Re: [PATCH net-next v10 00/10] ipv6: Address ext hdr DoS vulnerabilities

Jakub Kicinski
2026-05-04T23:44:49Z

On Mon, 4 May 2026 11:51:12 -0700 Tom Herbert wrote:
> --- Testing
>
> Add selftest eh_limits.sh. Tested by running:
>
> $ sudo ./eh_limits.sh
> TEST: EH-limits - default sysctls [ OK ]
> TEST: EH-limits - modified sysctls [ OK ]
>
> Tests passed: 2
> Tests failed: 0

The python files need to be in TEST_FILES not TEST_PROGS
(AFAIU they are helpers not tests themselves).
They must pass ruff check and pylint --disable=R cleanly

The bash currently passes but prints a FAIL making our CI mark it as
FAIL:

# selftests: net: eh_limits.sh
# 2.50 [+2.50] WARNING: Could not retrieve the OS's nameserver !
# 4.54 [+2.04] WARNING: Could not retrieve the OS's nameserver !
# 6.29 [+1.74] TEST: EH-limits - default sysctls [ OK ]
# 6.54 [+0.25] WARNING: Could not retrieve the OS's nameserver !
# 7.90 [+1.36] FAIL: Expected to receive for Many EH OOO <<<< here <<<
# 8.00 [+0.10] TEST: EH-limits - modified sysctls [ OK ]
# 8.02 [+0.02]
# 8.02 [+0.00] Tests passed: 2
# 8.02 [+0.00] Tests failed: 0

Definitely does not look like your results..
Note that we run the tests with

make -C tools/testing/selftests run_tests TEST_PROGS="eh_limits.sh" TEST_GEN_PROGS=""