make -C tools/testing/selftests TARGETS=net/forwarding TEST_PROGS=vxlan_brridge_1q_port_8472_ipv6.sh TEST_GEN_PROGS="" run_tests make: Entering directory '/home/virtme/testing-4/tools/testing/selftests' make[1]: Entering directory '/home/virtme/testing-4/tools/testing/selftests/net/forwarding' make[1]: Nothing to be done for 'all'. make[1]: Leaving directory '/home/virtme/testing-4/tools/testing/selftests/net/forwarding' make[1]: Entering directory '/home/virtme/testing-4/tools/testing/selftests/net/forwarding' TAP version 13 1..1 # timeout set to 10800 # selftests: net/forwarding: vxlan_bridge_1q_port_8472_ipv6.sh [ 3834.460197][T12676] br1: port 1(vx10) entered blocking state [ 3834.460658][T12676] br1: port 1(vx10) entered disabled state [ 3834.461004][T12676] vx10: entered allmulticast mode [ 3834.463094][T12676] vx10: entered promiscuous mode [ 3834.464342][T12676] br1: port 1(vx10) entered blocking state [ 3834.464693][T12676] br1: port 1(vx10) entered forwarding state [ 3835.090901][T12681] br1: port 2(vx20) entered blocking state [ 3835.091475][T12681] br1: port 2(vx20) entered disabled state [ 3835.091822][T12681] vx20: entered allmulticast mode [ 3835.093881][T12681] vx20: entered promiscuous mode [ 3835.094579][T12681] br1: port 2(vx20) entered blocking state [ 3835.094891][T12681] br1: port 2(vx20) entered forwarding state [ 3835.391160][T12683] br1: port 3(veth1) entered blocking state [ 3835.392498][T12683] br1: port 3(veth1) entered disabled state [ 3835.392853][T12683] veth1: entered allmulticast mode [ 3835.394942][T12683] veth1: entered promiscuous mode [ 3835.547917][ T8] br1: port 3(veth1) entered blocking state [ 3835.548367][ T8] br1: port 3(veth1) entered forwarding state [ 3836.150338][T12688] br1: port 4(veth2) entered blocking state [ 3836.150684][T12688] br1: port 4(veth2) entered disabled state [ 3836.151033][T12688] veth2: entered allmulticast mode [ 3836.161814][T12688] veth2: entered promiscuous mode [ 3836.313755][ T8] br1: port 4(veth2) entered blocking state [ 3836.314108][ T8] br1: port 4(veth2) entered forwarding state [ 3842.032733][T12739] br2: port 1(w1) entered blocking state [ 3842.033071][T12739] br2: port 1(w1) entered disabled state [ 3842.033433][T12739] w1: entered allmulticast mode [ 3842.035550][T12739] w1: entered promiscuous mode [ 3843.325093][T12747] br2: port 2(vx10) entered blocking state [ 3843.326307][T12747] br2: port 2(vx10) entered disabled state [ 3843.326667][T12747] vx10: entered allmulticast mode [ 3843.328738][T12747] vx10: entered promiscuous mode [ 3843.329426][T12747] br2: port 2(vx10) entered blocking state [ 3843.329733][T12747] br2: port 2(vx10) entered forwarding state [ 3844.491192][T12754] br2: port 3(vx20) entered blocking state [ 3844.491550][T12754] br2: port 3(vx20) entered disabled state [ 3844.491927][T12754] vx20: entered allmulticast mode [ 3844.495179][T12754] vx20: entered promiscuous mode [ 3844.495789][T12754] br2: port 3(vx20) entered blocking state [ 3844.496092][T12754] br2: port 3(vx20) entered forwarding state [ 3845.732739][ T8] br2: port 1(w1) entered blocking state [ 3845.733402][ T8] br2: port 1(w1) entered forwarding state [ 3849.844052][T12791] br2: port 1(w1) entered blocking state [ 3849.844404][T12791] br2: port 1(w1) entered disabled state [ 3849.844766][T12791] w1: entered allmulticast mode [ 3849.847246][T12791] w1: entered promiscuous mode [ 3851.057209][T12799] br2: port 2(vx10) entered blocking state [ 3851.057571][T12799] br2: port 2(vx10) entered disabled state [ 3851.057924][T12799] vx10: entered allmulticast mode [ 3851.060039][T12799] vx10: entered promiscuous mode [ 3851.061676][T12799] br2: port 2(vx10) entered blocking state [ 3851.061996][T12799] br2: port 2(vx10) entered forwarding state [ 3852.198247][T12806] br2: port 3(vx20) entered blocking state [ 3852.198589][T12806] br2: port 3(vx20) entered disabled state [ 3852.198949][T12806] vx20: entered allmulticast mode [ 3852.201059][T12806] vx20: entered promiscuous mode [ 3852.201782][T12806] br2: port 3(vx20) entered blocking state [ 3852.202091][T12806] br2: port 3(vx20) entered forwarding state [ 3853.470572][ T8] br2: port 1(w1) entered blocking state [ 3853.470951][ T8] br2: port 1(w1) entered forwarding state # INFO: Running tests with UDP port 8472 # TEST: ping: local->local vid 10 [ OK ] # TEST: ping: local->local vid 20 [ OK ] # TEST: ping: local->remote 1 vid 10 [ OK ] # TEST: ping: local->remote 2 vid 10 [ OK ] # TEST: ping: local->remote 1 vid 20 [ OK ] # TEST: ping: local->remote 2 vid 20 [ OK ] # TEST: ping6: local->local vid 10 [ OK ] # TEST: ping6: local->local vid 20 [ OK ] # TEST: ping6: local->remote 1 vid 10 [ OK ] # TEST: ping6: local->remote 2 vid 10 [ OK ] # TEST: ping6: local->remote 1 vid 20 [ OK ] # TEST: ping6: local->remote 2 vid 20 [ OK ] [ 3966.268106][ T71] vx20: left allmulticast mode [ 3966.268468][ T71] vx20: left promiscuous mode [ 3966.268905][ T71] br2: port 3(vx20) entered disabled state [ 3966.282949][ T71] vx10: left allmulticast mode [ 3966.283890][ T71] vx10: left promiscuous mode [ 3966.284342][ T71] br2: port 2(vx10) entered disabled state [ 3966.294313][ T71] w1: left allmulticast mode [ 3966.294608][ T71] w1: left promiscuous mode [ 3966.295010][ T71] br2: port 1(w1) entered disabled state [ 3966.423835][ T71] ================================================================== [ 3966.424319][ T71] BUG: KASAN: slab-use-after-free in vxlan_netdevice_event+0x32f/0x340 [vxlan] [ 3966.424792][ T71] Read of size 8 at addr ffff88800ac48bd0 by task kworker/u8:1/71 [ 3966.425182][ T71] [ 3966.425309][ T71] CPU: 0 PID: 71 Comm: kworker/u8:1 Not tainted 6.8.0-rc2-virtme #1 [ 3966.425706][ T71] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014 [ 3966.426322][ T71] Workqueue: netns cleanup_net [ 3966.426577][ T71] Call Trace: [ 3966.426746][ T71] [ 3966.426902][ T71] dump_stack_lvl+0x64/0xb0 [ 3966.427135][ T71] print_address_description.constprop.0+0x2c/0x3b0 [ 3966.427505][ T71] ? vxlan_netdevice_event+0x32f/0x340 [vxlan] [ 3966.427825][ T71] print_report+0xb5/0x270 [ 3966.428052][ T71] ? kasan_addr_to_slab+0x4e/0x90 [ 3966.428307][ T71] kasan_report+0xbe/0xf0 [ 3966.428525][ T71] ? vxlan_netdevice_event+0x32f/0x340 [vxlan] [ 3966.428849][ T71] vxlan_netdevice_event+0x32f/0x340 [vxlan] [ 3966.429162][ T71] ? __pfx_vlan_device_event+0x10/0x10 [8021q] [ 3966.429482][ T71] ? __pfx_vxlan_netdevice_event+0x10/0x10 [vxlan] [ 3966.429820][ T71] ? netconsole_netdev_event+0x1b4/0x300 [ 3966.430108][ T71] notifier_call_chain+0x9a/0x290 [ 3966.430369][ T71] unregister_netdevice_many_notify+0x55a/0x1180 [ 3966.430693][ T71] ? mutex_is_locked+0x17/0x50 [ 3966.430937][ T71] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 3966.431278][ T71] ? vrf_dellink+0x101/0x150 [vrf] [ 3966.431545][ T71] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 