make -C tools/testing/selftests TARGETS=net TEST_PROGS=udpgro_fwd.sh TEST__GEN_PROGS="" run_tests make: Entering directory '/home/virtme/testing-3/tools/testing/selftests' make[1]: Entering directory '/home/virtme/testing-3/tools/testing/selftests/net' make[1]: Nothing to be done for 'all'. make[1]: Leaving directory '/home/virtme/testing-3/tools/testing/selftests/net' make[1]: Entering directory '/home/virtme/testing-3/tools/testing/selftests/net' TAP version 13 1..1 # timeout set to 6000 # selftests: net: udpgro_fwd.sh # IPv4 # No GRO ok # GRO frag list ok # GRO fwd ok # UDP fwd perf udp rx: 4 MB/s 3689 calls/s # udp tx: 9 MB/s 169 calls/s 169 msg/s # udp rx: 10 MB/s 8160 calls/s # udp tx: 9 MB/s 156 calls/s 156 msg/s # udp rx: 8 MB/s 7200 calls/s # UDP GRO fwd perf udp rx: 1 MB/s 1504 calls/s # udp tx: 9 MB/s 155 calls/s 155 msg/s # udp rx: 4 MB/s 3486 calls/s # udp tx: 9 MB/s 162 calls/s 162 msg/s # udp rx: 5 MB/s 4304 calls/s # GRO frag list over UDP tunnel ok [ 1140.927847][ T71] ================================================================== [ 1140.928312][ T71] BUG: KASAN: use-after-free in vxlan_netdevice_event+0x32f/0x340 [vxlan] [ 1140.928765][ T71] Read of size 8 at addr ffff88800a048bf0 by task kworker/u8:1/71 [ 1140.929171][ T71] [ 1140.929298][ T71] CPU: 2 PID: 71 Comm: kworker/u8:1 Not tainted 6.8.0-rc2-virtme #1 [ 1140.929714][ T71] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014 [ 1140.930344][ T71] Workqueue: netns cleanup_net [ 1140.930606][ T71] Call Trace: [ 1140.930787][ T71] [ 1140.930941][ T71] dump_stack_lvl+0x64/0xb0 [ 1140.931185][ T71] print_address_description.constprop.0+0x2c/0x3b0 [ 1140.931528][ T71] ? vxlan_netdevice_event+0x32f/0x340 [vxlan] [ 1140.931862][ T71] print_report+0xb5/0x270 [ 1140.932098][ T71] ? kasan_addr_to_slab+0x4e/0x90 [ 1140.932356][ T71] kasan_report+0xbe/0xf0 [ 1140.932593][ T71] ? vxlan_netdevice_event+0x32f/0x340 [vxlan] [ 1140.932938][ T71] vxlan_netdevice_event+0x32f/0x340 [vxlan] [ 1140.933264][ T71] ? __pfx_vxlan_netdevice_event+0x10/0x10 [vxlan] [ 1140.933625][ T71] ? nft_offload_netdev_event+0x158/0x3b0 [nf_tables] [ 1140.934056][ T71] notifier_call_chain+0x9a/0x290 [ 1140.934392][ T71] unregister_netdevice_many_notify+0x55a/0x1180 [ 1140.934727][ T71] ? mutex_is_locked+0x17/0x50 [ 1140.935006][ T71] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1140.935387][ T71] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1140.935715][ T71] default_device_exit_batch+0x228/0x2c0 [ 1140.936021][ T71] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1140.936344][ T71] ? mutex_is_locked+0x17/0x50 [ 1140.936608][ T71] ? nexthop_net_exit_batch_rtnl+0x83/0x210 [ 1140.936980][ T71] cleanup_net+0x4f3/0xb50 [ 1140.937214][ T71] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1140.937520][ T71] ? __pfx_cleanup_net+0x10/0x10 [ 1140.937798][ T71] ? lock_acquire+0x1c1/0x220 [ 1140.938048][ T71] ? process_one_work+0x714/0x1310 [ 1140.938338][ T71] process_one_work+0x78c/0x1310 [ 1140.938619][ T71] ? hlock_class+0x4e/0x130 [ 1140.938867][ T71] ? __pfx_process_one_work+0x10/0x10 [ 1140.939170][ T71] ? assign_work+0x16c/0x240 [ 1140.939418][ T71] worker_thread+0x73d/0x1010 [ 1140.939669][ T71] ? lockdep_hardirqs_on_prepare.part.0+0x1b1/0x370 [ 1140.940035][ T71] ? __pfx_worker_thread+0x10/0x10 [ 1140.940324][ T71] ? __pfx_worker_thread+0x10/0x10 [ 1140.940591][ T71] kthread+0x28f/0x360 [ 1140.940839][ T71] ? __pfx_kthread+0x10/0x10 [ 1140.941093][ T71] ret_from_fork+0x31/0x70 [ 1140.941331][ T71] ? __pfx_kthread+0x10/0x10 [ 1140.941615][ T71] ret_from_fork_asm+0x1b/0x30 [ 1140.941869][ T71] [ 1140.942053][ T71] [ 1140.942181][ T71] The buggy address belongs to the physical page: [ 1140.942531][ T71] page:ffffea0000281200 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xa048 [ 1140.943065][ T71] flags: 0x80000000000000(node=0|zone=1) [ 1140.943377][ T71] page_type: 0xffffffff() [ 1140.943640][ T71] raw: 0080000000000000 ffffea0000217c08 ffff888035c01c38 0000000000000000 [ 1140.944070][ T71] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 1140.944567][ T71] page dumped because: kasan: bad access detected [ 1140.944900][ T71] [ 1140.945044][ T71] Memory state around the buggy address: [ 1140.945328][ T71] ffff88800a048a80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1140.945759][ T71] ffff88800a048b00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1140.946180][ T71] >ffff88800a048b80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1140.946613][ T71] ^ [ 1140.947025][ T71] ffff88800a048c00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1140.947443][ T71] ffff88800a048c80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1140.947849][ T71] ================================================================== [ 1140.948294][ T71] Disabling lock debugging due to kernel taint [ 1140.966616][ T71] general protection fault, probably for non-canonical address 0xf999959999999999: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 1140.967320][ T71] KASAN: maybe wild-memory-access in range [0xccccccccccccccc8-0xcccccccccccccccf] [ 1140.967850][ T71] CPU: 2 PID: 71 Comm: kworker/u8:1 Tainted: G B 6.8.0-rc2-virtme #1 [ 1140.968352][ T71] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014 [ 1140.969028][ T71] Workqueue: netns cleanup_net [ 1140.969285][ T71] RIP: 0010:vxlan_netdevice_event+0x19e/0x340 [vxlan] [ 1140.969670][ T71] Code: 00 00 00 48 b9 00 00 00 00 00 fc ff df 49 89 c0 48 89 44 24 08 49 c1 e8 03 4d 8d 24 08 eb 2c 48 8d 53 30 48 89 d0 48 c1 e8 03 <80> 3c 08 00 0f 85 e0 00 00 00 48 8b 43 30 49 89 dd 48 83 e8 30 49 [ 1140.970760][ T71] RSP: 0018:ffffc9000051f980 EFLAGS: 00010a07 [ 1140.971123][ T71] RAX: 1999999999999999 RBX: cccccccccccccc9c RCX: dffffc0000000000 [ 1140.971562][ T71] RDX: cccccccccccccccc RSI: 0000000000000004 RDI: ffff88800a048c44 [ 1140.971992][ T71] RBP: 1ffff920000a3f33 R08: 1ffff110014a421a R09: ffffc9000051f9b8 [ 1140.972410][ T71] R10: ffffffff9bb51397 R11: ffff88800a521000 R12: ffffed10014a421a [ 1140.972821][ T71] R13: ffff88800a048bc0 R14: ffff88800af11000 R15: ffff88800a521000 [ 1140.973235][ T71] FS: 0000000000000000(0000) GS:ffff888035a00000(0000) knlGS:0000000000000000 [ 1140.973695][ T71] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1140.974044][ T71] CR2: 00007f3f08071000 CR3: 000000001e534004 CR4: 0000000000770ef0 [ 1140.974473][ T71] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1140.974885][ T71] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1140.975310][ T71] PKRU: 55555554 [ 1140.975526][ T71] Call Trace: [ 1140.975703][ T71] [ 1140.975883][ T71] ? die_addr+0x41/0xa0 [ 1140.976128][ T71] ? exc_general_protection+0x149/0x220 [ 1140.976437][ T71] ? asm_exc_general_protection+0x26/0x30 [ 1140.976773][ T71] ? vxlan_netdevice_event+0x19e/0x340 [vxlan] [ 1140.977170][ T71] ? __pfx_vxlan_netdevice_event+0x10/0x10 [vxlan] [ 1140.977521][ T71] ? nft_offload_netdev_event+0x158/0x3b0 [nf_tables] [ 1140.977915][ T71] ? addrconf_notify+0xd1/0xd40 [ 1140.978176][ T71] notifier_call_chain+0x9a/0x290 [ 1140.978444][ T71] unregister_netdevice_many_notify+0x55a/0x1180 [ 1140.978788][ T71] ? mutex_is_locked+0x17/0x50 [ 1140.979041][ T71] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1140.979404][ T71] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1140.979753][ T71] default_device_exit_batch+0x228/0x2c0 [ 1140.980060][ T71] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1140.980372][ T71] ? mutex_is_locked+0x17/0x50 [ 1140.980622][ T71] ? nexthop_net_exit_batch_rtnl+0x83/0x210 [ 1140.980943][ T71] cleanup_net+0x4f3/0xb50 [ 1140.981218][ T71] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1140.981522][ T71] ? __pfx_cleanup_net+0x10/0x10 [ 1140.981780][ T71] ? lock_acquire+0x1c1/0x220 [ 1140.982037][ T71] ? process_one_work+0x714/0x1310 [ 1140.982331][ T71] process_one_work+0x78c/0x1310 [ 1140.982593][ T71] ? hlock_class+0x4e/0x130 [ 1140.982825][ T71] ? __pfx_process_one_work+0x10/0x10 [ 1140.983113][ T71] ? assign_work+0x16c/0x240 [ 1140.983353][ T71] worker_thread+0x73d/0x1010 [ 1140.983627][ T71] ? lockdep_hardirqs_on_prepare.part.0+0x1b1/0x370 [ 1140.984134][ T71] ? __pfx_worker_thread+0x10/0x10 [ 1140.984548][ T71] ? __pfx_worker_thread+0x10/0x10 [ 1140.984944][ T71] kthread+0x28f/0x360 [ 1140.985279][ T71] ? __pfx_kthread+0x10/0x10 [ 1140.985658][ T71] ret_from_fork+0x31/0x70 [ 1140.986043][ T71] ? __pfx_kthread+0x10/0x10 [ 1140.986420][ T71] ret_from_fork_asm+0x1b/0x30 [ 1140.986828][ T71] [ 1140.987114][ T71] Modules linked in: vxlan ip6_udp_tunnel udp_tunnel nft_chain_nat xt_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 sha1_generic xfrm_user xt_policy nft_compat nf_tables libcrc32c [ 1140.988860][ T71] ---[ end trace 0000000000000000 ]--- [ 1140.989295][ T71] RIP: 0010:vxlan_netdevice_event+0x19e/0x340 [vxlan] [ 1140.989784][ T71] Code: 00 00 00 48 b9 00 00 00 00 00 fc ff df 49 89 c0 48 89 44 24 08 49 c1 e8 03 4d 8d 24 08 eb 2c 48 8d 53 30 48 89 d0 48 c1 e8 03 <80> 3c 08 00 0f 85 e0 00 00 00 48 8b 43 30 49 89 dd 48 83 e8 30 49 [ 1140.990924][ T71] RSP: 0018:ffffc9000051f980 EFLAGS: 00010a07 [ 1140.991267][ T71] RAX: 1999999999999999 RBX: cccccccccccccc9c RCX: dffffc0000000000 [ 1140.991751][ T71] RDX: cccccccccccccccc RSI: 0000000000000004 RDI: ffff88800a048c44 [ 1140.992160][ T71] RBP: 1ffff920000a3f33 R08: 1ffff110014a421a R09: ffffc9000051f9b8 [ 1140.992601][ T71] R10: ffffffff9bb51397 R11: ffff88800a521000 R12: ffffed10014a421a [ 1140.993132][ T71] R13: ffff88800a048bc0 R14: ffff88800af11000 R15: ffff88800a521000 [ 1140.993603][ T71] FS: 0000000000000000(0000) GS:ffff888035a00000(0000) knlGS:0000000000000000 [ 1140.994083][ T71] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1140.994558][ T71] CR2: 00007f3f08071000 CR3: 000000001e534004 CR4: 0000000000770ef0 [ 1140.994994][ T71] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1140.995420][ T71] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1140.995854][ T71] PKRU: 55555554 [ 1140.996056][ T71] Kernel panic - not syncing: Fatal exception [ 1140.996470][ T71] Kernel Offset: 0x16200000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 1140.997120][ T71] ---[ end Kernel panic - not syncing: Fatal exception ]--- WAIT TIMEOUT stdout Ctrl-C stdout Ctrl-C stdout WAIT TIMEOUT stdout