHMARK_Test.AddAndUpdateSlave/34:SlaveAndFrameworkCount/HierarchicalAllocator_BENCHMARK_Test.AddAndUpdateSlave/35:SlaveCount/Registrar_BENCHMARK_Test.Performance/0:SlaveCount/Registrar_BENCHMARK_Test.Performance/1:SlaveCount/Registrar_BENCHMARK_Test.Performance/2:SlaveCount/Registrar_BENCHMARK_Test.Performance/3
> [==========] Running 11 tests from 1 test case.
> [----------] Global test environment set-up.
> [----------] 11 tests from PortMappingIsolatorTest
> [ RUN      ] PortMappingIsolatorTest.ROOT_NC_ContainerToContainerTCP
> + mount --make-rslave /var/run/netns
> + echo 1
> + ip link set lo address 00:0c:29:ed:df:d8 mtu 1500 up
> + ethtool -K eth0 rx off
> + ip link set eth0 address 00:0c:29:ed:df:d8 up
> + ip addr add 192.168.178.39/24 dev eth0
> + ip route add default via 192.168.178.1
> + echo 30016 30031
> + echo 1
> + echo 1
> + echo 1
> + [ -f /proc/sys/net/ipv4/tcp_retries2 ]
> + [ -f /proc/sys/net/ipv4/tcp_max_syn_backlog ]
> + [ -f /proc/sys/net/ipv4/tcp_keepalive_probes ]
> + [ -f /proc/sys/net/ipv4/neigh/default/gc_thresh3 ]
> + [ -f /proc/sys/net/ipv4/neigh/default/gc_thresh1 ]
> + [ -f /proc/sys/net/ipv4/tcp_wmem ]
> + [ -f /proc/sys/net/ipv4/tcp_keepalive_intvl ]
> + [ -f /proc/sys/net/core/netdev_max_backlog ]
> + [ -f /proc/sys/net/ipv4/neigh/default/gc_thresh2 ]
> + [ -f /proc/sys/net/ipv4/tcp_synack_retries ]
> + [ -f /proc/sys/net/core/somaxconn ]
> + echo 128
> + [ -f /proc/sys/net/core/rmem_max ]
> + [ -f /proc/sys/net/ipv4/tcp_rmem ]
> + [ -f /proc/sys/net/core/wmem_max ]
> + [ -f /proc/sys/net/ipv4/tcp_keepalive_time ]
> + tc qdisc add dev lo ingress
> + tc qdisc add dev eth0 ingress
> + tc filter add dev lo parent ffff:0 protocol ip prio 770 u32 flowid ffff:0 
> match ip dst 192.168.178.39 action mirred egress redirect dev eth0
> + tc filter add dev lo parent ffff:0 protocol ip prio 770 u32 flowid ffff:0 
> match ip dst 127.0.0.1 action mirred egress redirect dev eth0
> + tc filter add dev lo parent ffff:0 protocol ip prio 769 u32 flowid ffff:0 
> match ip dport 30016 fff0
> + tc filter add dev eth0 parent ffff:0 protocol ip prio 770 u32 flowid ffff:0 
> match ip dst 127.0.0.1 match ip dport 30016 fff0 action mirred egress 
> redirect dev lo
> + tc filter add dev lo parent ffff:0 protocol ip prio 769 u32 flowid ffff:0 
> match ip dport 31000 fff8
> + tc filter add dev eth0 parent ffff:0 protocol ip prio 770 u32 flowid ffff:0 
> match ip dst 127.0.0.1 match ip dport 31000 fff8 action mirred egress 
> redirect dev lo
> + tc filter add dev lo parent ffff:0 protocol ip prio 769 u32 flowid ffff:0 
> match ip dport 31008 ffe0
> + tc filter add dev eth0 parent ffff:0 protocol ip prio 770 u32 flowid ffff:0 
> match ip dst 127.0.0.1 match ip dport 31008 ffe0 action mirred egress 
> redirect dev lo
> + tc filter add dev lo parent ffff:0 protocol ip prio 769 u32 flowid ffff:0 
> match ip dport 31040 ffc0
> + tc filter add dev eth0 parent ffff:0 protocol ip prio 770 u32 flowid ffff:0 
> match ip dst 127.0.0.1 match ip dport 31040 ffc0 action mirred egress 
> redirect dev lo
> + tc filter add dev lo parent ffff:0 protocol ip prio 769 u32 flowid ffff:0 
> match ip dport 31104 ff80
> + tc filter add dev eth0 parent ffff:0 protocol ip prio 770 u32 flowid ffff:0 
> match ip dst 127.0.0.1 match ip dport 31104 ff80 action mirred egress 
> redirect dev lo
> + tc filter add dev lo parent ffff:0 protocol ip prio 769 u32 flowid ffff:0 
> match ip dport 31232 ff00
> + tc filter add dev eth0 parent ffff:0 protocol ip prio 770 u32 flowid ffff:0 
> match ip dst 127.0.0.1 match ip dport 31232 ff00 action mirred egress 
> redirect dev lo
> + tc filter add dev lo parent ffff:0 protocol ip prio 769 u32 flowid ffff:0 
> match ip dport 31488 fff8
> + tc filter add dev eth0 parent ffff:0 protocol ip prio 770 u32 flowid ffff:0 
> match ip dst 127.0.0.1 match ip dport 31488 fff8 action mirred egress 
> redirect dev lo
> + tc filter add dev lo parent ffff:0 protocol ip prio 769 u32 flowid ffff:0 
> match ip dport 31496 fffc
> + tc filter add dev eth0 parent ffff:0 protocol ip prio 770 u32 flowid ffff:0 
> match ip dst 127.0.0.1 match ip dport 31496 fffc action mirred egress 
> redirect dev lo
> + tc filter add dev lo parent ffff:0 protocol ip prio 514 u32 flowid ffff:0 
> match ip protocol 1 0xff match ip dst 192.168.178.39
> + tc filter add dev lo parent ffff:0 protocol ip prio 514 u32 flowid ffff:0 
> match ip protocol 1 0xff match ip dst 127.0.0.1
> + tc filter show dev eth0 parent ffff:0
> filter protocol ip pref 770 u32
> filter protocol ip pref 770 u32 fh 800: ht divisor 1
> filter protocol ip pref 770 u32 fh 800::800 order 2048 key ht 800 bkt 0 
> flowid ffff:
>   match 7f000001/ffffffff at 16
>   match 00007540/0000fff0 at 20
>       action order 1: mirred (Egress Redirect to device lo) stolen
>       index 47 ref 1 bind 1
> filter protocol ip pref 770 u32 fh 800::801 order 2049 key ht 800 bkt 0 
> flowid ffff:
>   match 7f000001/ffffffff at 16
>   match 00007918/0000fff8 at 20
>       action order 33: mirred (Egress Redirect to device lo) stolen
>       index 48 ref 1 bind 1
> filter protocol ip pref 770 u32 fh 800::802 order 2050 key ht 800 bkt 0 
> flowid ffff:
>   match 7f000001/ffffffff at 16
>   match 00007920/0000ffe0 at 20