3966.431862][ T71] default_device_exit_batch+0x228/0x2c0 [ 3966.432144][ T71] ? __pfx_default_device_exit_batch+0x10/0x10 [ 3966.432454][ T71] ? mutex_is_locked+0x17/0x50 [ 3966.432697][ T71] ? nexthop_net_exit_batch_rtnl+0x83/0x210 [ 3966.432997][ T71] cleanup_net+0x4f3/0xa20 [ 3966.433222][ T71] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 3966.433515][ T71] ? __pfx_cleanup_net+0x10/0x10 [ 3966.433763][ T71] ? lock_acquire+0x1c1/0x220 [ 3966.434000][ T71] ? process_one_work+0x714/0x1310 [ 3966.434261][ T71] process_one_work+0x78c/0x1310 [ 3966.434513][ T71] ? hlock_class+0x4e/0x130 [ 3966.434744][ T71] ? __pfx_process_one_work+0x10/0x10 [ 3966.435017][ T71] ? assign_work+0x16c/0x240 [ 3966.435253][ T71] worker_thread+0x73d/0x1010 [ 3966.435491][ T71] ? lockdep_hardirqs_on_prepare.part.0+0x1b1/0x370 [ 3966.435821][ T71] ? __pfx_worker_thread+0x10/0x10 [ 3966.436081][ T71] ? __pfx_worker_thread+0x10/0x10 [ 3966.436339][ T71] kthread+0x28f/0x360 [ 3966.436544][ T71] ? __pfx_kthread+0x10/0x10 [ 3966.436779][ T71] ret_from_fork+0x31/0x70 [ 3966.437003][ T71] ? __pfx_kthread+0x10/0x10 [ 3966.437236][ T71] ret_from_fork_asm+0x1b/0x30 [ 3966.437484][ T71] [ 3966.437638][ T71] [ 3966.437758][ T71] Allocated by task 71: [ 3966.437971][ T71] kasan_save_stack+0x24/0x50 [ 3966.438207][ T71] kasan_save_track+0x14/0x30 [ 3966.438455][ T71] __kasan_kmalloc+0x7f/0x90 [ 3966.438688][ T71] __kmalloc_node_track_caller+0x1fb/0x440 [ 3966.438989][ T71] kmalloc_reserve+0xbc/0x1f0 [ 3966.439229][ T71] pskb_expand_head+0x1f4/0xff0 [ 3966.439475][ T71] netlink_trim+0x198/0x200 [ 3966.439710][ T71] netlink_broadcast_filtered+0xcb/0x340 [ 3966.439992][ T71] nlmsg_notify+0x6e/0x1e0 [ 3966.440222][ T71] rtmsg_ifinfo+0x5b/0xa0 [ 3966.440444][ T71] __dev_notify_flags+0x1ba/0x250 [ 3966.440697][ T71] dev_change_flags+0xec/0x160 [ 3966.440945][ T71] cycle_netdev+0xc3/0xf0 [vrf] [ 3966.441194][ T71] vrf_dellink+0xdb/0x150 [vrf] [ 3966.441449][ T71] default_device_exit_batch+0x16a/0x2c0 [ 3966.441729][ T71] cleanup_net+0x4f3/0xa20 [ 3966.441954][ T71] process_one_work+0x78c/0x1310 [ 3966.442218][ T71] worker_thread+0x73d/0x1010 [ 3966.442454][ T71] kthread+0x28f/0x360 [ 3966.442661][ T71] ret_from_fork+0x31/0x70 [ 3966.442884][ T71] ret_from_fork_asm+0x1b/0x30 [ 3966.443129][ T71] [ 3966.443257][ T71] Freed by task 71: [ 3966.443450][ T71] kasan_save_stack+0x24/0x50 [ 3966.443688][ T71] kasan_save_track+0x14/0x30 [ 3966.443922][ T71] kasan_save_free_info+0x3f/0x60 [ 3966.444176][ T71] __kasan_slab_free+0xfc/0x1c0 [ 3966.444420][ T71] kfree+0xf2/0x2d0 [ 3966.444613][ T71] skb_release_data+0x56b/0x770 [ 3966.444858][ T71] consume_skb+0xad/0x110 [ 3966.445081][ T71] netlink_broadcast_filtered+0x224/0x340 [ 3966.445366][ T71] nlmsg_notify+0x6e/0x1e0 [ 3966.445590][ T71] rtmsg_ifinfo+0x5b/0xa0 [ 3966.445807][ T71] __dev_notify_flags+0x1ba/0x250 [ 3966.446059][ T71] dev_change_flags+0xec/0x160 [ 3966.446300][ T71] cycle_netdev+0xc3/0xf0 [vrf] [ 3966.446550][ T71] vrf_dellink+0xdb/0x150 [vrf] [ 3966.446799][ T71] default_device_exit_batch+0x16a/0x2c0 [ 3966.447078][ T71] cleanup_net+0x4f3/0xa20 [ 3966.447304][ T71] process_one_work+0x78c/0x1310 [ 3966.447554][ T71] worker_thread+0x73d/0x1010 [ 3966.447792][ T71] kthread+0x28f/0x360 [ 3966.447997][ T71] ret_from_fork+0x31/0x70 [ 3966.448219][ T71] ret_from_fork_asm+0x1b/0x30 [ 3966.448463][ T71] [ 3966.448583][ T71] The buggy address belongs to the object