CI: Conformance E2E (6, 6.1-20231220.153727, none, true, vxlan, snat, true, true, testing-only, true) - BPF program is too large #30266
Description
CI failure
Hit in #30207
Link: https://github.com/cilium/cilium/actions/runs/7538867433/job/20520223727
Sysdump: cilium-sysdump-6-final.zip
A recent scheduled run failed as well: https://github.com/cilium/cilium/actions/runs/7534805946/job/20509788056
Logs excerpt:
2024-01-16T08:32:41.030215879Z Verifier error: program tail_nodeport_nat_ingress_ipv4: load program: argument list too long: BPF program is too large. Processed 1000001 insn (990 line(s) omitted)
2024-01-16T08:32:41.030316276Z Verifier log: load program: argument list too long:
2024-01-16T08:32:41.030324842Z 0: R1=ctx(off=0,imm=0) R10=fp0
2024-01-16T08:32:41.030328439Z ; int tail_nodeport_nat_ingress_ipv4(struct __ctx_buff *ctx)
2024-01-16T08:32:41.030332878Z 0: (b4) w2 = 0 ; R2_w=0
...
2024-01-16T08:32:41.037740382Z processed 1000001 insns (limit 1000000) max_states_per_insn 22 total_states 71464 peak_states 1606 mark_read 45
2024-01-16T08:32:41.037744019Z level=warning msg="JoinEP: Failed to load program for cilium_host" ciliumEndpointName=/ containerID= containerInterface= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=766 error="loading eBPF collection into the kernel: program tail_nodeport_nat_ingress_ipv4: load program: argument list too long: BPF program is too large. Processed 1000001 insn (990 line(s) omitted)" file-path=766_next/bpf_host.o identity=1 ipv4= ipv6= k8sPodName=/ subsys=datapath-loader veth=cilium_host
2024-01-16T08:32:41.037796417Z level=error msg="Error while rewriting endpoint BPF program" ciliumEndpointName=/ containerID= containerInterface= datapathPolicyRevision=0 desiredPolicyRevision=1 endpointID=766 error="loading eBPF collection into the kernel: program tail_nodeport_nat_ingress_ipv4: load program: argument list too long: BPF program is too large. Processed 1000001 insn (990 line(s) omitted)" identity=1 ipv4= ipv6= k8sPodName=/ subsys=endpoint