if overrides, set := tc.overrides[flowTests[i].name]; set {
					overridesApplied++
					if overrides.masq != nil {
						if tcFlowTests[i].masq == *overrides.masq {
							t.Errorf("%q override value for masq is same as base value", flowTests[i].name)
						}
						tcFlowTests[i].masq = *overrides.masq
					}
					if overrides.output != nil {
						if tcFlowTests[i].output == *overrides.output {

    iptables -w -t nat -N IP-MASQ
    iptables -w -t nat -A POSTROUTING -m comment --comment "ip-masq: ensure nat POSTROUTING directs all non-LOCAL destination traffic to our custom IP-MASQ chain" -m addrtype ! --dst-type LOCAL -j IP-MASQ
    iptables -w -t nat -A IP-MASQ -d 169.254.0.0/16 -m comment --comment "ip-masq: local traffic is not subject to MASQUERADE" -j RETURN

	addrs := []net.Addr{&net.IPNet{IP: netutils.ParseIPSloppy("100.101.102.103"), Mask: net.CIDRMask(24, 32)}}
	itf1 := net.Interface{Index: 1, MTU: 0, Name: "eth1", HardwareAddr: nil, Flags: 0}
	addrs1 := []net.Addr{&net.IPNet{IP: netutils.ParseIPSloppy("2001:db8::"), Mask: net.CIDRMask(64, 128)}}
	fp.networkInterfacer.(*proxyutiltest.FakeNetwork).AddInterfaceAddr(&itf, addrs)

## Changelog since v1.4.0-beta.1

### Other notable changes

* Fix a bug in kubelet hostport logic which flushes KUBE-MARK-MASQ iptables chain ([#32413](https://github.com/kubernetes/kubernetes/pull/32413), [@freehan](https://github.com/freehan))

* Stick to 2.2.1 etcd ([#32404](https://github.com/kubernetes/kubernetes/pull/32404), [@caesarxuchao](https://github.com/caesarxuchao))
* Fix a bug in kubelet hostport logic which flushes KUBE-MARK-MASQ iptables chain ([#32413](https://github.com/kubernetes/kubernetes/pull/32413), [@freehan](https://github.com/freehan))

AQm5B,GAChCuB,EAAO33B,OAAQ/C,IAAK,GAIhB06B,EAAOv5B,QACZN,EAAO+1B,GAAGlV,OAEX0V,QAAQzzB,GAGT9C,EAAO+1B,GAAGuC,MAAQ,SAAUA,GAC3Bt4B,EAAO65B,OAAOj8B,KAAM06B,GACpBt4B,EAAO+1B,GAAG1kB,SAGXrR,EAAO+1B,GAAGgB,SAAW,GACrB/2B,EAAO+1B,GAAG1kB,MAAQ,WACZmlB,KAILA,IAAa,EACbI,OAGD52B,EAAO+1B,GAAGlV,KAAO,WAChB2V,GAAa,MAGdx2B,EAAO+1B,GAAGsD,OAAS,CAClBgB,KAAM,IACNC,KAAM,IAGNzW,SAAU,KAKX7jB,EAAOG,GAAGo6B,MAAQ,SAAUC,EAAM77B,GAIjC,OAHA67B,EAAOx6B,EAAO+1B,IAAK/1B,EAAO+1B,GAAGsD,OAAQmB,IAAiBA,EACtD77B,EAAOA,GAAQ,KAER3B,...

AQm5B,GAChCuB,EAAO33B,OAAQ/C,IAAK,GAIhB06B,EAAOv5B,QACZN,EAAO+1B,GAAGlV,OAEX0V,QAAQzzB,GAGT9C,EAAO+1B,GAAGuC,MAAQ,SAAUA,GAC3Bt4B,EAAO65B,OAAOj8B,KAAM06B,GACpBt4B,EAAO+1B,GAAG1kB,SAGXrR,EAAO+1B,GAAGgB,SAAW,GACrB/2B,EAAO+1B,GAAG1kB,MAAQ,WACZmlB,KAILA,IAAa,EACbI,OAGD52B,EAAO+1B,GAAGlV,KAAO,WAChB2V,GAAa,MAGdx2B,EAAO+1B,GAAGsD,OAAS,CAClBgB,KAAM,IACNC,KAAM,IAGNzW,SAAU,KAKX7jB,EAAOG,GAAGo6B,MAAQ,SAAUC,EAAM77B,GAIjC,OAHA67B,EAAOx6B,EAAO+1B,IAAK/1B,EAAO+1B,GAAGsD,OAAQmB,IAAiBA,EACtD77B,EAAOA,GAAQ,KAER3B,...

	op_TMH     uint32 = 0xA700 // FORMAT_RI1        TEST UNDER MASK HIGH
	op_TMHH    uint32 = 0xA702 // FORMAT_RI1        TEST UNDER MASK (high high)
	op_TMHL    uint32 = 0xA703 // FORMAT_RI1        TEST UNDER MASK (high low)
	op_TML     uint32 = 0xA701 // FORMAT_RI1        TEST UNDER MASK LOW
	op_TMLH    uint32 = 0xA700 // FORMAT_RI1        TEST UNDER MASK (low high)

			v = 0
		} else if v > 32 {
			v = 32
		}
		var mask [2]uint8
		switch p.As {
		case AROTLW:
			mask[0], mask[1] = 0, 31
		case ASRW, ASRWCC:
			mask[0], mask[1] = uint8(v), 31
			v = 32 - v
		default:
			mask[0], mask[1] = 0, uint8(31-v)
		}
		o1 = OP_RLW(OP_RLWINM, uint32(p.To.Reg), uint32(r), uint32(v), uint32(mask[0]), uint32(mask[1]))
		if p.As == ASLWCC || p.As == ASRWCC {

			wantContainers: []string{"i1", "i2", "c1", "c2", "e1", "e2"},
			mask:           AllContainers,
		},
	}

	for _, tc := range testCases {
		t.Run(tc.desc, func(t *testing.T) {
			if tc.mask == setAllFeatureEnabledContainersDuringTest {
				tc.mask = AllFeatureEnabledContainers()
			}

			gotContainers := []string{}
			VisitContainers(tc.spec, tc.mask, func(c *api.Container, containerType ContainerType) bool {