make -C tools/testing/selftests TARGETS=net TEST_PROGS=traceroute.sh TEST__GEN_PROGS="" run_tests
make: Entering directory '/home/virtme/testing-3/tools/testing/selftests'
make[1]: Entering directory '/home/virtme/testing-3/tools/testing/selftests/net'
make[1]: Nothing to be done for 'all'.
make[1]: Leaving directory '/home/virtme/testing-3/tools/testing/selftests/net'
make[1]: Entering directory '/home/virtme/testing-3/tools/testing/selftests/net'
TAP version 13
1..1
# timeout set to 6000
# selftests: net: traceroute.sh
[ 346.205260][ T2597] eth3: renamed from tmp
[ 347.508057][ T2604] eth2: renamed from tmp
[ 349.555970][ T2614] eth0: renamed from tmp
[ 350.127203][ T2617] br0: port 1(eth0) entered blocking state
[ 350.127655][ T2617] br0: port 1(eth0) entered disabled state
[ 350.128063][ T2617] eth0: entered allmulticast mode
[ 350.129547][ T2617] eth0: entered promiscuous mode
[ 350.131559][ T2617] br0: port 1(eth0) entered blocking state
[ 350.131975][ T2617] br0: port 1(eth0) entered forwarding state
[ 350.927053][ T2621] eth1: renamed from tmp
[ 351.494977][ T2624] br0: port 2(eth1) entered blocking state
[ 351.496217][ T2624] br0: port 2(eth1) entered disabled state
[ 351.496592][ T2624] eth1: entered allmulticast mode
[ 351.497915][ T2624] eth1: entered promiscuous mode
[ 351.499693][ T2624] br0: port 2(eth1) entered blocking state
[ 351.500053][ T2624] br0: port 2(eth1) entered forwarding state
# TEST: IPV6 traceroute [ OK ]
[ 356.125358][ T69] br0: port 1(eth0) entered disabled state
[ 356.142273][ T69] eth0 (unregistering): left allmulticast mode
[ 356.142758][ T69] eth0 (unregistering): left promiscuous mode
[ 356.143867][ T69] br0: port 1(eth0) entered disabled state
[ 356.670209][ T69] eth1: left allmulticast mode
[ 356.670523][ T69] eth1: left promiscuous mode
[ 356.670903][ T69] br0: port 2(eth1) entered disabled state
[ 356.686718][ T69] ==================================================================
[ 356.687177][ T69] BUG: KASAN: slab-use-after-free in kobject_put+0xc7/0xe0
[ 356.687559][ T69] Read of size 1 at addr ffff888002db6cfc by task kworker/u8:1/69
[ 356.687969][ T69]
[ 356.688103][ T69] CPU: 3 PID: 69 Comm: kworker/u8:1 Not tainted 6.8.0-rc2-virtme #1
[ 356.688528][ T69] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014
[ 356.689164][ T69] Workqueue: netns cleanup_net
[ 356.689422][ T69] Call Trace:
[ 356.689637][ T69]
[ 356.689873][ T69] dump_stack_lvl+0x64/0xb0
[ 356.690124][ T69] print_address_description.constprop.0+0x2c/0x3b0
[ 356.690504][ T69] ? kobject_put+0xc7/0xe0
[ 356.690788][ T69] print_report+0xb5/0x270
[ 356.691020][ T69] ? kasan_addr_to_slab+0x4e/0x90
[ 356.691288][ T69] kasan_report+0xbe/0xf0
[ 356.691518][ T69] ? kobject_put+0xc7/0xe0
[ 356.691756][ T69] kobject_put+0xc7/0xe0
[ 356.691978][ T69] br_sysfs_delbr+0x3f/0x70
[ 356.692223][ T69] br_dev_delete+0x10d/0x190
[ 356.692471][ T69] br_net_exit_batch_rtnl+0xd6/0x190
[ 356.692752][ T69] cleanup_net+0x499/0xb50
[ 356.692988][ T69] ? __pfx_lock_acquire.part.0+0x10/0x10
