make -C tools/testing/selftests TARGETS=net TEST_PROGS=traceroute.sh TEST__GEN_PROGS="" run_tests make: Entering directory '/home/virtme/testing-3/tools/testing/selftests' make[1]: Entering directory '/home/virtme/testing-3/tools/testing/selftests/net' make[1]: Nothing to be done for 'all'. make[1]: Leaving directory '/home/virtme/testing-3/tools/testing/selftests/net' make[1]: Entering directory '/home/virtme/testing-3/tools/testing/selftests/net' TAP version 13 1..1 # timeout set to 6000 # selftests: net: traceroute.sh [ 414.075265][ T3579] eth3: renamed from tmp [ 415.350664][ T3586] eth2: renamed from tmp [ 417.179619][ T3596] eth0: renamed from tmp [ 417.720726][ T3599] br0: port 1(eth0) entered blocking state [ 417.721184][ T3599] br0: port 1(eth0) entered disabled state [ 417.721538][ T3599] eth0: entered allmulticast mode [ 417.722812][ T3599] eth0: entered promiscuous mode [ 417.727831][ T3599] br0: port 1(eth0) entered blocking state [ 417.728241][ T3599] br0: port 1(eth0) entered forwarding state [ 418.460711][ T3603] eth1: renamed from tmp [ 419.003269][ T3606] br0: port 2(eth1) entered blocking state [ 419.003621][ T3606] br0: port 2(eth1) entered disabled state [ 419.003965][ T3606] eth1: entered allmulticast mode [ 419.005188][ T3606] eth1: entered promiscuous mode [ 419.006188][ T3606] br0: port 2(eth1) entered blocking state [ 419.006513][ T3606] br0: port 2(eth1) entered forwarding state # TEST: IPV6 traceroute [ OK ] [ 423.541920][ T68] br0: port 1(eth0) entered disabled state [ 423.557506][ T68] eth0 (unregistering): left allmulticast mode [ 423.557907][ T68] eth0 (unregistering): left promiscuous mode [ 423.558255][ T68] br0: port 1(eth0) entered disabled state [ 424.054101][ T68] eth1: left allmulticast mode [ 424.054400][ T68] eth1: left promiscuous mode [ 424.054758][ T68] br0: port 2(eth1) entered disabled state [ 424.068149][ T68] ================================================================== [ 424.068632][ T68] BUG: KASAN: slab-use-after-free in kobject_put+0xc7/0xe0 [ 424.069036][ T68] Read of size 1 at addr ffff8880083f583c by task kworker/u8:1/68 [ 424.069489][ T68] [ 424.069640][ T68] CPU: 2 PID: 68 Comm: kworker/u8:1 Not tainted 6.8.0-rc2-virtme #1 [ 424.070063][ T68] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014 [ 424.070704][ T68] Workqueue: netns cleanup_net [ 424.070969][ T68] Call Trace: [ 424.071149][ T68] [ 424.071310][ T68] dump_stack_lvl+0x64/0xb0 [ 424.071557][ T68] print_address_description.constprop.0+0x2c/0x3b0 [ 424.071909][ T68] ? kobject_put+0xc7/0xe0 [ 424.072147][ T68] print_report+0xb5/0x270 [ 424.072388][ T68] ? kasan_addr_to_slab+0x4e/0x90 [ 424.072689][ T68] kasan_report+0xbe/0xf0 [ 424.072935][ T68] ? kobject_put+0xc7/0xe0 [ 424.073175][ T68] kobject_put+0xc7/0xe0 [ 424.073401][ T68] br_sysfs_delbr+0x3f/0x70 [ 424.073641][ T68] br_dev_delete+0x10d/0x190 [ 424.073888][ T68] br_net_exit_batch_rtnl+0xd6/0x190 [ 424.074172][ T68] cleanup_net+0x499/0xb50 [ 424.074410][ T68] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 424.074714][ T68] ? __pfx_cleanup_net+0x10/0x10 [ 424.074977][ T68] ? lock_acquire+0x1c1/0x220 [ 424.075235][ T68] ? process_one_work+0x714/0x1310 [ 424.075510][ T68] process_one_work+0x78f/0x1310 [ 424.075778][ T68] ? hlock_class+0x4e/0x130 [ 424.076020][ T68] ? __pfx_process_one_work+0x10/0x10 [ 424.076328][ T68] ? assign_work+0x16c/0x240 [ 424.076605][ T68] worker_thread+0x73d/0x1010 [ 424.076892][ T68] ? lockdep_hardirqs_on_prepare.part.0+0x1b1/0x370 [ 424.077259][ T68] ? __pfx_worker_thread+0x10/0x10 [ 424.077557][ T68] ? __pfx_worker_thread+0x10/0x10 [ 424.077877][ T68] kthread+0x292/0x360 [ 424.078096][ T68] ? __pfx_kthread+0x10/0x10 [ 424.078344][ T68] ret_from_fork+0x34/0x70 [ 424.078582][ T68] ? __pfx_kthread+0x10/0x10 [ 424.078851][ T68] ret_from_fork_asm+0x1b/0x30 [ 424.079132][ T68] [ 424.079315][ T68] [ 424.079444][ T68] Allocated by task 3591: [ 424.079682][ T68] kasan_save_stack+0x24/0x50 [ 424.079959][ T68] kasan_save_track+0x14/0x30 [ 424.080228][ T68] __kasan_kmalloc+0x7f/0x90 [ 424.080492][ T68] kobject_create_and_add+0x44/0xc0 [ 424.080777][ T68] br_sysfs_addbr+0x57/0x160 [ 424.081044][ T68] br_device_event+0x1ff/0x740 [ 424.081327][ T68] notifier_call_chain+0x9d/0x290 [ 424.081621][ T68] register_netdevice+0x116d/0x17a0 [ 424.081925][ T68] br_dev_newlink+0x2b/0x100 [ 424.082187][ T68] rtnl_newlink_create+0x344/0x850 [ 424.082483][ T68] __rtnl_newlink+0xad2/0xd60 [ 424.082751][ T68] rtnl_newlink+0x63/0xa0 [ 424.082987][ T68] rtnetlink_rcv_msg+0x2fe/0xb80 [ 424.083274][ T68] netlink_rcv_skb+0x133/0x360 [ 424.083542][ T68] netlink_unicast+0x44c/0x710 [ 424.083804][ T68] netlink_sendmsg+0x726/0xbe0 [ 424.084086][ T68] ____sys_sendmsg+0x7b5/0xa10 [ 424.084348][ T68] ___sys_sendmsg+0xee/0x170 [ 424.084599][ T68] __sys_sendmsg+0xcd/0x170 [ 424.084857][ T68] do_syscall_64+0xcc/0x1e0 [ 424.085120][ T68] entry_SYSCALL_64_after_hwframe+0x6f/0x77 [ 424.085471][ T68] [ 424.085601][ T68] Freed by task 68: [ 424.085827][ T68] kasan_save_stack+0x24/0x50 [ 424.086106][ T68] kasan_save_track+0x14/0x30 [ 424.086371][ T68] kasan_save_free_info+0x3f/0x60 [ 424.086651][ T68] __kasan_slab_free+0xfc/0x1c0 [ 424.086930][ T68] kfree+0xf2/0x2d0 [ 424.087166][ T68] kobject_cleanup+0xe2/0x280 [ 424.087427][ T68] br_sysfs_delbr+0x3f/0x70 [ 424.087694][ T68] br_dev_delete+0x10d/0x190 [ 424.087956][ T68] default_device_exit_batch_rtnl+0x112/0x210 [ 424.088310][ T68] cleanup_net+0x499/0xb50 [ 424.088550][ T68] process_one_work+0x78f/0x1310 [ 424.088810][ T68] worker_thread+0x73d/0x1010 [ 424.089064][ T68] kthread+0x292/0x360 [ 424.089286][ T68] ret_from_fork+0x34/0x70 [ 424.089523][ T68] ret_from_fork_asm+0x1b/0x30 [ 424.089781][ T68] [ 424.089907][ T68] The buggy address belongs to the object at ffff8880083f5800 [ 424.089907][ T68] which belongs to the cache kmalloc-64 of size 64 [ 424.090632][ T68] The buggy address is located 60 bytes inside of [ 424.090632][ T68] freed 64-byte region [ffff8880083f5800, ffff8880083f5840) [ 424.091420][ T68] [ 424.091553][ T68] The buggy address belongs to the physical page: [ 424.091905][ T68] page:ffffea000020fd00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880083f4180 