From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-oo2-f42.google.com (mail-oo2-f42.google.com [74.125.231.170]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 6365A4E020A for ; Mon, 28 Sep 2026 17:47:40 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=74.125.231.170 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1790617662; cv=none; b=kRUe9qAB4NQKLdGo8iFd5mAP7t8rjXSW0usETf85mrUsPSWFHxPFeIuOnNiqOzAGbMw9kVK8wKdYg1AJG2KgykGYuBNAtTR9ISbO0D8ngicL//PXQ2RLtpCecNX8vCDKeKCZslaxR3qQlL2u8r9Rr6A3bEKoGvegT1dprFErdw0= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1790617662; c=relaxed/simple; bh=BaRm/UTrB9F+8UcWf9LkbRVjqhIAg0WgbRRUXJSL7DY=; h=Date:From:To:Cc:Subject:Message-ID:References:MIME-Version: Content-Type:Content-Disposition:In-Reply-To; b=HVvomlY/PDaX+kzI11XtD9XIoR5KARz/EoF2+P8V9qzxpQHeOISp9K9emNs6OgEZtXmkjS+qk/lGXJEHaYetdBvpwdSagZ0zpgdPTYU8HGJKxix+YJhfzpcEg0m1xCq5I3Y6/K9Cm5NEceKQmXzfvZZ+jwcatEs77aqU8Y0C8RM= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=openai.com; spf=pass smtp.mailfrom=openai.com; dkim=pass (1024-bit key) header.d=openai.com header.i=@openai.com header.b=DWPAGkQd; arc=none smtp.client-ip=74.125.231.170 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=openai.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=openai.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=openai.com header.i=@openai.com header.b="DWPAGkQd" Received: by mail-oo2-f42.google.com with SMTP id 006d021491bc7-6d797cfdd1fso561209eaf.0 for ; Mon, 28 Sep 2026 10:47:40 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=openai.com; s=google; t=1790617659; x=1791222459; darn=vger.kernel.org; h=in-reply-to:content-transfer-encoding:content-disposition :content-type:mime-version:references:message-id:subject:cc:to:from :date:from:to:cc:subject:date:message-id:reply-to:content-type; bh=KEPu4UIvM8bDDQC/zKVhjC/qeUu0ZR+H5PU+1No1Ybc=; b=DWPAGkQd2dWx1WBkuEFeZJRllvSJVVccg2pugRuZ+IHEecKHyb09Xf7lck2i6IPpn/ A0o5jsPO3a4SPTedMjmpxJWJZkaMAPk0ykEG/7RRqDqviZx8jleGroUt2W/5HRzkrqCj SPxOIUN5ZTIk8blmNsOLqCf/rEfPBRPEVghUY= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1790617659; x=1791222459; h=in-reply-to:content-transfer-encoding:content-disposition :content-type:mime-version:references:message-id:subject:cc:to:from :date:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to:content-type; bh=KEPu4UIvM8bDDQC/zKVhjC/qeUu0ZR+H5PU+1No1Ybc=; b=EeNf0vh8e9zDaCOBVjaBsF5bRfLFHfcb+j3Ytj+1eDDNQ1Va+dQzwSCUbyVypWutbN XpD0EqpifnzFtWfrt7pTCGZiDd1BFNkq50jrycNYXvQoddo6voCJpEyneJAAZX3ltSgy dioCnzHHa9VLMXgxpEabkH2feBSv98RB+/Cs5n/swelPOhp9bJEcynhzozcMF31jiQ5R evtjHFVcNPSvN0cISf8rB5ft1CllXvAVj9gkLWf5Gr46wymhzjTkDDVdAd8FgRkXnJay CDBJc/mpM4SuATRqzWrfGMGV5n31WSLQaOFlw8MFMImcHS/7ScPPHsBHOjfhWDAODhms JA2Q== X-Forwarded-Encrypted: i=1; AKwUvByhg0ccpHgdznEHXGxKlx+Ig5E+hGRnkh3kmw+qTiZBCWQedfyw+8FBcJEUL533mLyUtwaHIIs3RavPtGo=@vger.kernel.org X-Gm-Message-State: AFuF++ltuA+8qJLbvVEeYEbp4ptQzvxyR0DzTC4PuQ2Xga1mgynUkuYd hIHJDIkohxn32MRUgupeKR6ipL3BbePNNPTnwjWagI/oaPRQZ5jTQJsQZXZBnRxDt08= X-Gm-Gg: AYBFou3lLfc5d9mxAiN5PdE3UXk/emi93rNJgiHavJHVWztuDoXSw9SL5p77cjDYA9r M/Ua6QkLcPF/1vgnWDPxWWj/SEGXHDsnBeIdguDCi4tBEgukLhQgeGzxLvY7x8/rny5RfAIDvFj MQZXZgc4RDqy0GRE2X8G04MM1hcqXGhXv7yZyszWYAWVxfgeWaka/l5or5KX03Z+nwk8FIItUtP I99U1qOqkRJdmeQxCAn8qchamdvqE1Cyz2kQHsI9fLHhUm6MTojM7sHgRPwVySfTAoEWdJU0XS3 ro6Wfju9KZqiY+m/ihtU5QuU6HStD6MES5cCrydy/9eK9O+p/1IRNJuoF+G9DJsj+meXlDACSa6 8+ExEqpu79QxthDpKDrAinktgTUMWRS/P1pa0AvEJKL61HKTTvQxsnvdYrQfw1O98D9+1GHj59L xtt5Z12F4kExILUe+Xyc1GMUak1/+Lk3nrmeWljx7ZHBGpyVa3Ahjzcn1NGkkHoVTlqfXjFqx95 aRUkWsad85B7VDk8uWS35hDRhN+Bq692wOy77E1znnUE2yU1y3lgvU= X-Received: by 2002:a05:6820:82a:b0:6d8:1b5b:3a70 with SMTP id 006d021491bc7-6d81b5b3d27mr4127419eaf.39.1790617658754; Mon, 28 Sep 2026 10:47:38 -0700 (PDT) Received: from com-94485 ([199.47.143.14]) by smtp.gmail.com with ESMTPSA id 006d021491bc7-6d88358bb8dsm5313812eaf.14.2026.09.28.10.47.37 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 28 Sep 2026 10:47:38 -0700 (PDT) Date: Mon, 28 Sep 2026 10:47:35 -0700 From: Jeff Jo To: netdev-bot+sashiko@kernel.org Cc: netdev@vger.kernel.org, edumazet@google.com, ncardwell@google.com, kuniyu@google.com, davem@davemloft.net, kuba@kernel.org, pabeni@redhat.com, horms@kernel.org, shuah@kernel.org, linux-kernel@vger.kernel.org, linux-kselftest@vger.kernel.org Subject: Re: [PATCH net v2 2/2] selftests: net: check timestamp echo after an old ACK Message-ID: References: <20260924224456.55690-6-jeffjo@openai.com> <179037643415.2160803.14897657788666510697@kernel.org> Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <179037643415.2160803.14897657788666510697@kernel.org> On Fri, Sep 25, 2026 at 10:47:14PM +0000, netdev-bot+sashiko@kernel.org wrote: > Thank you for your contribution! Sashiko AI review found 1 potential > issue(s) to consider. > > Critical: 0 · High: 0 · Medium: 1 · Low: 0 > > If you believe none of the issues are legitimate, please reply to each > issue of Medium severity or higher and explain why the AI is wrong. > If any of them are legitimate and you plan to respin, please let patchwork > know by including "pw-bot: cr" as a separate line at the end of your reply > (one such reply per series is enough). > > - [Medium] The new selftest > tools/testing/selftests/net/packetdrill/tcp_old_ack_ts.pkt checks for... > > -- > > selftests: net: check timestamp echo after an old ACK > > This adds a packetdrill regression test for a gap-filling segment that > carries an old ACK. Two peer data segments arrive out of order. The test > then requires the ACK that closes the gap to echo the delayed segment's > timestamp (301000) and not the stale saved value (1000). > > Link: https://github.com/google/packetdrill/commit/83f72d3f9085d0e26eb4d206fe4d7cfab5b6d872 > > > diff --git a/tools/testing/selftests/net/packetdrill/tcp_old_ack_ts.pkt b/tools/testing/selftests/net/packetdrill/tcp_old_ack_ts.pkt > > new file mode 100644 > > index 0000000000000..f072e5e4c4494 > > --- /dev/null > > +++ b/tools/testing/selftests/net/packetdrill/tcp_old_ack_ts.pkt > > @@ -0,0 +1,22 @@ > > [ ... ] > > > +0.300 write(4, ..., 17) = 17 > > ++0 > P. 1:18(17) ack 1 > > +0.310 < P. 18:35(17) ack 18 win 20000 > > ++0 > . 