>       action order 65: mirred (Egress Redirect to device lo) stolen
>       index 49 ref 1 bind 1
> filter protocol ip pref 770 u32 fh 800::803 order 2051 key ht 800 bkt 0 
> flowid ffff:
>   match 7f000001/ffffffff at 16
>   match 00007940/0000ffc0 at 20
>       action order 97: mirred (Egress Redirect to device lo) stolen
>       index 50 ref 1 bind 1
> filter protocol ip pref 770 u32 fh 800::804 order 2052 key ht 800 bkt 0 
> flowid ffff:
>   match 7f000001/ffffffff at 16
>   match 00007980/0000ff80 at 20
>       action order 129: mirred (Egress Redirect to device lo) stolen
>       index 51 ref 1 bind 1
> filter protocol ip pref 770 u32 fh 800::805 order 2053 key ht 800 bkt 0 
> flowid ffff:
>   match 7f000001/ffffffff at 16
>   match 00007a00/0000ff00 at 20
>       action order 161: mirred (Egress Redirect to device lo) stolen
>       index 52 ref 1 bind 1
> filter protocol ip pref 770 u32 fh 800::806 order 2054 key ht 800 bkt 0 
> flowid ffff:
>   match 7f000001/ffffffff at 16
>   match 00007b00/0000fff8 at 20
>       action order 193: mirred (Egress Redirect to device lo) stolen
>       index 53 ref 1 bind 1
> filter protocol ip pref 770 u32 fh 800::807 order 2055 key ht 800 bkt 0 
> flowid ffff:
>   match 7f000001/ffffffff at 16
>   match 00007b08/0000fffc at 20
>       action order 225: mirred (Egress Redirect to device lo) stolen
>       index 54 ref 1 bind 1
> + tc filter show dev lo parent ffff:0
> filter protocol ip pref 514 u32
> filter protocol ip pref 514 u32 fh 802: ht divisor 1
> filter protocol ip pref 514 u32 fh 802::800 order 2048 key ht 802 bkt 0 
> flowid ffff:
>   match 00010000/00ff0000 at 8
>   match c0a8b227/ffffffff at 16
> filter protocol ip pref 514 u32 fh 802::801 order 2049 key ht 802 bkt 0 
> flowid ffff:
>   match 00010000/00ff0000 at 8
>   match 7f000001/ffffffff at 16
> filter protocol ip pref 769 u32
> filter protocol ip pref 769 u32 fh 801: ht divisor 1
> filter protocol ip pref 769 u32 fh 801::800 order 2048 key ht 801 bkt 0 
> flowid ffff:
>   match 00007540/0000fff0 at 20
> filter protocol ip pref 769 u32 fh 801::801 order 2049 key ht 801 bkt 0 
> flowid ffff:
>   match 00007918/0000fff8 at 20
> filter protocol ip pref 769 u32 fh 801::802 order 2050 key ht 801 bkt 0 
> flowid ffff:
>   match 00007920/0000ffe0 at 20
> filter protocol ip pref 769 u32 fh 801::803 order 2051 key ht 801 bkt 0 
> flowid ffff:
>   match 00007940/0000ffc0 at 20
> filter protocol ip pref 769 u32 fh 801::804 order 2052 key ht 801 bkt 0 
> flowid ffff:
>   match 00007980/0000ff80 at 20
> filter protocol ip pref 769 u32 fh 801::805 order 2053 key ht 801 bkt 0 
> flowid ffff:
>   match 00007a00/0000ff00 at 20
> filter protocol ip pref 769 u32 fh 801::806 order 2054 key ht 801 bkt 0 
> flowid ffff:
>   match 00007b00/0000fff8 at 20
> filter protocol ip pref 769 u32 fh 801::807 order 2055 key ht 801 bkt 0 
> flowid ffff:
>   match 00007b08/0000fffc at 20
> filter protocol ip pref 770 u32
> filter protocol ip pref 770 u32 fh 800: ht divisor 1
> filter protocol ip pref 770 u32 fh 800::800 order 2048 key ht 800 bkt 0 
> flowid ffff:
>   match c0a8b227/ffffffff at 16
>       action order 1: mirred (Egress Redirect to device eth0) stolen
>       index 45 ref 1 bind 1
> filter protocol ip pref 770 u32 fh 800::801 order 2049 key ht 800 bkt 0 
> flowid ffff:
>   match 7f000001/ffffffff at 16
>       action order 33: mirred (Egress Redirect to device eth0) stolen
>       index 46 ref 1 bind 1
> + mount --make-rslave /var/run/netns
> + echo 1
> + ip link set lo address 00:0c:29:ed:df:d8 mtu 1500 up
> + ethtool -K eth0 rx off
> + ip link set eth0 address 00:0c:29:ed:df:d8 up
> + ip addr add 192.168.178.39/24 dev eth0
> + ip route add default via 192.168.178.1
> + echo 30032 30047
> + echo 1
> + echo 1
> + echo 1
> + [ -f /proc/sys/net/ipv4/tcp_retries2 ]
> + [ -f /proc/sys/net/ipv4/tcp_max_syn_backlog ]
> + [ -f /proc/sys/net/ipv4/tcp_keepalive_probes ]
> + [ -f /proc/sys/net/ipv4/neigh/default/gc_thresh3 ]
> + [ -f /proc/sys/net/ipv4/neigh/default/gc_thresh1 ]
> + [ -f /proc/sys/net/ipv4/tcp_wmem ]
> + [ -f /proc/sys/net/ipv4/tcp_keepalive_intvl ]
> + [ -f /proc/sys/net/core/netdev_max_backlog ]
> + [ -f /proc/sys/net/ipv4/neigh/default/gc_thresh2 ]
> + [ -f /proc/sys/net/ipv4/tcp_synack_retries ]
> + [ -f /proc/sys/net/core/somaxconn ]
> + echo 128
> + [ -f /proc/sys/net/core/rmem_max ]
> + [ -f /proc/sys/net/ipv4/tcp_rmem ]
> + [ -f /proc/sys/net/core/wmem_max ]
> + [ -f /proc/sys/net/ipv4/tcp_keepalive_time ]
> + tc qdisc add dev lo ingress
> + tc qdisc add dev eth0 ingress
> + tc filter add dev lo parent ffff:0 protocol ip prio 770 u32 flowid ffff:0 
> match ip dst 192.168.178.39 action mirred egress redirect dev eth0
> + tc filter add dev lo parent ffff:0 protocol ip prio 770 u32 flowid ffff:0 
> match ip dst 127.0.0.1 action mirred egress redirect dev eth0
> + tc filter add dev lo parent ffff:0 protocol ip prio 769 u32 flowid ffff:0 
> match ip dport 30032 fff0
> + tc filter add dev eth0 parent ffff:0 protocol ip prio 770 u32 flowid ffff:0 
> match ip dst 127.0.0.1 match ip dport 30032 fff0 action mirred egress 
> redirect dev lo
> + tc filter add dev lo parent ffff:0 protocol ip prio 769 u32 flowid ffff:0 
