2020-10-05 10:19:53.112 551 INFO neutron.common.config [-] Logging enabled! 2020-10-05 10:19:53.112 551 INFO neutron.common.config [-] /usr/bin/neutron-linuxbridge-agent version 17.0.0 2020-10-05 10:19:53.112 551 INFO neutron.plugins.ml2.drivers.linuxbridge.agent.linuxbridge_neutron_agent [-] Interface mappings: {'provider': 'ens4'} 2020-10-05 10:19:53.113 551 INFO neutron.plugins.ml2.drivers.linuxbridge.agent.linuxbridge_neutron_agent [-] Bridge mappings: {} 2020-10-05 10:19:53.114 551 INFO oslo.privsep.daemon [-] Running privsep helper: ['sudo', '/usr/bin/neutron-rootwrap', '/etc/neutron/rootwrap.conf', 'privsep-helper', '--config-file', '/etc/neutron/neutron.conf', '--config-file', '/etc/neutron/plugins/ml2/linuxbridge_agent.ini', '--privsep_context', 'neutron.privileged.default', '--privsep_sock_path', '/tmp/tmpgpgfhd8k/privsep.sock'] 2020-10-05 10:19:54.172 551 INFO oslo.privsep.daemon [-] Spawned new privsep daemon via rootwrap 2020-10-05 10:19:53.955 586 INFO oslo.privsep.daemon [-] privsep daemon starting 2020-10-05 10:19:53.974 586 INFO oslo.privsep.daemon [-] privsep process running with uid/gid: 0/0 2020-10-05 10:19:53.976 586 INFO oslo.privsep.daemon [-] privsep process running with capabilities (eff/prm/inh): CAP_DAC_OVERRIDE|CAP_DAC_READ_SEARCH|CAP_NET_ADMIN|CAP_SYS_ADMIN|CAP_SYS_PTRACE/CAP_DAC_OVERRIDE|CAP_DAC_READ_SEARCH|CAP_NET_ADMIN|CAP_SYS_ADMIN|CAP_SYS_PTRACE/none 2020-10-05 10:19:53.976 586 INFO oslo.privsep.daemon [-] privsep daemon running as pid 586 2020-10-05 10:19:55.431 551 INFO neutron.plugins.ml2.drivers.linuxbridge.agent.linuxbridge_neutron_agent [-] Agent initialized successfully, now running... 2020-10-05 10:19:56.990 551 INFO neutron.plugins.ml2.drivers.agent._common_agent [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] RPC agent_id: lbfa163eabe10f 2020-10-05 10:19:56.997 551 INFO neutron.agent.agent_extensions_manager [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Loaded agent extensions: [] 2020-10-05 10:19:57.507 551 INFO neutron.plugins.ml2.drivers.agent._common_agent [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Linux bridge agent Agent RPC Daemon Started! 2020-10-05 10:19:57.507 551 INFO neutron.plugins.ml2.drivers.agent._common_agent [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Linux bridge agent Agent out of sync with plugin! 2020-10-05 10:19:57.831 551 INFO neutron.plugins.ml2.drivers.linuxbridge.agent.arp_protect [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Clearing orphaned ARP spoofing entries for devices [] 2020-10-05 10:19:58.121 551 INFO neutron.plugins.ml2.drivers.linuxbridge.agent.arp_protect [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Clearing orphaned ARP spoofing entries for devices [] 2020-10-05 10:19:59.510 551 INFO neutron.agent.securitygroups_rpc [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Preparing filters for devices {'tap9cd7cb40-a1', 'tap512d1429-1d'} 2020-10-05 10:19:59.985 551 ERROR neutron.agent.linux.iptables_manager [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] IPTablesManager.apply failed to apply the following set of iptables rules: 21. -I neutron-linuxbri-FORWARD 3 -m physdev --physdev-out tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 22. -I neutron-linuxbri-FORWARD 4 -m physdev --physdev-in tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 23. -I neutron-linuxbri-sg-chain 1 -j ACCEPT 24. -I neutron-linuxbri-sg-fallback 1 -m comment --comment "Default drop rule for unmatched traffic." -j DROP 25. COMMIT 26. # Completed by iptables_manager 27. # Generated by iptables_manager 28. *raw 29. :OUTPUT - [0:0] 30. :PREROUTING - [0:0] 2020-10-05 10:19:59.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Error in agent loop. Devices info: {'current': {'tap9cd7cb40-a1', 'tap512d1429-1d'}, 'timestamps': {'tap9cd7cb40-a1': 6, 'tap512d1429-1d': 7}, 'added': {'tap9cd7cb40-a1', 'tap512d1429-1d'}, 'removed': set(), 'updated': set()}: neutron_lib.exceptions.ProcessExecutionError: Exit code: 1; Cmd: ['sudo', '/usr/bin/neutron-rootwrap', '/etc/neutron/rootwrap.conf', 'iptables-restore', '-n']; Stdin: # Generated by iptables_manager *filter :FORWARD - [0:0] :INPUT - [0:0] :OUTPUT - [0:0] :neutron-filter-top - [0:0] :neutron-linuxbri-FORWARD - [0:0] :neutron-linuxbri-INPUT - [0:0] :neutron-linuxbri-OUTPUT - [0:0] :neutron-linuxbri-local - [0:0] :neutron-linuxbri-sg-chain - [0:0] :neutron-linuxbri-sg-fallback - [0:0] -I FORWARD 1 -j neutron-filter-top -I FORWARD 2 -j neutron-linuxbri-FORWARD -I INPUT 1 -j neutron-linuxbri-INPUT -I OUTPUT 1 -j neutron-filter-top -I OUTPUT 2 -j neutron-linuxbri-OUTPUT -I neutron-filter-top 1 -j neutron-linuxbri-local -I neutron-linuxbri-FORWARD 1 -m physdev --physdev-out tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 2 -m physdev --physdev-in tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 3 -m physdev --physdev-out tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 4 -m physdev --physdev-in tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-sg-chain 1 -j ACCEPT -I neutron-linuxbri-sg-fallback 1 -m comment --comment "Default drop rule for unmatched traffic." -j DROP COMMIT # Completed by iptables_manager # Generated by iptables_manager *raw :OUTPUT - [0:0] :PREROUTING - [0:0] :neutron-linuxbri-OUTPUT - [0:0] :neutron-linuxbri-PREROUTING - [0:0] -I OUTPUT 1 -j neutron-linuxbri-OUTPUT -I PREROUTING 1 -j neutron-linuxbri-PREROUTING COMMIT # Completed by iptables_manager ; Stdout: ; Stderr: iptables-restore: line 25 failed 2020-10-05 10:19:59.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent Traceback (most recent call last): 2020-10-05 10:19:59.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/plugins/ml2/drivers/agent/_common_agent.py", line 465, in daemon_loop 2020-10-05 10:19:59.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent sync = self.process_network_devices(device_info) 2020-10-05 10:19:59.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/osprofiler/profiler.py", line 160, in wrapper 2020-10-05 10:19:59.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent result = f(*args, **kwargs) 2020-10-05 10:19:59.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/plugins/ml2/drivers/agent/_common_agent.py", line 206, in process_network_devices 2020-10-05 10:19:59.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.sg_agent.setup_port_filters(device_info.get('added'), 2020-10-05 10:19:59.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 262, in setup_port_filters 2020-10-05 10:19:59.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.prepare_devices_filter(new_devices) 2020-10-05 10:19:59.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 126, in decorated_function 2020-10-05 10:19:59.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent return func(self, # pylint: disable=not-callable 2020-10-05 10:19:59.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 139, in prepare_devices_filter 2020-10-05 10:19:59.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self._apply_port_filter(device_ids) 2020-10-05 10:19:59.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 171, in _apply_port_filter 2020-10-05 10:19:59.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.firewall.process_trusted_ports(trusted_devices) 2020-10-05 10:19:59.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3.8/contextlib.py", line 120, in __exit__ 2020-10-05 10:19:59.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent next(self.gen) 2020-10-05 10:19:59.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/firewall.py", line 137, in defer_apply 2020-10-05 10:19:59.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.filter_defer_apply_off() 2020-10-05 10:19:59.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_firewall.py", line 1004, in filter_defer_apply_off 2020-10-05 10:19:59.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.iptables.defer_apply_off() 2020-10-05 10:19:59.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 450, in defer_apply_off 2020-10-05 10:19:59.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self._apply() 2020-10-05 10:19:59.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 467, in _apply 2020-10-05 10:19:59.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent first = self._apply_synchronized() 2020-10-05 10:19:59.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 623, in _apply_synchronized 2020-10-05 10:19:59.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent raise err 2020-10-05 10:19:59.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 514, in _do_run_restore 2020-10-05 10:19:59.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.execute(args, process_input='\n'.join(commands), 2020-10-05 10:19:59.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/utils.py", line 148, in execute 2020-10-05 10:19:59.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent raise exceptions.ProcessExecutionError(msg, 2020-10-05 10:19:59.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent neutron_lib.exceptions.ProcessExecutionError: Exit code: 1; Cmd: ['sudo', '/usr/bin/neutron-rootwrap', '/etc/neutron/rootwrap.conf', 'iptables-restore', '-n']; Stdin: # Generated by iptables_manager 2020-10-05 10:19:59.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent *filter 2020-10-05 10:19:59.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :FORWARD - [0:0] 2020-10-05 10:19:59.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :INPUT - [0:0] 2020-10-05 10:19:59.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :OUTPUT - [0:0] 2020-10-05 10:19:59.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-filter-top - [0:0] 2020-10-05 10:19:59.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-FORWARD - [0:0] 2020-10-05 10:19:59.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-INPUT - [0:0] 2020-10-05 10:19:59.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-OUTPUT - [0:0] 2020-10-05 10:19:59.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-local - [0:0] 2020-10-05 10:19:59.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-sg-chain - [0:0] 2020-10-05 10:19:59.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-sg-fallback - [0:0] 2020-10-05 10:19:59.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I FORWARD 1 -j neutron-filter-top 2020-10-05 10:19:59.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I FORWARD 2 -j neutron-linuxbri-FORWARD 2020-10-05 10:19:59.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I INPUT 1 -j neutron-linuxbri-INPUT 2020-10-05 10:19:59.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I OUTPUT 1 -j neutron-filter-top 2020-10-05 10:19:59.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I OUTPUT 2 -j neutron-linuxbri-OUTPUT 2020-10-05 10:19:59.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-filter-top 1 -j neutron-linuxbri-local 2020-10-05 10:19:59.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 1 -m physdev --physdev-out tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:19:59.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 2 -m physdev --physdev-in tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:19:59.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 3 -m physdev --physdev-out tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:19:59.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 4 -m physdev --physdev-in tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:19:59.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-sg-chain 1 -j ACCEPT 2020-10-05 10:19:59.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-sg-fallback 1 -m comment --comment "Default drop rule for unmatched traffic." -j DROP 2020-10-05 10:19:59.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent COMMIT 2020-10-05 10:19:59.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent # Completed by iptables_manager 2020-10-05 10:19:59.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent # Generated by iptables_manager 2020-10-05 10:19:59.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent *raw 2020-10-05 10:19:59.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :OUTPUT - [0:0] 2020-10-05 10:19:59.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :PREROUTING - [0:0] 2020-10-05 10:19:59.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-OUTPUT - [0:0] 2020-10-05 10:19:59.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-PREROUTING - [0:0] 2020-10-05 10:19:59.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I OUTPUT 1 -j neutron-linuxbri-OUTPUT 2020-10-05 10:19:59.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I PREROUTING 1 -j neutron-linuxbri-PREROUTING 2020-10-05 10:19:59.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent COMMIT 2020-10-05 10:19:59.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent # Completed by iptables_manager 2020-10-05 10:19:59.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent ; Stdout: ; Stderr: iptables-restore: line 25 failed 2020-10-05 10:19:59.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent 2020-10-05 10:19:59.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent 2020-10-05 10:20:01.512 551 INFO neutron.plugins.ml2.drivers.agent._common_agent [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Linux bridge agent Agent out of sync with plugin! 2020-10-05 10:20:01.512 551 INFO neutron.agent.securitygroups_rpc [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Preparing filters for devices {'tap9cd7cb40-a1', 'tap512d1429-1d'} 2020-10-05 10:20:02.372 551 ERROR neutron.agent.linux.iptables_manager [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] IPTablesManager.apply failed to apply the following set of iptables rules: 21. -I neutron-linuxbri-FORWARD 3 -m physdev --physdev-out tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 22. -I neutron-linuxbri-FORWARD 4 -m physdev --physdev-in tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 23. -I neutron-linuxbri-sg-chain 1 -j ACCEPT 24. -I neutron-linuxbri-sg-fallback 1 -m comment --comment "Default drop rule for unmatched traffic." -j DROP 25. COMMIT 26. # Completed by iptables_manager 27. # Generated by iptables_manager 28. *raw 29. :OUTPUT - [0:0] 30. :PREROUTING - [0:0] 2020-10-05 10:20:02.373 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Error in agent loop. Devices info: {'current': {'tap9cd7cb40-a1', 'tap512d1429-1d'}, 'timestamps': {'tap9cd7cb40-a1': 6, 'tap512d1429-1d': 7}, 'added': {'tap9cd7cb40-a1', 'tap512d1429-1d'}, 'removed': set(), 'updated': set()}: neutron_lib.exceptions.ProcessExecutionError: Exit code: 1; Cmd: ['sudo', '/usr/bin/neutron-rootwrap', '/etc/neutron/rootwrap.conf', 'iptables-restore', '-n']; Stdin: # Generated by iptables_manager *filter :FORWARD - [0:0] :INPUT - [0:0] :OUTPUT - [0:0] :neutron-filter-top - [0:0] :neutron-linuxbri-FORWARD - [0:0] :neutron-linuxbri-INPUT - [0:0] :neutron-linuxbri-OUTPUT - [0:0] :neutron-linuxbri-local - [0:0] :neutron-linuxbri-sg-chain - [0:0] :neutron-linuxbri-sg-fallback - [0:0] -I FORWARD 1 -j neutron-filter-top -I FORWARD 2 -j neutron-linuxbri-FORWARD -I INPUT 1 -j neutron-linuxbri-INPUT -I OUTPUT 1 -j neutron-filter-top -I OUTPUT 2 -j neutron-linuxbri-OUTPUT -I neutron-filter-top 1 -j neutron-linuxbri-local -I neutron-linuxbri-FORWARD 1 -m physdev --physdev-out tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 2 -m physdev --physdev-in tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 3 -m physdev --physdev-out tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 4 -m physdev --physdev-in tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-sg-chain 1 -j ACCEPT -I neutron-linuxbri-sg-fallback 1 -m comment --comment "Default drop rule for unmatched traffic." -j DROP COMMIT # Completed by iptables_manager # Generated by iptables_manager *raw :OUTPUT - [0:0] :PREROUTING - [0:0] :neutron-linuxbri-OUTPUT - [0:0] :neutron-linuxbri-PREROUTING - [0:0] -I OUTPUT 1 -j neutron-linuxbri-OUTPUT -I PREROUTING 1 -j neutron-linuxbri-PREROUTING COMMIT # Completed by iptables_manager ; Stdout: ; Stderr: iptables-restore: line 25 failed 2020-10-05 10:20:02.373 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent Traceback (most recent call last): 2020-10-05 10:20:02.373 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/plugins/ml2/drivers/agent/_common_agent.py", line 465, in daemon_loop 2020-10-05 10:20:02.373 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent sync = self.process_network_devices(device_info) 2020-10-05 10:20:02.373 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/osprofiler/profiler.py", line 160, in wrapper 2020-10-05 10:20:02.373 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent result = f(*args, **kwargs) 2020-10-05 10:20:02.373 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/plugins/ml2/drivers/agent/_common_agent.py", line 206, in process_network_devices 2020-10-05 10:20:02.373 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.sg_agent.setup_port_filters(device_info.get('added'), 2020-10-05 10:20:02.373 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 262, in setup_port_filters 2020-10-05 10:20:02.373 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.prepare_devices_filter(new_devices) 2020-10-05 10:20:02.373 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 126, in decorated_function 2020-10-05 10:20:02.373 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent return func(self, # pylint: disable=not-callable 2020-10-05 10:20:02.373 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 139, in prepare_devices_filter 2020-10-05 10:20:02.373 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self._apply_port_filter(device_ids) 2020-10-05 10:20:02.373 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 171, in _apply_port_filter 2020-10-05 10:20:02.373 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.firewall.process_trusted_ports(trusted_devices) 2020-10-05 10:20:02.373 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3.8/contextlib.py", line 120, in __exit__ 2020-10-05 10:20:02.373 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent next(self.gen) 2020-10-05 10:20:02.373 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/firewall.py", line 137, in defer_apply 2020-10-05 10:20:02.373 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.filter_defer_apply_off() 2020-10-05 10:20:02.373 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_firewall.py", line 1004, in filter_defer_apply_off 2020-10-05 10:20:02.373 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.iptables.defer_apply_off() 2020-10-05 10:20:02.373 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 450, in defer_apply_off 2020-10-05 10:20:02.373 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self._apply() 2020-10-05 10:20:02.373 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 467, in _apply 2020-10-05 10:20:02.373 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent first = self._apply_synchronized() 2020-10-05 10:20:02.373 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 623, in _apply_synchronized 2020-10-05 10:20:02.373 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent raise err 2020-10-05 10:20:02.373 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 514, in _do_run_restore 2020-10-05 10:20:02.373 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.execute(args, process_input='\n'.join(commands), 2020-10-05 10:20:02.373 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/utils.py", line 148, in execute 2020-10-05 10:20:02.373 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent raise exceptions.ProcessExecutionError(msg, 2020-10-05 10:20:02.373 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent neutron_lib.exceptions.ProcessExecutionError: Exit code: 1; Cmd: ['sudo', '/usr/bin/neutron-rootwrap', '/etc/neutron/rootwrap.conf', 'iptables-restore', '-n']; Stdin: # Generated by iptables_manager 2020-10-05 10:20:02.373 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent *filter 2020-10-05 10:20:02.373 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :FORWARD - [0:0] 2020-10-05 10:20:02.373 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :INPUT - [0:0] 2020-10-05 10:20:02.373 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :OUTPUT - [0:0] 2020-10-05 10:20:02.373 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-filter-top - [0:0] 2020-10-05 10:20:02.373 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-FORWARD - [0:0] 2020-10-05 10:20:02.373 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-INPUT - [0:0] 2020-10-05 10:20:02.373 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-OUTPUT - [0:0] 2020-10-05 10:20:02.373 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-local - [0:0] 2020-10-05 10:20:02.373 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-sg-chain - [0:0] 2020-10-05 10:20:02.373 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-sg-fallback - [0:0] 2020-10-05 10:20:02.373 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I FORWARD 1 -j neutron-filter-top 2020-10-05 10:20:02.373 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I FORWARD 2 -j neutron-linuxbri-FORWARD 2020-10-05 10:20:02.373 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I INPUT 1 -j neutron-linuxbri-INPUT 2020-10-05 10:20:02.373 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I OUTPUT 1 -j neutron-filter-top 2020-10-05 10:20:02.373 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I OUTPUT 2 -j neutron-linuxbri-OUTPUT 2020-10-05 10:20:02.373 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-filter-top 1 -j neutron-linuxbri-local 2020-10-05 10:20:02.373 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 1 -m physdev --physdev-out tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:02.373 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 2 -m physdev --physdev-in tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:02.373 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 3 -m physdev --physdev-out tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:02.373 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 4 -m physdev --physdev-in tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:02.373 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-sg-chain 1 -j ACCEPT 2020-10-05 10:20:02.373 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-sg-fallback 1 -m comment --comment "Default drop rule for unmatched traffic." -j DROP 2020-10-05 10:20:02.373 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent COMMIT 2020-10-05 10:20:02.373 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent # Completed by iptables_manager 2020-10-05 10:20:02.373 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent # Generated by iptables_manager 2020-10-05 10:20:02.373 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent *raw 2020-10-05 10:20:02.373 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :OUTPUT - [0:0] 2020-10-05 10:20:02.373 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :PREROUTING - [0:0] 2020-10-05 10:20:02.373 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-OUTPUT - [0:0] 2020-10-05 10:20:02.373 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-PREROUTING - [0:0] 2020-10-05 10:20:02.373 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I OUTPUT 1 -j neutron-linuxbri-OUTPUT 2020-10-05 10:20:02.373 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I PREROUTING 1 -j neutron-linuxbri-PREROUTING 2020-10-05 10:20:02.373 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent COMMIT 2020-10-05 10:20:02.373 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent # Completed by iptables_manager 2020-10-05 10:20:02.373 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent ; Stdout: ; Stderr: iptables-restore: line 25 failed 2020-10-05 10:20:02.373 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent 2020-10-05 10:20:02.373 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent 2020-10-05 10:20:03.513 551 INFO neutron.plugins.ml2.drivers.agent._common_agent [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Linux bridge agent Agent out of sync with plugin! 