make -C tools/testing/selftests TARGETS=net/forwarding TEST_PROGS=vxlan_brridge_1q_port_8472.sh TEST_GEN_PROGS="" run_tests make: Entering directory '/home/virtme/testing-4/tools/testing/selftests' make[1]: Entering directory '/home/virtme/testing-4/tools/testing/selftests/net/forwarding' make[1]: Nothing to be done for 'all'. make[1]: Leaving directory '/home/virtme/testing-4/tools/testing/selftests/net/forwarding' make[1]: Entering directory '/home/virtme/testing-4/tools/testing/selftests/net/forwarding' TAP version 13 1..1 # timeout set to 10800 # selftests: net/forwarding: vxlan_bridge_1q_port_8472.sh [ 3832.888699][T12759] br1: port 1(vx10) entered blocking state [ 3832.889804][T12759] br1: port 1(vx10) entered disabled state [ 3832.890191][T12759] vx10: entered allmulticast mode [ 3832.892285][T12759] vx10: entered promiscuous mode [ 3832.894174][T12759] br1: port 1(vx10) entered blocking state [ 3832.894532][T12759] br1: port 1(vx10) entered forwarding state [ 3833.548355][T12764] br1: port 2(vx20) entered blocking state [ 3833.548693][T12764] br1: port 2(vx20) entered disabled state [ 3833.549547][T12764] vx20: entered allmulticast mode [ 3833.551621][T12764] vx20: entered promiscuous mode [ 3833.552238][T12764] br1: port 2(vx20) entered blocking state [ 3833.552542][T12764] br1: port 2(vx20) entered forwarding state [ 3833.864863][T12766] br1: port 3(veth1) entered blocking state [ 3833.865300][T12766] br1: port 3(veth1) entered disabled state [ 3833.865689][T12766] veth1: entered allmulticast mode [ 3833.867806][T12766] veth1: entered promiscuous mode [ 3834.012982][ T47] br1: port 3(veth1) entered blocking state [ 3834.013384][ T47] br1: port 3(veth1) entered forwarding state [ 3834.452510][T12770] br1: port 4(veth2) entered blocking state [ 3834.452850][T12770] br1: port 4(veth2) entered disabled state [ 3834.453212][T12770] veth2: entered allmulticast mode [ 3834.455232][T12770] veth2: entered promiscuous mode [ 3834.598068][ T47] br1: port 4(veth2) entered blocking state [ 3834.598414][ T47] br1: port 4(veth2) entered forwarding state [ 3840.145425][T12822] br2: port 1(w1) entered blocking state [ 3840.145753][T12822] br2: port 1(w1) entered disabled state [ 3840.147098][T12822] w1: entered allmulticast mode [ 3840.149432][T12822] w1: entered promiscuous mode [ 3841.319722][T12830] br2: port 2(vx10) entered blocking state [ 3841.320502][T12830] br2: port 2(vx10) entered disabled state [ 3841.320849][T12830] vx10: entered allmulticast mode [ 3841.322863][T12830] vx10: entered promiscuous mode [ 3841.323477][T12830] br2: port 2(vx10) entered blocking state [ 3841.323783][T12830] br2: port 2(vx10) entered forwarding state [ 3842.404419][T12837] br2: port 3(vx20) entered blocking state [ 3842.404756][T12837] br2: port 3(vx20) entered disabled state [ 3842.405124][T12837] vx20: entered allmulticast mode [ 3842.407148][T12837] vx20: entered promiscuous mode [ 3842.407733][T12837] br2: port 3(vx20) entered blocking state [ 3842.408054][T12837] br2: port 3(vx20) entered forwarding state [ 3843.607020][ T47] br2: port 1(w1) entered blocking state [ 3843.607558][ T47] br2: port 1(w1) entered forwarding state [ 3847.303638][T12872] br2: port 1(w1) entered blocking state [ 3847.303986][T12872] br2: port 1(w1) entered disabled state [ 3847.304320][T12872] w1: entered allmulticast