> match ip dport 31500 fffc
> + tc filter add dev eth0 parent ffff:0 protocol ip prio 770 u32 flowid ffff:0 
> match ip dst 127.0.0.1 match ip dport 31500 fffc action mirred egress 
> redirect dev lo
> + tc filter add dev lo parent ffff:0 protocol ip prio 769 u32 flowid ffff:0 
> match ip dport 31504 fff0
> + tc filter add dev eth0 parent ffff:0 protocol ip prio 770 u32 flowid ffff:0 
> match ip dst 127.0.0.1 match ip dport 31504 fff0 action mirred egress 
> redirect dev lo
> + tc filter add dev lo parent ffff:0 protocol ip prio 769 u32 flowid ffff:0 
> match ip dport 31520 ffe0
> + tc filter add dev eth0 parent ffff:0 protocol ip prio 770 u32 flowid ffff:0 
> match ip dst 127.0.0.1 match ip dport 31520 ffe0 action mirred egress 
> redirect dev lo
> + tc filter add dev lo parent ffff:0 protocol ip prio 769 u32 flowid ffff:0 
> match ip dport 31552 ffc0
> + tc filter add dev eth0 parent ffff:0 protocol ip prio 770 u32 flowid ffff:0 
> match ip dst 127.0.0.1 match ip dport 31552 ffc0 action mirred egress 
> redirect dev lo
> + tc filter add dev lo parent ffff:0 protocol ip prio 769 u32 flowid ffff:0 
> match ip dport 31616 ff80
> + tc filter add dev eth0 parent ffff:0 protocol ip prio 770 u32 flowid ffff:0 
> match ip dst 127.0.0.1 match ip dport 31616 ff80 action mirred egress 
> redirect dev lo
> + tc filter add dev lo parent ffff:0 protocol ip prio 769 u32 flowid ffff:0 
> match ip dport 31744 ff00
> + tc filter add dev eth0 parent ffff:0 protocol ip prio 770 u32 flowid ffff:0 
> match ip dst 127.0.0.1 match ip dport 31744 ff00 action mirred egress 
> redirect dev lo
> + tc filter add dev lo parent ffff:0 protocol ip prio 769 u32 flowid ffff:0 
> match ip dport 32000 ffff
> + tc filter add dev eth0 parent ffff:0 protocol ip prio 770 u32 flowid ffff:0 
> match ip dst 127.0.0.1 match ip dport 32000 ffff action mirred egress 
> redirect dev lo
> + tc filter add dev lo parent ffff:0 protocol ip prio 514 u32 flowid ffff:0 
> match ip protocol 1 0xff match ip dst 192.168.178.39
> + tc filter add dev lo parent ffff:0 protocol ip prio 514 u32 flowid ffff:0 
> match ip protocol 1 0xff match ip dst 127.0.0.1
> + tc filter show dev eth0 parent ffff:0
> filter protocol ip pref 770 u32
> filter protocol ip pref 770 u32 fh 800: ht divisor 1
> filter protocol ip pref 770 u32 fh 800::800 order 2048 key ht 800 bkt 0 
> flowid ffff:
>   match 7f000001/ffffffff at 16
>   match 00007550/0000fff0 at 20
>       action order 1: mirred (Egress Redirect to device lo) stolen
>       index 103 ref 1 bind 1
> filter protocol ip pref 770 u32 fh 800::801 order 2049 key ht 800 bkt 0 
> flowid ffff:
>   match 7f000001/ffffffff at 16
>   match 00007b0c/0000fffc at 20
>       action order 33: mirred (Egress Redirect to device lo) stolen
>       index 104 ref 1 bind 1
> filter protocol ip pref 770 u32 fh 800::802 order 2050 key ht 800 bkt 0 
> flowid ffff:
>   match 7f000001/ffffffff at 16
>   match 00007b10/0000fff0 at 20
>       action order 65: mirred (Egress Redirect to device lo) stolen
>       index 105 ref 1 bind 1
> filter protocol ip pref 770 u32 fh 800::803 order 2051 key ht 800 bkt 0 
> flowid ffff:
>   match 7f000001/ffffffff at 16
>   match 00007b20/0000ffe0 at 20
>       action order 97: mirred (Egress Redirect to device lo) stolen
>       index 106 ref 1 bind 1
> filter protocol ip pref 770 u32 fh 800::804 order 2052 key ht 800 bkt 0 
> flowid ffff:
>   match 7f000001/ffffffff at 16
>   match 00007b40/0000ffc0 at 20
>       action order 129: mirred (Egress Redirect to device lo) stolen
>       index 107 ref 1 bind 1
> filter protocol ip pref 770 u32 fh 800::805 order 2053 key ht 800 bkt 0 
> flowid ffff:
>   match 7f000001/ffffffff at 16
>   match 00007b80/0000ff80 at 20
>       action order 161: mirred (Egress Redirect to device lo) stolen
>       index 108 ref 1 bind 1
> filter protocol ip pref 770 u32 fh 800::806 order 2054 key ht 800 bkt 0 
> flowid ffff:
>   match 7f000001/ffffffff at 16
>   match 00007c00/0000ff00 at 20
>       action order 193: mirred (Egress Redirect to device lo) stolen
>       index 109 ref 1 bind 1
> filter protocol ip pref 770 u32 fh 800::807 order 2055 key ht 800 bkt 0 
> flowid ffff:
>   match 7f000001/ffffffff at 16
>   match 00007d00/0000ffff at 20
>       action order 225: mirred (Egress Redirect to device lo) stolen
>       index 110 ref 1 bind 1
> + tc filter show dev lo parent ffff:0
> filter protocol ip pref 514 u32
> filter protocol ip pref 514 u32 fh 802: ht divisor 1
> filter protocol ip pref 514 u32 fh 802::800 order 2048 key ht 802 bkt 0 
> flowid ffff:
>   match 00010000/00ff0000 at 8
>   match c0a8b227/ffffffff at 16
> filter protocol ip pref 514 u32 fh 802::801 order 2049 key ht 802 bkt 0 
> flowid ffff:
>   match 00010000/00ff0000 at 8
>   match 7f000001/ffffffff at 16
> filter protocol ip pref 769 u32
> filter protocol ip pref 769 u32 fh 801: ht divisor 1
> filter protocol ip pref 769 u32 fh 801::800 order 2048 key ht 801 bkt 0 
> flowid ffff:
>   match 00007550/0000fff0 at 20
> filter protocol ip pref 769 u32 fh 801::801 order 2049 key ht 801 bkt 0 
> flowid ffff:
>   match 00007b0c/0000fffc at 20
> filter protocol ip pref 769 u32 fh 801::802 order 2050 key ht 801 bkt 0 
> flowid ffff:
>   match 00007b10/0000fff0 at 20