2020-10-05 10:20:03.514 551 INFO neutron.agent.securitygroups_rpc [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Preparing filters for devices {'tap9cd7cb40-a1', 'tap512d1429-1d'} 2020-10-05 10:20:03.991 551 ERROR neutron.agent.linux.iptables_manager [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] IPTablesManager.apply failed to apply the following set of iptables rules: 21. -I neutron-linuxbri-FORWARD 3 -m physdev --physdev-out tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 22. -I neutron-linuxbri-FORWARD 4 -m physdev --physdev-in tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 23. -I neutron-linuxbri-sg-chain 1 -j ACCEPT 24. -I neutron-linuxbri-sg-fallback 1 -m comment --comment "Default drop rule for unmatched traffic." -j DROP 25. COMMIT 26. # Completed by iptables_manager 27. # Generated by iptables_manager 28. *raw 29. :OUTPUT - [0:0] 30. :PREROUTING - [0:0] 2020-10-05 10:20:03.992 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Error in agent loop. Devices info: {'current': {'tap9cd7cb40-a1', 'tap512d1429-1d'}, 'timestamps': {'tap9cd7cb40-a1': 6, 'tap512d1429-1d': 7}, 'added': {'tap9cd7cb40-a1', 'tap512d1429-1d'}, 'removed': set(), 'updated': set()}: neutron_lib.exceptions.ProcessExecutionError: Exit code: 1; Cmd: ['sudo', '/usr/bin/neutron-rootwrap', '/etc/neutron/rootwrap.conf', 'iptables-restore', '-n']; Stdin: # Generated by iptables_manager *filter :FORWARD - [0:0] :INPUT - [0:0] :OUTPUT - [0:0] :neutron-filter-top - [0:0] :neutron-linuxbri-FORWARD - [0:0] :neutron-linuxbri-INPUT - [0:0] :neutron-linuxbri-OUTPUT - [0:0] :neutron-linuxbri-local - [0:0] :neutron-linuxbri-sg-chain - [0:0] :neutron-linuxbri-sg-fallback - [0:0] -I FORWARD 1 -j neutron-filter-top -I FORWARD 2 -j neutron-linuxbri-FORWARD -I INPUT 1 -j neutron-linuxbri-INPUT -I OUTPUT 1 -j neutron-filter-top -I OUTPUT 2 -j neutron-linuxbri-OUTPUT -I neutron-filter-top 1 -j neutron-linuxbri-local -I neutron-linuxbri-FORWARD 1 -m physdev --physdev-out tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 2 -m physdev --physdev-in tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 3 -m physdev --physdev-out tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 4 -m physdev --physdev-in tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-sg-chain 1 -j ACCEPT -I neutron-linuxbri-sg-fallback 1 -m comment --comment "Default drop rule for unmatched traffic." -j DROP COMMIT # Completed by iptables_manager # Generated by iptables_manager *raw :OUTPUT - [0:0] :PREROUTING - [0:0] :neutron-linuxbri-OUTPUT - [0:0] :neutron-linuxbri-PREROUTING - [0:0] -I OUTPUT 1 -j neutron-linuxbri-OUTPUT -I PREROUTING 1 -j neutron-linuxbri-PREROUTING COMMIT # Completed by iptables_manager ; Stdout: ; Stderr: iptables-restore: line 25 failed 2020-10-05 10:20:03.992 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent Traceback (most recent call last): 2020-10-05 10:20:03.992 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/plugins/ml2/drivers/agent/_common_agent.py", line 465, in daemon_loop 2020-10-05 10:20:03.992 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent sync = self.process_network_devices(device_info) 2020-10-05 10:20:03.992 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/osprofiler/profiler.py", line 160, in wrapper 2020-10-05 10:20:03.992 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent result = f(*args, **kwargs) 2020-10-05 10:20:03.992 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/plugins/ml2/drivers/agent/_common_agent.py", line 206, in process_network_devices 2020-10-05 10:20:03.992 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.sg_agent.setup_port_filters(device_info.get('added'), 2020-10-05 10:20:03.992 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 262, in setup_port_filters 2020-10-05 10:20:03.992 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.prepare_devices_filter(new_devices) 2020-10-05 10:20:03.992 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 126, in decorated_function 2020-10-05 10:20:03.992 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent return func(self, # pylint: disable=not-callable 2020-10-05 10:20:03.992 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 139, in prepare_devices_filter 2020-10-05 10:20:03.992 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self._apply_port_filter(device_ids) 2020-10-05 10:20:03.992 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 171, in _apply_port_filter 2020-10-05 10:20:03.992 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.firewall.process_trusted_ports(trusted_devices) 2020-10-05 10:20:03.992 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3.8/contextlib.py", line 120, in __exit__ 2020-10-05 10:20:03.992 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent next(self.gen) 2020-10-05 10:20:03.992 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/firewall.py", line 137, in defer_apply 2020-10-05 10:20:03.992 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.filter_defer_apply_off() 2020-10-05 10:20:03.992 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_firewall.py", line 1004, in filter_defer_apply_off 2020-10-05 10:20:03.992 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.iptables.defer_apply_off() 2020-10-05 10:20:03.992 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 450, in defer_apply_off 2020-10-05 10:20:03.992 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self._apply() 2020-10-05 10:20:03.992 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 467, in _apply 2020-10-05 10:20:03.992 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent first = self._apply_synchronized() 2020-10-05 10:20:03.992 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 623, in _apply_synchronized 2020-10-05 10:20:03.992 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent raise err 2020-10-05 10:20:03.992 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 514, in _do_run_restore 2020-10-05 10:20:03.992 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.execute(args, process_input='\n'.join(commands), 2020-10-05 10:20:03.992 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/utils.py", line 148, in execute 2020-10-05 10:20:03.992 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent raise exceptions.ProcessExecutionError(msg, 2020-10-05 10:20:03.992 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent neutron_lib.exceptions.ProcessExecutionError: Exit code: 1; Cmd: ['sudo', '/usr/bin/neutron-rootwrap', '/etc/neutron/rootwrap.conf', 'iptables-restore', '-n']; Stdin: # Generated by iptables_manager 2020-10-05 10:20:03.992 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent *filter 2020-10-05 10:20:03.992 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :FORWARD - [0:0] 2020-10-05 10:20:03.992 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :INPUT - [0:0] 2020-10-05 10:20:03.992 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :OUTPUT - [0:0] 2020-10-05 10:20:03.992 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-filter-top - [0:0] 2020-10-05 10:20:03.992 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-FORWARD - [0:0] 2020-10-05 10:20:03.992 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-INPUT - [0:0] 2020-10-05 10:20:03.992 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-OUTPUT - [0:0] 2020-10-05 10:20:03.992 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-local - [0:0] 2020-10-05 10:20:03.992 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-sg-chain - [0:0] 2020-10-05 10:20:03.992 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-sg-fallback - [0:0] 2020-10-05 10:20:03.992 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I FORWARD 1 -j neutron-filter-top 2020-10-05 10:20:03.992 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I FORWARD 2 -j neutron-linuxbri-FORWARD 2020-10-05 10:20:03.992 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I INPUT 1 -j neutron-linuxbri-INPUT 2020-10-05 10:20:03.992 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I OUTPUT 1 -j neutron-filter-top 2020-10-05 10:20:03.992 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I OUTPUT 2 -j neutron-linuxbri-OUTPUT 2020-10-05 10:20:03.992 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-filter-top 1 -j neutron-linuxbri-local 2020-10-05 10:20:03.992 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 1 -m physdev --physdev-out tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:03.992 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 2 -m physdev --physdev-in tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:03.992 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 3 -m physdev --physdev-out tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:03.992 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 4 -m physdev --physdev-in tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:03.992 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-sg-chain 1 -j ACCEPT 2020-10-05 10:20:03.992 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-sg-fallback 1 -m comment --comment "Default drop rule for unmatched traffic." -j DROP 2020-10-05 10:20:03.992 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent COMMIT 2020-10-05 10:20:03.992 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent # Completed by iptables_manager 2020-10-05 10:20:03.992 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent # Generated by iptables_manager 2020-10-05 10:20:03.992 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent *raw 2020-10-05 10:20:03.992 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :OUTPUT - [0:0] 2020-10-05 10:20:03.992 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :PREROUTING - [0:0] 2020-10-05 10:20:03.992 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-OUTPUT - [0:0] 2020-10-05 10:20:03.992 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-PREROUTING - [0:0] 2020-10-05 10:20:03.992 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I OUTPUT 1 -j neutron-linuxbri-OUTPUT 2020-10-05 10:20:03.992 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I PREROUTING 1 -j neutron-linuxbri-PREROUTING 2020-10-05 10:20:03.992 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent COMMIT 2020-10-05 10:20:03.992 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent # Completed by iptables_manager 2020-10-05 10:20:03.992 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent ; Stdout: ; Stderr: iptables-restore: line 25 failed 2020-10-05 10:20:03.992 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent 2020-10-05 10:20:03.992 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent 2020-10-05 10:20:05.514 551 INFO neutron.plugins.ml2.drivers.agent._common_agent [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Linux bridge agent Agent out of sync with plugin! 2020-10-05 10:20:05.515 551 INFO neutron.agent.securitygroups_rpc [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Preparing filters for devices {'tap40569186-89', 'tapce421d07-52', 'tap9cd7cb40-a1', 'tap512d1429-1d'} 2020-10-05 10:20:06.000 551 ERROR neutron.agent.linux.iptables_manager [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] IPTablesManager.apply failed to apply the following set of iptables rules: 25. -I neutron-linuxbri-FORWARD 7 -m physdev --physdev-out tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 26. -I neutron-linuxbri-FORWARD 8 -m physdev --physdev-in tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 27. -I neutron-linuxbri-sg-chain 1 -j ACCEPT 28. -I neutron-linuxbri-sg-fallback 1 -m comment --comment "Default drop rule for unmatched traffic." -j DROP 29. COMMIT 30. # Completed by iptables_manager 31. # Generated by iptables_manager 32. *raw 33. :OUTPUT - [0:0] 34. :PREROUTING - [0:0] 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Error in agent loop. Devices info: {'current': {'tap40569186-89', 'tapce421d07-52', 'tap9cd7cb40-a1', 'tap512d1429-1d'}, 'timestamps': {'tap40569186-89': 8, 'tapce421d07-52': 9, 'tap9cd7cb40-a1': 6, 'tap512d1429-1d': 7}, 'added': {'tap40569186-89', 'tapce421d07-52', 'tap9cd7cb40-a1', 'tap512d1429-1d'}, 'removed': set(), 'updated': set()}: neutron_lib.exceptions.ProcessExecutionError: Exit code: 1; Cmd: ['sudo', '/usr/bin/neutron-rootwrap', '/etc/neutron/rootwrap.conf', 'iptables-restore', '-n']; Stdin: # Generated by iptables_manager *filter :FORWARD - [0:0] :INPUT - [0:0] :OUTPUT - [0:0] :neutron-filter-top - [0:0] :neutron-linuxbri-FORWARD - [0:0] :neutron-linuxbri-INPUT - [0:0] :neutron-linuxbri-OUTPUT - [0:0] :neutron-linuxbri-local - [0:0] :neutron-linuxbri-sg-chain - [0:0] :neutron-linuxbri-sg-fallback - [0:0] -I FORWARD 1 -j neutron-filter-top -I FORWARD 2 -j neutron-linuxbri-FORWARD -I INPUT 1 -j neutron-linuxbri-INPUT -I OUTPUT 1 -j neutron-filter-top -I OUTPUT 2 -j neutron-linuxbri-OUTPUT -I neutron-filter-top 1 -j neutron-linuxbri-local -I neutron-linuxbri-FORWARD 1 -m physdev --physdev-out tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 2 -m physdev --physdev-in tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 3 -m physdev --physdev-out tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 4 -m physdev --physdev-in tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 5 -m physdev --physdev-out tap40569186-89 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 6 -m physdev --physdev-in tap40569186-89 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 7 -m physdev --physdev-out tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 8 -m physdev --physdev-in tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-sg-chain 1 -j ACCEPT -I neutron-linuxbri-sg-fallback 1 -m comment --comment "Default drop rule for unmatched traffic." -j DROP COMMIT # Completed by iptables_manager # Generated by iptables_manager *raw :OUTPUT - [0:0] :PREROUTING - [0:0] :neutron-linuxbri-OUTPUT - [0:0] :neutron-linuxbri-PREROUTING - [0:0] -I OUTPUT 1 -j neutron-linuxbri-OUTPUT -I PREROUTING 1 -j neutron-linuxbri-PREROUTING COMMIT # Completed by iptables_manager ; Stdout: ; Stderr: iptables-restore: line 29 failed 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent Traceback (most recent call last): 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/plugins/ml2/drivers/agent/_common_agent.py", line 465, in daemon_loop 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent sync = self.process_network_devices(device_info) 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/osprofiler/profiler.py", line 160, in wrapper 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent result = f(*args, **kwargs) 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/plugins/ml2/drivers/agent/_common_agent.py", line 206, in process_network_devices 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.sg_agent.setup_port_filters(device_info.get('added'), 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 262, in setup_port_filters 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.prepare_devices_filter(new_devices) 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 126, in decorated_function 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent return func(self, # pylint: disable=not-callable 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 139, in prepare_devices_filter 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self._apply_port_filter(device_ids) 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 171, in _apply_port_filter 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.firewall.process_trusted_ports(trusted_devices) 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3.8/contextlib.py", line 120, in __exit__ 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent next(self.gen) 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/firewall.py", line 137, in defer_apply 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.filter_defer_apply_off() 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_firewall.py", line 1004, in filter_defer_apply_off 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.iptables.defer_apply_off() 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 450, in defer_apply_off 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self._apply() 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 467, in _apply 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent first = self._apply_synchronized() 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 623, in _apply_synchronized 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent raise err 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 514, in _do_run_restore 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.execute(args, process_input='\n'.join(commands), 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/utils.py", line 148, in execute 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent raise exceptions.ProcessExecutionError(msg, 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent neutron_lib.exceptions.ProcessExecutionError: Exit code: 1; Cmd: ['sudo', '/usr/bin/neutron-rootwrap', '/etc/neutron/rootwrap.conf', 'iptables-restore', '-n']; Stdin: # Generated by iptables_manager 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent *filter 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :FORWARD - [0:0] 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :INPUT - [0:0] 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :OUTPUT - [0:0] 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-filter-top - [0:0] 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-FORWARD - [0:0] 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-INPUT - [0:0] 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-OUTPUT - [0:0] 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-local - [0:0] 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-sg-chain - [0:0] 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-sg-fallback - [0:0] 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I FORWARD 1 -j neutron-filter-top 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I FORWARD 2 -j neutron-linuxbri-FORWARD 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I INPUT 1 -j neutron-linuxbri-INPUT 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I OUTPUT 1 -j neutron-filter-top 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I OUTPUT 2 -j neutron-linuxbri-OUTPUT 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-filter-top 1 -j neutron-linuxbri-local 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 1 -m physdev --physdev-out tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 2 -m physdev --physdev-in tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 3 -m physdev --physdev-out tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 4 -m physdev --physdev-in tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 5 -m physdev --physdev-out tap40569186-89 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 6 -m physdev --physdev-in tap40569186-89 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 7 -m physdev --physdev-out tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 8 -m physdev --physdev-in tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-sg-chain 1 -j ACCEPT 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-sg-fallback 1 -m comment --comment "Default drop rule for unmatched traffic." -j DROP 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent COMMIT 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent # Completed by iptables_manager 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent # Generated by iptables_manager 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent *raw 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :OUTPUT - [0:0] 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :PREROUTING - [0:0] 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-OUTPUT - [0:0] 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-PREROUTING - [0:0] 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I OUTPUT 1 -j neutron-linuxbri-OUTPUT 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I PREROUTING 1 -j neutron-linuxbri-PREROUTING 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent COMMIT 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent # Completed by iptables_manager 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent ; Stdout: ; Stderr: iptables-restore: line 29 failed 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent 2020-10-05 10:20:06.001 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent 2020-10-05 10:20:07.516 551 INFO neutron.plugins.ml2.drivers.agent._common_agent [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Linux bridge agent Agent out of sync with plugin! 2020-10-05 10:20:07.517 551 INFO neutron.agent.securitygroups_rpc [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Preparing filters for devices {'tap40569186-89', 'tapce421d07-52', 'tap9cd7cb40-a1', 'tap512d1429-1d'} 2020-10-05 10:20:08.115 551 ERROR neutron.agent.linux.iptables_manager [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] IPTablesManager.apply failed to apply the following set of iptables rules: 25. -I neutron-linuxbri-FORWARD 7 -m physdev --physdev-out tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 26. -I neutron-linuxbri-FORWARD 8 -m physdev --physdev-in tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 27. -I neutron-linuxbri-sg-chain 1 -j ACCEPT 28. -I neutron-linuxbri-sg-fallback 1 -m comment --comment "Default drop rule for unmatched traffic." -j DROP 29. COMMIT 30. # Completed by iptables_manager 31. # Generated by iptables_manager 32. *raw 33. :OUTPUT - [0:0] 34. :PREROUTING - [0:0] 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Error in agent loop. Devices info: {'current': {'tap40569186-89', 'tapce421d07-52', 'tap9cd7cb40-a1', 'tap512d1429-1d'}, 'timestamps': {'tap40569186-89': 8, 'tapce421d07-52': 9, 'tap9cd7cb40-a1': 6, 'tap512d1429-1d': 7}, 'added': {'tap40569186-89', 'tapce421d07-52', 'tap9cd7cb40-a1', 'tap512d1429-1d'}, 'removed': set(), 'updated': set()}: neutron_lib.exceptions.ProcessExecutionError: Exit code: 1; Cmd: ['sudo', '/usr/bin/neutron-rootwrap', '/etc/neutron/rootwrap.conf', 'iptables-restore', '-n']; Stdin: # Generated by iptables_manager *filter :FORWARD - [0:0] :INPUT - [0:0] :OUTPUT - [0:0] :neutron-filter-top - [0:0] :neutron-linuxbri-FORWARD - [0:0] :neutron-linuxbri-INPUT - [0:0] :neutron-linuxbri-OUTPUT - [0:0] :neutron-linuxbri-local - [0:0] :neutron-linuxbri-sg-chain - [0:0] :neutron-linuxbri-sg-fallback - [0:0] -I FORWARD 1 -j neutron-filter-top -I FORWARD 2 -j neutron-linuxbri-FORWARD -I INPUT 1 -j neutron-linuxbri-INPUT -I OUTPUT 1 -j neutron-filter-top -I OUTPUT 2 -j neutron-linuxbri-OUTPUT -I neutron-filter-top 1 -j neutron-linuxbri-local -I neutron-linuxbri-FORWARD 1 -m physdev --physdev-out tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 2 -m physdev --physdev-in tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 3 -m physdev --physdev-out tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 4 -m physdev --physdev-in tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 5 -m physdev --physdev-out tap40569186-89 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 6 -m physdev --physdev-in tap40569186-89 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 7 -m physdev --physdev-out tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 8 -m physdev --physdev-in tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-sg-chain 1 -j ACCEPT -I neutron-linuxbri-sg-fallback 1 -m comment --comment "Default drop rule for unmatched traffic." -j DROP COMMIT # Completed by iptables_manager # Generated by iptables_manager *raw :OUTPUT - [0:0] :PREROUTING - [0:0] :neutron-linuxbri-OUTPUT - [0:0] :neutron-linuxbri-PREROUTING - [0:0] -I OUTPUT 1 -j neutron-linuxbri-OUTPUT -I PREROUTING 1 -j neutron-linuxbri-PREROUTING COMMIT # Completed by iptables_manager ; Stdout: ; Stderr: iptables-restore: line 29 failed 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent Traceback (most recent call last): 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/plugins/ml2/drivers/agent/_common_agent.py", line 465, in daemon_loop 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent sync = self.process_network_devices(device_info) 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/osprofiler/profiler.py", line 160, in wrapper 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent result = f(*args, **kwargs) 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/plugins/ml2/drivers/agent/_common_agent.py", line 206, in process_network_devices 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.sg_agent.setup_port_filters(device_info.get('added'), 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 262, in setup_port_filters 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.prepare_devices_filter(new_devices) 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 126, in decorated_function 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent return func(self, # pylint: disable=not-callable 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 139, in prepare_devices_filter 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self._apply_port_filter(device_ids) 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 171, in _apply_port_filter 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.firewall.process_trusted_ports(trusted_devices) 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3.8/contextlib.py", line 120, in __exit__ 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent next(self.gen) 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/firewall.py", line 137, in defer_apply 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.filter_defer_apply_off() 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_firewall.py", line 1004, in filter_defer_apply_off 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.iptables.defer_apply_off() 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 450, in defer_apply_off 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self._apply() 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 467, in _apply 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent first = self._apply_synchronized() 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 623, in _apply_synchronized 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent raise err 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 514, in _do_run_restore 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.execute(args, process_input='\n'.join(commands), 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/utils.py", line 148, in execute 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent raise exceptions.ProcessExecutionError(msg, 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent neutron_lib.exceptions.ProcessExecutionError: Exit code: 1; Cmd: ['sudo', '/usr/bin/neutron-rootwrap', '/etc/neutron/rootwrap.conf', 'iptables-restore', '-n']; Stdin: # Generated by iptables_manager 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent *filter 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :FORWARD - [0:0] 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :INPUT - [0:0] 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :OUTPUT - [0:0] 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-filter-top - [0:0] 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-FORWARD - [0:0] 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-INPUT - [0:0] 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-OUTPUT - [0:0] 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-local - [0:0] 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-sg-chain - [0:0] 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-sg-fallback - [0:0] 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I FORWARD 1 -j neutron-filter-top 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I FORWARD 2 -j neutron-linuxbri-FORWARD 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I INPUT 1 -j neutron-linuxbri-INPUT 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I OUTPUT 1 -j neutron-filter-top 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I OUTPUT 2 -j neutron-linuxbri-OUTPUT 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-filter-top 1 -j neutron-linuxbri-local 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 1 -m physdev --physdev-out tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 2 -m physdev --physdev-in tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 3 -m physdev --physdev-out tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 4 -m physdev --physdev-in tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 5 -m physdev --physdev-out tap40569186-89 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 6 -m physdev --physdev-in tap40569186-89 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 7 -m physdev --physdev-out tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 8 -m physdev --physdev-in tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-sg-chain 1 -j ACCEPT 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-sg-fallback 1 -m comment --comment "Default drop rule for unmatched traffic." -j DROP 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent COMMIT 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent # Completed by iptables_manager 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent # Generated by iptables_manager 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent *raw 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :OUTPUT - [0:0] 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :PREROUTING - [0:0] 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-OUTPUT - [0:0] 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-PREROUTING - [0:0] 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I OUTPUT 1 -j neutron-linuxbri-OUTPUT 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I PREROUTING 1 -j neutron-linuxbri-PREROUTING 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent COMMIT 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent # Completed by iptables_manager 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent ; Stdout: ; Stderr: iptables-restore: line 29 failed 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent 2020-10-05 10:20:08.115 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent 2020-10-05 10:20:09.517 551 INFO neutron.plugins.ml2.drivers.agent._common_agent [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Linux bridge agent Agent out of sync with plugin! 