[ 356.693285][ T69] ? __pfx_cleanup_net+0x10/0x10
[ 356.693547][ T69] ? lock_acquire+0x1c1/0x220
[ 356.693794][ T69] ? process_one_work+0x714/0x1310
[ 356.694064][ T69] process_one_work+0x78f/0x1310
[ 356.694329][ T69] ? hlock_class+0x4e/0x130
[ 356.694571][ T69] ? __pfx_process_one_work+0x10/0x10
[ 356.694962][ T69] ? assign_work+0x16c/0x240
[ 356.695225][ T69] worker_thread+0x73d/0x1010
[ 356.695494][ T69] ? lockdep_hardirqs_on_prepare.part.0+0x1b1/0x370
[ 356.695860][ T69] ? __pfx_worker_thread+0x10/0x10
[ 356.696175][ T69] ? __pfx_worker_thread+0x10/0x10
[ 356.696490][ T69] kthread+0x292/0x360
[ 356.696711][ T69] ? __pfx_kthread+0x10/0x10
[ 356.696983][ T69] ret_from_fork+0x34/0x70
[ 356.697269][ T69] ? __pfx_kthread+0x10/0x10
[ 356.697540][ T69] ret_from_fork_asm+0x1b/0x30
[ 356.697804][ T69]
[ 356.697967][ T69]
[ 356.698132][ T69] Allocated by task 2609:
[ 356.698400][ T69] kasan_save_stack+0x24/0x50
[ 356.698668][ T69] kasan_save_track+0x14/0x30
[ 356.698923][ T69] __kasan_kmalloc+0x7f/0x90
[ 356.699198][ T69] kobject_create_and_add+0x44/0xc0
[ 356.699510][ T69] br_sysfs_addbr+0x57/0x160
[ 356.699772][ T69] br_device_event+0x1ff/0x740
[ 356.700039][ T69] notifier_call_chain+0x9d/0x290
[ 356.700305][ T69] register_netdevice+0x116d/0x17a0
[ 356.700609][ T69] br_dev_newlink+0x2b/0x100
[ 356.700889][ T69] rtnl_newlink_create+0x344/0x850
[ 356.701196][ T69] __rtnl_newlink+0xad2/0xd60
[ 356.701460][ T69] rtnl_newlink+0x63/0xa0
[ 356.701721][ T69] rtnetlink_rcv_msg+0x2fe/0xb80
[ 356.702007][ T69] netlink_rcv_skb+0x133/0x360
[ 356.702285][ T69] netlink_unicast+0x44c/0x710
[ 356.702574][ T69] netlink_sendmsg+0x726/0xbe0
[ 356.702836][ T69] ____sys_sendmsg+0x7b5/0xa10
[ 356.703114][ T69] ___sys_sendmsg+0xee/0x170
[ 356.703390][ T69] __sys_sendmsg+0xcd/0x170
[ 356.703643][ T69] do_syscall_64+0xcc/0x1e0
[ 356.703918][ T69] entry_SYSCALL_64_after_hwframe+0x6f/0x77
[ 356.704271][ T69]
[ 356.704422][ T69] Freed by task 69:
[ 356.704630][ T69] kasan_save_stack+0x24/0x50
[ 356.704887][ T69] kasan_save_track+0x14/0x30
[ 356.705175][ T69] kasan_save_free_info+0x3f/0x60
[ 356.705458][ T69] __kasan_slab_free+0xfc/0x1c0
[ 356.705731][ T69] kfree+0xf2/0x2d0
[ 356.705946][ T69] kobject_cleanup+0xe2/0x280
[ 356.706218][ T69] br_sysfs_delbr+0x3f/0x70
[ 356.706502][ T69] br_dev_delete+0x10d/0x190
[ 356.706771][ T69] default_device_exit_batch_rtnl+0x112/0x210
[ 356.707098][ T69] cleanup_net+0x499/0xb50
[ 356.707335][ T69] process_one_work+0x78f/0x1310
[ 356.707592][ T69] worker_thread+0x73d/0x1010
[ 356.707843][ T69] kthread+0x292/0x360
[ 356.708060][ T69] ret_from_fork+0x34/0x70
[ 356.708295][ T69] ret_from_fork_asm+0x1b/0x30
[ 356.708549][ T69]
[ 356.708674][ T69] The buggy address belongs to the object at ffff888002db6cc0
[ 356.708674][ T69] which belongs to the cache kmalloc-64 of size 64
[ 356.709387][ T69] The buggy address is located 60 bytes inside of
[ 356.709387][ T69] freed 64-byte region [ffff888002db6cc0, ffff888002db6d00)
[ 356.710155][ T69]
[ 356.710281][ T69] The buggy address belongs to the physical page:
[ 356.710659][ T69] page:ffffea00000b6d80 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888002db6180 pfn:0x2db6
[ 356.711331][ T69] head:ffffea00000b6d80 order:1 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 356.711866][ T69] flags: 0x80000000000a40(workingset|slab|head|node=0|zone=1)
[ 356.712275][ T69] page_type: 0xffffffff()
[ 356.712543][ T69] raw: 0080000000000a40 ffff888001042900 ffffea00000b2810 ffffea000011a510
[ 356.713053][ T69] raw: ffff888002db6180 0000000000190011 00000001ffffffff 0000000000000000
[ 356.713567][ T69] page dumped because: kasan: bad access detected
[ 356.713932][ T69]
[ 356.714055][ T69] Memory state around the buggy address:
[ 356.714376][ T69] ffff888002db6b80: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc
[ 356.714850][ T69] ffff888002db6c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 356.715345][ T69] >ffff888002db6c80: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb
[ 356.715783][ T69] ^
[ 356.716242][ T69] ffff888002db6d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 356.716732][ T69] ffff888002db6d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 356.717161][ T69] ==================================================================
[ 356.717671][ T69] Disabling lock debugging due to kernel taint
[ 356.718038][ T69] ------------[ cut here ]------------
[ 356.718396][ T69] refcount_t: underflow; use-after-free.
[ 356.718774][ T69] WARNING: CPU: 3 PID: 69 at lib/refcount.c:28 refcount_warn_saturate+0x173/0x1b0
[ 356.719350][ T69] Modules linked in: sctp_diag sctp ip6_udp_tunnel udp_tunnel libcrc32c act_mirred cls_u32 sch_ingress ifb
[ 356.720007][ T69] CPU: 3 PID: 69 Comm: kworker/u8:1 Tainted: G B 6.8.0-rc2-virtme #1
[ 356.720592][ T69] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014
[ 356.721246][ T69] Workqueue: netns cleanup_net
[ 356.721501][ T69] RIP: 0010:refcount_warn_saturate+0x173/0x1b0
[ 356.721826][ T69] Code: f9 82 03 80 fb 01 0f 87 ee 02 b1 01 83 e3 01 0f 85 4d ff ff ff c6 05 9a f9 82 03 01 90 48 c7 c7 20 7a e2 a5 e8 3e 05 2a ff 90 <0f> 0b 90 90 e9 2f ff ff ff 48 89 df e8 8c 68 a6 ff e9 b6 fe ff ff
[ 356.722929][ T69] RSP: 0018:ffffc900004ffb98 EFLAGS: 00010282
[ 356.723253][ T69] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffffa311056f
[ 356.723707][ T69] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000001
[ 356.724224][ T69] RBP: 0000000000000003 R08: 0000000000000000 R09: fffff5200009ff18
[ 356.724637][ T69] R10: ffffc900004ff8c7 R11: 205d393654202020 R12: ffff8880082f2000
[ 356.725047][ T69] R13: ffff8880082f2df8 R14: ffffc900004ffc98 R15: ffff8880082f2bc0
[ 356.725477][ T69] FS: 0000000000000000(0000) GS:ffff888035e00000(0000) knlGS:0000000000000000
[ 356.725946][ T69] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 356.726297][ T69] CR2: 00007f3854c2d30d CR3: 000000002e134002 CR4: 00000000001706f0
[ 356.726742][ T69] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 356.727173][ T69] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 356.727586][ T69] Call Trace:
[ 356.727773][ T69]
[ 356.727930][ T69] ? __warn+0xcd/0x2d0
[ 356.728163][ T69] ? refcount_warn_saturate+0x173/0x1b0
[ 356.728453][ T69] ? report_bug+0x291/0x2e0
[ 356.728692][ T69] ? vprintk_emit+0xff/0x1d0
[ 356.728945][ T69] ? handle_bug+0x3d/0x80
[ 356.729181][ T69] ? exc_invalid_op+0x18/0x50
[ 356.729429][ T69] ? asm_exc_invalid_op+0x1a/0x20
[ 356.729738][ T69] ? desc_read+0x2af/0x440
[ 356.730047][ T69] ? refcount_warn_saturate+0x173/0x1b0
[ 356.730345][ T69] ? refcount_warn_saturate+0x172/0x1b0
[ 356.730662][ T69] br_sysfs_delbr+0x3f/0x70
[ 356.730929][ T69] br_dev_delete+0x10d/0x190
[ 356.731192][ T69] br_net_exit_batch_rtnl+0xd6/0x190
[ 356.731525][ T69] cleanup_net+0x499/0xb50
[ 356.731783][ T69] ? __pfx_lock_acquire.part.0+0x10/0x10
[ 356.732108][ T69] ? __pfx_cleanup_net+0x10/0x10
[ 356.732439][ T69] ? lock_acquire+0x1c1/0x220
[ 356.732704][ T69] ? process_one_work+0x714/0x1310
[ 356.733018][ T69] process_one_work+0x78f/0x1310
[ 356.733287][ T69] ? hlock_class+0x4e/0x130
[ 356.733528][ T69] ? __pfx_process_one_work+0x10/0x10
[ 356.733811][ T69] ? assign_work+0x16c/0x240
[ 356.734057][ T69] worker_thread+0x73d/0x1010
[ 356.734309][ T69] ? lockdep_hardirqs_on_prepare.part.0+0x1b1/0x370
[ 356.734657][ T69] ? __pfx_worker_thread+0x10/0x10
[ 356.734936][ T69] ? __pfx_worker_thread+0x10/0x10
[ 356.735296][ T69] kthread+0x292/0x360
[ 356.735513][ T69] ? __pfx_kthread+0x10/0x10
[ 356.735758][ T69] ret_from_fork+0x34/0x70
[ 356.736004][ T69] ? __pfx_kthread+0x10/0x10
[ 356.736347][ T69] ret_from_fork_asm+0x1b/0x30
[ 356.736623][ T69]
[ 356.736805][ T69] irq event stamp: 1754941
[ 356.737093][ T69] hardirqs last enabled at (1754941): [] irqentry_exit+0x3b/0x90
[ 356.737573][ T69] hardirqs last disabled at (1754940): [] __do_softirq+0x670/0x7ff
[ 356.738160][ T69] softirqs last enabled at (1754924): [] br_dev_delete+0xd8/0x190
[ 356.738693][ T69] softirqs last disabled at (1754922): [] br_fdb_delete_by_port+0x36/0x260
[ 356.739318][ T69] ---[ end trace 0000000000000000 ]---
[ 356.739630][ T69] ------------[ cut here ]------------
[ 356.739943][ T69] sysfs group 'bridge' not found for kobject 'br0'
[ 356.740388][ T69] WARNING: CPU: 3 PID: 69 at fs/sysfs/group.c:282 sysfs_remove_group+0x101/0x160
[ 356.740913][ T69] Modules linked in: sctp_diag sctp ip6_udp_tunnel udp_tunnel libcrc32c act_mirred cls_u32 sch_ingress ifb
[ 356.741622][ T69] CPU: 3 PID: 69 Comm: kworker/u8:1 Tainted: G B W 6.8.0-rc2-virtme #1
[ 356.742232][ T69] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014
[ 356.742973][ T69] Workqueue: netns cleanup_net
[ 356.743354][ T69] RIP: 0010:sysfs_remove_group+0x101/0x160
[ 356.743696][ T69] Code: 89 d9 49 8b 14 24 48 b8 00 00 00 00 00 fc ff df 48 c1 e9 03 80 3c 01 00 75 45 48 8b 33 48 c7 c7 a0 a7 dc a5 e8 60 65 5e ff 90 <0f> 0b 90 90 48 83 c4 08 5b 5d 41 5c c3 cc cc cc cc e8 e9 c7 da ff
[ 356.744765][ T69] RSP: 0018:ffffc900004ffba0 EFLAGS: 00010282
[ 356.745107][ T69] RAX: 0000000000000000 RBX: ffffffffa61be220 RCX: ffffffffa311056f