> filter protocol ip pref 769 u32 fh 801::803 order 2051 key ht 801 bkt 0 
> flowid ffff:
>   match 00007b20/0000ffe0 at 20
> filter protocol ip pref 769 u32 fh 801::804 order 2052 key ht 801 bkt 0 
> flowid ffff:
>   match 00007b40/0000ffc0 at 20
> filter protocol ip pref 769 u32 fh 801::805 order 2053 key ht 801 bkt 0 
> flowid ffff:
>   match 00007b80/0000ff80 at 20
> filter protocol ip pref 769 u32 fh 801::806 order 2054 key ht 801 bkt 0 
> flowid ffff:
>   match 00007c00/0000ff00 at 20
> filter protocol ip pref 769 u32 fh 801::807 order 2055 key ht 801 bkt 0 
> flowid ffff:
>   match 00007d00/0000ffff at 20
> filter protocol ip pref 770 u32
> filter protocol ip pref 770 u32 fh 800: ht divisor 1
> filter protocol ip pref 770 u32 fh 800::800 order 2048 key ht 800 bkt 0 
> flowid ffff:
>   match c0a8b227/ffffffff at 16
>       action order 1: mirred (Egress Redirect to device eth0) stolen
>       index 101 ref 1 bind 1
> filter protocol ip pref 770 u32 fh 800::801 order 2049 key ht 800 bkt 0 
> flowid ffff:
>   match 7f000001/ffffffff at 16
>       action order 33: mirred (Egress Redirect to device eth0) stolen
>       index 102 ref 1 bind 1
> [       OK ] PortMappingIsolatorTest.ROOT_NC_ContainerToContainerTCP (2092 ms)
> [ RUN      ] PortMappingIsolatorTest.ROOT_NC_ContainerToContainerUDP
> + mount --make-rslave /var/run/netns
> + echo 1
> + ip link set lo address 00:0c:29:ed:df:d8 mtu 1500 up
> + ethtool -K eth0 rx off
> + ip link set eth0 address 00:0c:29:ed:df:d8 up
> + ip addr add 192.168.178.39/24 dev eth0
> + ip route add default via 192.168.178.1
> + echo 30016 30031
> + echo 1
> + echo 1
> + echo 1
> + [ -f /proc/sys/net/ipv4/tcp_retries2 ]
> + [ -f /proc/sys/net/ipv4/tcp_max_syn_backlog ]
> + [ -f /proc/sys/net/ipv4/tcp_keepalive_probes ]
> + [ -f /proc/sys/net/ipv4/neigh/default/gc_thresh3 ]
> + [ -f /proc/sys/net/ipv4/neigh/default/gc_thresh1 ]
> + [ -f /proc/sys/net/ipv4/tcp_wmem ]
> + [ -f /proc/sys/net/ipv4/tcp_keepalive_intvl ]
> + [ -f /proc/sys/net/core/netdev_max_backlog ]
> + [ -f /proc/sys/net/ipv4/neigh/default/gc_thresh2 ]
> + [ -f /proc/sys/net/ipv4/tcp_synack_retries ]
> + [ -f /proc/sys/net/core/somaxconn ]
> + echo 128
> + [ -f /proc/sys/net/core/rmem_max ]
> + [ -f /proc/sys/net/ipv4/tcp_rmem ]
> + [ -f /proc/sys/net/core/wmem_max ]
> + [ -f /proc/sys/net/ipv4/tcp_keepalive_time ]
> + tc qdisc add dev lo ingress
> + tc qdisc add dev eth0 ingress
> + tc filter add dev lo parent ffff:0 protocol ip prio 770 u32 flowid ffff:0 
> match ip dst 192.168.178.39 action mirred egress redirect dev eth0
> + tc filter add dev lo parent ffff:0 protocol ip prio 770 u32 flowid ffff:0 
> match ip dst 127.0.0.1 action mirred egress redirect dev eth0
> + tc filter add dev lo parent ffff:0 protocol ip prio 769 u32 flowid ffff:0 
> match ip dport 30016 fff0
> + tc filter add dev eth0 parent ffff:0 protocol ip prio 770 u32 flowid ffff:0 
> match ip dst 127.0.0.1 match ip dport 30016 fff0 action mirred egress 
> redirect dev lo
> + tc filter add dev lo parent ffff:0 protocol ip prio 769 u32 flowid ffff:0 
> match ip dport 31000 fff8
> + tc filter add dev eth0 parent ffff:0 protocol ip prio 770 u32 flowid ffff:0 
> match ip dst 127.0.0.1 match ip dport 31000 fff8 action mirred egress 
> redirect dev lo
> + tc filter add dev lo parent ffff:0 protocol ip prio 769 u32 flowid ffff:0 
> match ip dport 31008 ffe0
> + tc filter add dev eth0 parent ffff:0 protocol ip prio 770 u32 flowid ffff:0 
> match ip dst 127.0.0.1 match ip dport 31008 ffe0 action mirred egress 
> redirect dev lo
> + tc filter add dev lo parent ffff:0 protocol ip prio 769 u32 flowid ffff:0 
> match ip dport 31040 ffc0
> + tc filter add dev eth0 parent ffff:0 protocol ip prio 770 u32 flowid ffff:0 
> match ip dst 127.0.0.1 match ip dport 31040 ffc0 action mirred egress 
> redirect dev lo
> + tc filter add dev lo parent ffff:0 protocol ip prio 769 u32 flowid ffff:0 
> match ip dport 31104 ff80
> + tc filter add dev eth0 parent ffff:0 protocol ip prio 770 u32 flowid ffff:0 
> match ip dst 127.0.0.1 match ip dport 31104 ff80 action mirred egress 
> redirect dev lo
> + tc filter add dev lo parent ffff:0 protocol ip prio 769 u32 flowid ffff:0 
> match ip dport 31232 ff00
> + tc filter add dev eth0 parent ffff:0 protocol ip prio 770 u32 flowid ffff:0 
> match ip dst 127.0.0.1 match ip dport 31232 ff00 action mirred egress 
> redirect dev lo
> + tc filter add dev lo parent ffff:0 protocol ip prio 769 u32 flowid ffff:0 
> match ip dport 31488 fff8
> + tc filter add dev eth0 parent ffff:0 protocol ip prio 770 u32 flowid ffff:0 
> match ip dst 127.0.0.1 match ip dport 31488 fff8 action mirred egress 
> redirect dev lo
> + tc filter add dev lo parent ffff:0 protocol ip prio 769 u32 flowid ffff:0 
> match ip dport 31496 fffc
> + tc filter add dev eth0 parent ffff:0 protocol ip prio 770 u32 flowid ffff:0 
> match ip dst 127.0.0.1 match ip dport 31496 fffc action mirred egress 
> redirect dev lo
> + tc filter add dev lo parent ffff:0 protocol ip prio 514 u32 flowid ffff:0 
> match ip protocol 1 0xff match ip dst 192.168.178.39
> + tc filter add dev lo parent ffff:0 protocol ip prio 514 u32 flowid ffff:0 
> match ip protocol 1 0xff match ip dst 127.0.0.1