2020-10-05 10:20:09.518 551 INFO neutron.agent.securitygroups_rpc [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Preparing filters for devices {'tap40569186-89', 'tapce421d07-52', 'tap9cd7cb40-a1', 'tap512d1429-1d'} 2020-10-05 10:20:09.970 551 ERROR neutron.agent.linux.iptables_manager [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] IPTablesManager.apply failed to apply the following set of iptables rules: 25. -I neutron-linuxbri-FORWARD 7 -m physdev --physdev-out tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 26. -I neutron-linuxbri-FORWARD 8 -m physdev --physdev-in tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 27. -I neutron-linuxbri-sg-chain 1 -j ACCEPT 28. -I neutron-linuxbri-sg-fallback 1 -m comment --comment "Default drop rule for unmatched traffic." -j DROP 29. COMMIT 30. # Completed by iptables_manager 31. # Generated by iptables_manager 32. *raw 33. :OUTPUT - [0:0] 34. :PREROUTING - [0:0] 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Error in agent loop. Devices info: {'current': {'tap40569186-89', 'tapce421d07-52', 'tap9cd7cb40-a1', 'tap512d1429-1d'}, 'timestamps': {'tap40569186-89': 8, 'tapce421d07-52': 9, 'tap9cd7cb40-a1': 6, 'tap512d1429-1d': 7}, 'added': {'tap40569186-89', 'tapce421d07-52', 'tap9cd7cb40-a1', 'tap512d1429-1d'}, 'removed': set(), 'updated': set()}: neutron_lib.exceptions.ProcessExecutionError: Exit code: 1; Cmd: ['sudo', '/usr/bin/neutron-rootwrap', '/etc/neutron/rootwrap.conf', 'iptables-restore', '-n']; Stdin: # Generated by iptables_manager *filter :FORWARD - [0:0] :INPUT - [0:0] :OUTPUT - [0:0] :neutron-filter-top - [0:0] :neutron-linuxbri-FORWARD - [0:0] :neutron-linuxbri-INPUT - [0:0] :neutron-linuxbri-OUTPUT - [0:0] :neutron-linuxbri-local - [0:0] :neutron-linuxbri-sg-chain - [0:0] :neutron-linuxbri-sg-fallback - [0:0] -I FORWARD 1 -j neutron-filter-top -I FORWARD 2 -j neutron-linuxbri-FORWARD -I INPUT 1 -j neutron-linuxbri-INPUT -I OUTPUT 1 -j neutron-filter-top -I OUTPUT 2 -j neutron-linuxbri-OUTPUT -I neutron-filter-top 1 -j neutron-linuxbri-local -I neutron-linuxbri-FORWARD 1 -m physdev --physdev-out tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 2 -m physdev --physdev-in tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 3 -m physdev --physdev-out tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 4 -m physdev --physdev-in tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 5 -m physdev --physdev-out tap40569186-89 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 6 -m physdev --physdev-in tap40569186-89 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 7 -m physdev --physdev-out tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 8 -m physdev --physdev-in tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-sg-chain 1 -j ACCEPT -I neutron-linuxbri-sg-fallback 1 -m comment --comment "Default drop rule for unmatched traffic." -j DROP COMMIT # Completed by iptables_manager # Generated by iptables_manager *raw :OUTPUT - [0:0] :PREROUTING - [0:0] :neutron-linuxbri-OUTPUT - [0:0] :neutron-linuxbri-PREROUTING - [0:0] -I OUTPUT 1 -j neutron-linuxbri-OUTPUT -I PREROUTING 1 -j neutron-linuxbri-PREROUTING COMMIT # Completed by iptables_manager ; Stdout: ; Stderr: iptables-restore: line 29 failed 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent Traceback (most recent call last): 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/plugins/ml2/drivers/agent/_common_agent.py", line 465, in daemon_loop 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent sync = self.process_network_devices(device_info) 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/osprofiler/profiler.py", line 160, in wrapper 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent result = f(*args, **kwargs) 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/plugins/ml2/drivers/agent/_common_agent.py", line 206, in process_network_devices 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.sg_agent.setup_port_filters(device_info.get('added'), 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 262, in setup_port_filters 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.prepare_devices_filter(new_devices) 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 126, in decorated_function 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent return func(self, # pylint: disable=not-callable 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 139, in prepare_devices_filter 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self._apply_port_filter(device_ids) 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 171, in _apply_port_filter 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.firewall.process_trusted_ports(trusted_devices) 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3.8/contextlib.py", line 120, in __exit__ 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent next(self.gen) 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/firewall.py", line 137, in defer_apply 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.filter_defer_apply_off() 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_firewall.py", line 1004, in filter_defer_apply_off 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.iptables.defer_apply_off() 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 450, in defer_apply_off 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self._apply() 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 467, in _apply 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent first = self._apply_synchronized() 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 623, in _apply_synchronized 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent raise err 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 514, in _do_run_restore 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.execute(args, process_input='\n'.join(commands), 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/utils.py", line 148, in execute 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent raise exceptions.ProcessExecutionError(msg, 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent neutron_lib.exceptions.ProcessExecutionError: Exit code: 1; Cmd: ['sudo', '/usr/bin/neutron-rootwrap', '/etc/neutron/rootwrap.conf', 'iptables-restore', '-n']; Stdin: # Generated by iptables_manager 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent *filter 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :FORWARD - [0:0] 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :INPUT - [0:0] 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :OUTPUT - [0:0] 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-filter-top - [0:0] 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-FORWARD - [0:0] 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-INPUT - [0:0] 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-OUTPUT - [0:0] 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-local - [0:0] 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-sg-chain - [0:0] 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-sg-fallback - [0:0] 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I FORWARD 1 -j neutron-filter-top 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I FORWARD 2 -j neutron-linuxbri-FORWARD 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I INPUT 1 -j neutron-linuxbri-INPUT 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I OUTPUT 1 -j neutron-filter-top 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I OUTPUT 2 -j neutron-linuxbri-OUTPUT 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-filter-top 1 -j neutron-linuxbri-local 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 1 -m physdev --physdev-out tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 2 -m physdev --physdev-in tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 3 -m physdev --physdev-out tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 4 -m physdev --physdev-in tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 5 -m physdev --physdev-out tap40569186-89 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 6 -m physdev --physdev-in tap40569186-89 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 7 -m physdev --physdev-out tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 8 -m physdev --physdev-in tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-sg-chain 1 -j ACCEPT 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-sg-fallback 1 -m comment --comment "Default drop rule for unmatched traffic." -j DROP 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent COMMIT 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent # Completed by iptables_manager 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent # Generated by iptables_manager 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent *raw 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :OUTPUT - [0:0] 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :PREROUTING - [0:0] 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-OUTPUT - [0:0] 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-PREROUTING - [0:0] 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I OUTPUT 1 -j neutron-linuxbri-OUTPUT 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I PREROUTING 1 -j neutron-linuxbri-PREROUTING 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent COMMIT 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent # Completed by iptables_manager 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent ; Stdout: ; Stderr: iptables-restore: line 29 failed 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent 2020-10-05 10:20:09.971 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent 2020-10-05 10:20:11.519 551 INFO neutron.plugins.ml2.drivers.agent._common_agent [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Linux bridge agent Agent out of sync with plugin! 2020-10-05 10:20:11.520 551 INFO neutron.agent.securitygroups_rpc [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Preparing filters for devices {'tap40569186-89', 'tapce421d07-52', 'tap9cd7cb40-a1', 'tap512d1429-1d'} 2020-10-05 10:20:12.030 551 ERROR neutron.agent.linux.iptables_manager [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] IPTablesManager.apply failed to apply the following set of iptables rules: 25. -I neutron-linuxbri-FORWARD 7 -m physdev --physdev-out tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 26. -I neutron-linuxbri-FORWARD 8 -m physdev --physdev-in tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 27. -I neutron-linuxbri-sg-chain 1 -j ACCEPT 28. -I neutron-linuxbri-sg-fallback 1 -m comment --comment "Default drop rule for unmatched traffic." -j DROP 29. COMMIT 30. # Completed by iptables_manager 31. # Generated by iptables_manager 32. *raw 33. :OUTPUT - [0:0] 34. :PREROUTING - [0:0] 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Error in agent loop. Devices info: {'current': {'tap40569186-89', 'tapce421d07-52', 'tap9cd7cb40-a1', 'tap512d1429-1d'}, 'timestamps': {'tap40569186-89': 8, 'tapce421d07-52': 9, 'tap9cd7cb40-a1': 6, 'tap512d1429-1d': 7}, 'added': {'tap40569186-89', 'tapce421d07-52', 'tap9cd7cb40-a1', 'tap512d1429-1d'}, 'removed': set(), 'updated': set()}: neutron_lib.exceptions.ProcessExecutionError: Exit code: 1; Cmd: ['sudo', '/usr/bin/neutron-rootwrap', '/etc/neutron/rootwrap.conf', 'iptables-restore', '-n']; Stdin: # Generated by iptables_manager *filter :FORWARD - [0:0] :INPUT - [0:0] :OUTPUT - [0:0] :neutron-filter-top - [0:0] :neutron-linuxbri-FORWARD - [0:0] :neutron-linuxbri-INPUT - [0:0] :neutron-linuxbri-OUTPUT - [0:0] :neutron-linuxbri-local - [0:0] :neutron-linuxbri-sg-chain - [0:0] :neutron-linuxbri-sg-fallback - [0:0] -I FORWARD 1 -j neutron-filter-top -I FORWARD 2 -j neutron-linuxbri-FORWARD -I INPUT 1 -j neutron-linuxbri-INPUT -I OUTPUT 1 -j neutron-filter-top -I OUTPUT 2 -j neutron-linuxbri-OUTPUT -I neutron-filter-top 1 -j neutron-linuxbri-local -I neutron-linuxbri-FORWARD 1 -m physdev --physdev-out tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 2 -m physdev --physdev-in tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 3 -m physdev --physdev-out tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 4 -m physdev --physdev-in tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 5 -m physdev --physdev-out tap40569186-89 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 6 -m physdev --physdev-in tap40569186-89 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 7 -m physdev --physdev-out tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 8 -m physdev --physdev-in tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-sg-chain 1 -j ACCEPT -I neutron-linuxbri-sg-fallback 1 -m comment --comment "Default drop rule for unmatched traffic." -j DROP COMMIT # Completed by iptables_manager # Generated by iptables_manager *raw :OUTPUT - [0:0] :PREROUTING - [0:0] :neutron-linuxbri-OUTPUT - [0:0] :neutron-linuxbri-PREROUTING - [0:0] -I OUTPUT 1 -j neutron-linuxbri-OUTPUT -I PREROUTING 1 -j neutron-linuxbri-PREROUTING COMMIT # Completed by iptables_manager ; Stdout: ; Stderr: iptables-restore: line 29 failed 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent Traceback (most recent call last): 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/plugins/ml2/drivers/agent/_common_agent.py", line 465, in daemon_loop 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent sync = self.process_network_devices(device_info) 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/osprofiler/profiler.py", line 160, in wrapper 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent result = f(*args, **kwargs) 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/plugins/ml2/drivers/agent/_common_agent.py", line 206, in process_network_devices 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.sg_agent.setup_port_filters(device_info.get('added'), 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 262, in setup_port_filters 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.prepare_devices_filter(new_devices) 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 126, in decorated_function 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent return func(self, # pylint: disable=not-callable 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 139, in prepare_devices_filter 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self._apply_port_filter(device_ids) 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 171, in _apply_port_filter 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.firewall.process_trusted_ports(trusted_devices) 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3.8/contextlib.py", line 120, in __exit__ 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent next(self.gen) 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/firewall.py", line 137, in defer_apply 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.filter_defer_apply_off() 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_firewall.py", line 1004, in filter_defer_apply_off 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.iptables.defer_apply_off() 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 450, in defer_apply_off 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self._apply() 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 467, in _apply 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent first = self._apply_synchronized() 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 623, in _apply_synchronized 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent raise err 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 514, in _do_run_restore 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.execute(args, process_input='\n'.join(commands), 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/utils.py", line 148, in execute 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent raise exceptions.ProcessExecutionError(msg, 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent neutron_lib.exceptions.ProcessExecutionError: Exit code: 1; Cmd: ['sudo', '/usr/bin/neutron-rootwrap', '/etc/neutron/rootwrap.conf', 'iptables-restore', '-n']; Stdin: # Generated by iptables_manager 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent *filter 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :FORWARD - [0:0] 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :INPUT - [0:0] 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :OUTPUT - [0:0] 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-filter-top - [0:0] 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-FORWARD - [0:0] 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-INPUT - [0:0] 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-OUTPUT - [0:0] 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-local - [0:0] 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-sg-chain - [0:0] 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-sg-fallback - [0:0] 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I FORWARD 1 -j neutron-filter-top 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I FORWARD 2 -j neutron-linuxbri-FORWARD 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I INPUT 1 -j neutron-linuxbri-INPUT 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I OUTPUT 1 -j neutron-filter-top 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I OUTPUT 2 -j neutron-linuxbri-OUTPUT 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-filter-top 1 -j neutron-linuxbri-local 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 1 -m physdev --physdev-out tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 2 -m physdev --physdev-in tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 3 -m physdev --physdev-out tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 4 -m physdev --physdev-in tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 5 -m physdev --physdev-out tap40569186-89 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 6 -m physdev --physdev-in tap40569186-89 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 7 -m physdev --physdev-out tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 8 -m physdev --physdev-in tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-sg-chain 1 -j ACCEPT 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-sg-fallback 1 -m comment --comment "Default drop rule for unmatched traffic." -j DROP 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent COMMIT 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent # Completed by iptables_manager 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent # Generated by iptables_manager 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent *raw 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :OUTPUT - [0:0] 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :PREROUTING - [0:0] 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-OUTPUT - [0:0] 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-PREROUTING - [0:0] 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I OUTPUT 1 -j neutron-linuxbri-OUTPUT 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I PREROUTING 1 -j neutron-linuxbri-PREROUTING 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent COMMIT 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent # Completed by iptables_manager 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent ; Stdout: ; Stderr: iptables-restore: line 29 failed 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent 2020-10-05 10:20:12.031 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent 2020-10-05 10:20:13.520 551 INFO neutron.plugins.ml2.drivers.agent._common_agent [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Linux bridge agent Agent out of sync with plugin! 