mode [ 3847.306706][T12872] w1: entered promiscuous mode [ 3848.538010][T12881] br2: port 2(vx10) entered blocking state [ 3848.538342][T12881] br2: port 2(vx10) entered disabled state [ 3848.538684][T12881] vx10: entered allmulticast mode [ 3848.541329][T12881] vx10: entered promiscuous mode [ 3848.541962][T12881] br2: port 2(vx10) entered blocking state [ 3848.542268][T12881] br2: port 2(vx10) entered forwarding state [ 3849.601384][T12888] br2: port 3(vx20) entered blocking state [ 3849.601723][T12888] br2: port 3(vx20) entered disabled state [ 3849.602088][T12888] vx20: entered allmulticast mode [ 3849.605161][T12888] vx20: entered promiscuous mode [ 3849.605760][T12888] br2: port 3(vx20) entered blocking state [ 3849.606075][T12888] br2: port 3(vx20) entered forwarding state [ 3850.820355][ T8] br2: port 1(w1) entered blocking state [ 3850.820712][ T8] br2: port 1(w1) entered forwarding state # INFO: Running tests with UDP port 8472 # TEST: ping: local->local vid 10 [ OK ] # TEST: ping: local->local vid 20 [ OK ] # TEST: ping: local->remote 1 vid 10 [ OK ] # TEST: ping: local->remote 2 vid 10 [ OK ] # TEST: ping: local->remote 1 vid 20 [ OK ] # TEST: ping: local->remote 2 vid 20 [ OK ] [ 3869.599187][ T11] vx20: left allmulticast mode [ 3869.599505][ T11] vx20: left promiscuous mode [ 3869.599946][ T11] br2: port 3(vx20) entered disabled state [ 3869.614982][ T11] vx10: left allmulticast mode [ 3869.615260][ T11] vx10: left promiscuous mode [ 3869.615636][ T11] br2: port 2(vx10) entered disabled state [ 3869.625656][ T11] w1: left allmulticast mode [ 3869.625967][ T11] w1: left promiscuous mode [ 3869.626364][ T11] br2: port 1(w1) entered disabled state [ 3869.733232][ T11] ================================================================== [ 3869.733705][ T11] BUG: KASAN: slab-use-after-free in vxlan_netdevice_event+0x32f/0x340 [vxlan] [ 3869.734180][ T11] Read of size 8 at addr ffff88800a460bd0 by task kworker/u8:0/11 [ 3869.734571][ T11] [ 3869.734697][ T11] CPU: 1 PID: 11 Comm: kworker/u8:0 Not tainted 6.8.0-rc2-virtme #1 [ 3869.735103][ T11] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014 [ 3869.735737][ T11] Workqueue: netns cleanup_net [ 3869.736020][ T11] Call Trace: [ 3869.736209][ T11] [ 3869.736362][ T11] dump_stack_lvl+0x64/0xb0 [ 3869.736600][ T11] print_address_description.constprop.0+0x2c/0x3b0 [ 3869.736938][ T11] ? vxlan_netdevice_event+0x32f/0x340 [vxlan] [ 3869.737262][ T11] print_report+0xb5/0x270 [ 3869.737486][ T11] ? kasan_addr_to_slab+0x4e/0x90 [ 3869.737741][ T11] kasan_report+0xbe/0xf0 [ 3869.737964][ T11] ? vxlan_netdevice_event+0x32f/0x340 [vxlan] [ 3869.738307][ T11] vxlan_netdevice_event+0x32f/0x340 [vxlan] [ 3869.738642][ T11] ? __pfx_vlan_device_event+0x10/0x10 [8021q] [ 3869.738966][ T11] ? __pfx_vxlan_netdevice_event+0x10/0x10 [vxlan] [ 3869.739323][ T11] ? netconsole_netdev_event+0x1b4/0x300 [ 3869.739621][ T11] notifier_call_chain+0x9a/0x290 [ 3869.739928][ T11] unregister_netdevice_many_notify+0x55a/0x1180 [ 3869.740293][ T11] ? mutex_is_locked+0x17/0x50 [ 3869.740540][ T11] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 3869.740896][ T11] ? vrf_dellink+0x101/0x150 [vrf] [ 3869.741171][ T11] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 3869.741518][ T11] default_device_exit_batch+0x228/0x2c0 [ 3869.741810][ T11] ? __pfx_default_device_exit_batch+0x10/0x10 [ 3869.742141][ T11] ? mutex_is_locked+0x17/0x50 [ 3869.742409][ T11] ? nexthop_net_exit_batch_rtnl+0x83/0x210 [ 3869.742734][ T11] cleanup_net+0x4f3/0xa20 [ 3869.742978][ T11] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 3869.743303][ T11] ? __pfx_cleanup_net+0x10/0x10 [ 3869.743582][ T11] ? lock_acquire+0x1c1/0x220 [ 3869.743875][ T11] ? process_one_work+0x714/0x1310 [ 3869.744178][ T11] process_one_work+0x78c/0x1310 [ 3869.744452][ T11] ? hlock_class+0x4e/0x130 [ 3869.744697][ T11] ? __pfx_process_one_work+0x10/0x10 [ 3869.745029][ T11] ? assign_work+0x16c/0x240 [ 3869.745266][ T11] worker_thread+0x73d/0x1010 [ 3869.745535][ T11] ? __pfx_worker_thread+0x10/0x10 [ 3869.745811][ T11] kthread+0x28f/0x360 [ 3869.746025][ T11] ? __pfx_kthread+0x10/0x10 [ 3869.746261][ T11] ret_from_fork+0x31/0x70 [ 3869.746506][ T11] ? __pfx_kthread+0x10/0x10 [ 3869.746764][ T11] ret_from_fork_asm+0x1b/0x30 [ 3869.747034][ T11] [ 3869.747189][ T11] [ 3869.747310][ T11] Allocated by task 11: [ 3869.747528][ T11] kasan_save_stack+0x24/0x50 [ 3869.747777][ T11] kasan_save_track+0x14/0x30 [ 3869.748041][ T11] __kasan_kmalloc+0x7f/0x90 [ 3869.748276][ T11] __kmalloc_node_track_caller+0x1fb/0x440 [ 3869.748589][ T11] kmalloc_reserve+0xbc/0x1f0 [ 3869.748836][ T11] pskb_expand_head+0x1f4/0xff0 [ 3869.749109][ T11] netlink_trim+0x198/0x200 [ 3869.749365][ T11] netlink_broadcast_filtered+0xcb/0x340 [ 3869.749666][ T11] nlmsg_notify+0x6e/0x1e0 [ 3869.749893][ T11] rtnetlink_event+0x167/0x1c0 [ 3869.750143][ T11] notifier_call_chain+0x9a/0x290 [ 3869.750416][ T11] __netdev_upper_dev_unlink+0x115/0x220 [ 3869.750729][ T11] netdev_upper_dev_unlink+0x71/0xa0 [ 3869.750997][ T11] vrf_dellink+0xbb/0x150 [vrf] [ 3869.751255][ T11] default_device_exit_batch+0x16a/0x2c0 [ 3869.751545][ T11] cleanup_net+0x4f3/0xa20 [ 3869.751795][ T11] process_one_work+0x78c/0x1310 [ 3869.752075][ T11] worker_thread+0x73d/0x1010 [ 3869.752332][ T11] kthread+0x28f/0x360 [ 3869.752547][ T11] ret_from_fork+0x31/0x70 [ 3869.752772][ T11] ret_from_fork_asm+0x1b/0x30 [ 3869.753038][ T11] [ 3869.753178][ T11] Freed by task 11: [ 3869.753371][ T11] kasan_save_stack+0x24/0x50 [ 3869.753630][ T11] kasan_save_track+0x14/0x30 [ 3869.753876][ T11] kasan_save_free_info+0x3f/0x60 [ 3869.754151][ T11] __kasan_slab_free+0xfc/0x1c0 [ 3869.754410][ T11] kfree+0xf2/0x2d0 [ 3869.754615][ T11] skb_release_data+0x56b/0x770 [ 3869.754882][ T11] consume_skb+0xad/0x110 [ 3869.755109][ T11] netlink_broadcast_filtered+0x224/0x340 [ 3869.755416][ T11] nlmsg_notify+0x6e/0x1e0 [ 3869.755661][ T11] rtnetlink_event+0x167/0x1c0 [ 3869.755904][ T11] notifier_call_chain+0x9a/0x290 [ 3869.756176][ T11] __netdev_upper_dev_unlink+0x115/0x220 [ 3869.756466][ T11] netdev_upper_dev_unlink+0x71/0xa0 [ 3869.756758][ T11] vrf_dellink+0xbb/0x150 [vrf] [ 3869.757033][ T11] default_device_exit_batch+0x16a/0x2c0 [ 3869.757319][ T11] cleanup_net+0x4f3/0xa20 [ 3869.757563][ T11] process_one_work+0x78c/0x1310 [ 3869.757814][ T11] worker_thread+0x73d/0x1010 [ 3869.758059][ T11] kthread+0x28f/0x360 [ 3869.758285][ T11] ret_from_fork+0x31/0x70 [ 3869.758536][ T11] ret_from_fork_asm+0x1b/0x30 [ 3869.758779][ T11] [ 3869.758937][ T11] The buggy address belongs to the object at ffff88800a460800 [ 3869.758937][ T11] which belongs to the