> + tc filter show dev eth0 parent ffff:0
> filter protocol ip pref 770 u32
> filter protocol ip pref 770 u32 fh 800: ht divisor 1
> filter protocol ip pref 770 u32 fh 800::800 order 2048 key ht 800 bkt 0 
> flowid ffff:
>   match 7f000001/ffffffff at 16
>   match 00007540/0000fff0 at 20
>       action order 1: mirred (Egress Redirect to device lo) stolen
>       index 159 ref 1 bind 1
> filter protocol ip pref 770 u32 fh 800::801 order 2049 key ht 800 bkt 0 
> flowid ffff:
>   match 7f000001/ffffffff at 16
>   match 00007918/0000fff8 at 20
>       action order 33: mirred (Egress Redirect to device lo) stolen
>       index 160 ref 1 bind 1
> filter protocol ip pref 770 u32 fh 800::802 order 2050 key ht 800 bkt 0 
> flowid ffff:
>   match 7f000001/ffffffff at 16
>   match 00007920/0000ffe0 at 20
>       action order 65: mirred (Egress Redirect to device lo) stolen
>       index 161 ref 1 bind 1
> filter protocol ip pref 770 u32 fh 800::803 order 2051 key ht 800 bkt 0 
> flowid ffff:
>   match 7f000001/ffffffff at 16
>   match 00007940/0000ffc0 at 20
>       action order 97: mirred (Egress Redirect to device lo) stolen
>       index 162 ref 1 bind 1
> filter protocol ip pref 770 u32 fh 800::804 order 2052 key ht 800 bkt 0 
> flowid ffff:
>   match 7f000001/ffffffff at 16
>   match 00007980/0000ff80 at 20
>       action order 129: mirred (Egress Redirect to device lo) stolen
>       index 163 ref 1 bind 1
> filter protocol ip pref 770 u32 fh 800::805 order 2053 key ht 800 bkt 0 
> flowid ffff:
>   match 7f000001/ffffffff at 16
>   match 00007a00/0000ff00 at 20
>       action order 161: mirred (Egress Redirect to device lo) stolen
>       index 164 ref 1 bind 1
> filter protocol ip pref 770 u32 fh 800::806 order 2054 key ht 800 bkt 0 
> flowid ffff:
>   match 7f000001/ffffffff at 16
>   match 00007b00/0000fff8 at 20
>       action order 193: mirred (Egress Redirect to device lo) stolen
>       index 165 ref 1 bind 1
> filter protocol ip pref 770 u32 fh 800::807 order 2055 key ht 800 bkt 0 
> flowid ffff:
>   match 7f000001/ffffffff at 16
>   match 00007b08/0000fffc at 20
>       action order 225: mirred (Egress Redirect to device lo) stolen
>       index 166 ref 1 bind 1
> + tc filter show dev lo parent ffff:0
> filter protocol ip pref 514 u32
> filter protocol ip pref 514 u32 fh 802: ht divisor 1
> filter protocol ip pref 514 u32 fh 802::800 order 2048 key ht 802 bkt 0 
> flowid ffff:
>   match 00010000/00ff0000 at 8
>   match c0a8b227/ffffffff at 16
> filter protocol ip pref 514 u32 fh 802::801 order 2049 key ht 802 bkt 0 
> flowid ffff:
>   match 00010000/00ff0000 at 8
>   match 7f000001/ffffffff at 16
> filter protocol ip pref 769 u32
> filter protocol ip pref 769 u32 fh 801: ht divisor 1
> filter protocol ip pref 769 u32 fh 801::800 order 2048 key ht 801 bkt 0 
> flowid ffff:
>   match 00007540/0000fff0 at 20
> filter protocol ip pref 769 u32 fh 801::801 order 2049 key ht 801 bkt 0 
> flowid ffff:
>   match 00007918/0000fff8 at 20
> filter protocol ip pref 769 u32 fh 801::802 order 2050 key ht 801 bkt 0 
> flowid ffff:
>   match 00007920/0000ffe0 at 20
> filter protocol ip pref 769 u32 fh 801::803 order 2051 key ht 801 bkt 0 
> flowid ffff:
>   match 00007940/0000ffc0 at 20
> filter protocol ip pref 769 u32 fh 801::804 order 2052 key ht 801 bkt 0 
> flowid ffff:
>   match 00007980/0000ff80 at 20
> filter protocol ip pref 769 u32 fh 801::805 order 2053 key ht 801 bkt 0 
> flowid ffff:
>   match 00007a00/0000ff00 at 20
> filter protocol ip pref 769 u32 fh 801::806 order 2054 key ht 801 bkt 0 
> flowid ffff:
>   match 00007b00/0000fff8 at 20
> filter protocol ip pref 769 u32 fh 801::807 order 2055 key ht 801 bkt 0 
> flowid ffff:
>   match 00007b08/0000fffc at 20
> filter protocol ip pref 770 u32
> filter protocol ip pref 770 u32 fh 800: ht divisor 1
> filter protocol ip pref 770 u32 fh 800::800 order 2048 key ht 800 bkt 0 
> flowid ffff:
>   match c0a8b227/ffffffff at 16
>       action order 1: mirred (Egress Redirect to device eth0) stolen
>       index 157 ref 1 bind 1
> filter protocol ip pref 770 u32 fh 800::801 order 2049 key ht 800 bkt 0 
> flowid ffff:
>   match 7f000001/ffffffff at 16
>       action order 33: mirred (Egress Redirect to device eth0) stolen
>       index 158 ref 1 bind 1
> + mount --make-rslave /var/run/netns
> + echo 1
> + ip link set lo address 00:0c:29:ed:df:d8 mtu 1500 up
> + ethtool -K eth0 rx off
> + ip link set eth0 address 00:0c:29:ed:df:d8 up
> + ip addr add 192.168.178.39/24 dev eth0
> + ip route add default via 192.168.178.1
> + echo 30032 30047
> + echo 1
> + echo 1
> + echo 1
> + [ -f /proc/sys/net/ipv4/tcp_retries2 ]
> + [ -f /proc/sys/net/ipv4/tcp_max_syn_backlog ]
> + [ -f /proc/sys/net/ipv4/tcp_keepalive_probes ]
> + [ -f /proc/sys/net/ipv4/neigh/default/gc_thresh3 ]
> + [ -f /proc/sys/net/ipv4/neigh/default/gc_thresh1 ]
> + [ -f /proc/sys/net/ipv4/tcp_wmem ]
> + [ -f /proc/sys/net/ipv4/tcp_keepalive_intvl ]
> + [ -f /proc/sys/net/core/netdev_max_backlog ]
> + [ -f /proc/sys/net/ipv4/neigh/default/gc_thresh2 ]
> + [ -f /proc/sys/net/ipv4/tcp_synack_retries ]
> + [ -f /proc/sys/net/core/somaxconn ]
> + echo 128
> + [ -f /proc/sys/net/core/rmem_max ]
> + [ -f /proc/sys/net/ipv4/tcp_rmem ]