2020-10-05 10:20:13.521 551 INFO neutron.agent.securitygroups_rpc [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Preparing filters for devices {'tap40569186-89', 'tapce421d07-52', 'tap9cd7cb40-a1', 'tap512d1429-1d'} 2020-10-05 10:20:14.141 551 ERROR neutron.agent.linux.iptables_manager [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] IPTablesManager.apply failed to apply the following set of iptables rules: 25. -I neutron-linuxbri-FORWARD 7 -m physdev --physdev-out tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 26. -I neutron-linuxbri-FORWARD 8 -m physdev --physdev-in tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 27. -I neutron-linuxbri-sg-chain 1 -j ACCEPT 28. -I neutron-linuxbri-sg-fallback 1 -m comment --comment "Default drop rule for unmatched traffic." -j DROP 29. COMMIT 30. # Completed by iptables_manager 31. # Generated by iptables_manager 32. *raw 33. :OUTPUT - [0:0] 34. :PREROUTING - [0:0] 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Error in agent loop. Devices info: {'current': {'tap40569186-89', 'tapce421d07-52', 'tap9cd7cb40-a1', 'tap512d1429-1d'}, 'timestamps': {'tap40569186-89': 8, 'tapce421d07-52': 9, 'tap9cd7cb40-a1': 6, 'tap512d1429-1d': 7}, 'added': {'tap40569186-89', 'tapce421d07-52', 'tap9cd7cb40-a1', 'tap512d1429-1d'}, 'removed': set(), 'updated': set()}: neutron_lib.exceptions.ProcessExecutionError: Exit code: 1; Cmd: ['sudo', '/usr/bin/neutron-rootwrap', '/etc/neutron/rootwrap.conf', 'iptables-restore', '-n']; Stdin: # Generated by iptables_manager *filter :FORWARD - [0:0] :INPUT - [0:0] :OUTPUT - [0:0] :neutron-filter-top - [0:0] :neutron-linuxbri-FORWARD - [0:0] :neutron-linuxbri-INPUT - [0:0] :neutron-linuxbri-OUTPUT - [0:0] :neutron-linuxbri-local - [0:0] :neutron-linuxbri-sg-chain - [0:0] :neutron-linuxbri-sg-fallback - [0:0] -I FORWARD 1 -j neutron-filter-top -I FORWARD 2 -j neutron-linuxbri-FORWARD -I INPUT 1 -j neutron-linuxbri-INPUT -I OUTPUT 1 -j neutron-filter-top -I OUTPUT 2 -j neutron-linuxbri-OUTPUT -I neutron-filter-top 1 -j neutron-linuxbri-local -I neutron-linuxbri-FORWARD 1 -m physdev --physdev-out tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 2 -m physdev --physdev-in tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 3 -m physdev --physdev-out tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 4 -m physdev --physdev-in tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 5 -m physdev --physdev-out tap40569186-89 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 6 -m physdev --physdev-in tap40569186-89 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 7 -m physdev --physdev-out tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 8 -m physdev --physdev-in tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-sg-chain 1 -j ACCEPT -I neutron-linuxbri-sg-fallback 1 -m comment --comment "Default drop rule for unmatched traffic." -j DROP COMMIT # Completed by iptables_manager # Generated by iptables_manager *raw :OUTPUT - [0:0] :PREROUTING - [0:0] :neutron-linuxbri-OUTPUT - [0:0] :neutron-linuxbri-PREROUTING - [0:0] -I OUTPUT 1 -j neutron-linuxbri-OUTPUT -I PREROUTING 1 -j neutron-linuxbri-PREROUTING COMMIT # Completed by iptables_manager ; Stdout: ; Stderr: iptables-restore: line 29 failed 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent Traceback (most recent call last): 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/plugins/ml2/drivers/agent/_common_agent.py", line 465, in daemon_loop 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent sync = self.process_network_devices(device_info) 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/osprofiler/profiler.py", line 160, in wrapper 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent result = f(*args, **kwargs) 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/plugins/ml2/drivers/agent/_common_agent.py", line 206, in process_network_devices 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.sg_agent.setup_port_filters(device_info.get('added'), 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 262, in setup_port_filters 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.prepare_devices_filter(new_devices) 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 126, in decorated_function 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent return func(self, # pylint: disable=not-callable 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 139, in prepare_devices_filter 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self._apply_port_filter(device_ids) 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 171, in _apply_port_filter 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.firewall.process_trusted_ports(trusted_devices) 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3.8/contextlib.py", line 120, in __exit__ 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent next(self.gen) 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/firewall.py", line 137, in defer_apply 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.filter_defer_apply_off() 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_firewall.py", line 1004, in filter_defer_apply_off 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.iptables.defer_apply_off() 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 450, in defer_apply_off 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self._apply() 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 467, in _apply 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent first = self._apply_synchronized() 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 623, in _apply_synchronized 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent raise err 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 514, in _do_run_restore 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.execute(args, process_input='\n'.join(commands), 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/utils.py", line 148, in execute 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent raise exceptions.ProcessExecutionError(msg, 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent neutron_lib.exceptions.ProcessExecutionError: Exit code: 1; Cmd: ['sudo', '/usr/bin/neutron-rootwrap', '/etc/neutron/rootwrap.conf', 'iptables-restore', '-n']; Stdin: # Generated by iptables_manager 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent *filter 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :FORWARD - [0:0] 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :INPUT - [0:0] 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :OUTPUT - [0:0] 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-filter-top - [0:0] 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-FORWARD - [0:0] 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-INPUT - [0:0] 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-OUTPUT - [0:0] 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-local - [0:0] 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-sg-chain - [0:0] 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-sg-fallback - [0:0] 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I FORWARD 1 -j neutron-filter-top 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I FORWARD 2 -j neutron-linuxbri-FORWARD 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I INPUT 1 -j neutron-linuxbri-INPUT 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I OUTPUT 1 -j neutron-filter-top 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I OUTPUT 2 -j neutron-linuxbri-OUTPUT 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-filter-top 1 -j neutron-linuxbri-local 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 1 -m physdev --physdev-out tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 2 -m physdev --physdev-in tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 3 -m physdev --physdev-out tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 4 -m physdev --physdev-in tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 5 -m physdev --physdev-out tap40569186-89 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 6 -m physdev --physdev-in tap40569186-89 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 7 -m physdev --physdev-out tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 8 -m physdev --physdev-in tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-sg-chain 1 -j ACCEPT 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-sg-fallback 1 -m comment --comment "Default drop rule for unmatched traffic." -j DROP 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent COMMIT 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent # Completed by iptables_manager 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent # Generated by iptables_manager 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent *raw 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :OUTPUT - [0:0] 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :PREROUTING - [0:0] 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-OUTPUT - [0:0] 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-PREROUTING - [0:0] 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I OUTPUT 1 -j neutron-linuxbri-OUTPUT 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I PREROUTING 1 -j neutron-linuxbri-PREROUTING 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent COMMIT 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent # Completed by iptables_manager 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent ; Stdout: ; Stderr: iptables-restore: line 29 failed 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent 2020-10-05 10:20:14.142 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent 2020-10-05 10:20:15.521 551 INFO neutron.plugins.ml2.drivers.agent._common_agent [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Linux bridge agent Agent out of sync with plugin! 2020-10-05 10:20:15.522 551 INFO neutron.agent.securitygroups_rpc [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Preparing filters for devices {'tap40569186-89', 'tapce421d07-52', 'tap9cd7cb40-a1', 'tap512d1429-1d'} 2020-10-05 10:20:16.106 551 ERROR neutron.agent.linux.iptables_manager [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] IPTablesManager.apply failed to apply the following set of iptables rules: 25. -I neutron-linuxbri-FORWARD 7 -m physdev --physdev-out tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 26. -I neutron-linuxbri-FORWARD 8 -m physdev --physdev-in tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 27. -I neutron-linuxbri-sg-chain 1 -j ACCEPT 28. -I neutron-linuxbri-sg-fallback 1 -m comment --comment "Default drop rule for unmatched traffic." -j DROP 29. COMMIT 30. # Completed by iptables_manager 31. # Generated by iptables_manager 32. *raw 33. :OUTPUT - [0:0] 34. :PREROUTING - [0:0] 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Error in agent loop. Devices info: {'current': {'tap40569186-89', 'tapce421d07-52', 'tap9cd7cb40-a1', 'tap512d1429-1d'}, 'timestamps': {'tap40569186-89': 8, 'tapce421d07-52': 9, 'tap9cd7cb40-a1': 6, 'tap512d1429-1d': 7}, 'added': {'tap40569186-89', 'tapce421d07-52', 'tap9cd7cb40-a1', 'tap512d1429-1d'}, 'removed': set(), 'updated': set()}: neutron_lib.exceptions.ProcessExecutionError: Exit code: 1; Cmd: ['sudo', '/usr/bin/neutron-rootwrap', '/etc/neutron/rootwrap.conf', 'iptables-restore', '-n']; Stdin: # Generated by iptables_manager *filter :FORWARD - [0:0] :INPUT - [0:0] :OUTPUT - [0:0] :neutron-filter-top - [0:0] :neutron-linuxbri-FORWARD - [0:0] :neutron-linuxbri-INPUT - [0:0] :neutron-linuxbri-OUTPUT - [0:0] :neutron-linuxbri-local - [0:0] :neutron-linuxbri-sg-chain - [0:0] :neutron-linuxbri-sg-fallback - [0:0] -I FORWARD 1 -j neutron-filter-top -I FORWARD 2 -j neutron-linuxbri-FORWARD -I INPUT 1 -j neutron-linuxbri-INPUT -I OUTPUT 1 -j neutron-filter-top -I OUTPUT 2 -j neutron-linuxbri-OUTPUT -I neutron-filter-top 1 -j neutron-linuxbri-local -I neutron-linuxbri-FORWARD 1 -m physdev --physdev-out tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 2 -m physdev --physdev-in tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 3 -m physdev --physdev-out tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 4 -m physdev --physdev-in tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 5 -m physdev --physdev-out tap40569186-89 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 6 -m physdev --physdev-in tap40569186-89 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 7 -m physdev --physdev-out tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 8 -m physdev --physdev-in tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-sg-chain 1 -j ACCEPT -I neutron-linuxbri-sg-fallback 1 -m comment --comment "Default drop rule for unmatched traffic." -j DROP COMMIT # Completed by iptables_manager # Generated by iptables_manager *raw :OUTPUT - [0:0] :PREROUTING - [0:0] :neutron-linuxbri-OUTPUT - [0:0] :neutron-linuxbri-PREROUTING - [0:0] -I OUTPUT 1 -j neutron-linuxbri-OUTPUT -I PREROUTING 1 -j neutron-linuxbri-PREROUTING COMMIT # Completed by iptables_manager ; Stdout: ; Stderr: iptables-restore: line 29 failed 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent Traceback (most recent call last): 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/plugins/ml2/drivers/agent/_common_agent.py", line 465, in daemon_loop 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent sync = self.process_network_devices(device_info) 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/osprofiler/profiler.py", line 160, in wrapper 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent result = f(*args, **kwargs) 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/plugins/ml2/drivers/agent/_common_agent.py", line 206, in process_network_devices 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.sg_agent.setup_port_filters(device_info.get('added'), 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 262, in setup_port_filters 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.prepare_devices_filter(new_devices) 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 126, in decorated_function 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent return func(self, # pylint: disable=not-callable 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 139, in prepare_devices_filter 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self._apply_port_filter(device_ids) 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 171, in _apply_port_filter 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.firewall.process_trusted_ports(trusted_devices) 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3.8/contextlib.py", line 120, in __exit__ 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent next(self.gen) 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/firewall.py", line 137, in defer_apply 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.filter_defer_apply_off() 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_firewall.py", line 1004, in filter_defer_apply_off 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.iptables.defer_apply_off() 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 450, in defer_apply_off 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self._apply() 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 467, in _apply 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent first = self._apply_synchronized() 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 623, in _apply_synchronized 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent raise err 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 514, in _do_run_restore 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.execute(args, process_input='\n'.join(commands), 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/utils.py", line 148, in execute 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent raise exceptions.ProcessExecutionError(msg, 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent neutron_lib.exceptions.ProcessExecutionError: Exit code: 1; Cmd: ['sudo', '/usr/bin/neutron-rootwrap', '/etc/neutron/rootwrap.conf', 'iptables-restore', '-n']; Stdin: # Generated by iptables_manager 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent *filter 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :FORWARD - [0:0] 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :INPUT - [0:0] 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :OUTPUT - [0:0] 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-filter-top - [0:0] 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-FORWARD - [0:0] 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-INPUT - [0:0] 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-OUTPUT - [0:0] 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-local - [0:0] 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-sg-chain - [0:0] 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-sg-fallback - [0:0] 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I FORWARD 1 -j neutron-filter-top 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I FORWARD 2 -j neutron-linuxbri-FORWARD 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I INPUT 1 -j neutron-linuxbri-INPUT 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I OUTPUT 1 -j neutron-filter-top 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I OUTPUT 2 -j neutron-linuxbri-OUTPUT 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-filter-top 1 -j neutron-linuxbri-local 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 1 -m physdev --physdev-out tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 2 -m physdev --physdev-in tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 3 -m physdev --physdev-out tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 4 -m physdev --physdev-in tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 5 -m physdev --physdev-out tap40569186-89 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 6 -m physdev --physdev-in tap40569186-89 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 7 -m physdev --physdev-out tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 8 -m physdev --physdev-in tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-sg-chain 1 -j ACCEPT 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-sg-fallback 1 -m comment --comment "Default drop rule for unmatched traffic." -j DROP 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent COMMIT 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent # Completed by iptables_manager 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent # Generated by iptables_manager 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent *raw 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :OUTPUT - [0:0] 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :PREROUTING - [0:0] 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-OUTPUT - [0:0] 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-PREROUTING - [0:0] 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I OUTPUT 1 -j neutron-linuxbri-OUTPUT 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I PREROUTING 1 -j neutron-linuxbri-PREROUTING 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent COMMIT 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent # Completed by iptables_manager 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent ; Stdout: ; Stderr: iptables-restore: line 29 failed 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent 2020-10-05 10:20:16.107 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent 2020-10-05 10:20:17.523 551 INFO neutron.plugins.ml2.drivers.agent._common_agent [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Linux bridge agent Agent out of sync with plugin! 2020-10-05 10:20:17.524 551 INFO neutron.agent.securitygroups_rpc [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Preparing filters for devices {'tap40569186-89', 'tapce421d07-52', 'tap9cd7cb40-a1', 'tap512d1429-1d'} 2020-10-05 10:20:17.958 551 ERROR neutron.agent.linux.iptables_manager [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] IPTablesManager.apply failed to apply the following set of iptables rules: 25. -I neutron-linuxbri-FORWARD 7 -m physdev --physdev-out tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 26. -I neutron-linuxbri-FORWARD 8 -m physdev --physdev-in tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 27. -I neutron-linuxbri-sg-chain 1 -j ACCEPT 28. -I neutron-linuxbri-sg-fallback 1 -m comment --comment "Default drop rule for unmatched traffic." -j DROP 29. COMMIT 30. # Completed by iptables_manager 31. # Generated by iptables_manager 32. *raw 33. :OUTPUT - [0:0] 34. :PREROUTING - [0:0] 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Error in agent loop. Devices info: {'current': {'tap40569186-89', 'tapce421d07-52', 'tap9cd7cb40-a1', 'tap512d1429-1d'}, 'timestamps': {'tap40569186-89': 8, 'tapce421d07-52': 9, 'tap9cd7cb40-a1': 6, 'tap512d1429-1d': 7}, 'added': {'tap40569186-89', 'tapce421d07-52', 'tap9cd7cb40-a1', 'tap512d1429-1d'}, 'removed': set(), 'updated': set()}: neutron_lib.exceptions.ProcessExecutionError: Exit code: 1; Cmd: ['sudo', '/usr/bin/neutron-rootwrap', '/etc/neutron/rootwrap.conf', 'iptables-restore', '-n']; Stdin: # Generated by iptables_manager *filter :FORWARD - [0:0] :INPUT - [0:0] :OUTPUT - [0:0] :neutron-filter-top - [0:0] :neutron-linuxbri-FORWARD - [0:0] :neutron-linuxbri-INPUT - [0:0] :neutron-linuxbri-OUTPUT - [0:0] :neutron-linuxbri-local - [0:0] :neutron-linuxbri-sg-chain - [0:0] :neutron-linuxbri-sg-fallback - [0:0] -I FORWARD 1 -j neutron-filter-top -I FORWARD 2 -j neutron-linuxbri-FORWARD -I INPUT 1 -j neutron-linuxbri-INPUT -I OUTPUT 1 -j neutron-filter-top -I OUTPUT 2 -j neutron-linuxbri-OUTPUT -I neutron-filter-top 1 -j neutron-linuxbri-local -I neutron-linuxbri-FORWARD 1 -m physdev --physdev-out tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 2 -m physdev --physdev-in tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 3 -m physdev --physdev-out tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 4 -m physdev --physdev-in tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 5 -m physdev --physdev-out tap40569186-89 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 6 -m physdev --physdev-in tap40569186-89 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 7 -m physdev --physdev-out tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 8 -m physdev --physdev-in tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-sg-chain 1 -j ACCEPT -I neutron-linuxbri-sg-fallback 1 -m comment --comment "Default drop rule for unmatched traffic." -j DROP COMMIT # Completed by iptables_manager # Generated by iptables_manager *raw :OUTPUT - [0:0] :PREROUTING - [0:0] :neutron-linuxbri-OUTPUT - [0:0] :neutron-linuxbri-PREROUTING - [0:0] -I OUTPUT 1 -j neutron-linuxbri-OUTPUT -I PREROUTING 1 -j neutron-linuxbri-PREROUTING COMMIT # Completed by iptables_manager ; Stdout: ; Stderr: iptables-restore: line 29 failed 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent Traceback (most recent call last): 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/plugins/ml2/drivers/agent/_common_agent.py", line 465, in daemon_loop 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent sync = self.process_network_devices(device_info) 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/osprofiler/profiler.py", line 160, in wrapper 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent result = f(*args, **kwargs) 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/plugins/ml2/drivers/agent/_common_agent.py", line 206, in process_network_devices 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.sg_agent.setup_port_filters(device_info.get('added'), 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 262, in setup_port_filters 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.prepare_devices_filter(new_devices) 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 126, in decorated_function 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent return func(self, # pylint: disable=not-callable 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 139, in prepare_devices_filter 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self._apply_port_filter(device_ids) 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 171, in _apply_port_filter 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.firewall.process_trusted_ports(trusted_devices) 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3.8/contextlib.py", line 120, in __exit__ 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent next(self.gen) 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/firewall.py", line 137, in defer_apply 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.filter_defer_apply_off() 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_firewall.py", line 1004, in filter_defer_apply_off 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.iptables.defer_apply_off() 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 450, in defer_apply_off 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self._apply() 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 467, in _apply 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent first = self._apply_synchronized() 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 623, in _apply_synchronized 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent raise err 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 514, in _do_run_restore 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.execute(args, process_input='\n'.join(commands), 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/utils.py", line 148, in execute 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent raise exceptions.ProcessExecutionError(msg, 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent neutron_lib.exceptions.ProcessExecutionError: Exit code: 1; Cmd: ['sudo', '/usr/bin/neutron-rootwrap', '/etc/neutron/rootwrap.conf', 'iptables-restore', '-n']; Stdin: # Generated by iptables_manager 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent *filter 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :FORWARD - [0:0] 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :INPUT - [0:0] 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :OUTPUT - [0:0] 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-filter-top - [0:0] 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-FORWARD - [0:0] 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-INPUT - [0:0] 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-OUTPUT - [0:0] 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-local - [0:0] 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-sg-chain - [0:0] 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-sg-fallback - [0:0] 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I FORWARD 1 -j neutron-filter-top 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I FORWARD 2 -j neutron-linuxbri-FORWARD 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I INPUT 1 -j neutron-linuxbri-INPUT 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I OUTPUT 1 -j neutron-filter-top 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I OUTPUT 2 -j neutron-linuxbri-OUTPUT 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-filter-top 1 -j neutron-linuxbri-local 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 1 -m physdev --physdev-out tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 2 -m physdev --physdev-in tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 3 -m physdev --physdev-out tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 4 -m physdev --physdev-in tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 5 -m physdev --physdev-out tap40569186-89 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 6 -m physdev --physdev-in tap40569186-89 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 7 -m physdev --physdev-out tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 8 -m physdev --physdev-in tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-sg-chain 1 -j ACCEPT 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-sg-fallback 1 -m comment --comment "Default drop rule for unmatched traffic." -j DROP 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent COMMIT 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent # Completed by iptables_manager 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent # Generated by iptables_manager 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent *raw 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :OUTPUT - [0:0] 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :PREROUTING - [0:0] 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-OUTPUT - [0:0] 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-PREROUTING - [0:0] 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I OUTPUT 1 -j neutron-linuxbri-OUTPUT 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I PREROUTING 1 -j neutron-linuxbri-PREROUTING 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent COMMIT 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent # Completed by iptables_manager 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent ; Stdout: ; Stderr: iptables-restore: line 29 failed 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent 2020-10-05 10:20:17.959 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent 2020-10-05 10:20:19.525 551 INFO neutron.plugins.ml2.drivers.agent._common_agent [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Linux bridge agent Agent out of sync with plugin! 