cache kmalloc-2k of size 2048 [ 3869.759664][ T11] The buggy address is located 976 bytes inside of [ 3869.759664][ T11] freed 2048-byte region [ffff88800a460800, ffff88800a461000) [ 3869.760397][ T11] [ 3869.760524][ T11] The buggy address belongs to the physical page: [ 3869.760848][ T11] page:ffffea0000291800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xa460 [ 3869.761403][ T11] head:ffffea0000291800 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 3869.761867][ T11] flags: 0x80000000000840(slab|head|node=0|zone=1) [ 3869.762207][ T11] page_type: 0xffffffff() [ 3869.762451][ T11] raw: 0080000000000840 ffff888001043540 ffffea0000187010 ffffea00001ce810 [ 3869.762908][ T11] raw: 0000000000000000 0000000000050005 00000001ffffffff 0000000000000000 [ 3869.763356][ T11] page dumped because: kasan: bad access detected [ 3869.763685][ T11] [ 3869.763805][ T11] Memory state around the buggy address: [ 3869.764110][ T11] ffff88800a460a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3869.764549][ T11] ffff88800a460b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3869.764960][ T11] >ffff88800a460b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3869.765400][ T11] ^ [ 3869.765773][ T11] ffff88800a460c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3869.766193][ T11] ffff88800a460c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3869.766617][ T11] ================================================================== [ 3869.767283][ T11] Disabling lock debugging due to kernel taint [ 3869.767659][ T11] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 3869.768334][ T11] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 3869.768798][ T11] CPU: 1 PID: 11 Comm: kworker/u8:0 Tainted: G B 6.8.0-rc2-virtme #1 [ 3869.769365][ T11] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014 [ 3869.770043][ T11] Workqueue: netns cleanup_net [ 3869.770310][ T11] RIP: 0010:vxlan_netdevice_event+0x19e/0x340 [vxlan] [ 3869.770734][ T11] Code: 00 00 00 48 b9 00 00 00 00 00 fc ff df 49 89 c0 48 89 44 24 08 49 c1 e8 03 4d 8d 24 08 eb 2c 48 8d 53 30 48 89 d0 48 c1 e8 03 <80> 3c 08 00 0f 85 e0 00 00 00 48 8b 43 30 49 89 dd 48 83 e8 30 49 [ 3869.771747][ T11] RSP: 0018:ffffc900000bf980 EFLAGS: 00010246 [ 3869.772074][ T11] RAX: 0000000000000000 RBX: ffffffffffffffd0 RCX: dffffc0000000000 [ 3869.772487][ T11] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88800a460c24 [ 3869.772883][ T11] RBP: 1ffff92000017f33 R08: 1ffff1100119c21a R09: ffffc900000bf9b8 [ 3869.773312][ T11] R10: ffffffffaa33ca07 R11: 205d313154202020 R12: ffffed100119c21a [ 3869.773735][ T11] R13: ffff88800a460ba0 R14: ffff888009354000 R15: ffff888008ce1000 [ 3869.774187][ T11] FS: 0000000000000000(0000) GS:ffff888035600000(0000) knlGS:0000000000000000 [ 3869.774676][ T11] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3869.775036][ T11] CR2: 0000555c33bffdec CR3: 000000000628a005 CR4: 0000000000770ef0 [ 3869.775449][ T11] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3869.775928][ T11] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3869.776365][ T11] PKRU: 55555554 [ 3869.776584][ T11] Call Trace: [ 3869.776762][ T11] [ 3869.776954][ T11] ? die_addr+0x41/0xa0 [ 3869.777208][ T11] ? exc_general_protection+0x149/0x220 [ 3869.777536][ T11] ? asm_exc_general_protection+0x26/0x30 [ 3869.777843][ T11] ? vxlan_netdevice_event+0x19e/0x340 [vxlan] [ 3869.778207][ T11] ? __pfx_vxlan_netdevice_event+0x10/0x10 [vxlan] [ 3869.778584][ T11] ? netconsole_netdev_event+0x1b4/0x300 [ 3869.778903][ T11] notifier_call_chain+0x9a/0x290 [ 3869.779232][ T11] unregister_netdevice_many_notify+0x55a/0x1180 [ 3869.779604][ T11] ? mutex_is_locked+0x17/0x50 [ 3869.779876][ T11] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 3869.780225][ T11] ? vrf_dellink+0x101/0x150 [vrf] [ 3869.780505][ T11] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 3869.780851][ T11] default_device_exit_batch+0x228/0x2c0 [ 3869.781154][ T11] ? __pfx_default_device_exit_batch+0x10/0x10 [ 3869.781471][ T11] ? mutex_is_locked+0x17/0x50 [ 3869.781732][ T11] ? nexthop_net_exit_batch_rtnl+0x83/0x210 [ 3869.782057][ T11] cleanup_net+0x4f3/0xa20 [ 3869.782293][ T11] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 3869.782585][ T11] ? __pfx_cleanup_net+0x10/0x10 [ 3869.782858][ T11] ? lock_acquire+0x1c1/0x220 [ 3869.783095][ T11] ? process_one_work+0x714/0x1310 [ 3869.783379][ T11] process_one_work+0x78c/0x1310 [ 3869.783651][ T11] ? hlock_class+0x4e/0x130 [ 3869.783888][ T11] ? __pfx_process_one_work+0x10/0x10 [ 3869.784180][ T11] ? assign_work+0x16c/0x240 [ 3869.784443][ T11] worker_thread+0x73d/0x1010 [ 3869.784703][ T11] ? __pfx_worker_thread+0x10/0x10 [ 3869.784967][ T11] kthread+0x28f/0x360 [ 3869.785191][ T11] ? __pfx_kthread+0x10/0x10 [ 3869.785452][ T11] ret_from_fork+0x31/0x70 [ 3869.785676][ T11] ? __pfx_kthread+0x10/0x10 [ 3869.785928][ T11] ret_from_fork_asm+0x1b/0x30 [ 3869.786184][ T11] [ 3869.786356][ T11] Modules linked in: vxlan ip6_udp_tunnel udp_tunnel bridge stp llc act_gact cls_flower sch_ingress ip_gre gre 8021q vrf veth [ 3869.787140][ T11] ---[ end trace 0000000000000000 ]--- [ 3869.787440][ T11] RIP: 0010:vxlan_netdevice_event+0x19e/0x340 [vxlan] [ 3869.787878][ T11] Code: 00 00 00 48 b9 00 00 00 00 00 fc ff df 49 89 c0 48 89 44 24 08 49 c1 e8 03 4d 8d 24 08 eb 2c 48 8d 53 30 48 89 d0 48 c1 e8 03 <80> 3c 08 00 0f 85 e0 00 00 00 48 8b 43 30 49 89 dd 48 83 e8 30 49 [ 3869.789027][ T11] RSP: 0018:ffffc900000bf980 EFLAGS: 00010246 [ 3869.789351][ T11] RAX: 0000000000000000 RBX: ffffffffffffffd0 RCX: dffffc0000000000 [ 3869.789807][ T11] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88800a460c24 [ 3869.790340][ T11] RBP: 1ffff92000017f33 R08: 1ffff1100119c21a R09: ffffc900000bf9b8 [ 3869.790756][ T11] R10: ffffffffaa33ca07 R11: 205d313154202020 R12: ffffed100119c21a [ 3869.791274][ T11] R13: ffff88800a460ba0 R14: ffff888009354000 R15: ffff888008ce1000 [ 3869.791712][ T11] FS: 0000000000000000(0000) GS:ffff888035600000(0000) knlGS:0000000000000000 [ 3869.792294][ T11] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3869.792651][ T11] CR2: 0000555c33bffdec CR3: 000000000628a005 CR4: 0000000000770ef0 [ 3869.793243][ T11] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3869.793673][ T11] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3869.794202][ T11] PKRU: 55555554 [ 3869.794409][ T11] Kernel panic - not syncing: Fatal exception [ 3869.794880][ T11] Kernel Offset: 0x23c00000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 3869.795460][ T11] ---[ end Kernel panic - not syncing: Fatal exception ]--- WAIT TIMEOUT stdout Ctrl-C stdout Ctrl-C stdout WAIT TIMEOUT stdout