> + [ -f /proc/sys/net/core/wmem_max ]
> + [ -f /proc/sys/net/ipv4/tcp_keepalive_time ]
> + tc qdisc add dev lo ingress
> + tc qdisc add dev eth0 ingress
> + tc filter add dev lo parent ffff:0 protocol ip prio 770 u32 flowid ffff:0 
> match ip dst 192.168.178.39 action mirred egress redirect dev eth0
> + tc filter add dev lo parent ffff:0 protocol ip prio 770 u32 flowid ffff:0 
> match ip dst 127.0.0.1 action mirred egress redirect dev eth0
> + tc filter add dev lo parent ffff:0 protocol ip prio 769 u32 flowid ffff:0 
> match ip dport 30032 fff0
> + tc filter add dev eth0 parent ffff:0 protocol ip prio 770 u32 flowid ffff:0 
> match ip dst 127.0.0.1 match ip dport 30032 fff0 action mirred egress 
> redirect dev lo
> + tc filter add dev lo parent ffff:0 protocol ip prio 769 u32 flowid ffff:0 
> match ip dport 31500 fffc
> + tc filter add dev eth0 parent ffff:0 protocol ip prio 770 u32 flowid ffff:0 
> match ip dst 127.0.0.1 match ip dport 31500 fffc action mirred egress 
> redirect dev lo
> + tc filter add dev lo parent ffff:0 protocol ip prio 769 u32 flowid ffff:0 
> match ip dport 31504 fff0
> + tc filter add dev eth0 parent ffff:0 protocol ip prio 770 u32 flowid ffff:0 
> match ip dst 127.0.0.1 match ip dport 31504 fff0 action mirred egress 
> redirect dev lo
> + tc filter add dev lo parent ffff:0 protocol ip prio 769 u32 flowid ffff:0 
> match ip dport 31520 ffe0
> + tc filter add dev eth0 parent ffff:0 protocol ip prio 770 u32 flowid ffff:0 
> match ip dst 127.0.0.1 match ip dport 31520 ffe0 action mirred egress 
> redirect dev lo
> + tc filter add dev lo parent ffff:0 protocol ip prio 769 u32 flowid ffff:0 
> match ip dport 31552 ffc0
> + tc filter add dev eth0 parent ffff:0 protocol ip prio 770 u32 flowid ffff:0 
> match ip dst 127.0.0.1 match ip dport 31552 ffc0 action mirred egress 
> redirect dev lo
> + tc filter add dev lo parent ffff:0 protocol ip prio 769 u32 flowid ffff:0 
> match ip dport 31616 ff80
> + tc filter add dev eth0 parent ffff:0 protocol ip prio 770 u32 flowid ffff:0 
> match ip dst 127.0.0.1 match ip dport 31616 ff80 action mirred egress 
> redirect dev lo
> + tc filter add dev lo parent ffff:0 protocol ip prio 769 u32 flowid ffff:0 
> match ip dport 31744 ff00
> + tc filter add dev eth0 parent ffff:0 protocol ip prio 770 u32 flowid ffff:0 
> match ip dst 127.0.0.1 match ip dport 31744 ff00 action mirred egress 
> redirect dev lo
> + tc filter add dev lo parent ffff:0 protocol ip prio 769 u32 flowid ffff:0 
> match ip dport 32000 ffff
> + tc filter add dev eth0 parent ffff:0 protocol ip prio 770 u32 flowid ffff:0 
> match ip dst 127.0.0.1 match ip dport 32000 ffff action mirred egress 
> redirect dev lo
> + tc filter add dev lo parent ffff:0 protocol ip prio 514 u32 flowid ffff:0 
> match ip protocol 1 0xff match ip dst 192.168.178.39
> + tc filter add dev lo parent ffff:0 protocol ip prio 514 u32 flowid ffff:0 
> match ip protocol 1 0xff match ip dst 127.0.0.1
> + tc filter show dev eth0 parent ffff:0
> filter protocol ip pref 770 u32
> filter protocol ip pref 770 u32 fh 800: ht divisor 1
> filter protocol ip pref 770 u32 fh 800::800 order 2048 key ht 800 bkt 0 
> flowid ffff:
>   match 7f000001/ffffffff at 16
>   match 00007550/0000fff0 at 20
>       action order 1: mirred (Egress Redirect to device lo) stolen
>       index 215 ref 1 bind 1
> filter protocol ip pref 770 u32 fh 800::801 order 2049 key ht 800 bkt 0 
> flowid ffff:
>   match 7f000001/ffffffff at 16
>   match 00007b0c/0000fffc at 20
>       action order 33: mirred (Egress Redirect to device lo) stolen
>       index 216 ref 1 bind 1
> filter protocol ip pref 770 u32 fh 800::802 order 2050 key ht 800 bkt 0 
> flowid ffff:
>   match 7f000001/ffffffff at 16
>   match 00007b10/0000fff0 at 20
>       action order 65: mirred (Egress Redirect to device lo) stolen
>       index 217 ref 1 bind 1
> filter protocol ip pref 770 u32 fh 800::803 order 2051 key ht 800 bkt 0 
> flowid ffff:
>   match 7f000001/ffffffff at 16
>   match 00007b20/0000ffe0 at 20
>       action order 97: mirred (Egress Redirect to device lo) stolen
>       index 218 ref 1 bind 1
> filter protocol ip pref 770 u32 fh 800::804 order 2052 key ht 800 bkt 0 
> flowid ffff:
>   match 7f000001/ffffffff at 16
>   match 00007b40/0000ffc0 at 20
>       action order 129: mirred (Egress Redirect to device lo) stolen
>       index 219 ref 1 bind 1
> filter protocol ip pref 770 u32 fh 800::805 order 2053 key ht 800 bkt 0 
> flowid ffff:
>   match 7f000001/ffffffff at 16
>   match 00007b80/0000ff80 at 20
>       action order 161: mirred (Egress Redirect to device lo) stolen
>       index 220 ref 1 bind 1
> filter protocol ip pref 770 u32 fh 800::806 order 2054 key ht 800 bkt 0 
> flowid ffff:
>   match 7f000001/ffffffff at 16
>   match 00007c00/0000ff00 at 20
>       action order 193: mirred (Egress Redirect to device lo) stolen
>       index 221 ref 1 bind 1
> filter protocol ip pref 770 u32 fh 800::807 order 2055 key ht 800 bkt 0 
> flowid ffff:
>   match 7f000001/ffffffff at 16
>   match 00007d00/0000ffff at 20
>       action order 225: mirred (Egress Redirect to device lo) stolen
>       index 222 ref 1 bind 1
> + tc filter show dev lo parent ffff:0
> filter protocol ip pref 514 u32