[ 356.745516][ T69] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000001
[ 356.745924][ T69] RBP: 0000000000000000 R08: 0000000000000000 R09: fffff5200009ff19
[ 356.746360][ T69] R10: ffffc900004ff8cf R11: 205d393654202020 R12: ffff8880082f2628
[ 356.746862][ T69] R13: ffff8880082f2df8 R14: ffffc900004ffc98 R15: ffff8880082f2bc0
[ 356.747339][ T69] FS: 0000000000000000(0000) GS:ffff888035e00000(0000) knlGS:0000000000000000
[ 356.747882][ T69] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 356.748271][ T69] CR2: 00007f3854c2d30d CR3: 000000002e134002 CR4: 00000000001706f0
[ 356.748745][ T69] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 356.749224][ T69] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 356.749709][ T69] Call Trace:
[ 356.749911][ T69]
[ 356.750076][ T69] ? __warn+0xcd/0x2d0
[ 356.750311][ T69] ? console_trylock+0x61/0xf0
[ 356.750609][ T69] ? sysfs_remove_group+0x101/0x160
[ 356.750951][ T69] ? report_bug+0x291/0x2e0
[ 356.751214][ T69] ? handle_bug+0x3d/0x80
[ 356.751522][ T69] ? exc_invalid_op+0x18/0x50
[ 356.751789][ T69] ? asm_exc_invalid_op+0x1a/0x20
[ 356.752110][ T69] ? desc_read+0x2af/0x440
[ 356.752388][ T69] ? sysfs_remove_group+0x101/0x160
[ 356.752689][ T69] br_dev_delete+0x10d/0x190
[ 356.752960][ T69] br_net_exit_batch_rtnl+0xd6/0x190
[ 356.753309][ T69] cleanup_net+0x499/0xb50
[ 356.753572][ T69] ? __pfx_lock_acquire.part.0+0x10/0x10
[ 356.753883][ T69] ? __pfx_cleanup_net+0x10/0x10
[ 356.754190][ T69] ? lock_acquire+0x1c1/0x220
[ 356.754478][ T69] ? process_one_work+0x714/0x1310
[ 356.754787][ T69] process_one_work+0x78f/0x1310
[ 356.755098][ T69] ? hlock_class+0x4e/0x130
[ 356.755398][ T69] ? __pfx_process_one_work+0x10/0x10
[ 356.755731][ T69] ? assign_work+0x16c/0x240
[ 356.756006][ T69] worker_thread+0x73d/0x1010
[ 356.756292][ T69] ? lockdep_hardirqs_on_prepare.part.0+0x1b1/0x370
[ 356.756683][ T69] ? __pfx_worker_thread+0x10/0x10
[ 356.756950][ T69] ? __pfx_worker_thread+0x10/0x10
[ 356.757224][ T69] kthread+0x292/0x360
[ 356.757437][ T69] ? __pfx_kthread+0x10/0x10
[ 356.757680][ T69] ret_from_fork+0x34/0x70
[ 356.757916][ T69] ? __pfx_kthread+0x10/0x10
[ 356.758167][ T69] ret_from_fork_asm+0x1b/0x30
[ 356.758424][ T69]
[ 356.758588][ T69] irq event stamp: 1754941
[ 356.758820][ T69] hardirqs last enabled at (1754941): [] irqentry_exit+0x3b/0x90
[ 356.759318][ T69] hardirqs last disabled at (1754940): [] __do_softirq+0x670/0x7ff
[ 356.759809][ T69] softirqs last enabled at (1754924): [] br_dev_delete+0xd8/0x190
[ 356.760303][ T69] softirqs last disabled at (1754922): [] br_fdb_delete_by_port+0x36/0x260
[ 356.760923][ T69] ---[ end trace 0000000000000000 ]---
[ 361.251687][ T2684] eth1: renamed from tmp
[ 362.539504][ T2693] eth2: renamed from tmp
# TEST: IPV4 traceroute [ OK ]
#
# Tests passed: 2
# Tests failed: 0
ok 1 selftests: net: traceroute.sh
make[1]: Leaving directory '/home/virtme/testing-3/tools/testing/selftests/net'
make: Leaving directory '/home/virtme/testing-3/tools/testing/selftests'
xx__-> echo $?
0
xx__->