Bug 2048556

Description of problem:
Start a VM with 16+ CPUs - no connectivity if networkInterfaceMultiqueue is enabled

Version-Release number of selected component (if applicable):
cluster-network-addons-operator version v4.10.0-41

How reproducible:


Steps to Reproduce:
1. Start a VM with 16 CPUs (tested on a cluster with 3 SR-IOV interfaces)

Actual results:
The VM cannot ping the node
If networkInterfaceMultiqueue is disabled, there's connectivity between the VM and the node

Expected results:
The VM should be able to reach the node


Additional info:
apiVersion: kubevirt.io/v1
kind: VirtualMachine
metadata:
  annotations:
    vm.kubevirt.io/validations: "[\n   {\n     \"name\": \"minimal-required-memory\"\
      ,\n     \"path\": \"jsonpath::.spec.domain.resources.requests.memory\",\n  \
      \   \"rule\": \"integer\",\n     \"message\": \"This VM requires more memory.\"\
      ,\n     \"min\": 1610612736\n   }\n]\n"
  labels:
    app: sap-hana-vm-1643637473-8532958
    vm.kubevirt.io/template: rhel8-saphana-tiny
    vm.kubevirt.io/template.namespace: openshift
    vm.kubevirt.io/template.revision: '1'
    vm.kubevirt.io/template.version: v0.19.1
  name: sap-hana-vm-1643637473-8532958
spec:
  dataVolumeTemplates:
  - apiVersion: cdi.kubevirt.io/v1beta1
    kind: DataVolume
    metadata:
      name: sap-hana-vm
    spec:
      source:
        registry:
          pullMethod: node
          url: docker://registry.redhat.io/rhel8/rhel-guest-image:8.4.0
      storage:
        resources:
          requests:
            storage: 50Gi
        storageClassName: nfs
  running: false
  template:
    metadata:
      annotations:
        vm.kubevirt.io/flavor: tiny
        vm.kubevirt.io/os: rhel8
        vm.kubevirt.io/workload: saphana
      labels:
        kubevirt.io/domain: sap-hana-vm-1643637473-8532958
        kubevirt.io/size: tiny
        kubevirt.io/vm: sap-hana-vm-1643637473-8532958
    spec:
      domain:
        cpu:
          cores: 16
          dedicatedCpuPlacement: true
          features:
          - name: invtsc
            policy: require
          isolateEmulatorThread: true
          model: host-passthrough
          numa:
            guestMappingPassthrough: {}
          sockets: 1
          threads: 1
        devices:
          blockMultiQueue: true
          disks:
          - dedicatedIOThread: true
            disk:
              bus: virtio
            name: sap-hana-vm
          - disk:
              bus: virtio
            name: cloudinitdisk
          - disk:
              bus: virtio
            name: downwardmetrics
          interfaces:
          - masquerade: {}
            model: virtio
            name: default
          - name: sriov-net1
            sriov: {}
          - name: sriov-net2
            sriov: {}
          - name: sriov-net3
            sriov: {}
          networkInterfaceMultiqueue: true
          rng: {}
        ioThreadsPolicy: auto
        machine:
          type: pc-q35-rhel8.4.0
        memory:
          guest: 24Gi
          hugepages:
            pageSize: 1Gi
        resources:
          requests:
            memory: 44Gi
      hostname: sap-hana-vm-1643637473-8532958
      networks:
      - name: default
        pod: {}
      - multus:
          networkName: ssp-high-performance-vm-test-sap-hana-vm/sriov-net-1
        name: sriov-net1
      - multus:
          networkName: ssp-high-performance-vm-test-sap-hana-vm/sriov-net-2
        name: sriov-net2
      - multus:
          networkName: ssp-high-performance-vm-test-sap-hana-vm/sriov-net-3
        name: sriov-net3
      nodeSelector:
        kubevirt.io/workload: hana
      terminationGracePeriodSeconds: 180
      tolerations:
      - effect: NoSchedule
        key: kubevirt.io/workload
        operator: Equal
        value: hana
      volumes:
      - dataVolume:
          name: sap-hana-vm
        name: sap-hana-vm
      - cloudInitNoCloud:
          userData: "#cloud-config\nuser: cloud-user\npassword: password\nchpasswd:\
            \ { expire: False }\nbootcmd:\n- sysctl -w net.ipv4.conf.all.rp_filter=0\n\
            \nssh_authorized_keys:\n [ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCj47ubVnxR16JU7ZfDli3N5QVBAwJBRh2xMryyjk5dtfugo5JIPGB2cyXTqEDdzuRmI+Vkb/A5duJyBRlA+9RndGGmhhMnj8and3wu5/cEb7DkF6ZJ25QV4LQx3K/i57LStUHXRTvruHOZ2nCuVXWqi7wSvz5YcvEv7O8pNF5uGmqHlShBdxQxcjurXACZ1YY0YDJDr3AJai1KF9zehVJODuSbrnOYpThVWGjFuFAnNxbtuZ8EOSougN2aYTf2qr/KFGDHtewIkzZmP6cjzKO5bN3pVbXxmb2Gces/BYHntY4MXBTUqwsmsCRC5SAz14bEP/vsLtrNhjq9vCS+BjMT\
            \ root]\nruncmd: [\"sudo sed -i '/^PubkeyAccepted/ s/$/,ssh-rsa/'\
            \ /etc/crypto-policies/back-ends/opensshserver.config\", \"sudo sed -i\
            \ 's/^#\\\\?PasswordAuthentication no/PasswordAuthentication yes/g' /etc/ssh/sshd_config\"\
            , 'sudo systemctl enable sshd', 'sudo systemctl restart sshd']"
        name: cloudinitdisk
      - downwardMetrics: {}
        name: downwardmetrics