make -C tools/testing/selftests TARGETS=net TEST_PROGS=l2_tos_ttl_inherit..sh TEST_GEN_PROGS="" run_tests make: Entering directory '/home/virtme/testing-3/tools/testing/selftests' make[1]: Entering directory '/home/virtme/testing-3/tools/testing/selftests/net' make[1]: Nothing to be done for 'all'. make[1]: Leaving directory '/home/virtme/testing-3/tools/testing/selftests/net' make[1]: Entering directory '/home/virtme/testing-3/tools/testing/selftests/net' TAP version 13 1..1 # timeout set to 6000 # selftests: net: l2_tos_ttl_inherit.sh # ┌────────┬───────┬───────┬──────────────┬──────────────┬───────┬────────┐ [ 24.302070][ T235] gre: GRE over IPv4 demultiplexor driver # ├────────┼───────┼───────┼──────────────┼──────────────┼──────┼────────┤ # │ Type │ outer | inner │ tos │ ttl │ vlan │ result │ # ├────────┼───────┼───────┼──────────────┼──────────────┼───────┼────────┤ # │ gre │ 4 │ 4 │ inherit 0x88 │ inherit 68 │ false │[ 25.408560][ T250] ip (250) used greatest stack depth: 24192 bytes left [ 26.809725][ T259] ip_gre: GRE over IPv4 tunneling driver OK │ # │ gre │ 4 │ 4 │ inherit 0x10 │ inherit 71 │ true │ OK │ # │ gre │ 4 │ 4 │ fixed 0x84 │ fixed 191 │ false │ OK │ # │ gre │ 4 │ 4 │ fixed 0x64 │ fixed 131 │ true │ OK │ # ├────────┼───────┼───────┼──────────────┼──────────────┼───────┼────────┤ # │ gre │ 4 │ 6 │ inherit 0xf0 │ inherit 148 │ false │ OK │ # │ gre │ 4 │ 6 │ inherit 0x8c │ inherit 154 │ true │ OK │ # │ gre │ 4 │ 6 │ fixed 0x74 │ fixed 60 │ false │ OK │ # │ gre │ 4 │ 6 │ fixed 0xe0 │ fixed 102 │ true │ OK │ # ├────────┼───────┼───────┼──────────────┼─────────────┼───────┼────────┤ # │ gre │ 4 │ other │ inherit 0x24 │ inherit 205 │ false │ OK │ # │ gre │ 4 │ other │ inherit 0x10 │ inherit 207 │ true │ OK │ # │ gre │ 4 │ other │ fixed 0x4c │ fixed 94 │ false │ OK │ # │ gre │ 4 │ other │ fixed 0xa0 │ fixed 166 │ true │ OK │ # ├────────┼───────┼───────┼──────────────┼──────────────┼───────┼────────┤ # │ Type │ outer | inner │ tos │ ttl │ vlan │ result │ # ├────────┼───────┼───────┼──────────────┼──────────────┼───────┼────────┤ # │ gre │ 6 │ 4 │ inherit 0x48 │ inherit 16 │ false │[ 98.671643][ T839] ip6_gre: GRE over IPv6 tunneling driver OK │ # │ gre │ 6 │ 4 │ inherit 0x3c │ inherit 115 │ true │ OK │ # │ gre │ 6 │ 4 │ fixed 0x3c │ fixed 164 │ false │ OK │ # │ gre │ 6 │ 4 │ fixed 0xa8 │ fixed 88 │ true │ OK │ # ├────────┼───────┼───────┼──────────────┼──────────────┼───────┼────────┤ # │ gre │ 6 │ 6 │ inherit 0x14 │ inherit 115 │ false │ OK │ # │ gre │ 6 │ 6 │ inherit 0x94 │ inherit 103 │ true │ OK │ # │ gre │ 6 │ 6 │ fixed 0x58 │ fixed 150 false │ OK │ # │ gre │ 6 │ 6 │ fixed 0xe0 │ fixed 196 │ true │ OK │ # ├────────┼───────┼───────┼──────────────┼──────────────┼───────┼────────┤ # │ gre │ 6 │ other │ inherit 0x90 │ inherit 211 │ false │ OK │ [ 147.977446][ C3] ip6_tunnel: tep0 xmit: Local address not yet configured! # │ gre │ 6 │ other │ inherit 0xdc │ inherit 101 │ true │[ 150.558410][ T1265] ip (1265) used greatest stack depth: 24016 bytes left OK │ [ 154.569347][ C2] ip6_tunnel: tep0 xmit: Local address not yet configured! # │ gre │ 6 │ other │ fixed 0x68 │ fixed 115 │ false │ OK │ [ 160.329314][ C3] ip6_tunnel: tep0 xmit: Local address not yet configured! # │ gre │ 6 │ other │ fixed 0x64 │ fixed 157 │ true │ OK │ [ 167.113412][ C3] ip6_tunnel: tep0 xmit: Local address not yet configured! # ├────────┼───────┼───────┼──────────────┼──────────────┼───────┼────────┤ # │ Type │ outer | inner │ tos │ ttl │ vlan │ result │ # ├────────┼───────┼───────┼──────────────┼──────────────┼───────┼────────┤ # │ vxlan │ 4 │ 4 │ inherit 0x10 │ inherit 225 │ false │ OK │ [ 172.183369][ T11] ================================================================== [ 172.183850][ T11] BUG: KASAN: use-after-free in vxlan_netdevice_event+0x32f/0x340 [vxlan] [ 172.184320][ T11] Read of size 8 at addr ffff888003cd0bf0 by task kworker/u8:0/11 [ 172.184731][ T11] [ 172.184854][ T11] CPU: 1 PID: 11 Comm: kworker/u8:0 Not tainted 6.8.0-rc2-virtme #1 [ 172.185291][ T11] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014 [ 172.185925][ T11] Workqueue: netns cleanup_net [ 172.186194][ T11] Call Trace: [ 172.186379][ T11] [ 172.186549][ T11] dump_stack_lvl+0x64/0xb0 [ 172.186787][ T11] print_address_description.constprop.0+0x2c/0x3b0 [ 172.187185][ T11] ? vxlan_netdevice_event+0x32f/0x340 [vxlan] [ 172.187560][ T11] print_report+0xb5/0x270 [ 172.187811][ T11] ? kasan_addr_to_slab+0x4e/0x90 [ 172.188108][ T11] kasan_report+0xbe/0xf0 [ 172.188359][ T11] ? vxlan_netdevice_event+0x32f/0x340 [vxlan] [ 172.188692][ T11] vxlan_netdevice_event+0x32f/0x340 [vxlan] [ 172.189062][ T11] ? __pfx_vxlan_netdevice_event+0x10/0x10 [vxlan] [ 172.189521][ T11] ? netconsole_netdev_event+0x1b4/0x300 [ 172.189875][ T11] notifier_call_chain+0x9a/0x290 [ 172.190188][ T11] unregister_netdevice_many_notify+0x55a/0x1180 [ 172.190541][ T11] ? mutex_is_locked+0x17/0x50 [ 172.190828][ T11] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 172.191210][ T11] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 172.191543][ T11] default_device_exit_batch+0x228/0x2c0 [ 172.191861][ T11] ? __pfx_default_device_exit_batch+0x10/0x10 [ 172.192221][ T11] ? mutex_is_locked+0x17/0x50 [ 172.192484][ T11] ? nexthop_net_exit_batch_rtnl+0x83/0x210 [ 172.192795][ T11] cleanup_net+0x4f3/0xb50 [ 172.193047][ T11] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 172.193375][ T11] ? __pfx_cleanup_net+0x10/0x10 [ 172.193628][ T11] ? lock_acquire+0x1c1/0x220 [ 172.193975][ T11] ? process_one_work+0x714/0x1310 [ 172.194402][ T11] process_one_work+0x78c/0x1310 [ 172.194807][ T11] ? hlock_class+0x4e/0x130 [ 172.195158][ T11] ? __pfx_process_one_work+0x10/0x10 [ 172.195557][ T11] ? assign_work+0x16c/0x240 [ 172.195928][ T11] worker_thread+0x73d/0x1010 [ 172.196330][ T11] ? __pfx_worker_thread+0x10/0x10 [ 172.196745][ T11] kthread+0x28f/0x360 [ 172.197080][ T11] ? __pfx_kthread+0x10/0x10 [ 172.197464][ T11] ret_from_fork+0x31/0x70 [ 172.197806][ T11] ? __pfx_kthread+0x10/0x10 [ 172.198185][ T11] ret_from_fork_asm+0x1b/0x30 [ 172.198562][ T11] [ 172.198820][ T11] [ 172.198995][ T11] The buggy address belongs to the physical page: [ 172.199493][ T11] page:ffffea00000f3400 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3cd0 [ 172.200265][ T11] flags: 0x80000000000000(node=0|zone=1) [ 172.200694][ T11] page_type: 0xffffffff() [ 172.201039][ T11] raw: 0080000000000000 ffffea0000121408 ffff888035801c38 0000000000000000 [ 172.201671][ T11] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 172.202301][ T11] page dumped because: kasan: bad access detected [ 172.202781][ T11] [ 172.202970][ T11] Memory state around the buggy address: [ 172.203380][ T11] ffff888003cd0a80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 172.203941][ T11] ffff888003cd0b00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 172.204525][ T11] >ffff888003cd0b80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 172.205097][ T11] ^ [ 172.205636][ T11] ffff888003cd0c00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 172.206199][ T11] ffff888003cd0c80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 172.206807][ T11] ================================================================== [ 172.207453][ T11] Disabling lock debugging due to kernel taint # │ vxlan │ 4 │ 4 │ inherit 0x5c │ inherit 142 │ true │ OK │ # │ vxlan │ 4 │ 4 │ fixed 0x78 │ fixed 222 │ false │ OK │ [ 181.047031][ T11] general protection fault, probably for non-canonical address 0xed6d696d6d6d6d6d: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 181.047913][ T11] KASAN: maybe wild-memory-access in range [0x6b6b6b6b6b6b6b68-0x6b6b6b6b6b6b6b6f] [ 181.048575][ T11] CPU: 1 PID: 11 Comm: kworker/u8:0 Tainted: G B 6.8.0-rc2-virtme #1 [ 181.049220][ T11] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014 [ 181.050048][ T11] Workqueue: netns cleanup_net [ 181.050380][ T11] RIP: 0010:vxlan_netdevice_event+0x19e/0x340 [vxlan] [ 181.050860][ T11] Code: 00 00 00 48 b9 00 00 00 00 00 fc ff df 49 89 c0 48 89 44 24 08 49 c1 e8 03 4d 8d 24 08 eb 2c 48 8d 53 30 48 89 d0 48 c1 e8 03 <80> 3c 08 00 0f 85 e0 00 00 00 48 8b 43 30 49 89 dd 48 83 e8 30 49 [ 181.052210][ T11] RSP: 0018:ffffc900000bf980 EFLAGS: 00010202 [ 181.052598][ T11] RAX: 0d6d6d6d6d6d6d6d RBX: 6b6b6b6b6b6b6b3b RCX: dffffc0000000000 [ 181.053146][ T11] RDX: 6b6b6b6b6b6b6b6b RSI: 0000000000000004 RDI: ffff8880093e8c44 [ 181.053701][ T11] RBP: 1ffff92000017f33 R08: 1ffff1100120e21a R09: ffffc900000bf9b8 [ 181.054244][ T11] R10: ffffffff89d51397 R11: ffff888009071000 R12: ffffed100120e21a [ 181.054806][ T11] R13: ffff8880093e8bc0 R14: ffff888006b81000 R15: ffff888009071000 [ 181.055329][ T11] FS: 0000000000000000(0000) GS:ffff888035600000(0000) knlGS:0000000000000000 [ 181.055895][ T11] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 181.056325][ T11] CR2: 00007f7328fa30e0 CR3: 00000000080a2001 CR4: 0000000000770ef0 [ 181.056830][ T11] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 181.057333][ T11] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 181.057836][ T11] PKRU: 55555554 [ 181.058065][ T11] Call Trace: [ 181.058280][ T11] [ 181.058471][ T11] ? die_addr+0x41/0xa0 [ 181.058744][ T11] ? exc_general_protection+0x149/0x220 [ 181.059106][ T11] ? asm_exc_general_protection+0x26/0x30 [ 181.059479][ T11] ? vxlan_netdevice_event+0x19e/0x340 [vxlan] [ 181.059892][ T11] ? __pfx_vxlan_netdevice_event+0x10/0x10 [vxlan] [ 181.060362][ T11] ? netconsole_netdev_event+0x1b4/0x300 [ 181.060757][ T11] ? addrconf_notify+0xd1/0xd40 [ 181.061096][ T11] notifier_call_chain+0x9a/0x290 [ 181.061457][ T11] unregister_netdevice_many_notify+0x55a/0x1180 [ 181.061903][ T11] ? mutex_is_locked+0x17/0x50 [ 181.062237][ T11] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 181.062697][ T11] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 181.063120][ T11] ? __wake_up+0x44/0x60 [ 181.063429][ T11] default_device_exit_batch+0x228/0x2c0 [ 181.063814][ T11] ? __pfx_default_device_exit_batch+0x10/0x10 [ 181.064253][ T11] ? mutex_is_locked+0x17/0x50 [ 181.064568][ T11] ? nexthop_net_exit_batch_rtnl+0x83/0x210 [ 181.064992][ T11] cleanup_net+0x4f3/0xb50 [ 181.065292][ T11] ? lock_acquire+0x1c1/0x220 [ 181.065613][ T11] ? __pfx_cleanup_net+0x10/0x10 [ 181.065951][ T11] ? lock_acquire+0x1c1/0x220 [ 181.066288][ T11] ? process_one_work+0x714/0x1310 [ 181.066642][ T11] process_one_work+0x78c/0x1310 [ 181.066994][ T11] ? hlock_class+0x4e/0x130 [ 181.067318][ T11] ? __pfx_process_one_work+0x10/0x10 [ 181.067685][ T11] ? assign_work+0x16c/0x240 [ 181.067993][ T11] worker_thread+0x73d/0x1010 [ 181.068331][ T11] ? __pfx_worker_thread+0x10/0x10 [ 181.068684][ T11] kthread+0x28f/0x360 [ 181.068955][ T11] ? __pfx_kthread+0x10/0x10 [ 181.069280][ T11] ret_from_fork+0x31/0x70 [ 181.069594][ T11] ? __pfx_kthread+0x10/0x10 [ 181.069917][ T11] ret_from_fork_asm+0x1b/0x30 [ 181.070266][ T11] [ 181.070462][ T11] Modules linked in: vxlan ip6_udp_tunnel udp_tunnel ip6_gre ip_gre gre [ 181.071067][ T11] ---[ end trace 0000000000000000 ]--- [ 181.071455][ T11] RIP: 0010:vxlan_netdevice_event+0x19e/0x340 [vxlan] [ 181.071970][ T11] Code: 00 00 00 48 b9 00 00 00 00 00 fc ff df 49 89 c0 48 89 44 24 08 49 c1 e8 03 4d 8d 24 08 eb 2c 48 8d 53 30 48 89 d0 48 c1 e8 03 <80> 3c 08 00 0f 85 e0 00 00 00 48 8b 43 30 49 89 dd 48 83 e8 30 49 [ 181.073230][ T11] RSP: 0018:ffffc900000bf980 EFLAGS: 00010202 [ 181.073621][ T11] RAX: 0d6d6d6d6d6d6d6d RBX: 6b6b6b6b6b6b6b3b RCX: dffffc0000000000 [ 181.074129][ T11] RDX: 6b6b6b6b6b6b6b6b RSI: 0000000000000004 RDI: ffff8880093e8c44 [ 181.074641][ T11] RBP: 1ffff92000017f33 R08: 1ffff1100120e21a R09: ffffc900000bf9b8 [ 181.075146][ T11] R10: ffffffff89d51397 R11: ffff888009071000 R12: ffffed100120e21a [ 181.075660][ T11] R13: ffff8880093e8bc0 R14: ffff888006b81000 R15: ffff888009071000 [ 181.076173][ T11] FS: 0000000000000000(0000) GS:ffff888035600000(0000) knlGS:0000000000000000 [ 181.076748][ T11] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 181.077220][ T11] CR2: 00007f7328fa30e0 CR3: 00000000080a2001 CR4: 0000000000770ef0 [ 181.077731][ T11] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 181.078306][ T11] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 181.078839][ T11] PKRU: 55555554 [ 181.079080][ T11] Kernel panic - not syncing: Fatal exception [ 181.079598][ T11] Kernel Offset: 0x4400000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 181.080325][ T11] ---[ end Kernel panic - not syncing: Fatal exception ]--- WAIT TIMEOUT stdout Ctrl-C stdout Ctrl-C stdout WAIT TIMEOUT stdout