netdev - Re: [PATCH v2 net-next 0/7] netfilter: updates for net-next

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <CANn89iKUV07+84PVq0cHe3vMaSGNTQzhq9=xetg+_P2DmsPmQQ@mail.gmail.com>
Date: Fri, 30 Jan 2026 21:23:23 +0100
From: Eric Dumazet <edumazet@...gle.com>
To: Florian Westphal <fw@...len.de>
Cc: Jakub Kicinski <kuba@...nel.org>, netdev@...r.kernel.org, 
	Paolo Abeni <pabeni@...hat.com>, "David S. Miller" <davem@...emloft.net>, netfilter-devel@...r.kernel.org, 
	pablo@...filter.org
Subject: Re: [PATCH v2 net-next 0/7] netfilter: updates for net-next

On Fri, Jan 30, 2026 at 8:09 PM Florian Westphal <fw@...len.de> wrote:
>
> Jakub Kicinski <kuba@...nel.org> wrote:
> > On Thu, 29 Jan 2026 11:54:20 +0100 Florian Westphal wrote:
> > > v2: discard buggy nfqueue patch, no other changes.
> > >
> > > The following patchset contains Netfilter updates for *net-next*:
> > >
> > > Patches 1 to 4 add IP6IP6 tunneling acceleration to the flowtable
> > > infrastructure.  Patch 5 extends test coverage for this.
> > > From Lorenzo Bianconi.
> > >
> > > Patch 6 removes a duplicated helper from xt_time extension, we can
> > > use an existing helper for this, from Jinjie Ruan.
> > >
> > > Patch 7 adds an rhashtable to nfnetink_queue to speed up out-of-order
> > > verdict processing.  Before this list walk was required due to in-order
> > > design assumption.
> >
> > Hi Florian, some more KASAN today:
> >
> > https://netdev-ctrl.bots.linux.dev/logs/vmksft/nf-dbg/results/496421/vm-crash-thr0-0
>
> > [ 1144.170509][   T12] ==================================================================
> > [ 1144.170759][   T12] BUG: KASAN: slab-use-after-free in idr_for_each+0x1c1/0x1f0
> > [ 1144.170922][   T12] Read of size 8 at addr ff11000012a16a70 by task kworker/u16:0/12
> > [ 1144.171079][   T12]
> > [ 1144.171133][   T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u16:0 Not tainted 6.19.0-rc7-virtme #1 PREEMPT(full)
> > [ 1144.171137][   T12] Hardware name: Bochs Bochs, BIOS Bochs 01/01/2011
> > [ 1144.171139][   T12] Workqueue: netns cleanup_net
> > [ 1144.171145][   T12] Call Trace:
> > [ 1144.171147][   T12]  <TASK>
> > [ 1144.171149][   T12]  dump_stack_lvl+0x6f/0xa0
> > [ 1144.171154][   T12]  print_address_description.constprop.0+0x6e/0x300
> > [ 1144.171159][   T12]  print_report+0xfc/0x1fb
> > [ 1144.171161][   T12]  ? idr_for_each+0x1c1/0x1f0
> > [ 1144.171163][   T12]  ? __virt_addr_valid+0x1da/0x430
> > [ 1144.171167][   T12]  ? idr_for_each+0x1c1/0x1f0
> > [ 1144.171168][   T12]  kasan_report+0xe8/0x120
>
> Sigh.  Doesn't ring a bell, I will have a look.

Could this be related to "netns: optimize netns cleaning by batching
unhash_nsid calls" ?