Description

2026-02-27T09:21:18.0562511Z default: main_test.go:282:
2026-02-27T09:21:18.0591854Z default: Error Trace: /root/go/src/github.com/containerd/containerd/integration/main_test.go:282
2026-02-27T09:21:18.0593611Z default: /root/go/src/github.com/containerd/containerd/integration/addition_gids_test.go:91
2026-02-27T09:21:18.0595511Z default: Error: Received unexpected error:
2026-02-27T09:21:18.0599854Z default: rpc error: code = Unknown desc = failed to setup network for sandbox "cd65c8673fa933e565128c8ca1f352a508d99c967b8d793ab05210cd797fb175": plugin type="bridge" failed (add): running [/sbin/iptables -t nat -A CNI-39b2dff0038815cc1ec6f005 -d 10.88.0.8/16 -j ACCEPT -m comment --comment name: "containerd-net" id: "cd65c8673fa933e565128c8ca1f352a508d99c967b8d793ab05210cd797fb175" --wait]: exit status 4: Warning: Extension comment revision 0 not supported, missing kernel module?
2026-02-27T09:21:18.0610178Z default: iptables v1.8.11 (nf_tables): RULE_APPEND failed (No such file or directory): rule in chain CNI-39b2dff0038815cc1ec6f005
2026-02-27T09:21:18.0611240Z default: Test: TestAdditionalGids/case-6
2026-02-27T09:21:18.0614276Z default: --- FAIL: TestAdditionalGids (2.29s)

Steps to reproduce the issue

Describe the results you received and expected

iptables run ok

What version of containerd are you using?

master

Any other relevant information

No response

Show configuration if it is related to CRI plugin.

No response