Re: [PATCH net-next v10 00/10] ipv6: Address ext hdr DoS vulnerabilities

[Jakub Kicinski <kuba@kernel.org>]

On Mon,  4 May 2026 11:51:12 -0700 Tom Herbert wrote:
> --- Testing
> 
> Add selftest eh_limits.sh. Tested by running:
> 
> $ sudo ./eh_limits.sh
>     TEST: EH-limits - default sysctls                            [ OK ]
>     TEST: EH-limits - modified sysctls                           [ OK ]
> 
> Tests passed:   2
> Tests failed:   0


The python files need to be in TEST_FILES not TEST_PROGS
(AFAIU they are helpers not tests themselves).
They must pass ruff check and pylint --disable=R cleanly

The bash currently passes but prints a FAIL making our CI mark it as
FAIL:

# selftests: net: eh_limits.sh
# 2.50 [+2.50] WARNING: Could not retrieve the OS's nameserver !
# 4.54 [+2.04] WARNING: Could not retrieve the OS's nameserver !
# 6.29 [+1.74]     TEST: EH-limits - default sysctls                                   [ OK ]
# 6.54 [+0.25] WARNING: Could not retrieve the OS's nameserver !
# 7.90 [+1.36] FAIL: Expected to receive for Many EH OOO                  <<<< here <<<
# 8.00 [+0.10]     TEST: EH-limits - modified sysctls                                  [ OK ]
# 8.02 [+0.02] 
# 8.02 [+0.00] Tests passed:   2
# 8.02 [+0.00] Tests failed:   0

Definitely does not look like your results..
Note that we run the tests with

	make -C tools/testing/selftests run_tests TEST_PROGS="eh_limits.sh" TEST_GEN_PROGS=""