// SPDX-License-Identifier: GPL-2.0/* Copyright 2026 Google LLC */ #include <linux/if.h>#include <linux/in6.h>#include <linux/mroute.h>#include <linux/mroute6.h>#include <linux/netlink.h>#include <linux/rtnetlink.h>#include <linux/socket.h>#include <sched.h>#include <sys/ioctl.h>#include <sys/socket.h> #include "kselftest_harness.h" FIXTURE(ipmr){	int netlink_sk;	int raw_sk;	int veth_ifindex;	union {		struct vifctl vif;		struct mif6ctl vif6;	};	union {		struct mfcctl mfc;		struct mf6cctl mfc6;	};}; FIXTURE_VARIANT(ipmr){	int family;	int protocol;	int level;	int rtm_family;	int opts[MRT_MAX - MRT_BASE + 1];	int flush_flags;	int vif_size;	char vif_check_cmd_pimreg[64];	char vif_check_cmd_veth[64];	int mfc_size;	char mfc_check_cmd[1024];}; FIXTURE_VARIANT_ADD(ipmr, ipv4){	.family = AF_INET,	.protocol = IPPROTO_IGMP,	.level = IPPROTO_IP,	.rtm_family = RTNL_FAMILY_IPMR,	.opts = {		MRT_INIT,		MRT_DONE,		MRT_ADD_VIF,		MRT_DEL_VIF,		MRT_ADD_MFC,		MRT_DEL_MFC,		MRT_VERSION,		MRT_ASSERT,		MRT_PIM,		MRT_TABLE,		MRT_ADD_MFC_PROXY,		MRT_DEL_MFC_PROXY,		MRT_FLUSH,	},	.flush_flags = MRT_FLUSH_MFC | MRT_FLUSH_MFC_STATIC |		MRT_FLUSH_VIFS | MRT_FLUSH_VIFS_STATIC,	.vif_size = sizeof(struct vifctl),	.vif_check_cmd_pimreg = "cat /proc/net/ip_mr_vif | grep -q pimreg",	.vif_check_cmd_veth = "cat /proc/net/ip_mr_vif | grep -q veth",	.mfc_size = sizeof(struct mfcctl),	.mfc_check_cmd = "cat /proc/net/ip_mr_cache | grep -q '00000000 00000000'",}; FIXTURE_VARIANT_ADD(ipmr, ipv6){	.family = AF_INET6,	.protocol = IPPROTO_ICMPV6,	.level = IPPROTO_IPV6,	.rtm_family = RTNL_FAMILY_IP6MR,	.opts = {		MRT6_INIT,		MRT6_DONE,		MRT6_ADD_MIF,		MRT6_DEL_MIF,		MRT6_ADD_MFC,		MRT6_DEL_MFC,		MRT6_VERSION,		MRT6_ASSERT,		MRT6_PIM,		MRT6_TABLE,		MRT6_ADD_MFC_PROXY,		MRT6_DEL_MFC_PROXY,		MRT6_FLUSH,	},	.flush_flags = MRT6_FLUSH_MFC | MRT6_FLUSH_MFC_STATIC |		MRT6_FLUSH_MIFS | MRT6_FLUSH_MIFS_STATIC,	.vif_size = sizeof(struct mif6ctl),	.vif_check_cmd_pimreg = "cat /proc/net/ip6_mr_vif | grep -q pim6reg",	.vif_check_cmd_veth = "cat /proc/net/ip6_mr_vif | grep -q veth",	.mfc_size = sizeof(struct mf6cctl),	.mfc_check_cmd = "cat /proc/net/ip6_mr_cache | "		"grep -q '0000:0000:0000:0000:0000:0000:0000:0000 0000:0000:0000:0000:0000:0000:0000:0000'",}; struct mfc_attr {	int table;	__u32 origin;	__u32 group;	int ifindex;	bool proxy;}; static struct rtattr *nl_add_rtattr(struct nlmsghdr *nlmsg, struct rtattr *rta,				    int type, const void *data, int len){	int unused = 0; 	rta->rta_type = type;	rta->rta_len = RTA_LENGTH(len);	memcpy(RTA_DATA(rta), data, len); 	nlmsg->nlmsg_len += NLMSG_ALIGN(rta->rta_len); 	return RTA_NEXT(rta, unused);} static int nl_sendmsg_mfc(struct __test_metadata *_metadata,			  FIXTURE_DATA(ipmr) *self,			  const FIXTURE_VARIANT(ipmr) *variant,			  __u16 nlmsg_type, struct mfc_attr *mfc_attr){	struct {		struct nlmsghdr nlmsg;		struct rtmsg rtm;		char buf[4096];	} req = {		.nlmsg = {			.nlmsg_len = NLMSG_LENGTH(sizeof(req.rtm)),			/* ipmr does not care about NLM_F_CREATE and NLM_F_EXCL ... */			.nlmsg_flags = NLM_F_REQUEST | NLM_F_ACK,			.nlmsg_type = nlmsg_type,		},		.rtm = {			/* hard requirements in rtm_to_ipmr_mfcc() */			.rtm_family = variant->rtm_family,			.rtm_dst_len = 32,			.rtm_type = RTN_MULTICAST,			.rtm_scope = RT_SCOPE_UNIVERSE,			.rtm_protocol = RTPROT_MROUTED,		},	};	struct nlmsghdr *nlmsg = &req.nlmsg;	struct nlmsgerr *errmsg;	struct rtattr *rta;	int err; 	rta = (struct rtattr *)&req.buf;	rta = nl_add_rtattr(nlmsg, rta, RTA_TABLE, &mfc_attr->table, sizeof(mfc_attr->table));	rta = nl_add_rtattr(nlmsg, rta, RTA_SRC, &mfc_attr->origin, sizeof(mfc_attr->origin));	rta = nl_add_rtattr(nlmsg, rta, RTA_DST, &mfc_attr->group, sizeof(mfc_attr->group));	if (mfc_attr->ifindex)		rta = nl_add_rtattr(nlmsg, rta, RTA_IIF, &mfc_attr->ifindex, sizeof(mfc_attr->ifindex));	if (mfc_attr->proxy)		rta = nl_add_rtattr(nlmsg, rta, RTA_PREFSRC, NULL, 0); 	err = send(self->netlink_sk, &req, req.nlmsg.nlmsg_len, 0);	ASSERT_EQ(err, req.nlmsg.nlmsg_len); 	memset(&req, 0, sizeof(req)); 	err = recv(self->netlink_sk, &req, sizeof(req), 0);	ASSERT_TRUE(NLMSG_OK(nlmsg, err));	ASSERT_EQ(NLMSG_ERROR, nlmsg->nlmsg_type); 	errmsg = (struct nlmsgerr *)NLMSG_DATA(nlmsg);	return errmsg->error;} FIXTURE_SETUP(ipmr){	struct ifreq ifr = {		.ifr_name = "veth0",	};	int err; 	err = unshare(CLONE_NEWNET);	ASSERT_EQ(0, err); 	self->netlink_sk = socket(AF_NETLINK, SOCK_RAW, NETLINK_ROUTE);	ASSERT_LE(0, self->netlink_sk); 	self->raw_sk = socket(variant->family, SOCK_RAW, variant->protocol);	ASSERT_LT(0, self->raw_sk); 	err = system("ip link add veth0 type veth peer veth1");	ASSERT_EQ(0, err); 	err = ioctl(self->raw_sk, SIOCGIFINDEX, &ifr);	ASSERT_EQ(0, err); 	self->veth_ifindex = ifr.ifr_ifindex; 	if (variant->family == AF_INET) {		self->vif = (struct vifctl){			.vifc_flags = VIFF_USE_IFINDEX,			.vifc_lcl_ifindex = self->veth_ifindex,		};	} else {		self->vif6 = (struct mif6ctl){			.mif6c_flags = 0,			.mif6c_pifi = self->veth_ifindex,		};	}} FIXTURE_TEARDOWN(ipmr){	close(self->raw_sk);	close(self->netlink_sk);} TEST_F(ipmr, mrt_init){	int err, val = 0;  /* any value is ok, but size must be int for MRT_INIT. */ 	err = setsockopt(self->raw_sk,			 variant->level, variant->opts[MRT_INIT - MRT_BASE],			 &val,  sizeof(val));	ASSERT_EQ(0, err); 	err = setsockopt(self->raw_sk,			 variant->level, variant->opts[MRT_DONE - MRT_BASE],			 &val,  sizeof(val));	ASSERT_EQ(0, err);} TEST_F(ipmr, mrt_add_vif_register){	int err; 	memset(&self->vif, 0, variant->vif_size); 	if (variant->family == AF_INET)		self->vif.vifc_flags = VIFF_REGISTER;	else		self->vif6.mif6c_flags = MIFF_REGISTER; 	err = setsockopt(self->raw_sk,			 variant->level, variant->opts[MRT_ADD_VIF - MRT_BASE],			 &self->vif,  variant->vif_size);	ASSERT_EQ(0, err); 	err = system(variant->vif_check_cmd_pimreg);	ASSERT_EQ(0, err); 	err = setsockopt(self->raw_sk,			 variant->level, variant->opts[MRT_DEL_VIF - MRT_BASE],			 &self->vif,  variant->vif_size);	ASSERT_EQ(0, err);} TEST_F(ipmr, mrt_del_vif_unreg){	int err; 	err = setsockopt(self->raw_sk,			 variant->level, variant->opts[MRT_ADD_VIF - MRT_BASE],			 &self->vif,  variant->vif_size);	ASSERT_EQ(0, err); 	err = system(variant->vif_check_cmd_veth);	ASSERT_EQ(0, err); 	/* VIF is removed along with its device. */	err = system("ip link del veth0");	ASSERT_EQ(0, err); 	/* mrt->vif_table[veth_ifindex]->dev is NULL. */	err = setsockopt(self->raw_sk,			 variant->level, variant->opts[MRT_DEL_VIF - MRT_BASE],			 &self->vif,  variant->vif_size);	ASSERT_EQ(-1, err);	ASSERT_EQ(EADDRNOTAVAIL, errno);} TEST_F(ipmr, mrt_del_vif_netns_dismantle){	int err; 	err = setsockopt(self->raw_sk,			 variant->level, variant->opts[MRT_ADD_VIF - MRT_BASE],			 &self->vif,  variant->vif_size);	ASSERT_EQ(0, err); 	/* Let cleanup_net() remove veth0 and VIF. */} TEST_F(ipmr, mrt_add_mfc){	int err; 	/* MRT_ADD_MFC / MRT_ADD_MFC_PROXY does not need vif to exist (unlike netlink). */	err = setsockopt(self->raw_sk,			 variant->level, variant->opts[MRT_ADD_MFC - MRT_BASE],			 &self->mfc, variant->mfc_size);	ASSERT_EQ(0, err); 	/* (0.0.0.0 -> 0.0.0.0) */	err = system(variant->mfc_check_cmd);	ASSERT_EQ(0, err); 	err = setsockopt(self->raw_sk,			 variant->level, variant->opts[MRT_DEL_MFC - MRT_BASE],			 &self->mfc, variant->mfc_size);} TEST_F(ipmr, mrt_add_mfc_proxy){	int err; 	err = setsockopt(self->raw_sk,			 variant->level, variant->opts[MRT_ADD_MFC_PROXY - MRT_BASE],			 &self->mfc, variant->mfc_size);	ASSERT_EQ(0, err); 	err = system(variant->mfc_check_cmd);	ASSERT_EQ(0, err); 	err = setsockopt(self->raw_sk,			 variant->level, variant->opts[MRT_DEL_MFC_PROXY - MRT_BASE],			 &self->mfc, variant->mfc_size);} TEST_F(ipmr, mrt_add_mfc_netlink){	struct mfc_attr mfc_attr = {		.table = RT_TABLE_DEFAULT,		.origin = 0,		.group = 0,		.ifindex = self->veth_ifindex,		.proxy = false,	};	int err; 	err = setsockopt(self->raw_sk,			 variant->level, variant->opts[MRT_ADD_VIF - MRT_BASE],			 &self->vif, variant->vif_size);	ASSERT_EQ(0, err); 	err = nl_sendmsg_mfc(_metadata, self, variant, RTM_NEWROUTE, &mfc_attr);	ASSERT_EQ(0, err); 	err = system(variant->mfc_check_cmd);	ASSERT_EQ(0, err); 	err = nl_sendmsg_mfc(_metadata, self, variant, RTM_DELROUTE, &mfc_attr);	ASSERT_EQ(0, err);} TEST_F(ipmr, mrt_add_mfc_netlink_proxy){	struct mfc_attr mfc_attr = {		.table = RT_TABLE_DEFAULT,		.origin = 0,		.group = 0,		.ifindex = self->veth_ifindex,		.proxy = true,	};	int err; 	err = setsockopt(self->raw_sk,			 variant->level, variant->opts[MRT_ADD_VIF - MRT_BASE],			 &self->vif, variant->vif_size);	ASSERT_EQ(0, err); 	err = nl_sendmsg_mfc(_metadata, self, variant, RTM_NEWROUTE, &mfc_attr);	ASSERT_EQ(0, err); 	err = system(variant->mfc_check_cmd);	ASSERT_EQ(0, err); 	err = nl_sendmsg_mfc(_metadata, self, variant, RTM_DELROUTE, &mfc_attr);	