2020-10-05 10:20:19.526 551 INFO neutron.agent.securitygroups_rpc [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Preparing filters for devices {'tap40569186-89', 'tapce421d07-52', 'tap9cd7cb40-a1', 'tap512d1429-1d'} 2020-10-05 10:20:20.093 551 ERROR neutron.agent.linux.iptables_manager [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] IPTablesManager.apply failed to apply the following set of iptables rules: 25. -I neutron-linuxbri-FORWARD 7 -m physdev --physdev-out tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 26. -I neutron-linuxbri-FORWARD 8 -m physdev --physdev-in tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 27. -I neutron-linuxbri-sg-chain 1 -j ACCEPT 28. -I neutron-linuxbri-sg-fallback 1 -m comment --comment "Default drop rule for unmatched traffic." -j DROP 29. COMMIT 30. # Completed by iptables_manager 31. # Generated by iptables_manager 32. *raw 33. :OUTPUT - [0:0] 34. :PREROUTING - [0:0] 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Error in agent loop. Devices info: {'current': {'tap40569186-89', 'tapce421d07-52', 'tap9cd7cb40-a1', 'tap512d1429-1d'}, 'timestamps': {'tap40569186-89': 8, 'tapce421d07-52': 9, 'tap9cd7cb40-a1': 6, 'tap512d1429-1d': 7}, 'added': {'tap40569186-89', 'tapce421d07-52', 'tap9cd7cb40-a1', 'tap512d1429-1d'}, 'removed': set(), 'updated': set()}: neutron_lib.exceptions.ProcessExecutionError: Exit code: 1; Cmd: ['sudo', '/usr/bin/neutron-rootwrap', '/etc/neutron/rootwrap.conf', 'iptables-restore', '-n']; Stdin: # Generated by iptables_manager *filter :FORWARD - [0:0] :INPUT - [0:0] :OUTPUT - [0:0] :neutron-filter-top - [0:0] :neutron-linuxbri-FORWARD - [0:0] :neutron-linuxbri-INPUT - [0:0] :neutron-linuxbri-OUTPUT - [0:0] :neutron-linuxbri-local - [0:0] :neutron-linuxbri-sg-chain - [0:0] :neutron-linuxbri-sg-fallback - [0:0] -I FORWARD 1 -j neutron-filter-top -I FORWARD 2 -j neutron-linuxbri-FORWARD -I INPUT 1 -j neutron-linuxbri-INPUT -I OUTPUT 1 -j neutron-filter-top -I OUTPUT 2 -j neutron-linuxbri-OUTPUT -I neutron-filter-top 1 -j neutron-linuxbri-local -I neutron-linuxbri-FORWARD 1 -m physdev --physdev-out tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 2 -m physdev --physdev-in tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 3 -m physdev --physdev-out tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 4 -m physdev --physdev-in tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 5 -m physdev --physdev-out tap40569186-89 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 6 -m physdev --physdev-in tap40569186-89 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 7 -m physdev --physdev-out tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 8 -m physdev --physdev-in tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-sg-chain 1 -j ACCEPT -I neutron-linuxbri-sg-fallback 1 -m comment --comment "Default drop rule for unmatched traffic." -j DROP COMMIT # Completed by iptables_manager # Generated by iptables_manager *raw :OUTPUT - [0:0] :PREROUTING - [0:0] :neutron-linuxbri-OUTPUT - [0:0] :neutron-linuxbri-PREROUTING - [0:0] -I OUTPUT 1 -j neutron-linuxbri-OUTPUT -I PREROUTING 1 -j neutron-linuxbri-PREROUTING COMMIT # Completed by iptables_manager ; Stdout: ; Stderr: iptables-restore: line 29 failed 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent Traceback (most recent call last): 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/plugins/ml2/drivers/agent/_common_agent.py", line 465, in daemon_loop 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent sync = self.process_network_devices(device_info) 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/osprofiler/profiler.py", line 160, in wrapper 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent result = f(*args, **kwargs) 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/plugins/ml2/drivers/agent/_common_agent.py", line 206, in process_network_devices 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.sg_agent.setup_port_filters(device_info.get('added'), 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 262, in setup_port_filters 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.prepare_devices_filter(new_devices) 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 126, in decorated_function 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent return func(self, # pylint: disable=not-callable 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 139, in prepare_devices_filter 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self._apply_port_filter(device_ids) 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 171, in _apply_port_filter 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.firewall.process_trusted_ports(trusted_devices) 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3.8/contextlib.py", line 120, in __exit__ 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent next(self.gen) 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/firewall.py", line 137, in defer_apply 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.filter_defer_apply_off() 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_firewall.py", line 1004, in filter_defer_apply_off 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.iptables.defer_apply_off() 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 450, in defer_apply_off 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self._apply() 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 467, in _apply 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent first = self._apply_synchronized() 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 623, in _apply_synchronized 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent raise err 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 514, in _do_run_restore 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.execute(args, process_input='\n'.join(commands), 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/utils.py", line 148, in execute 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent raise exceptions.ProcessExecutionError(msg, 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent neutron_lib.exceptions.ProcessExecutionError: Exit code: 1; Cmd: ['sudo', '/usr/bin/neutron-rootwrap', '/etc/neutron/rootwrap.conf', 'iptables-restore', '-n']; Stdin: # Generated by iptables_manager 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent *filter 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :FORWARD - [0:0] 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :INPUT - [0:0] 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :OUTPUT - [0:0] 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-filter-top - [0:0] 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-FORWARD - [0:0] 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-INPUT - [0:0] 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-OUTPUT - [0:0] 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-local - [0:0] 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-sg-chain - [0:0] 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-sg-fallback - [0:0] 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I FORWARD 1 -j neutron-filter-top 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I FORWARD 2 -j neutron-linuxbri-FORWARD 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I INPUT 1 -j neutron-linuxbri-INPUT 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I OUTPUT 1 -j neutron-filter-top 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I OUTPUT 2 -j neutron-linuxbri-OUTPUT 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-filter-top 1 -j neutron-linuxbri-local 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 1 -m physdev --physdev-out tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 2 -m physdev --physdev-in tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 3 -m physdev --physdev-out tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 4 -m physdev --physdev-in tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 5 -m physdev --physdev-out tap40569186-89 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 6 -m physdev --physdev-in tap40569186-89 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 7 -m physdev --physdev-out tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 8 -m physdev --physdev-in tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-sg-chain 1 -j ACCEPT 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-sg-fallback 1 -m comment --comment "Default drop rule for unmatched traffic." -j DROP 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent COMMIT 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent # Completed by iptables_manager 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent # Generated by iptables_manager 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent *raw 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :OUTPUT - [0:0] 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :PREROUTING - [0:0] 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-OUTPUT - [0:0] 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-PREROUTING - [0:0] 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I OUTPUT 1 -j neutron-linuxbri-OUTPUT 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I PREROUTING 1 -j neutron-linuxbri-PREROUTING 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent COMMIT 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent # Completed by iptables_manager 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent ; Stdout: ; Stderr: iptables-restore: line 29 failed 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent 2020-10-05 10:20:20.094 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent 2020-10-05 10:20:21.526 551 INFO neutron.plugins.ml2.drivers.agent._common_agent [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Linux bridge agent Agent out of sync with plugin! 2020-10-05 10:20:21.527 551 INFO neutron.agent.securitygroups_rpc [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Preparing filters for devices {'tap40569186-89', 'tapce421d07-52', 'tap9cd7cb40-a1', 'tap512d1429-1d'} 2020-10-05 10:20:22.151 551 ERROR neutron.agent.linux.iptables_manager [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] IPTablesManager.apply failed to apply the following set of iptables rules: 25. -I neutron-linuxbri-FORWARD 7 -m physdev --physdev-out tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 26. -I neutron-linuxbri-FORWARD 8 -m physdev --physdev-in tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 27. -I neutron-linuxbri-sg-chain 1 -j ACCEPT 28. -I neutron-linuxbri-sg-fallback 1 -m comment --comment "Default drop rule for unmatched traffic." -j DROP 29. COMMIT 30. # Completed by iptables_manager 31. # Generated by iptables_manager 32. *raw 33. :OUTPUT - [0:0] 34. :PREROUTING - [0:0] 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Error in agent loop. Devices info: {'current': {'tap40569186-89', 'tapce421d07-52', 'tap9cd7cb40-a1', 'tap512d1429-1d'}, 'timestamps': {'tap40569186-89': 8, 'tapce421d07-52': 9, 'tap9cd7cb40-a1': 6, 'tap512d1429-1d': 7}, 'added': {'tap40569186-89', 'tapce421d07-52', 'tap9cd7cb40-a1', 'tap512d1429-1d'}, 'removed': set(), 'updated': set()}: neutron_lib.exceptions.ProcessExecutionError: Exit code: 1; Cmd: ['sudo', '/usr/bin/neutron-rootwrap', '/etc/neutron/rootwrap.conf', 'iptables-restore', '-n']; Stdin: # Generated by iptables_manager *filter :FORWARD - [0:0] :INPUT - [0:0] :OUTPUT - [0:0] :neutron-filter-top - [0:0] :neutron-linuxbri-FORWARD - [0:0] :neutron-linuxbri-INPUT - [0:0] :neutron-linuxbri-OUTPUT - [0:0] :neutron-linuxbri-local - [0:0] :neutron-linuxbri-sg-chain - [0:0] :neutron-linuxbri-sg-fallback - [0:0] -I FORWARD 1 -j neutron-filter-top -I FORWARD 2 -j neutron-linuxbri-FORWARD -I INPUT 1 -j neutron-linuxbri-INPUT -I OUTPUT 1 -j neutron-filter-top -I OUTPUT 2 -j neutron-linuxbri-OUTPUT -I neutron-filter-top 1 -j neutron-linuxbri-local -I neutron-linuxbri-FORWARD 1 -m physdev --physdev-out tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 2 -m physdev --physdev-in tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 3 -m physdev --physdev-out tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 4 -m physdev --physdev-in tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 5 -m physdev --physdev-out tap40569186-89 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 6 -m physdev --physdev-in tap40569186-89 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 7 -m physdev --physdev-out tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 8 -m physdev --physdev-in tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-sg-chain 1 -j ACCEPT -I neutron-linuxbri-sg-fallback 1 -m comment --comment "Default drop rule for unmatched traffic." -j DROP COMMIT # Completed by iptables_manager # Generated by iptables_manager *raw :OUTPUT - [0:0] :PREROUTING - [0:0] :neutron-linuxbri-OUTPUT - [0:0] :neutron-linuxbri-PREROUTING - [0:0] -I OUTPUT 1 -j neutron-linuxbri-OUTPUT -I PREROUTING 1 -j neutron-linuxbri-PREROUTING COMMIT # Completed by iptables_manager ; Stdout: ; Stderr: iptables-restore: line 29 failed 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent Traceback (most recent call last): 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/plugins/ml2/drivers/agent/_common_agent.py", line 465, in daemon_loop 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent sync = self.process_network_devices(device_info) 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/osprofiler/profiler.py", line 160, in wrapper 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent result = f(*args, **kwargs) 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/plugins/ml2/drivers/agent/_common_agent.py", line 206, in process_network_devices 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.sg_agent.setup_port_filters(device_info.get('added'), 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 262, in setup_port_filters 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.prepare_devices_filter(new_devices) 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 126, in decorated_function 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent return func(self, # pylint: disable=not-callable 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 139, in prepare_devices_filter 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self._apply_port_filter(device_ids) 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 171, in _apply_port_filter 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.firewall.process_trusted_ports(trusted_devices) 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3.8/contextlib.py", line 120, in __exit__ 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent next(self.gen) 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/firewall.py", line 137, in defer_apply 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.filter_defer_apply_off() 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_firewall.py", line 1004, in filter_defer_apply_off 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.iptables.defer_apply_off() 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 450, in defer_apply_off 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self._apply() 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 467, in _apply 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent first = self._apply_synchronized() 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 623, in _apply_synchronized 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent raise err 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 514, in _do_run_restore 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.execute(args, process_input='\n'.join(commands), 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/utils.py", line 148, in execute 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent raise exceptions.ProcessExecutionError(msg, 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent neutron_lib.exceptions.ProcessExecutionError: Exit code: 1; Cmd: ['sudo', '/usr/bin/neutron-rootwrap', '/etc/neutron/rootwrap.conf', 'iptables-restore', '-n']; Stdin: # Generated by iptables_manager 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent *filter 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :FORWARD - [0:0] 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :INPUT - [0:0] 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :OUTPUT - [0:0] 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-filter-top - [0:0] 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-FORWARD - [0:0] 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-INPUT - [0:0] 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-OUTPUT - [0:0] 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-local - [0:0] 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-sg-chain - [0:0] 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-sg-fallback - [0:0] 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I FORWARD 1 -j neutron-filter-top 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I FORWARD 2 -j neutron-linuxbri-FORWARD 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I INPUT 1 -j neutron-linuxbri-INPUT 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I OUTPUT 1 -j neutron-filter-top 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I OUTPUT 2 -j neutron-linuxbri-OUTPUT 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-filter-top 1 -j neutron-linuxbri-local 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 1 -m physdev --physdev-out tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 2 -m physdev --physdev-in tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 3 -m physdev --physdev-out tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 4 -m physdev --physdev-in tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 5 -m physdev --physdev-out tap40569186-89 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 6 -m physdev --physdev-in tap40569186-89 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 7 -m physdev --physdev-out tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 8 -m physdev --physdev-in tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-sg-chain 1 -j ACCEPT 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-sg-fallback 1 -m comment --comment "Default drop rule for unmatched traffic." -j DROP 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent COMMIT 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent # Completed by iptables_manager 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent # Generated by iptables_manager 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent *raw 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :OUTPUT - [0:0] 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :PREROUTING - [0:0] 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-OUTPUT - [0:0] 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-PREROUTING - [0:0] 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I OUTPUT 1 -j neutron-linuxbri-OUTPUT 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I PREROUTING 1 -j neutron-linuxbri-PREROUTING 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent COMMIT 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent # Completed by iptables_manager 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent ; Stdout: ; Stderr: iptables-restore: line 29 failed 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent 2020-10-05 10:20:22.152 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent 2020-10-05 10:20:23.528 551 INFO neutron.plugins.ml2.drivers.agent._common_agent [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Linux bridge agent Agent out of sync with plugin! 2020-10-05 10:20:23.529 551 INFO neutron.agent.securitygroups_rpc [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Preparing filters for devices {'tap40569186-89', 'tapce421d07-52', 'tap9cd7cb40-a1', 'tap512d1429-1d'} 2020-10-05 10:20:23.958 551 ERROR neutron.agent.linux.iptables_manager [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] IPTablesManager.apply failed to apply the following set of iptables rules: 25. -I neutron-linuxbri-FORWARD 7 -m physdev --physdev-out tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 26. -I neutron-linuxbri-FORWARD 8 -m physdev --physdev-in tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 27. -I neutron-linuxbri-sg-chain 1 -j ACCEPT 28. -I neutron-linuxbri-sg-fallback 1 -m comment --comment "Default drop rule for unmatched traffic." -j DROP 29. COMMIT 30. # Completed by iptables_manager 31. # Generated by iptables_manager 32. *raw 33. :OUTPUT - [0:0] 34. :PREROUTING - [0:0] 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Error in agent loop. Devices info: {'current': {'tap40569186-89', 'tapce421d07-52', 'tap9cd7cb40-a1', 'tap512d1429-1d'}, 'timestamps': {'tap40569186-89': 8, 'tapce421d07-52': 9, 'tap9cd7cb40-a1': 6, 'tap512d1429-1d': 7}, 'added': {'tap40569186-89', 'tapce421d07-52', 'tap9cd7cb40-a1', 'tap512d1429-1d'}, 'removed': set(), 'updated': set()}: neutron_lib.exceptions.ProcessExecutionError: Exit code: 1; Cmd: ['sudo', '/usr/bin/neutron-rootwrap', '/etc/neutron/rootwrap.conf', 'iptables-restore', '-n']; Stdin: # Generated by iptables_manager *filter :FORWARD - [0:0] :INPUT - [0:0] :OUTPUT - [0:0] :neutron-filter-top - [0:0] :neutron-linuxbri-FORWARD - [0:0] :neutron-linuxbri-INPUT - [0:0] :neutron-linuxbri-OUTPUT - [0:0] :neutron-linuxbri-local - [0:0] :neutron-linuxbri-sg-chain - [0:0] :neutron-linuxbri-sg-fallback - [0:0] -I FORWARD 1 -j neutron-filter-top -I FORWARD 2 -j neutron-linuxbri-FORWARD -I INPUT 1 -j neutron-linuxbri-INPUT -I OUTPUT 1 -j neutron-filter-top -I OUTPUT 2 -j neutron-linuxbri-OUTPUT -I neutron-filter-top 1 -j neutron-linuxbri-local -I neutron-linuxbri-FORWARD 1 -m physdev --physdev-out tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 2 -m physdev --physdev-in tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 3 -m physdev --physdev-out tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 4 -m physdev --physdev-in tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 5 -m physdev --physdev-out tap40569186-89 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 6 -m physdev --physdev-in tap40569186-89 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 7 -m physdev --physdev-out tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 8 -m physdev --physdev-in tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-sg-chain 1 -j ACCEPT -I neutron-linuxbri-sg-fallback 1 -m comment --comment "Default drop rule for unmatched traffic." -j DROP COMMIT # Completed by iptables_manager # Generated by iptables_manager *raw :OUTPUT - [0:0] :PREROUTING - [0:0] :neutron-linuxbri-OUTPUT - [0:0] :neutron-linuxbri-PREROUTING - [0:0] -I OUTPUT 1 -j neutron-linuxbri-OUTPUT -I PREROUTING 1 -j neutron-linuxbri-PREROUTING COMMIT # Completed by iptables_manager ; Stdout: ; Stderr: iptables-restore: line 29 failed 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent Traceback (most recent call last): 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/plugins/ml2/drivers/agent/_common_agent.py", line 465, in daemon_loop 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent sync = self.process_network_devices(device_info) 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/osprofiler/profiler.py", line 160, in wrapper 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent result = f(*args, **kwargs) 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/plugins/ml2/drivers/agent/_common_agent.py", line 206, in process_network_devices 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.sg_agent.setup_port_filters(device_info.get('added'), 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 262, in setup_port_filters 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.prepare_devices_filter(new_devices) 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 126, in decorated_function 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent return func(self, # pylint: disable=not-callable 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 139, in prepare_devices_filter 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self._apply_port_filter(device_ids) 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 171, in _apply_port_filter 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.firewall.process_trusted_ports(trusted_devices) 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3.8/contextlib.py", line 120, in __exit__ 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent next(self.gen) 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/firewall.py", line 137, in defer_apply 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.filter_defer_apply_off() 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_firewall.py", line 1004, in filter_defer_apply_off 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.iptables.defer_apply_off() 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 450, in defer_apply_off 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self._apply() 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 467, in _apply 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent first = self._apply_synchronized() 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 623, in _apply_synchronized 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent raise err 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 514, in _do_run_restore 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.execute(args, process_input='\n'.join(commands), 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/utils.py", line 148, in execute 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent raise exceptions.ProcessExecutionError(msg, 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent neutron_lib.exceptions.ProcessExecutionError: Exit code: 1; Cmd: ['sudo', '/usr/bin/neutron-rootwrap', '/etc/neutron/rootwrap.conf', 'iptables-restore', '-n']; Stdin: # Generated by iptables_manager 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent *filter 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :FORWARD - [0:0] 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :INPUT - [0:0] 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :OUTPUT - [0:0] 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-filter-top - [0:0] 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-FORWARD - [0:0] 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-INPUT - [0:0] 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-OUTPUT - [0:0] 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-local - [0:0] 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-sg-chain - [0:0] 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-sg-fallback - [0:0] 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I FORWARD 1 -j neutron-filter-top 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I FORWARD 2 -j neutron-linuxbri-FORWARD 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I INPUT 1 -j neutron-linuxbri-INPUT 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I OUTPUT 1 -j neutron-filter-top 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I OUTPUT 2 -j neutron-linuxbri-OUTPUT 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-filter-top 1 -j neutron-linuxbri-local 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 1 -m physdev --physdev-out tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 2 -m physdev --physdev-in tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 3 -m physdev --physdev-out tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 4 -m physdev --physdev-in tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 5 -m physdev --physdev-out tap40569186-89 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 6 -m physdev --physdev-in tap40569186-89 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 7 -m physdev --physdev-out tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 8 -m physdev --physdev-in tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-sg-chain 1 -j ACCEPT 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-sg-fallback 1 -m comment --comment "Default drop rule for unmatched traffic." -j DROP 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent COMMIT 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent # Completed by iptables_manager 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent # Generated by iptables_manager 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent *raw 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :OUTPUT - [0:0] 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :PREROUTING - [0:0] 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-OUTPUT - [0:0] 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-PREROUTING - [0:0] 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I OUTPUT 1 -j neutron-linuxbri-OUTPUT 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I PREROUTING 1 -j neutron-linuxbri-PREROUTING 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent COMMIT 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent # Completed by iptables_manager 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent ; Stdout: ; Stderr: iptables-restore: line 29 failed 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent 2020-10-05 10:20:23.960 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent 2020-10-05 10:20:25.529 551 INFO neutron.plugins.ml2.drivers.agent._common_agent [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Linux bridge agent Agent out of sync with plugin! 