> filter protocol ip pref 514 u32 fh 802: ht divisor 1
> filter protocol ip pref 514 u32 fh 802::800 order 2048 key ht 802 bkt 0 
> flowid ffff:
>   match 00010000/00ff0000 at 8
>   match c0a8b227/ffffffff at 16
> filter protocol ip pref 514 u32 fh 802::801 order 2049 key ht 802 bkt 0 
> flowid ffff:
>   match 00010000/00ff0000 at 8
>   match 7f000001/ffffffff at 16
> filter protocol ip pref 769 u32
> filter protocol ip pref 769 u32 fh 801: ht divisor 1
> filter protocol ip pref 769 u32 fh 801::800 order 2048 key ht 801 bkt 0 
> flowid ffff:
>   match 00007550/0000fff0 at 20
> filter protocol ip pref 769 u32 fh 801::801 order 2049 key ht 801 bkt 0 
> flowid ffff:
>   match 00007b0c/0000fffc at 20
> filter protocol ip pref 769 u32 fh 801::802 order 2050 key ht 801 bkt 0 
> flowid ffff:
>   match 00007b10/0000fff0 at 20
> filter protocol ip pref 769 u32 fh 801::803 order 2051 key ht 801 bkt 0 
> flowid ffff:
>   match 00007b20/0000ffe0 at 20
> filter protocol ip pref 769 u32 fh 801::804 order 2052 key ht 801 bkt 0 
> flowid ffff:
>   match 00007b40/0000ffc0 at 20
> filter protocol ip pref 769 u32 fh 801::805 order 2053 key ht 801 bkt 0 
> flowid ffff:
>   match 00007b80/0000ff80 at 20
> filter protocol ip pref 769 u32 fh 801::806 order 2054 key ht 801 bkt 0 
> flowid ffff:
>   match 00007c00/0000ff00 at 20
> filter protocol ip pref 769 u32 fh 801::807 order 2055 key ht 801 bkt 0 
> flowid ffff:
>   match 00007d00/0000ffff at 20
> filter protocol ip pref 770 u32
> filter protocol ip pref 770 u32 fh 800: ht divisor 1
> filter protocol ip pref 770 u32 fh 800::800 order 2048 key ht 800 bkt 0 
> flowid ffff:
>   match c0a8b227/ffffffff at 16
>       action order 1: mirred (Egress Redirect to device eth0) stolen
>       index 213 ref 1 bind 1
> filter protocol ip pref 770 u32 fh 800::801 order 2049 key ht 800 bkt 0 
> flowid ffff:
>   match 7f000001/ffffffff at 16
>       action order 33: mirred (Egress Redirect to device eth0) stolen
>       index 214 ref 1 bind 1
> [       OK ] PortMappingIsolatorTest.ROOT_NC_ContainerToContainerUDP (4526 ms)
> [ RUN      ] PortMappingIsolatorTest.ROOT_NC_HostToContainerUDP
> + mount --make-rslave /var/run/netns
> + echo 1
> + ip link set lo address 00:0c:29:ed:df:d8 mtu 1500 up
> + ethtool -K eth0 rx off
> + ip link set eth0 address 00:0c:29:ed:df:d8 up
> + ip addr add 192.168.178.39/24 dev eth0
> + ip route add default via 192.168.178.1
> + echo 30016 30031
> + echo 1
> + echo 1
> + echo 1
> + [ -f /proc/sys/net/ipv4/tcp_retries2 ]
> + [ -f /proc/sys/net/ipv4/tcp_max_syn_backlog ]
> + [ -f /proc/sys/net/ipv4/tcp_keepalive_probes ]
> + [ -f /proc/sys/net/ipv4/neigh/default/gc_thresh3 ]
> + [ -f /proc/sys/net/ipv4/neigh/default/gc_thresh1 ]
> + [ -f /proc/sys/net/ipv4/tcp_wmem ]
> + [ -f /proc/sys/net/ipv4/tcp_keepalive_intvl ]
> + [ -f /proc/sys/net/core/netdev_max_backlog ]
> + [ -f /proc/sys/net/ipv4/neigh/default/gc_thresh2 ]
> + [ -f /proc/sys/net/ipv4/tcp_synack_retries ]
> + [ -f /proc/sys/net/core/somaxconn ]
> + echo 128
> + [ -f /proc/sys/net/core/rmem_max ]
> + [ -f /proc/sys/net/ipv4/tcp_rmem ]
> + [ -f /proc/sys/net/core/wmem_max ]
> + [ -f /proc/sys/net/ipv4/tcp_keepalive_time ]
> + tc qdisc add dev lo ingress
> + tc qdisc add dev eth0 ingress
> + tc filter add dev lo parent ffff:0 protocol ip prio 770 u32 flowid ffff:0 
> match ip dst 192.168.178.39 action mirred egress redirect dev eth0
> + tc filter add dev lo parent ffff:0 protocol ip prio 770 u32 flowid ffff:0 
> match ip dst 127.0.0.1 action mirred egress redirect dev eth0
> + tc filter add dev lo parent ffff:0 protocol ip prio 769 u32 flowid ffff:0 
> match ip dport 30016 fff0
> + tc filter add dev eth0 parent ffff:0 protocol ip prio 770 u32 flowid ffff:0 
> match ip dst 127.0.0.1 match ip dport 30016 fff0 action mirred egress 
> redirect dev lo
> + tc filter add dev lo parent ffff:0 protocol ip prio 769 u32 flowid ffff:0 
> match ip dport 31000 fff8
> + tc filter add dev eth0 parent ffff:0 protocol ip prio 770 u32 flowid ffff:0 
> match ip dst 127.0.0.1 match ip dport 31000 fff8 action mirred egress 
> redirect dev lo
> + tc filter add dev lo parent ffff:0 protocol ip prio 769 u32 flowid ffff:0 
> match ip dport 31008 ffe0
> + tc filter add dev eth0 parent ffff:0 protocol ip prio 770 u32 flowid ffff:0 
> match ip dst 127.0.0.1 match ip dport 31008 ffe0 action mirred egress 
> redirect dev lo
> + tc filter add dev lo parent ffff:0 protocol ip prio 769 u32 flowid ffff:0 
> match ip dport 31040 ffc0
> + tc filter add dev eth0 parent ffff:0 protocol ip prio 770 u32 flowid ffff:0 
> match ip dst 127.0.0.1 match ip dport 31040 ffc0 action mirred egress 
> redirect dev lo
> + tc filter add dev lo parent ffff:0 protocol ip prio 769 u32 flowid ffff:0 
> match ip dport 31104 ff80
> + tc filter add dev eth0 parent ffff:0 protocol ip prio 770 u32 flowid ffff:0 
> match ip dst 127.0.0.1 match ip dport 31104 ff80 action mirred egress 
> redirect dev lo
> + tc filter add dev lo parent ffff:0 protocol ip prio 769 u32 flowid ffff:0 
> match ip dport 31232 ff00
> + tc filter add dev eth0 parent ffff:0 protocol ip prio 770 u32 flowid ffff:0 
> match ip dst 127.0.0.1 match ip dport 31232 ff00 action mirred egress 
> redirect dev lo