18:18(0) ack 1 > > +0.320 < P. 1:18(17) ack 1 win 20000 > > ++0 > . 18:18(0) ack 35 > ^^^^^^^^^^^ > > [Severity: Medium] > Can this test report PASS on a kernel that doesn't have the fix? > > The commit message says packetdrill versions older than 83f72d3f9085 do > not check the outgoing TSecr: > > older tools incorrectly pass on an unfixed kernel > > This ecr 301000 check is the only line in the script that depends on the > fix. The seq, ack and SACK checks give the same result with or without > it, and so does the read() of 34 bytes below. > > The runner only checks that some packetdrill is in PATH. It then reports > PASS whenever packetdrill exits 0: > > tools/testing/selftests/net/packetdrill/ksft_runner.sh: > if [ -z "$(which packetdrill)" ]; then > ktap_skip_all "packetdrill not found in PATH" > exit "$KSFT_SKIP" > fi > ... > unshare -n packetdrill ${ip_args[$ip_version]} ${optargs[@]} $script > /dev/null \ > && ktap_test_pass $ip_version || $failfunc $ip_version > > On a kernel without the fix, tcp_ack() sends the gap filler down the > old_ack path, since ack 1 is before snd_una 18. That kernel does not have > this update: > > net/ipv4/tcp_input.c:tcp_ack() { > ... > old_ack: > ... > if (flag & FLAG_UPDATE_TS_RECENT) > tcp_replace_ts_recent(tp, TCP_SKB_CB(skb)->seq); > ... > } > > As a result, ts_recent stays at 1000. With an older packetdrill, such as > a distro package, wouldn't ipv4, ipv6 and ipv4-mapped-ipv6 all still pass? > > Could the script add a check that doesn't rely on packetdrill's TSecr > handling? For example, after the gap-closing ACK, inject: > > < P. 35:36(1) ack 18 win 20000 > > With the fix, ts_recent is 301000, so the PAWS check in > tcp_validate_incoming() drops the segment. The segment carries data, so > tcp_oow_rate_limited() does not suppress the dup-ACK, and the reply is > ack 35. > > Without the fix, ts_recent is 1000. The segment is accepted and the reply > is ack 36. That difference would show up whichever packetdrill version is > used. > > > ++0 read(4, ..., 34) = 34 > > -- > Sashiko AI review · https://netdev-ai.bots.linux.dev/sashiko/#/patchset/20260924224456.55690-4-jeffjo%40openai.com Yes, affected older packetdrill versions can falsely pass this test, as noted in the commit message. We previously tested a PAWS-based assertion, but Eric requested a direct timestamp-echo check once packetdrill was fixed and the runners updated [1]. Neal has since merged the packetdrill fix [2] and requested the revised test. With updated packetdrill, we verified that this test fails on the unfixed kernel and passes with the kernel fix. V2 follows that approach and documents the required packetdrill commit. [1] https://lore.kernel.org/netdev/CANn89i+nY499TfuGMvMq3P=Pxw6vBxe+uYH1zioK=bhU--GXYw@mail.gmail.com/ [2] https://github.com/google/packetdrill/commit/83f72d3f9085d0e26eb4d206fe4d7cfab5b6d872