2020-10-05 10:20:25.531 551 INFO neutron.agent.securitygroups_rpc [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Preparing filters for devices {'tap40569186-89', 'tapce421d07-52', 'tap9cd7cb40-a1', 'tap512d1429-1d'} 2020-10-05 10:20:25.985 551 ERROR neutron.agent.linux.iptables_manager [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] IPTablesManager.apply failed to apply the following set of iptables rules: 25. -I neutron-linuxbri-FORWARD 7 -m physdev --physdev-out tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 26. -I neutron-linuxbri-FORWARD 8 -m physdev --physdev-in tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 27. -I neutron-linuxbri-sg-chain 1 -j ACCEPT 28. -I neutron-linuxbri-sg-fallback 1 -m comment --comment "Default drop rule for unmatched traffic." -j DROP 29. COMMIT 30. # Completed by iptables_manager 31. # Generated by iptables_manager 32. *raw 33. :OUTPUT - [0:0] 34. :PREROUTING - [0:0] 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Error in agent loop. Devices info: {'current': {'tap40569186-89', 'tapce421d07-52', 'tap9cd7cb40-a1', 'tap512d1429-1d'}, 'timestamps': {'tap40569186-89': 8, 'tapce421d07-52': 9, 'tap9cd7cb40-a1': 6, 'tap512d1429-1d': 7}, 'added': {'tap40569186-89', 'tapce421d07-52', 'tap9cd7cb40-a1', 'tap512d1429-1d'}, 'removed': set(), 'updated': set()}: neutron_lib.exceptions.ProcessExecutionError: Exit code: 1; Cmd: ['sudo', '/usr/bin/neutron-rootwrap', '/etc/neutron/rootwrap.conf', 'iptables-restore', '-n']; Stdin: # Generated by iptables_manager *filter :FORWARD - [0:0] :INPUT - [0:0] :OUTPUT - [0:0] :neutron-filter-top - [0:0] :neutron-linuxbri-FORWARD - [0:0] :neutron-linuxbri-INPUT - [0:0] :neutron-linuxbri-OUTPUT - [0:0] :neutron-linuxbri-local - [0:0] :neutron-linuxbri-sg-chain - [0:0] :neutron-linuxbri-sg-fallback - [0:0] -I FORWARD 1 -j neutron-filter-top -I FORWARD 2 -j neutron-linuxbri-FORWARD -I INPUT 1 -j neutron-linuxbri-INPUT -I OUTPUT 1 -j neutron-filter-top -I OUTPUT 2 -j neutron-linuxbri-OUTPUT -I neutron-filter-top 1 -j neutron-linuxbri-local -I neutron-linuxbri-FORWARD 1 -m physdev --physdev-out tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 2 -m physdev --physdev-in tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 3 -m physdev --physdev-out tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 4 -m physdev --physdev-in tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 5 -m physdev --physdev-out tap40569186-89 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 6 -m physdev --physdev-in tap40569186-89 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 7 -m physdev --physdev-out tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 8 -m physdev --physdev-in tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-sg-chain 1 -j ACCEPT -I neutron-linuxbri-sg-fallback 1 -m comment --comment "Default drop rule for unmatched traffic." -j DROP COMMIT # Completed by iptables_manager # Generated by iptables_manager *raw :OUTPUT - [0:0] :PREROUTING - [0:0] :neutron-linuxbri-OUTPUT - [0:0] :neutron-linuxbri-PREROUTING - [0:0] -I OUTPUT 1 -j neutron-linuxbri-OUTPUT -I PREROUTING 1 -j neutron-linuxbri-PREROUTING COMMIT # Completed by iptables_manager ; Stdout: ; Stderr: iptables-restore: line 29 failed 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent Traceback (most recent call last): 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/plugins/ml2/drivers/agent/_common_agent.py", line 465, in daemon_loop 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent sync = self.process_network_devices(device_info) 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/osprofiler/profiler.py", line 160, in wrapper 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent result = f(*args, **kwargs) 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/plugins/ml2/drivers/agent/_common_agent.py", line 206, in process_network_devices 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.sg_agent.setup_port_filters(device_info.get('added'), 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 262, in setup_port_filters 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.prepare_devices_filter(new_devices) 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 126, in decorated_function 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent return func(self, # pylint: disable=not-callable 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 139, in prepare_devices_filter 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self._apply_port_filter(device_ids) 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 171, in _apply_port_filter 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.firewall.process_trusted_ports(trusted_devices) 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3.8/contextlib.py", line 120, in __exit__ 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent next(self.gen) 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/firewall.py", line 137, in defer_apply 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.filter_defer_apply_off() 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_firewall.py", line 1004, in filter_defer_apply_off 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.iptables.defer_apply_off() 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 450, in defer_apply_off 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self._apply() 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 467, in _apply 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent first = self._apply_synchronized() 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 623, in _apply_synchronized 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent raise err 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 514, in _do_run_restore 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.execute(args, process_input='\n'.join(commands), 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/utils.py", line 148, in execute 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent raise exceptions.ProcessExecutionError(msg, 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent neutron_lib.exceptions.ProcessExecutionError: Exit code: 1; Cmd: ['sudo', '/usr/bin/neutron-rootwrap', '/etc/neutron/rootwrap.conf', 'iptables-restore', '-n']; Stdin: # Generated by iptables_manager 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent *filter 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :FORWARD - [0:0] 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :INPUT - [0:0] 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :OUTPUT - [0:0] 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-filter-top - [0:0] 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-FORWARD - [0:0] 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-INPUT - [0:0] 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-OUTPUT - [0:0] 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-local - [0:0] 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-sg-chain - [0:0] 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-sg-fallback - [0:0] 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I FORWARD 1 -j neutron-filter-top 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I FORWARD 2 -j neutron-linuxbri-FORWARD 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I INPUT 1 -j neutron-linuxbri-INPUT 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I OUTPUT 1 -j neutron-filter-top 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I OUTPUT 2 -j neutron-linuxbri-OUTPUT 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-filter-top 1 -j neutron-linuxbri-local 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 1 -m physdev --physdev-out tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 2 -m physdev --physdev-in tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 3 -m physdev --physdev-out tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 4 -m physdev --physdev-in tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 5 -m physdev --physdev-out tap40569186-89 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 6 -m physdev --physdev-in tap40569186-89 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 7 -m physdev --physdev-out tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 8 -m physdev --physdev-in tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-sg-chain 1 -j ACCEPT 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-sg-fallback 1 -m comment --comment "Default drop rule for unmatched traffic." -j DROP 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent COMMIT 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent # Completed by iptables_manager 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent # Generated by iptables_manager 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent *raw 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :OUTPUT - [0:0] 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :PREROUTING - [0:0] 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-OUTPUT - [0:0] 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-PREROUTING - [0:0] 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I OUTPUT 1 -j neutron-linuxbri-OUTPUT 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I PREROUTING 1 -j neutron-linuxbri-PREROUTING 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent COMMIT 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent # Completed by iptables_manager 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent ; Stdout: ; Stderr: iptables-restore: line 29 failed 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent 2020-10-05 10:20:25.986 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent 2020-10-05 10:20:27.530 551 INFO neutron.plugins.ml2.drivers.agent._common_agent [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Linux bridge agent Agent out of sync with plugin! 2020-10-05 10:20:27.532 551 INFO neutron.agent.securitygroups_rpc [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Preparing filters for devices {'tap40569186-89', 'tapce421d07-52', 'tap9cd7cb40-a1', 'tap512d1429-1d'} 2020-10-05 10:20:27.994 551 ERROR neutron.agent.linux.iptables_manager [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] IPTablesManager.apply failed to apply the following set of iptables rules: 25. -I neutron-linuxbri-FORWARD 7 -m physdev --physdev-out tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 26. -I neutron-linuxbri-FORWARD 8 -m physdev --physdev-in tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 27. -I neutron-linuxbri-sg-chain 1 -j ACCEPT 28. -I neutron-linuxbri-sg-fallback 1 -m comment --comment "Default drop rule for unmatched traffic." -j DROP 29. COMMIT 30. # Completed by iptables_manager 31. # Generated by iptables_manager 32. *raw 33. :OUTPUT - [0:0] 34. :PREROUTING - [0:0] 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Error in agent loop. Devices info: {'current': {'tap40569186-89', 'tapce421d07-52', 'tap9cd7cb40-a1', 'tap512d1429-1d'}, 'timestamps': {'tap40569186-89': 8, 'tapce421d07-52': 9, 'tap9cd7cb40-a1': 6, 'tap512d1429-1d': 7}, 'added': {'tap40569186-89', 'tapce421d07-52', 'tap9cd7cb40-a1', 'tap512d1429-1d'}, 'removed': set(), 'updated': set()}: neutron_lib.exceptions.ProcessExecutionError: Exit code: 1; Cmd: ['sudo', '/usr/bin/neutron-rootwrap', '/etc/neutron/rootwrap.conf', 'iptables-restore', '-n']; Stdin: # Generated by iptables_manager *filter :FORWARD - [0:0] :INPUT - [0:0] :OUTPUT - [0:0] :neutron-filter-top - [0:0] :neutron-linuxbri-FORWARD - [0:0] :neutron-linuxbri-INPUT - [0:0] :neutron-linuxbri-OUTPUT - [0:0] :neutron-linuxbri-local - [0:0] :neutron-linuxbri-sg-chain - [0:0] :neutron-linuxbri-sg-fallback - [0:0] -I FORWARD 1 -j neutron-filter-top -I FORWARD 2 -j neutron-linuxbri-FORWARD -I INPUT 1 -j neutron-linuxbri-INPUT -I OUTPUT 1 -j neutron-filter-top -I OUTPUT 2 -j neutron-linuxbri-OUTPUT -I neutron-filter-top 1 -j neutron-linuxbri-local -I neutron-linuxbri-FORWARD 1 -m physdev --physdev-out tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 2 -m physdev --physdev-in tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 3 -m physdev --physdev-out tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 4 -m physdev --physdev-in tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 5 -m physdev --physdev-out tap40569186-89 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 6 -m physdev --physdev-in tap40569186-89 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 7 -m physdev --physdev-out tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 8 -m physdev --physdev-in tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-sg-chain 1 -j ACCEPT -I neutron-linuxbri-sg-fallback 1 -m comment --comment "Default drop rule for unmatched traffic." -j DROP COMMIT # Completed by iptables_manager # Generated by iptables_manager *raw :OUTPUT - [0:0] :PREROUTING - [0:0] :neutron-linuxbri-OUTPUT - [0:0] :neutron-linuxbri-PREROUTING - [0:0] -I OUTPUT 1 -j neutron-linuxbri-OUTPUT -I PREROUTING 1 -j neutron-linuxbri-PREROUTING COMMIT # Completed by iptables_manager ; Stdout: ; Stderr: iptables-restore: line 29 failed 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent Traceback (most recent call last): 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/plugins/ml2/drivers/agent/_common_agent.py", line 465, in daemon_loop 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent sync = self.process_network_devices(device_info) 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/osprofiler/profiler.py", line 160, in wrapper 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent result = f(*args, **kwargs) 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/plugins/ml2/drivers/agent/_common_agent.py", line 206, in process_network_devices 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.sg_agent.setup_port_filters(device_info.get('added'), 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 262, in setup_port_filters 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.prepare_devices_filter(new_devices) 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 126, in decorated_function 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent return func(self, # pylint: disable=not-callable 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 139, in prepare_devices_filter 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self._apply_port_filter(device_ids) 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 171, in _apply_port_filter 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.firewall.process_trusted_ports(trusted_devices) 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3.8/contextlib.py", line 120, in __exit__ 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent next(self.gen) 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/firewall.py", line 137, in defer_apply 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.filter_defer_apply_off() 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_firewall.py", line 1004, in filter_defer_apply_off 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.iptables.defer_apply_off() 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 450, in defer_apply_off 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self._apply() 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 467, in _apply 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent first = self._apply_synchronized() 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 623, in _apply_synchronized 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent raise err 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 514, in _do_run_restore 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.execute(args, process_input='\n'.join(commands), 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/utils.py", line 148, in execute 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent raise exceptions.ProcessExecutionError(msg, 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent neutron_lib.exceptions.ProcessExecutionError: Exit code: 1; Cmd: ['sudo', '/usr/bin/neutron-rootwrap', '/etc/neutron/rootwrap.conf', 'iptables-restore', '-n']; Stdin: # Generated by iptables_manager 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent *filter 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :FORWARD - [0:0] 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :INPUT - [0:0] 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :OUTPUT - [0:0] 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-filter-top - [0:0] 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-FORWARD - [0:0] 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-INPUT - [0:0] 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-OUTPUT - [0:0] 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-local - [0:0] 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-sg-chain - [0:0] 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-sg-fallback - [0:0] 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I FORWARD 1 -j neutron-filter-top 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I FORWARD 2 -j neutron-linuxbri-FORWARD 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I INPUT 1 -j neutron-linuxbri-INPUT 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I OUTPUT 1 -j neutron-filter-top 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I OUTPUT 2 -j neutron-linuxbri-OUTPUT 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-filter-top 1 -j neutron-linuxbri-local 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 1 -m physdev --physdev-out tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 2 -m physdev --physdev-in tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 3 -m physdev --physdev-out tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 4 -m physdev --physdev-in tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 5 -m physdev --physdev-out tap40569186-89 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 6 -m physdev --physdev-in tap40569186-89 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 7 -m physdev --physdev-out tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 8 -m physdev --physdev-in tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-sg-chain 1 -j ACCEPT 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-sg-fallback 1 -m comment --comment "Default drop rule for unmatched traffic." -j DROP 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent COMMIT 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent # Completed by iptables_manager 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent # Generated by iptables_manager 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent *raw 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :OUTPUT - [0:0] 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :PREROUTING - [0:0] 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-OUTPUT - [0:0] 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-PREROUTING - [0:0] 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I OUTPUT 1 -j neutron-linuxbri-OUTPUT 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I PREROUTING 1 -j neutron-linuxbri-PREROUTING 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent COMMIT 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent # Completed by iptables_manager 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent ; Stdout: ; Stderr: iptables-restore: line 29 failed 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent 2020-10-05 10:20:27.996 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent 2020-10-05 10:20:29.532 551 INFO neutron.plugins.ml2.drivers.agent._common_agent [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Linux bridge agent Agent out of sync with plugin! 