> + tc filter add dev lo parent ffff:0 protocol ip prio 769 u32 flowid ffff:0 
> match ip dport 31488 fff8
> + tc filter add dev eth0 parent ffff:0 protocol ip prio 770 u32 flowid ffff:0 
> match ip dst 127.0.0.1 match ip dport 31488 fff8 action mirred egress 
> redirect dev lo
> + tc filter add dev lo parent ffff:0 protocol ip prio 769 u32 flowid ffff:0 
> match ip dport 31496 fffc
> + tc filter add dev eth0 parent ffff:0 protocol ip prio 770 u32 flowid ffff:0 
> match ip dst 127.0.0.1 match ip dport 31496 fffc action mirred egress 
> redirect dev lo
> + tc filter add dev lo parent ffff:0 protocol ip prio 514 u32 flowid ffff:0 
> match ip protocol 1 0xff match ip dst 192.168.178.39
> + tc filter add dev lo parent ffff:0 protocol ip prio 514 u32 flowid ffff:0 
> match ip protocol 1 0xff match ip dst 127.0.0.1
> + tc filter show dev eth0 parent ffff:0
> filter protocol ip pref 770 u32
> filter protocol ip pref 770 u32 fh 800: ht divisor 1
> filter protocol ip pref 770 u32 fh 800::800 order 2048 key ht 800 bkt 0 
> flowid ffff:
>   match 7f000001/ffffffff at 16
>   match 00007540/0000fff0 at 20
>       action order 1: mirred (Egress Redirect to device lo) stolen
>       index 271 ref 1 bind 1
> filter protocol ip pref 770 u32 fh 800::801 order 2049 key ht 800 bkt 0 
> flowid ffff:
>   match 7f000001/ffffffff at 16
>   match 00007918/0000fff8 at 20
>       action order 33: mirred (Egress Redirect to device lo) stolen
>       index 272 ref 1 bind 1
> filter protocol ip pref 770 u32 fh 800::802 order 2050 key ht 800 bkt 0 
> flowid ffff:
>   match 7f000001/ffffffff at 16
>   match 00007920/0000ffe0 at 20
>       action order 65: mirred (Egress Redirect to device lo) stolen
>       index 273 ref 1 bind 1
> filter protocol ip pref 770 u32 fh 800::803 order 2051 key ht 800 bkt 0 
> flowid ffff:
>   match 7f000001/ffffffff at 16
>   match 00007940/0000ffc0 at 20
>       action order 97: mirred (Egress Redirect to device lo) stolen
>       index 274 ref 1 bind 1
> filter protocol ip pref 770 u32 fh 800::804 order 2052 key ht 800 bkt 0 
> flowid ffff:
>   match 7f000001/ffffffff at 16
>   match 00007980/0000ff80 at 20
>       action order 129: mirred (Egress Redirect to device lo) stolen
>       index 275 ref 1 bind 1
> filter protocol ip pref 770 u32 fh 800::805 order 2053 key ht 800 bkt 0 
> flowid ffff:
>   match 7f000001/ffffffff at 16
>   match 00007a00/0000ff00 at 20
>       action order 161: mirred (Egress Redirect to device lo) stolen
>       index 276 ref 1 bind 1
> filter protocol ip pref 770 u32 fh 800::806 order 2054 key ht 800 bkt 0 
> flowid ffff:
>   match 7f000001/ffffffff at 16
>   match 00007b00/0000fff8 at 20
>       action order 193: mirred (Egress Redirect to device lo) stolen
>       index 277 ref 1 bind 1
> filter protocol ip pref 770 u32 fh 800::807 order 2055 key ht 800 bkt 0 
> flowid ffff:
>   match 7f000001/ffffffff at 16
>   match 00007b08/0000fffc at 20
>       action order 225: mirred (Egress Redirect to device lo) stolen
>       index 278 ref 1 bind 1
> + tc filter show dev lo parent ffff:0
> filter protocol ip pref 514 u32
> filter protocol ip pref 514 u32 fh 802: ht divisor 1
> filter protocol ip pref 514 u32 fh 802::800 order 2048 key ht 802 bkt 0 
> flowid ffff:
>   match 00010000/00ff0000 at 8
>   match c0a8b227/ffffffff at 16
> filter protocol ip pref 514 u32 fh 802::801 order 2049 key ht 802 bkt 0 
> flowid ffff:
>   match 00010000/00ff0000 at 8
>   match 7f000001/ffffffff at 16
> filter protocol ip pref 769 u32
> filter protocol ip pref 769 u32 fh 801: ht divisor 1
> filter protocol ip pref 769 u32 fh 801::800 order 2048 key ht 801 bkt 0 
> flowid ffff:
>   match 00007540/0000fff0 at 20
> filter protocol ip pref 769 u32 fh 801::801 order 2049 key ht 801 bkt 0 
> flowid ffff:
>   match 00007918/0000fff8 at 20
> filter protocol ip pref 769 u32 fh 801::802 order 2050 key ht 801 bkt 0 
> flowid ffff:
>   match 00007920/0000ffe0 at 20
> filter protocol ip pref 769 u32 fh 801::803 order 2051 key ht 801 bkt 0 
> flowid ffff:
>   match 00007940/0000ffc0 at 20
> filter protocol ip pref 769 u32 fh 801::804 order 2052 key ht 801 bkt 0 
> flowid ffff:
>   match 00007980/0000ff80 at 20
> filter protocol ip pref 769 u32 fh 801::805 order 2053 key ht 801 bkt 0 
> flowid ffff:
>   match 00007a00/0000ff00 at 20
> filter protocol ip pref 769 u32 fh 801::806 order 2054 key ht 801 bkt 0 
> flowid ffff:
>   match 00007b00/0000fff8 at 20
> filter protocol ip pref 769 u32 fh 801::807 order 2055 key ht 801 bkt 0 
> flowid ffff:
>   match 00007b08/0000fffc at 20
> filter protocol ip pref 770 u32
> filter protocol ip pref 770 u32 fh 800: ht divisor 1
> filter protocol ip pref 770 u32 fh 800::800 order 2048 key ht 800 bkt 0 
> flowid ffff:
>   match c0a8b227/ffffffff at 16
>       action order 1: mirred (Egress Redirect to device eth0) stolen
>       index 269 ref 1 bind 1
> filter protocol ip pref 770 u32 fh 800::801 order 2049 key ht 800 bkt 0 
> flowid ffff:
>   match 7f000001/ffffffff at 16
>       action order 33: mirred (Egress Redirect to device eth0) stolen
>       index 270 ref 1 bind 1
> {noformat}
> After that last line, the machine stops reacting and needs to get restarted. 



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Reply via email to