pfn:0x83f4 [ 424.092565][ T68] head:ffffea000020fd00 order:1 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 424.093058][ T68] flags: 0x80000000000a40(workingset|slab|head|node=0|zone=1) [ 424.093469][ T68] page_type: 0xffffffff() [ 424.093712][ T68] raw: 0080000000000a40 ffff888001042900 ffffea00000ee990 ffffea00000edb90 [ 424.094210][ T68] raw: ffff8880083f4180 0000000000190012 00000001ffffffff 0000000000000000 [ 424.094694][ T68] page dumped because: kasan: bad access detected [ 424.095053][ T68] [ 424.095204][ T68] Memory state around the buggy address: [ 424.095507][ T68] ffff8880083f5700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 424.095960][ T68] ffff8880083f5780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 424.096400][ T68] >ffff8880083f5800: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 424.096839][ T68] ^ [ 424.097170][ T68] ffff8880083f5880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 424.097630][ T68] ffff8880083f5900: fc fc fc fc fc fc fc fc 00 00 00 00 00 fc fc fc [ 424.098073][ T68] ================================================================== [ 424.098563][ T68] Disabling lock debugging due to kernel taint [ 424.098907][ T68] ------------[ cut here ]------------ [ 424.099218][ T68] refcount_t: underflow; use-after-free. [ 424.099581][ T68] WARNING: CPU: 2 PID: 68 at lib/refcount.c:28 refcount_warn_saturate+0x173/0x1b0 [ 424.100103][ T68] Modules linked in: xt_length act_ct nf_flow_table cls_flower sch_ingress sctp_diag sctp vxlan ip6_udp_tunnel udp_tunnel nft_chain_nat xt_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 nft_compat nf_tables libcrc32c [ 424.101370][ T68] CPU: 2 PID: 68 Comm: kworker/u8:1 Tainted: G B 6.8.0-rc2-virtme #1 [ 424.101908][ T68] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014 [ 424.102694][ T68] Workqueue: netns cleanup_net [ 424.102964][ T68] RIP: 0010:refcount_warn_saturate+0x173/0x1b0 [ 424.103315][ T68] Code: f9 82 03 80 fb 01 0f 87 ee 02 b1 01 83 e3 01 0f 85 4d ff ff ff c6 05 9a f9 82 03 01 90 48 c7 c7 20 7a 82 a7 e8 3e 05 2a ff 90 <0f> 0b 90 90 e9 2f ff ff ff 48 89 df e8 8c 68 a6 ff e9 b6 fe ff ff [ 424.104341][ T68] RSP: 0018:ffffc900004efb98 EFLAGS: 00010282 [ 424.104668][ T68] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffffa4b1056f [ 424.105097][ T68] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000001 [ 424.105521][ T68] RBP: 0000000000000003 R08: 0000000000000000 R09: fffff5200009df18 [ 424.105938][ T68] R10: ffffc900004ef8c7 R11: 205d383654202020 R12: ffff888006432000 [ 424.106362][ T68] R13: ffff888006432df8 R14: ffffc900004efc98 R15: ffff888006432bc0 [ 424.106784][ T68] FS: 0000000000000000(0000) GS:ffff888035a00000(0000) knlGS:0000000000000000 [ 424.107328][ T68] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 424.107710][ T68] CR2: 00007fe555f87000 CR3: 000000002bd34006 CR4: 00000000001706f0 [ 424.108143][ T68] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 424.108570][ T68] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 424.109000][ T68] Call Trace: [ 