2020-10-05 10:20:29.534 551 INFO neutron.agent.securitygroups_rpc [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Preparing filters for devices {'tap40569186-89', 'tapce421d07-52', 'tap9cd7cb40-a1', 'tap512d1429-1d'} 2020-10-05 10:20:29.979 551 ERROR neutron.agent.linux.iptables_manager [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] IPTablesManager.apply failed to apply the following set of iptables rules: 25. -I neutron-linuxbri-FORWARD 7 -m physdev --physdev-out tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 26. -I neutron-linuxbri-FORWARD 8 -m physdev --physdev-in tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 27. -I neutron-linuxbri-sg-chain 1 -j ACCEPT 28. -I neutron-linuxbri-sg-fallback 1 -m comment --comment "Default drop rule for unmatched traffic." -j DROP 29. COMMIT 30. # Completed by iptables_manager 31. # Generated by iptables_manager 32. *raw 33. :OUTPUT - [0:0] 34. :PREROUTING - [0:0] 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Error in agent loop. Devices info: {'current': {'tap40569186-89', 'tapce421d07-52', 'tap9cd7cb40-a1', 'tap512d1429-1d'}, 'timestamps': {'tap40569186-89': 8, 'tapce421d07-52': 9, 'tap9cd7cb40-a1': 6, 'tap512d1429-1d': 7}, 'added': {'tap40569186-89', 'tapce421d07-52', 'tap9cd7cb40-a1', 'tap512d1429-1d'}, 'removed': set(), 'updated': set()}: neutron_lib.exceptions.ProcessExecutionError: Exit code: 1; Cmd: ['sudo', '/usr/bin/neutron-rootwrap', '/etc/neutron/rootwrap.conf', 'iptables-restore', '-n']; Stdin: # Generated by iptables_manager *filter :FORWARD - [0:0] :INPUT - [0:0] :OUTPUT - [0:0] :neutron-filter-top - [0:0] :neutron-linuxbri-FORWARD - [0:0] :neutron-linuxbri-INPUT - [0:0] :neutron-linuxbri-OUTPUT - [0:0] :neutron-linuxbri-local - [0:0] :neutron-linuxbri-sg-chain - [0:0] :neutron-linuxbri-sg-fallback - [0:0] -I FORWARD 1 -j neutron-filter-top -I FORWARD 2 -j neutron-linuxbri-FORWARD -I INPUT 1 -j neutron-linuxbri-INPUT -I OUTPUT 1 -j neutron-filter-top -I OUTPUT 2 -j neutron-linuxbri-OUTPUT -I neutron-filter-top 1 -j neutron-linuxbri-local -I neutron-linuxbri-FORWARD 1 -m physdev --physdev-out tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 2 -m physdev --physdev-in tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 3 -m physdev --physdev-out tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 4 -m physdev --physdev-in tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 5 -m physdev --physdev-out tap40569186-89 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 6 -m physdev --physdev-in tap40569186-89 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 7 -m physdev --physdev-out tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 8 -m physdev --physdev-in tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-sg-chain 1 -j ACCEPT -I neutron-linuxbri-sg-fallback 1 -m comment --comment "Default drop rule for unmatched traffic." -j DROP COMMIT # Completed by iptables_manager # Generated by iptables_manager *raw :OUTPUT - [0:0] :PREROUTING - [0:0] :neutron-linuxbri-OUTPUT - [0:0] :neutron-linuxbri-PREROUTING - [0:0] -I OUTPUT 1 -j neutron-linuxbri-OUTPUT -I PREROUTING 1 -j neutron-linuxbri-PREROUTING COMMIT # Completed by iptables_manager ; Stdout: ; Stderr: iptables-restore: line 29 failed 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent Traceback (most recent call last): 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/plugins/ml2/drivers/agent/_common_agent.py", line 465, in daemon_loop 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent sync = self.process_network_devices(device_info) 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/osprofiler/profiler.py", line 160, in wrapper 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent result = f(*args, **kwargs) 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/plugins/ml2/drivers/agent/_common_agent.py", line 206, in process_network_devices 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.sg_agent.setup_port_filters(device_info.get('added'), 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 262, in setup_port_filters 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.prepare_devices_filter(new_devices) 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 126, in decorated_function 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent return func(self, # pylint: disable=not-callable 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 139, in prepare_devices_filter 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self._apply_port_filter(device_ids) 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 171, in _apply_port_filter 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.firewall.process_trusted_ports(trusted_devices) 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3.8/contextlib.py", line 120, in __exit__ 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent next(self.gen) 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/firewall.py", line 137, in defer_apply 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.filter_defer_apply_off() 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_firewall.py", line 1004, in filter_defer_apply_off 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.iptables.defer_apply_off() 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 450, in defer_apply_off 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self._apply() 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 467, in _apply 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent first = self._apply_synchronized() 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 623, in _apply_synchronized 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent raise err 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 514, in _do_run_restore 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.execute(args, process_input='\n'.join(commands), 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/utils.py", line 148, in execute 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent raise exceptions.ProcessExecutionError(msg, 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent neutron_lib.exceptions.ProcessExecutionError: Exit code: 1; Cmd: ['sudo', '/usr/bin/neutron-rootwrap', '/etc/neutron/rootwrap.conf', 'iptables-restore', '-n']; Stdin: # Generated by iptables_manager 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent *filter 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :FORWARD - [0:0] 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :INPUT - [0:0] 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :OUTPUT - [0:0] 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-filter-top - [0:0] 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-FORWARD - [0:0] 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-INPUT - [0:0] 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-OUTPUT - [0:0] 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-local - [0:0] 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-sg-chain - [0:0] 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-sg-fallback - [0:0] 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I FORWARD 1 -j neutron-filter-top 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I FORWARD 2 -j neutron-linuxbri-FORWARD 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I INPUT 1 -j neutron-linuxbri-INPUT 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I OUTPUT 1 -j neutron-filter-top 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I OUTPUT 2 -j neutron-linuxbri-OUTPUT 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-filter-top 1 -j neutron-linuxbri-local 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 1 -m physdev --physdev-out tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 2 -m physdev --physdev-in tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 3 -m physdev --physdev-out tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 4 -m physdev --physdev-in tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 5 -m physdev --physdev-out tap40569186-89 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 6 -m physdev --physdev-in tap40569186-89 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 7 -m physdev --physdev-out tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 8 -m physdev --physdev-in tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-sg-chain 1 -j ACCEPT 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-sg-fallback 1 -m comment --comment "Default drop rule for unmatched traffic." -j DROP 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent COMMIT 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent # Completed by iptables_manager 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent # Generated by iptables_manager 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent *raw 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :OUTPUT - [0:0] 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :PREROUTING - [0:0] 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-OUTPUT - [0:0] 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-PREROUTING - [0:0] 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I OUTPUT 1 -j neutron-linuxbri-OUTPUT 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I PREROUTING 1 -j neutron-linuxbri-PREROUTING 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent COMMIT 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent # Completed by iptables_manager 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent ; Stdout: ; Stderr: iptables-restore: line 29 failed 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent 2020-10-05 10:20:29.980 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent 2020-10-05 10:20:31.534 551 INFO neutron.plugins.ml2.drivers.agent._common_agent [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Linux bridge agent Agent out of sync with plugin! 2020-10-05 10:20:31.536 551 INFO neutron.agent.securitygroups_rpc [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Preparing filters for devices {'tap40569186-89', 'tapce421d07-52', 'tap9cd7cb40-a1', 'tap512d1429-1d'} 2020-10-05 10:20:31.965 551 ERROR neutron.agent.linux.iptables_manager [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] IPTablesManager.apply failed to apply the following set of iptables rules: 25. -I neutron-linuxbri-FORWARD 7 -m physdev --physdev-out tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 26. -I neutron-linuxbri-FORWARD 8 -m physdev --physdev-in tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 27. -I neutron-linuxbri-sg-chain 1 -j ACCEPT 28. -I neutron-linuxbri-sg-fallback 1 -m comment --comment "Default drop rule for unmatched traffic." -j DROP 29. COMMIT 30. # Completed by iptables_manager 31. # Generated by iptables_manager 32. *raw 33. :OUTPUT - [0:0] 34. :PREROUTING - [0:0] 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Error in agent loop. Devices info: {'current': {'tap40569186-89', 'tapce421d07-52', 'tap9cd7cb40-a1', 'tap512d1429-1d'}, 'timestamps': {'tap40569186-89': 8, 'tapce421d07-52': 9, 'tap9cd7cb40-a1': 6, 'tap512d1429-1d': 7}, 'added': {'tap40569186-89', 'tapce421d07-52', 'tap9cd7cb40-a1', 'tap512d1429-1d'}, 'removed': set(), 'updated': set()}: neutron_lib.exceptions.ProcessExecutionError: Exit code: 1; Cmd: ['sudo', '/usr/bin/neutron-rootwrap', '/etc/neutron/rootwrap.conf', 'iptables-restore', '-n']; Stdin: # Generated by iptables_manager *filter :FORWARD - [0:0] :INPUT - [0:0] :OUTPUT - [0:0] :neutron-filter-top - [0:0] :neutron-linuxbri-FORWARD - [0:0] :neutron-linuxbri-INPUT - [0:0] :neutron-linuxbri-OUTPUT - [0:0] :neutron-linuxbri-local - [0:0] :neutron-linuxbri-sg-chain - [0:0] :neutron-linuxbri-sg-fallback - [0:0] -I FORWARD 1 -j neutron-filter-top -I FORWARD 2 -j neutron-linuxbri-FORWARD -I INPUT 1 -j neutron-linuxbri-INPUT -I OUTPUT 1 -j neutron-filter-top -I OUTPUT 2 -j neutron-linuxbri-OUTPUT -I neutron-filter-top 1 -j neutron-linuxbri-local -I neutron-linuxbri-FORWARD 1 -m physdev --physdev-out tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 2 -m physdev --physdev-in tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 3 -m physdev --physdev-out tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 4 -m physdev --physdev-in tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 5 -m physdev --physdev-out tap40569186-89 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 6 -m physdev --physdev-in tap40569186-89 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 7 -m physdev --physdev-out tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 8 -m physdev --physdev-in tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-sg-chain 1 -j ACCEPT -I neutron-linuxbri-sg-fallback 1 -m comment --comment "Default drop rule for unmatched traffic." -j DROP COMMIT # Completed by iptables_manager # Generated by iptables_manager *raw :OUTPUT - [0:0] :PREROUTING - [0:0] :neutron-linuxbri-OUTPUT - [0:0] :neutron-linuxbri-PREROUTING - [0:0] -I OUTPUT 1 -j neutron-linuxbri-OUTPUT -I PREROUTING 1 -j neutron-linuxbri-PREROUTING COMMIT # Completed by iptables_manager ; Stdout: ; Stderr: iptables-restore: line 29 failed 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent Traceback (most recent call last): 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/plugins/ml2/drivers/agent/_common_agent.py", line 465, in daemon_loop 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent sync = self.process_network_devices(device_info) 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/osprofiler/profiler.py", line 160, in wrapper 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent result = f(*args, **kwargs) 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/plugins/ml2/drivers/agent/_common_agent.py", line 206, in process_network_devices 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.sg_agent.setup_port_filters(device_info.get('added'), 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 262, in setup_port_filters 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.prepare_devices_filter(new_devices) 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 126, in decorated_function 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent return func(self, # pylint: disable=not-callable 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 139, in prepare_devices_filter 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self._apply_port_filter(device_ids) 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 171, in _apply_port_filter 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.firewall.process_trusted_ports(trusted_devices) 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3.8/contextlib.py", line 120, in __exit__ 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent next(self.gen) 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/firewall.py", line 137, in defer_apply 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.filter_defer_apply_off() 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_firewall.py", line 1004, in filter_defer_apply_off 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.iptables.defer_apply_off() 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 450, in defer_apply_off 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self._apply() 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 467, in _apply 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent first = self._apply_synchronized() 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 623, in _apply_synchronized 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent raise err 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 514, in _do_run_restore 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.execute(args, process_input='\n'.join(commands), 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/utils.py", line 148, in execute 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent raise exceptions.ProcessExecutionError(msg, 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent neutron_lib.exceptions.ProcessExecutionError: Exit code: 1; Cmd: ['sudo', '/usr/bin/neutron-rootwrap', '/etc/neutron/rootwrap.conf', 'iptables-restore', '-n']; Stdin: # Generated by iptables_manager 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent *filter 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :FORWARD - [0:0] 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :INPUT - [0:0] 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :OUTPUT - [0:0] 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-filter-top - [0:0] 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-FORWARD - [0:0] 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-INPUT - [0:0] 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-OUTPUT - [0:0] 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-local - [0:0] 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-sg-chain - [0:0] 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-sg-fallback - [0:0] 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I FORWARD 1 -j neutron-filter-top 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I FORWARD 2 -j neutron-linuxbri-FORWARD 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I INPUT 1 -j neutron-linuxbri-INPUT 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I OUTPUT 1 -j neutron-filter-top 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I OUTPUT 2 -j neutron-linuxbri-OUTPUT 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-filter-top 1 -j neutron-linuxbri-local 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 1 -m physdev --physdev-out tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 2 -m physdev --physdev-in tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 3 -m physdev --physdev-out tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 4 -m physdev --physdev-in tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 5 -m physdev --physdev-out tap40569186-89 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 6 -m physdev --physdev-in tap40569186-89 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 7 -m physdev --physdev-out tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 8 -m physdev --physdev-in tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-sg-chain 1 -j ACCEPT 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-sg-fallback 1 -m comment --comment "Default drop rule for unmatched traffic." -j DROP 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent COMMIT 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent # Completed by iptables_manager 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent # Generated by iptables_manager 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent *raw 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :OUTPUT - [0:0] 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :PREROUTING - [0:0] 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-OUTPUT - [0:0] 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-PREROUTING - [0:0] 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I OUTPUT 1 -j neutron-linuxbri-OUTPUT 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I PREROUTING 1 -j neutron-linuxbri-PREROUTING 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent COMMIT 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent # Completed by iptables_manager 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent ; Stdout: ; Stderr: iptables-restore: line 29 failed 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent 2020-10-05 10:20:31.966 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent 2020-10-05 10:20:33.536 551 INFO neutron.plugins.ml2.drivers.agent._common_agent [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Linux bridge agent Agent out of sync with plugin! 2020-10-05 10:20:33.537 551 INFO neutron.agent.securitygroups_rpc [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Preparing filters for devices {'tap40569186-89', 'tapce421d07-52', 'tap9cd7cb40-a1', 'tap512d1429-1d'} 2020-10-05 10:20:34.025 551 ERROR neutron.agent.linux.iptables_manager [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] IPTablesManager.apply failed to apply the following set of iptables rules: 25. -I neutron-linuxbri-FORWARD 7 -m physdev --physdev-out tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 26. -I neutron-linuxbri-FORWARD 8 -m physdev --physdev-in tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 27. -I neutron-linuxbri-sg-chain 1 -j ACCEPT 28. -I neutron-linuxbri-sg-fallback 1 -m comment --comment "Default drop rule for unmatched traffic." -j DROP 29. COMMIT 30. # Completed by iptables_manager 31. # Generated by iptables_manager 32. *raw 33. :OUTPUT - [0:0] 34. :PREROUTING - [0:0] 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Error in agent loop. Devices info: {'current': {'tap40569186-89', 'tapce421d07-52', 'tap9cd7cb40-a1', 'tap512d1429-1d'}, 'timestamps': {'tap40569186-89': 8, 'tapce421d07-52': 9, 'tap9cd7cb40-a1': 6, 'tap512d1429-1d': 7}, 'added': {'tap40569186-89', 'tapce421d07-52', 'tap9cd7cb40-a1', 'tap512d1429-1d'}, 'removed': set(), 'updated': set()}: neutron_lib.exceptions.ProcessExecutionError: Exit code: 1; Cmd: ['sudo', '/usr/bin/neutron-rootwrap', '/etc/neutron/rootwrap.conf', 'iptables-restore', '-n']; Stdin: # Generated by iptables_manager *filter :FORWARD - [0:0] :INPUT - [0:0] :OUTPUT - [0:0] :neutron-filter-top - [0:0] :neutron-linuxbri-FORWARD - [0:0] :neutron-linuxbri-INPUT - [0:0] :neutron-linuxbri-OUTPUT - [0:0] :neutron-linuxbri-local - [0:0] :neutron-linuxbri-sg-chain - [0:0] :neutron-linuxbri-sg-fallback - [0:0] -I FORWARD 1 -j neutron-filter-top -I FORWARD 2 -j neutron-linuxbri-FORWARD -I INPUT 1 -j neutron-linuxbri-INPUT -I OUTPUT 1 -j neutron-filter-top -I OUTPUT 2 -j neutron-linuxbri-OUTPUT -I neutron-filter-top 1 -j neutron-linuxbri-local -I neutron-linuxbri-FORWARD 1 -m physdev --physdev-out tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 2 -m physdev --physdev-in tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 3 -m physdev --physdev-out tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 4 -m physdev --physdev-in tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 5 -m physdev --physdev-out tap40569186-89 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 6 -m physdev --physdev-in tap40569186-89 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 7 -m physdev --physdev-out tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 8 -m physdev --physdev-in tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-sg-chain 1 -j ACCEPT -I neutron-linuxbri-sg-fallback 1 -m comment --comment "Default drop rule for unmatched traffic." -j DROP COMMIT # Completed by iptables_manager # Generated by iptables_manager *raw :OUTPUT - [0:0] :PREROUTING - [0:0] :neutron-linuxbri-OUTPUT - [0:0] :neutron-linuxbri-PREROUTING - [0:0] -I OUTPUT 1 -j neutron-linuxbri-OUTPUT -I PREROUTING 1 -j neutron-linuxbri-PREROUTING COMMIT # Completed by iptables_manager ; Stdout: ; Stderr: iptables-restore: line 29 failed 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent Traceback (most recent call last): 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/plugins/ml2/drivers/agent/_common_agent.py", line 465, in daemon_loop 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent sync = self.process_network_devices(device_info) 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/osprofiler/profiler.py", line 160, in wrapper 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent result = f(*args, **kwargs) 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/plugins/ml2/drivers/agent/_common_agent.py", line 206, in process_network_devices 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.sg_agent.setup_port_filters(device_info.get('added'), 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 262, in setup_port_filters 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.prepare_devices_filter(new_devices) 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 126, in decorated_function 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent return func(self, # pylint: disable=not-callable 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 139, in prepare_devices_filter 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self._apply_port_filter(device_ids) 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 171, in _apply_port_filter 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.firewall.process_trusted_ports(trusted_devices) 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3.8/contextlib.py", line 120, in __exit__ 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent next(self.gen) 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/firewall.py", line 137, in defer_apply 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.filter_defer_apply_off() 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_firewall.py", line 1004, in filter_defer_apply_off 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.iptables.defer_apply_off() 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 450, in defer_apply_off 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self._apply() 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 467, in _apply 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent first = self._apply_synchronized() 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 623, in _apply_synchronized 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent raise err 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 514, in _do_run_restore 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.execute(args, process_input='\n'.join(commands), 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/utils.py", line 148, in execute 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent raise exceptions.ProcessExecutionError(msg, 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent neutron_lib.exceptions.ProcessExecutionError: Exit code: 1; Cmd: ['sudo', '/usr/bin/neutron-rootwrap', '/etc/neutron/rootwrap.conf', 'iptables-restore', '-n']; Stdin: # Generated by iptables_manager 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent *filter 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :FORWARD - [0:0] 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :INPUT - [0:0] 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :OUTPUT - [0:0] 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-filter-top - [0:0] 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-FORWARD - [0:0] 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-INPUT - [0:0] 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-OUTPUT - [0:0] 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-local - [0:0] 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-sg-chain - [0:0] 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-sg-fallback - [0:0] 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I FORWARD 1 -j neutron-filter-top 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I FORWARD 2 -j neutron-linuxbri-FORWARD 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I INPUT 1 -j neutron-linuxbri-INPUT 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I OUTPUT 1 -j neutron-filter-top 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I OUTPUT 2 -j neutron-linuxbri-OUTPUT 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-filter-top 1 -j neutron-linuxbri-local 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 1 -m physdev --physdev-out tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 2 -m physdev --physdev-in tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 3 -m physdev --physdev-out tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 4 -m physdev --physdev-in tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 5 -m physdev --physdev-out tap40569186-89 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 6 -m physdev --physdev-in tap40569186-89 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 7 -m physdev --physdev-out tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 8 -m physdev --physdev-in tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-sg-chain 1 -j ACCEPT 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-sg-fallback 1 -m comment --comment "Default drop rule for unmatched traffic." -j DROP 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent COMMIT 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent # Completed by iptables_manager 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent # Generated by iptables_manager 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent *raw 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :OUTPUT - [0:0] 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :PREROUTING - [0:0] 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-OUTPUT - [0:0] 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-PREROUTING - [0:0] 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I OUTPUT 1 -j neutron-linuxbri-OUTPUT 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I PREROUTING 1 -j neutron-linuxbri-PREROUTING 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent COMMIT 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent # Completed by iptables_manager 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent ; Stdout: ; Stderr: iptables-restore: line 29 failed 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent 2020-10-05 10:20:34.026 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent 2020-10-05 10:20:35.538 551 INFO neutron.plugins.ml2.drivers.agent._common_agent [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Linux bridge agent Agent out of sync with plugin! 