at ffff88800ac48800 [ 3966.448583][ T71] which belongs to the cache kmalloc-2k of size 2048 [ 3966.449280][ T71] The buggy address is located 976 bytes inside of [ 3966.449280][ T71] freed 2048-byte region [ffff88800ac48800, ffff88800ac49000) [ 3966.449966][ T71] [ 3966.450086][ T71] The buggy address belongs to the physical page: [ 3966.450409][ T71] page:ffffea00002b1200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xac48 [ 3966.450917][ T71] head:ffffea00002b1200 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 3966.451362][ T71] flags: 0x80000000000840(slab|head|node=0|zone=1) [ 3966.451706][ T71] page_type: 0xffffffff() [ 3966.451924][ T71] raw: 0080000000000840 ffff888001043540 ffffea000028f210 ffffea00001a3210 [ 3966.452356][ T71] raw: 0000000000000000 0000000000050005 00000001ffffffff 0000000000000000 [ 3966.452793][ T71] page dumped because: kasan: bad access detected [ 3966.453110][ T71] [ 3966.453231][ T71] Memory state around the buggy address: [ 3966.453520][ T71] ffff88800ac48a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3966.453930][ T71] ffff88800ac48b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3966.454329][ T71] >ffff88800ac48b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3966.454727][ T71] ^ [ 3966.455061][ T71] ffff88800ac48c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3966.455462][ T71] ffff88800ac48c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3966.455861][ T71] ================================================================== [ 3966.457140][ T71] Disabling lock debugging due to kernel taint [ 3966.457549][ T71] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 3966.458156][ T71] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 3966.458573][ T71] CPU: 0 PID: 71 Comm: kworker/u8:1 Tainted: G B 6.8.0-rc2-virtme #1 [ 3966.459042][ T71] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014 [ 3966.459650][ T71] Workqueue: netns cleanup_net [ 3966.459897][ T71] RIP: 0010:vxlan_netdevice_event+0x19e/0x340 [vxlan] [ 3966.460252][ T71] Code: 00 00 00 48 b9 00 00 00 00 00 fc ff df 49 89 c0 48 89 44 24 08 49 c1 e8 03 4d 8d 24 08 eb 2c 48 8d 53 30 48 89 d0 48 c1 e8 03 <80> 3c 08 00 0f 85 e0 00 00 00 48 8b 43 30 49 89 dd 48 83 e8 30 49 [ 3966.461220][ T71] RSP: 0018:ffffc9000051f980 EFLAGS: 00010246 [ 3966.461524][ T71] RAX: 0000000000000000 RBX: ffffffffffffffd0 RCX: dffffc0000000000 [ 3966.461924][ T71] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88800ac48c24 [ 3966.462319][ T71] RBP: 1ffff920000a3f33 R08: 1ffff11000e9581a R09: ffffc9000051f9b8 [ 3966.462770][ T71] R10: ffffffffb153ca07 R11: 205d313754202020 R12: ffffed1000e9581a [ 3966.463161][ T71] R13: ffff88800ac48ba0 R14: ffff888006884000 R15: ffff8880074ac000 [ 3966.463598][ T71] FS: 0000000000000000(0000) GS:ffff88802e800000(0000) knlGS:0000000000000000 [ 3966.464045][ T71] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3966.464380][ T71] CR2: 00007f1658881270 CR3: 000000000941e002 CR4: 0000000000770ef0 [ 3966.464777][ T71] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3966.465179][ T71] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3966.465582][ T71] PKRU: 55555554 [ 3966.465761][ T71] Call Trace: [ 3966.465927][ T71] [ 3966.466079][ T71] ? die_addr+0x41/0xa0 [ 3966.466292][ T71] ? exc_general_protection+0x149/0x220 [ 3966.466579][ T71] ? asm_exc_general_protection+0x26/0x30 [ 3966.466873][ T71] ? vxlan_netdevice_event+0x19e/0x340 [vxlan] [ 3966.467199][ T71] ? __pfx_vxlan_netdevice_event+0x10/0x10 [vxlan] [ 3966.467537][ T71] ? netconsole_netdev_event+0x1b4/0x300 [ 3966.467829][ T71] notifier_call_chain+0x9a/0x290 [ 3966.468086][ T71] unregister_netdevice_many_notify+0x55a/0x1180 [ 3966.468411][ T71] ? mutex_is_locked+0x17/0x50 [ 3966.468654][ T71] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 3966.468993][ T71] ? vrf_dellink+0x101/0x150 [vrf] [ 3966.469261][ T71] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 3966.469581][ T71] default_device_exit_batch+0x228/0x2c0 [ 3966.469863][ T71] ? __pfx_default_device_exit_batch+0x10/0x10 [ 3966.470171][ T71] ? mutex_is_locked+0x17/0x50 [ 3966.470417][ T71] ? nexthop_net_exit_batch_rtnl+0x83/0x210 [ 3966.470716][ T71] cleanup_net+0x4f3/0xa20 [ 3966.470946][ T71] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 3966.471229][ T71] ? __pfx_cleanup_net+0x10/0x10 [ 3966.471480][ T71] ? lock_acquire+0x1c1/0x220 [ 3966.471723][ T71] ? process_one_work+0x714/0x1310 [ 3966.471981][ T71] process_one_work+0x78c/0x1310 [ 3966.472237][ T71] ? hlock_class+0x4e/0x130 [ 3966.472468][ T71] ? __pfx_process_one_work+0x10/0x10 [ 3966.472739][ T71] ? assign_work+0x16c/0x240 [ 3966.472977][ T71] worker_thread+0x73d/0x1010 [ 3966.473213][ T71] ? lockdep_hardirqs_on_prepare.part.0+0x1b1/0x370 [ 3966.473556][ T71] ? __pfx_worker_thread+0x10/0x10 [ 3966.473814][ T71] ? __pfx_worker_thread+0x10/0x10 [ 3966.474071][ T71] kthread+0x28f/0x360 [ 3966.474279][ T71] ? __pfx_kthread+0x10/0x10 [ 3966.474511][ T71] ret_from_fork+0x31/0x70 [ 3966.474742][ T71] ? __pfx_kthread+0x10/0x10 [ 3966.474973][ T71] ret_from_fork_asm+0x1b/0x30 [ 3966.475225][ T71] [ 3966.475381][ T71] Modules linked in: vxlan ip6_udp_tunnel udp_tunnel bridge stp llc act_gact cls_flower sch_ingress ip_gre gre 8021q vrf veth [ 3966.476107][ T71] ---[ end trace 0000000000000000 ]--- [ 3966.476389][ T71] RIP: 0010:vxlan_netdevice_event+0x19e/0x340 [vxlan] [ 3966.476763][ T71] Code: 00 00 00 48 b9 00 00 00 00 00 fc ff df 49 89 c0 48 89 44 24 08 49 c1 e8 03 4d 8d 24 08 eb 2c 48 8d 53 30 48 89 d0 48 c1 e8 03 <80> 3c 08 00 0f 85 e0 00 00 00 48 8b 43 30 49 89 dd 48 83 e8 30 49 [ 3966.477907][ T71] RSP: 0018:ffffc9000051f980 EFLAGS: 00010246 [ 3966.478324][ T71] RAX: 0000000000000000 RBX: ffffffffffffffd0 RCX: dffffc0000000000 [ 3966.478874][ T71] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88800ac48c24 [ 3966.479470][ T71] RBP: 1ffff920000a3f33 R08: 1ffff11000e9581a R09: ffffc9000051f9b8 [ 3966.480029][ T71] R10: ffffffffb153ca07 R11: 205d313754202020 R12: ffffed1000e9581a [ 3966.480568][ T71] R13: ffff88800ac48ba0 R14: ffff888006884000 R15: ffff8880074ac000 [ 3966.481050][ T71] FS: 0000000000000000(0000) GS:ffff88802e800000(0000) knlGS:0000000000000000 [ 3966.481610][ T71] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3966.482091][ T71] CR2: 00007f1658881270 CR3: 000000000941e002 CR4: 0000000000770ef0 [ 3966.482673][ T71] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3966.483271][ T71] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3966.483809][ T71] PKRU: 55555554 [ 3966.484032][ T71] Kernel panic - not syncing: Fatal exception [ 3966.484479][ T71] Kernel Offset: 0x2ae00000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 3966.485064][ T71] ---[ end Kernel panic - not syncing: Fatal exception ]--- WAIT TIMEOUT stdout Ctrl-C stdout Ctrl-C stdout WAIT TIMEOUT stdout