424.109184][ T68] [ 424.109345][ T68] ? __warn+0xcd/0x2d0 [ 424.109566][ T68] ? refcount_warn_saturate+0x173/0x1b0 [ 424.109861][ T68] ? report_bug+0x291/0x2e0 [ 424.110123][ T68] ? vprintk_emit+0xff/0x1d0 [ 424.110404][ T68] ? handle_bug+0x3d/0x80 [ 424.110659][ T68] ? exc_invalid_op+0x18/0x50 [ 424.110920][ T68] ? asm_exc_invalid_op+0x1a/0x20 [ 424.111195][ T68] ? desc_read+0x2af/0x440 [ 424.111437][ T68] ? refcount_warn_saturate+0x173/0x1b0 [ 424.111731][ T68] ? refcount_warn_saturate+0x172/0x1b0 [ 424.112031][ T68] br_sysfs_delbr+0x3f/0x70 [ 424.112274][ T68] br_dev_delete+0x10d/0x190 [ 424.112521][ T68] br_net_exit_batch_rtnl+0xd6/0x190 [ 424.112806][ T68] cleanup_net+0x499/0xb50 [ 424.113047][ T68] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 424.113399][ T68] ? __pfx_cleanup_net+0x10/0x10 [ 424.113699][ T68] ? lock_acquire+0x1c1/0x220 [ 424.113961][ T68] ? process_one_work+0x714/0x1310 [ 424.114264][ T68] process_one_work+0x78f/0x1310 [ 424.114561][ T68] ? hlock_class+0x4e/0x130 [ 424.114820][ T68] ? __pfx_process_one_work+0x10/0x10 [ 424.115119][ T68] ? assign_work+0x16c/0x240 [ 424.115372][ T68] worker_thread+0x73d/0x1010 [ 424.115627][ T68] ? lockdep_hardirqs_on_prepare.part.0+0x1b1/0x370 [ 424.115980][ T68] ? __pfx_worker_thread+0x10/0x10 [ 424.116262][ T68] ? __pfx_worker_thread+0x10/0x10 [ 424.116558][ T68] kthread+0x292/0x360 [ 424.116799][ T68] ? __pfx_kthread+0x10/0x10 [ 424.117084][ T68] ret_from_fork+0x34/0x70 [ 424.117334][ T68] ? __pfx_kthread+0x10/0x10 [ 424.117601][ T68] ret_from_fork_asm+0x1b/0x30 [ 424.117912][ T68] [ 424.118095][ T68] irq event stamp: 3402953 [ 424.118353][ T68] hardirqs last enabled at (3402953): [] irqentry_exit+0x3b/0x90 [ 424.118843][ T68] hardirqs last disabled at (3402952): [] __do_softirq+0x670/0x7ff [ 424.119347][ T68] softirqs last enabled at (3402938): [] br_dev_delete+0xd8/0x190 [ 424.119844][ T68] softirqs last disabled at (3402936): [] br_fdb_delete_by_port+0x36/0x260 [ 424.120383][ T68] ---[ end trace 0000000000000000 ]--- [ 424.120698][ T68] ------------[ cut here ]------------ [ 424.121475][ T68] sysfs group 'bridge' not found for kobject 'br0' [ 424.121872][ T68] WARNING: CPU: 0 PID: 68 at fs/sysfs/group.c:282 sysfs_remove_group+0x101/0x160 [ 424.122396][ T68] Modules linked in: xt_length act_ct nf_flow_table cls_flower sch_ingress sctp_diag sctp vxlan ip6_udp_tunnel udp_tunnel nft_chain_nat xt_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 nft_compat nf_tables libcrc32c [ 424.123581][ T68] CPU: 0 PID: 68 Comm: kworker/u8:1 Tainted: G B W 6.8.0-rc2-virtme #1 [ 424.124135][ T68] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014 [ 424.124826][ T68] Workqueue: netns cleanup_net [ 424.125138][ T68] RIP: 0010:sysfs_remove_group+0x101/0x160 [ 424.125490][ T68] Code: 89 d9 49 8b 14 24 48 b8 00 00 00 00 00 fc ff df 48 c1 e9 03 80 3c 01 00 75 45 48 8b 33 48 c7 c7 a0 a7 7c a7 e8 60 65 5e ff 90 <0f> 0b 90 90 48 83 c4 08 5b 5d 41 5c c3 cc cc cc cc e8 e9 c7 da ff [ 424.126542][ T68] RSP: 0018:ffffc900004efba0 EFLAGS: 00010282 [ 424.126902][ T68] RAX: 0000000000000000 RBX: ffffffffa7bbe220 RCX: ffffffffa4b1056f [ 424.127366][ T68] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000001 [ 424.127823][ T68] RBP: 0000000000000000 R08: 0000000000000000 R09: fffff5200009df19 [ 424.128270][ T68] R10: ffffc900004ef8cf R11: 205d383654202020 R12: ffff888006432628 [ 424.128724][ T68] R13: ffff888006432df8 R14: ffffc900004efc98 R15: ffff888006432bc0 [ 424.129194][ T68] FS: 0000000000000000(0000) GS:ffff888035200000(0000) knlGS:0000000000000000 [ 424.129704][ T68] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 424.130083][ T68] CR2: 00007f93ce269000 CR3: 000000002bd34002 CR4: 00000000001706f0 [ 424.130618][ T68] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 424.131106][ T68] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 424.131563][ T68] Call Trace: [ 424.131769][ T68] [ 424.131928][ T68] ? __warn+0xcd/0x2d0 [ 424.132196][ T68] ? console_trylock+0x61/0xf0 [ 424.132502][ T68] ? sysfs_remove_group+0x101/0x160 [ 424.132814][ T68] ? report_bug+0x291/0x2e0 [ 424.133087][ T68] ? handle_bug+0x3d/0x80 [ 424.133361][ T68] ? exc_invalid_op+0x18/0x50 [ 424.133643][ T68] ? asm_exc_invalid_op+0x1a/0x20 [ 424.133947][ T68] ? desc_read+0x2af/0x440 [ 424.134227][ T68] ? sysfs_remove_group+0x101/0x160 [ 424.134523][ T68] br_dev_delete+0x10d/0x190 [ 424.134781][ T68] br_net_exit_batch_rtnl+0xd6/0x190 [ 424.135098][ T68] cleanup_net+0x499/0xb50 [ 424.135387][ T68] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 424.135718][ T68] ? __pfx_cleanup_net+0x10/0x10 [ 424.136009][ T68] ? lock_acquire+0x1c1/0x220 [ 424.136294][ T68] ? process_one_work+0x714/0x1310 [ 424.136613][ T68] process_one_work+0x78f/0x1310 [ 424.136913][ T68] ? hlock_class+0x4e/0x130 [ 424.137186][ T68] ? __pfx_process_one_work+0x10/0x10 [ 424.137475][ T68] ? assign_work+0x16c/0x240 [ 424.137720][ T68] worker_thread+0x73d/0x1010 [ 424.137974][ T68] ? lockdep_hardirqs_on_prepare.part.0+0x1b1/0x370 [ 424.138329][ T68] ? __pfx_worker_thread+0x10/0x10 [ 424.138605][ T68] ? __pfx_worker_thread+0x10/0x10 [ 424.138877][ T68] kthread+0x292/0x360 [ 424.139105][ T68] ? __pfx_kthread+0x10/0x10 [ 424.139355][ T68] ret_from_fork+0x34/0x70 [ 424.139596][ T68] ? __pfx_kthread+0x10/0x10 [ 424.139919][ T68] ret_from_fork_asm+0x1b/0x30 [ 424.140197][ T68] [ 424.140404][ T68] irq event stamp: 3402953 [ 424.140676][ T68] hardirqs last enabled at (3402953): [] irqentry_exit+0x3b/0x90 [ 424.141205][ T68] hardirqs last disabled at (3402952): [] __do_softirq+0x670/0x7ff [ 424.141743][ T68] softirqs last enabled at (3402938): [] br_dev_delete+0xd8/0x190 [ 424.142282][ T68] softirqs last disabled at (3402936): [] br_fdb_delete_by_port+0x36/0x260 [ 424.142851][ T68] ---[ end trace 0000000000000000 ]--- [ 428.417458][ T3666] eth1: renamed from tmp [ 429.619049][ T3675] eth2: renamed from tmp # TEST: IPV4 traceroute [ OK ] # # Tests passed: 2 # Tests failed: 0 ok 1 selftests: net: traceroute.sh make[1]: Leaving directory '/home/virtme/testing-3/tools/testing/selftests/net' make: Leaving directory '/home/virtme/testing-3/tools/testing/selftests' xx__-> echo $? 0 xx__->