2020-10-05 10:20:35.539 551 INFO neutron.agent.securitygroups_rpc [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Preparing filters for devices {'tap40569186-89', 'tapce421d07-52', 'tap9cd7cb40-a1', 'tap512d1429-1d'} 2020-10-05 10:20:35.990 551 ERROR neutron.agent.linux.iptables_manager [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] IPTablesManager.apply failed to apply the following set of iptables rules: 25. -I neutron-linuxbri-FORWARD 7 -m physdev --physdev-out tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 26. -I neutron-linuxbri-FORWARD 8 -m physdev --physdev-in tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 27. -I neutron-linuxbri-sg-chain 1 -j ACCEPT 28. -I neutron-linuxbri-sg-fallback 1 -m comment --comment "Default drop rule for unmatched traffic." -j DROP 29. COMMIT 30. # Completed by iptables_manager 31. # Generated by iptables_manager 32. *raw 33. :OUTPUT - [0:0] 34. :PREROUTING - [0:0] 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Error in agent loop. Devices info: {'current': {'tap40569186-89', 'tapce421d07-52', 'tap9cd7cb40-a1', 'tap512d1429-1d'}, 'timestamps': {'tap40569186-89': 8, 'tapce421d07-52': 9, 'tap9cd7cb40-a1': 6, 'tap512d1429-1d': 7}, 'added': {'tap40569186-89', 'tapce421d07-52', 'tap9cd7cb40-a1', 'tap512d1429-1d'}, 'removed': set(), 'updated': set()}: neutron_lib.exceptions.ProcessExecutionError: Exit code: 1; Cmd: ['sudo', '/usr/bin/neutron-rootwrap', '/etc/neutron/rootwrap.conf', 'iptables-restore', '-n']; Stdin: # Generated by iptables_manager *filter :FORWARD - [0:0] :INPUT - [0:0] :OUTPUT - [0:0] :neutron-filter-top - [0:0] :neutron-linuxbri-FORWARD - [0:0] :neutron-linuxbri-INPUT - [0:0] :neutron-linuxbri-OUTPUT - [0:0] :neutron-linuxbri-local - [0:0] :neutron-linuxbri-sg-chain - [0:0] :neutron-linuxbri-sg-fallback - [0:0] -I FORWARD 1 -j neutron-filter-top -I FORWARD 2 -j neutron-linuxbri-FORWARD -I INPUT 1 -j neutron-linuxbri-INPUT -I OUTPUT 1 -j neutron-filter-top -I OUTPUT 2 -j neutron-linuxbri-OUTPUT -I neutron-filter-top 1 -j neutron-linuxbri-local -I neutron-linuxbri-FORWARD 1 -m physdev --physdev-out tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 2 -m physdev --physdev-in tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 3 -m physdev --physdev-out tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 4 -m physdev --physdev-in tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 5 -m physdev --physdev-out tap40569186-89 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 6 -m physdev --physdev-in tap40569186-89 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 7 -m physdev --physdev-out tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 8 -m physdev --physdev-in tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-sg-chain 1 -j ACCEPT -I neutron-linuxbri-sg-fallback 1 -m comment --comment "Default drop rule for unmatched traffic." -j DROP COMMIT # Completed by iptables_manager # Generated by iptables_manager *raw :OUTPUT - [0:0] :PREROUTING - [0:0] :neutron-linuxbri-OUTPUT - [0:0] :neutron-linuxbri-PREROUTING - [0:0] -I OUTPUT 1 -j neutron-linuxbri-OUTPUT -I PREROUTING 1 -j neutron-linuxbri-PREROUTING COMMIT # Completed by iptables_manager ; Stdout: ; Stderr: iptables-restore: line 29 failed 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent Traceback (most recent call last): 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/plugins/ml2/drivers/agent/_common_agent.py", line 465, in daemon_loop 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent sync = self.process_network_devices(device_info) 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/osprofiler/profiler.py", line 160, in wrapper 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent result = f(*args, **kwargs) 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/plugins/ml2/drivers/agent/_common_agent.py", line 206, in process_network_devices 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.sg_agent.setup_port_filters(device_info.get('added'), 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 262, in setup_port_filters 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.prepare_devices_filter(new_devices) 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 126, in decorated_function 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent return func(self, # pylint: disable=not-callable 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 139, in prepare_devices_filter 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self._apply_port_filter(device_ids) 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 171, in _apply_port_filter 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.firewall.process_trusted_ports(trusted_devices) 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3.8/contextlib.py", line 120, in __exit__ 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent next(self.gen) 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/firewall.py", line 137, in defer_apply 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.filter_defer_apply_off() 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_firewall.py", line 1004, in filter_defer_apply_off 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.iptables.defer_apply_off() 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 450, in defer_apply_off 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self._apply() 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 467, in _apply 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent first = self._apply_synchronized() 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 623, in _apply_synchronized 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent raise err 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 514, in _do_run_restore 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.execute(args, process_input='\n'.join(commands), 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/utils.py", line 148, in execute 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent raise exceptions.ProcessExecutionError(msg, 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent neutron_lib.exceptions.ProcessExecutionError: Exit code: 1; Cmd: ['sudo', '/usr/bin/neutron-rootwrap', '/etc/neutron/rootwrap.conf', 'iptables-restore', '-n']; Stdin: # Generated by iptables_manager 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent *filter 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :FORWARD - [0:0] 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :INPUT - [0:0] 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :OUTPUT - [0:0] 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-filter-top - [0:0] 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-FORWARD - [0:0] 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-INPUT - [0:0] 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-OUTPUT - [0:0] 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-local - [0:0] 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-sg-chain - [0:0] 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-sg-fallback - [0:0] 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I FORWARD 1 -j neutron-filter-top 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I FORWARD 2 -j neutron-linuxbri-FORWARD 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I INPUT 1 -j neutron-linuxbri-INPUT 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I OUTPUT 1 -j neutron-filter-top 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I OUTPUT 2 -j neutron-linuxbri-OUTPUT 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-filter-top 1 -j neutron-linuxbri-local 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 1 -m physdev --physdev-out tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 2 -m physdev --physdev-in tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 3 -m physdev --physdev-out tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 4 -m physdev --physdev-in tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 5 -m physdev --physdev-out tap40569186-89 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 6 -m physdev --physdev-in tap40569186-89 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 7 -m physdev --physdev-out tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 8 -m physdev --physdev-in tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-sg-chain 1 -j ACCEPT 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-sg-fallback 1 -m comment --comment "Default drop rule for unmatched traffic." -j DROP 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent COMMIT 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent # Completed by iptables_manager 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent # Generated by iptables_manager 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent *raw 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :OUTPUT - [0:0] 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :PREROUTING - [0:0] 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-OUTPUT - [0:0] 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-PREROUTING - [0:0] 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I OUTPUT 1 -j neutron-linuxbri-OUTPUT 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I PREROUTING 1 -j neutron-linuxbri-PREROUTING 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent COMMIT 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent # Completed by iptables_manager 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent ; Stdout: ; Stderr: iptables-restore: line 29 failed 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent 2020-10-05 10:20:35.991 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent 2020-10-05 10:20:37.539 551 INFO neutron.plugins.ml2.drivers.agent._common_agent [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Linux bridge agent Agent out of sync with plugin! 2020-10-05 10:20:37.541 551 INFO neutron.agent.securitygroups_rpc [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Preparing filters for devices {'tap40569186-89', 'tapce421d07-52', 'tap9cd7cb40-a1', 'tap512d1429-1d'} 2020-10-05 10:20:37.997 551 ERROR neutron.agent.linux.iptables_manager [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] IPTablesManager.apply failed to apply the following set of iptables rules: 25. -I neutron-linuxbri-FORWARD 7 -m physdev --physdev-out tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 26. -I neutron-linuxbri-FORWARD 8 -m physdev --physdev-in tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 27. -I neutron-linuxbri-sg-chain 1 -j ACCEPT 28. -I neutron-linuxbri-sg-fallback 1 -m comment --comment "Default drop rule for unmatched traffic." -j DROP 29. COMMIT 30. # Completed by iptables_manager 31. # Generated by iptables_manager 32. *raw 33. :OUTPUT - [0:0] 34. :PREROUTING - [0:0] 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Error in agent loop. Devices info: {'current': {'tap40569186-89', 'tapce421d07-52', 'tap9cd7cb40-a1', 'tap512d1429-1d'}, 'timestamps': {'tap40569186-89': 8, 'tapce421d07-52': 9, 'tap9cd7cb40-a1': 6, 'tap512d1429-1d': 7}, 'added': {'tap40569186-89', 'tapce421d07-52', 'tap9cd7cb40-a1', 'tap512d1429-1d'}, 'removed': set(), 'updated': set()}: neutron_lib.exceptions.ProcessExecutionError: Exit code: 1; Cmd: ['sudo', '/usr/bin/neutron-rootwrap', '/etc/neutron/rootwrap.conf', 'iptables-restore', '-n']; Stdin: # Generated by iptables_manager *filter :FORWARD - [0:0] :INPUT - [0:0] :OUTPUT - [0:0] :neutron-filter-top - [0:0] :neutron-linuxbri-FORWARD - [0:0] :neutron-linuxbri-INPUT - [0:0] :neutron-linuxbri-OUTPUT - [0:0] :neutron-linuxbri-local - [0:0] :neutron-linuxbri-sg-chain - [0:0] :neutron-linuxbri-sg-fallback - [0:0] -I FORWARD 1 -j neutron-filter-top -I FORWARD 2 -j neutron-linuxbri-FORWARD -I INPUT 1 -j neutron-linuxbri-INPUT -I OUTPUT 1 -j neutron-filter-top -I OUTPUT 2 -j neutron-linuxbri-OUTPUT -I neutron-filter-top 1 -j neutron-linuxbri-local -I neutron-linuxbri-FORWARD 1 -m physdev --physdev-out tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 2 -m physdev --physdev-in tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 3 -m physdev --physdev-out tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 4 -m physdev --physdev-in tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 5 -m physdev --physdev-out tap40569186-89 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 6 -m physdev --physdev-in tap40569186-89 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 7 -m physdev --physdev-out tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-FORWARD 8 -m physdev --physdev-in tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT -I neutron-linuxbri-sg-chain 1 -j ACCEPT -I neutron-linuxbri-sg-fallback 1 -m comment --comment "Default drop rule for unmatched traffic." -j DROP COMMIT # Completed by iptables_manager # Generated by iptables_manager *raw :OUTPUT - [0:0] :PREROUTING - [0:0] :neutron-linuxbri-OUTPUT - [0:0] :neutron-linuxbri-PREROUTING - [0:0] -I OUTPUT 1 -j neutron-linuxbri-OUTPUT -I PREROUTING 1 -j neutron-linuxbri-PREROUTING COMMIT # Completed by iptables_manager ; Stdout: ; Stderr: iptables-restore: line 29 failed 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent Traceback (most recent call last): 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/plugins/ml2/drivers/agent/_common_agent.py", line 465, in daemon_loop 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent sync = self.process_network_devices(device_info) 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/osprofiler/profiler.py", line 160, in wrapper 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent result = f(*args, **kwargs) 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/plugins/ml2/drivers/agent/_common_agent.py", line 206, in process_network_devices 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.sg_agent.setup_port_filters(device_info.get('added'), 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 262, in setup_port_filters 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.prepare_devices_filter(new_devices) 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 126, in decorated_function 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent return func(self, # pylint: disable=not-callable 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 139, in prepare_devices_filter 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self._apply_port_filter(device_ids) 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/securitygroups_rpc.py", line 171, in _apply_port_filter 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.firewall.process_trusted_ports(trusted_devices) 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3.8/contextlib.py", line 120, in __exit__ 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent next(self.gen) 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/firewall.py", line 137, in defer_apply 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.filter_defer_apply_off() 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_firewall.py", line 1004, in filter_defer_apply_off 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.iptables.defer_apply_off() 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 450, in defer_apply_off 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self._apply() 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 467, in _apply 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent first = self._apply_synchronized() 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 623, in _apply_synchronized 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent raise err 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/iptables_manager.py", line 514, in _do_run_restore 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent self.execute(args, process_input='\n'.join(commands), 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent File "/usr/lib/python3/dist-packages/neutron/agent/linux/utils.py", line 148, in execute 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent raise exceptions.ProcessExecutionError(msg, 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent neutron_lib.exceptions.ProcessExecutionError: Exit code: 1; Cmd: ['sudo', '/usr/bin/neutron-rootwrap', '/etc/neutron/rootwrap.conf', 'iptables-restore', '-n']; Stdin: # Generated by iptables_manager 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent *filter 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :FORWARD - [0:0] 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :INPUT - [0:0] 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :OUTPUT - [0:0] 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-filter-top - [0:0] 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-FORWARD - [0:0] 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-INPUT - [0:0] 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-OUTPUT - [0:0] 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-local - [0:0] 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-sg-chain - [0:0] 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-sg-fallback - [0:0] 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I FORWARD 1 -j neutron-filter-top 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I FORWARD 2 -j neutron-linuxbri-FORWARD 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I INPUT 1 -j neutron-linuxbri-INPUT 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I OUTPUT 1 -j neutron-filter-top 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I OUTPUT 2 -j neutron-linuxbri-OUTPUT 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-filter-top 1 -j neutron-linuxbri-local 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 1 -m physdev --physdev-out tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 2 -m physdev --physdev-in tap9cd7cb40-a1 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 3 -m physdev --physdev-out tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 4 -m physdev --physdev-in tap512d1429-1d --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 5 -m physdev --physdev-out tap40569186-89 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 6 -m physdev --physdev-in tap40569186-89 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 7 -m physdev --physdev-out tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-FORWARD 8 -m physdev --physdev-in tapce421d07-52 --physdev-is-bridged -m comment --comment "Accept all packets when port is trusted." -j ACCEPT 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-sg-chain 1 -j ACCEPT 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I neutron-linuxbri-sg-fallback 1 -m comment --comment "Default drop rule for unmatched traffic." -j DROP 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent COMMIT 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent # Completed by iptables_manager 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent # Generated by iptables_manager 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent *raw 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :OUTPUT - [0:0] 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :PREROUTING - [0:0] 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-OUTPUT - [0:0] 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent :neutron-linuxbri-PREROUTING - [0:0] 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I OUTPUT 1 -j neutron-linuxbri-OUTPUT 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent -I PREROUTING 1 -j neutron-linuxbri-PREROUTING 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent COMMIT 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent # Completed by iptables_manager 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent ; Stdout: ; Stderr: iptables-restore: line 29 failed 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent 2020-10-05 10:20:37.998 551 ERROR neutron.plugins.ml2.drivers.agent._common_agent 2020-10-05 10:20:39.542 551 INFO neutron.plugins.ml2.drivers.agent._common_agent [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Linux bridge agent Agent out of sync with plugin! 2020-10-05 10:20:39.543 551 INFO neutron.agent.securitygroups_rpc [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Preparing filters for devices {'tap40569186-89', 'tapce421d07-52', 'tap9cd7cb40-a1', 'tap512d1429-1d'} 2020-10-05 10:20:41.362 551 INFO neutron.plugins.ml2.drivers.agent._common_agent [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Port tap40569186-89 updated. Details: {'device': 'tap40569186-89', 'network_id': 'b285a436-cdb4-485f-a7fb-510264c66d8b', 'port_id': '40569186-891d-4ff5-82de-bd92ad82a9fc', 'mac_address': 'fa:16:3e:9c:de:23', 'admin_state_up': True, 'network_type': 'vxlan', 'segmentation_id': 1, 'physical_network': None, 'mtu': 1400, 'fixed_ips': [{'subnet_id': '460d9eb5-d7c6-4642-b9d6-aabb2dd2d022', 'ip_address': '10.101.2.1'}], 'device_owner': 'network:router_interface', 'allowed_address_pairs': [], 'port_security_enabled': False, 'qos_policy_id': None, 'network_qos_policy_id': None, 'profile': {}, 'propagate_uplink_status': False} 2020-10-05 10:20:41.747 551 INFO neutron.plugins.ml2.drivers.linuxbridge.agent.arp_protect [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Skipping ARP spoofing rules for port 'tap40569186-89' because it has port security disabled 2020-10-05 10:20:41.947 551 ERROR neutron.agent.linux.ip_lib [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Device brqb285a436-cd cannot be used as it has no MAC address 2020-10-05 10:20:42.968 551 INFO neutron.plugins.ml2.drivers.agent._common_agent [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Port tapce421d07-52 updated. Details: {'device': 'tapce421d07-52', 'network_id': '76ee74af-148a-412c-aced-2a939fead080', 'port_id': 'ce421d07-5274-4d1f-a4ae-e54f1e637279', 'mac_address': 'fa:16:3e:fb:73:22', 'admin_state_up': True, 'network_type': 'flat', 'segmentation_id': None, 'physical_network': 'provider', 'mtu': 1450, 'fixed_ips': [{'subnet_id': '13c1a0a2-16a6-44fe-b318-3b2e4e93b354', 'ip_address': '10.110.1.251'}], 'device_owner': 'network:router_gateway', 'allowed_address_pairs': [], 'port_security_enabled': False, 'qos_policy_id': None, 'network_qos_policy_id': None, 'profile': {}, 'propagate_uplink_status': False} 2020-10-05 10:20:43.327 551 INFO neutron.plugins.ml2.drivers.linuxbridge.agent.arp_protect [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Skipping ARP spoofing rules for port 'tapce421d07-52' because it has port security disabled 2020-10-05 10:20:43.332 551 ERROR neutron.agent.linux.ip_lib [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Device brq76ee74af-14 cannot be used as it has no MAC address 2020-10-05 10:20:44.211 551 INFO neutron.plugins.ml2.drivers.agent._common_agent [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Port tap9cd7cb40-a1 updated. Details: {'device': 'tap9cd7cb40-a1', 'network_id': '76ee74af-148a-412c-aced-2a939fead080', 'port_id': '9cd7cb40-a1ac-4549-b6eb-53614e1a67e8', 'mac_address': 'fa:16:3e:32:68:6e', 'admin_state_up': True, 'network_type': 'flat', 'segmentation_id': None, 'physical_network': 'provider', 'mtu': 1450, 'fixed_ips': [{'subnet_id': '13c1a0a2-16a6-44fe-b318-3b2e4e93b354', 'ip_address': '10.110.1.129'}], 'device_owner': 'network:dhcp', 'allowed_address_pairs': [], 'port_security_enabled': False, 'qos_policy_id': None, 'network_qos_policy_id': None, 'profile': {}, 'propagate_uplink_status': False} 2020-10-05 10:20:44.602 551 INFO neutron.plugins.ml2.drivers.linuxbridge.agent.arp_protect [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Skipping ARP spoofing rules for port 'tap9cd7cb40-a1' because it has port security disabled 2020-10-05 10:20:45.378 551 INFO neutron.plugins.ml2.drivers.agent._common_agent [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Port tap512d1429-1d updated. Details: {'device': 'tap512d1429-1d', 'network_id': 'b285a436-cdb4-485f-a7fb-510264c66d8b', 'port_id': '512d1429-1d53-46fc-a0c8-0ca29d1ce01c', 'mac_address': 'fa:16:3e:cf:15:b4', 'admin_state_up': True, 'network_type': 'vxlan', 'segmentation_id': 1, 'physical_network': None, 'mtu': 1400, 'fixed_ips': [{'subnet_id': '460d9eb5-d7c6-4642-b9d6-aabb2dd2d022', 'ip_address': '10.101.2.100'}], 'device_owner': 'network:dhcp', 'allowed_address_pairs': [], 'port_security_enabled': False, 'qos_policy_id': None, 'network_qos_policy_id': None, 'profile': {}, 'propagate_uplink_status': False} 2020-10-05 10:20:45.776 551 INFO neutron.plugins.ml2.drivers.linuxbridge.agent.arp_protect [req-5c813a11-efc7-4bdb-bf99-2f4235e4d7eb - - - - -] Skipping ARP spoofing rules for port 'tap512d1429-1d' because it has port security disabled