ASSERT_EQ(0, err);} TEST_F(ipmr, mrt_add_mfc_netlink_no_vif){	struct mfc_attr mfc_attr = {		.table = RT_TABLE_DEFAULT,		.origin = 0,		.group = 0,		.proxy = false,	};	int err; 	/* netlink always requires RTA_IIF of an existing vif. */	mfc_attr.ifindex = 0;	err = nl_sendmsg_mfc(_metadata, self, variant, RTM_NEWROUTE, &mfc_attr);	ASSERT_EQ(-ENFILE, err); 	/* netlink always requires RTA_IIF of an existing vif. */	mfc_attr.ifindex = self->veth_ifindex;	err = nl_sendmsg_mfc(_metadata, self, variant, RTM_NEWROUTE, &mfc_attr);	ASSERT_EQ(-ENFILE, err);} TEST_F(ipmr, mrt_del_mfc_netlink_netns_dismantle){	struct vifctl vifs[2] = {		{			.vifc_vifi = 0,			.vifc_flags = VIFF_USE_IFINDEX,			.vifc_lcl_ifindex = self->veth_ifindex,		},		{			.vifc_vifi = 1,			.vifc_flags = VIFF_REGISTER,		}	};	struct mfc_attr mfc_attr = {		.table = RT_TABLE_DEFAULT,		.origin = 0,		.group = 0,		.ifindex = self->veth_ifindex,		.proxy = false,	};	int i, err; 	for (i = 0; i < 2; i++) {		/* Create 2 VIFs just to avoid -ENFILE later. */		err = setsockopt(self->raw_sk,				 variant->level, variant->opts[MRT_ADD_VIF - MRT_BASE],				 &vifs[i],  sizeof(vifs[i]));		ASSERT_EQ(0, err);	} 	/* Create a MFC for mrt->vif_table[0]. */	err = nl_sendmsg_mfc(_metadata, self, variant, RTM_NEWROUTE, &mfc_attr);	ASSERT_EQ(0, err); 	err = system(variant->mfc_check_cmd);	ASSERT_EQ(0, err); 	/* Remove mrt->vif_table[0]. */	err = system("ip link del veth0");	ASSERT_EQ(0, err); 	/* MFC entry is NOT removed even if the tied VIF is removed... */	err = system(variant->mfc_check_cmd);	ASSERT_EQ(0, err); 	/* ... and netlink is not capable of removing such an entry	 * because netlink always requires a valid RTA_IIF ... :/	 */	err = nl_sendmsg_mfc(_metadata, self, variant, RTM_DELROUTE, &mfc_attr);	ASSERT_EQ(-ENODEV, err); 	/* It can be removed by setsockopt(), but let cleanup_net() remove this time. */} TEST_F(ipmr, mrt_table_flush){	struct mfc_attr mfc_attr = {		.origin = 0,		.group = 0,		.ifindex = self->veth_ifindex,		.proxy = false,	};	int table_id = 92;	int err; 	/* Set a random table id rather than RT_TABLE_DEFAULT.	 * Note that /proc/net/ip_mr_{vif,cache} only supports RT_TABLE_DEFAULT.	 */	err = setsockopt(self->raw_sk,			 variant->level, variant->opts[MRT_TABLE - MRT_BASE],			 &table_id,  sizeof(table_id));	ASSERT_EQ(0, err); 	err = setsockopt(self->raw_sk,			 variant->level, variant->opts[MRT_ADD_VIF - MRT_BASE],			 &self->vif,  variant->vif_size);	ASSERT_EQ(0, err); 	if (variant->family == AF_INET) {		mfc_attr.table = table_id;		err = nl_sendmsg_mfc(_metadata, self, variant, RTM_NEWROUTE, &mfc_attr);	} else {		err = setsockopt(self->raw_sk,				 variant->level, variant->opts[MRT_ADD_MFC - MRT_BASE],				 &self->mfc, variant->mfc_size);	}	ASSERT_EQ(0, err); 	/* Flush mrt->vif_table[] and all caches. */	err = setsockopt(self->raw_sk,			 variant->level, variant->opts[MRT_FLUSH - MRT_BASE],

Lines 1–500 of 510. Load more