xref: /linux/tools/testing/selftests/net/rtnetlink.sh (revision 8a2a6bb01664c34464153b6ace79a6da34e63eaa)
1#!/bin/bash
2#
3# This test is for checking rtnetlink callpaths, and get as much coverage as possible.
4#
5# set -e
6
7ALL_TESTS="
8	kci_test_polrouting
9	kci_test_route_get
10	kci_test_addrlft
11	kci_test_promote_secondaries
12	kci_test_tc
13	kci_test_gre
14	kci_test_gretap
15	kci_test_ip6gretap
16	kci_test_erspan
17	kci_test_ip6erspan
18	kci_test_bridge
19	kci_test_addrlabel
20	kci_test_ifalias
21	kci_test_vrf
22	kci_test_encap
23	kci_test_macsec
24	kci_test_ipsec
25	kci_test_ipsec_offload
26	kci_test_fdb_get
27	kci_test_fdb_del
28	kci_test_neigh_get
29	kci_test_bridge_parent_id
30	kci_test_address_proto
31	kci_test_enslave_bonding
32	kci_test_mngtmpaddr
33"
34
35devdummy="test-dummy0"
36VERBOSE=0
37PAUSE=no
38PAUSE_ON_FAIL=no
39
40source lib.sh
41
42# set global exit status, but never reset nonzero one.
43check_err()
44{
45	if [ $ret -eq 0 ]; then
46		ret=$1
47	fi
48	[ -n "$2" ] && echo "$2"
49}
50
51# same but inverted -- used when command must fail for test to pass
52check_fail()
53{
54	if [ $1 -eq 0 ]; then
55		ret=1
56	fi
57}
58
59run_cmd_common()
60{
61	local cmd="$*"
62	local out
63	if [ "$VERBOSE" = "1" ]; then
64		echo "COMMAND: ${cmd}"
65	fi
66	out=$($cmd 2>&1)
67	rc=$?
68	if [ "$VERBOSE" = "1" -a -n "$out" ]; then
69		echo "    $out"
70	fi
71	return $rc
72}
73
74run_cmd() {
75	run_cmd_common "$@"
76	rc=$?
77	check_err $rc
78	return $rc
79}
80run_cmd_fail()
81{
82	run_cmd_common "$@"
83	rc=$?
84	check_fail $rc
85	return $rc
86}
87
88run_cmd_grep_common()
89{
90	local find="$1"; shift
91	local cmd="$*"
92	local out
93	if [ "$VERBOSE" = "1" ]; then
94		echo "COMMAND: ${cmd} 2>&1 | grep -q '${find}'"
95	fi
96	out=$($cmd 2>&1 | grep -q "${find}" 2>&1)
97	return $?
98}
99
100run_cmd_grep() {
101	run_cmd_grep_common "$@"
102	rc=$?
103	check_err $rc
104	return $rc
105}
106
107run_cmd_grep_fail()
108{
109	run_cmd_grep_common "$@"
110	rc=$?
111	check_fail $rc
112	return $rc
113}
114
115end_test()
116{
117	echo "$*"
118	[ "${VERBOSE}" = "1" ] && echo
119
120	if [[ $ret -ne 0 ]] && [[ "${PAUSE_ON_FAIL}" = "yes" ]]; then
121		echo "Hit enter to continue"
122		read a
123	fi;
124
125	if [ "${PAUSE}" = "yes" ]; then
126		echo "Hit enter to continue"
127		read a
128	fi
129
130}
131
132
133kci_add_dummy()
134{
135	run_cmd ip link add name "$devdummy" type dummy
136	run_cmd ip link set "$devdummy" up
137}
138
139kci_del_dummy()
140{
141	run_cmd ip link del dev "$devdummy"
142}
143
144kci_test_netconf()
145{
146	dev="$1"
147	r=$ret
148	run_cmd ip netconf show dev "$dev"
149	for f in 4 6; do
150		run_cmd ip -$f netconf show dev "$dev"
151	done
152
153	if [ $ret -ne 0 ] ;then
154		end_test "FAIL: ip netconf show $dev"
155		test $r -eq 0 && ret=0
156		return 1
157	fi
158}
159
160# add a bridge with vlans on top
161kci_test_bridge()
162{
163	devbr="test-br0"
164	vlandev="testbr-vlan1"
165
166	local ret=0
167	run_cmd ip link add name "$devbr" type bridge
168	run_cmd ip link set dev "$devdummy" master "$devbr"
169	run_cmd ip link set "$devbr" up
170	run_cmd ip link add link "$devbr" name "$vlandev" type vlan id 1
171	run_cmd ip addr add dev "$vlandev" 10.200.7.23/30
172	run_cmd ip -6 addr add dev "$vlandev" dead:42::1234/64
173	run_cmd ip -d link
174	run_cmd ip r s t all
175
176	for name in "$devbr" "$vlandev" "$devdummy" ; do
177		kci_test_netconf "$name"
178	done
179	run_cmd ip -6 addr del dev "$vlandev" dead:42::1234/64
180	run_cmd ip link del dev "$vlandev"
181	run_cmd ip link del dev "$devbr"
182
183	if [ $ret -ne 0 ];then
184		end_test "FAIL: bridge setup"
185		return 1
186	fi
187	end_test "PASS: bridge setup"
188
189}
190
191kci_test_gre()
192{
193	gredev=neta
194	rem=10.42.42.1
195	loc=10.0.0.1
196
197	local ret=0
198	run_cmd ip tunnel add $gredev mode gre remote $rem local $loc ttl 1
199	run_cmd ip link set $gredev up
200	run_cmd ip addr add 10.23.7.10 dev $gredev
201	run_cmd ip route add 10.23.8.0/30 dev $gredev
202	run_cmd ip addr add dev "$devdummy" 10.23.7.11/24
203	run_cmd ip link
204	run_cmd ip addr
205
206	kci_test_netconf "$gredev"
207	run_cmd ip addr del dev "$devdummy" 10.23.7.11/24
208	run_cmd ip link del $gredev
209
210	if [ $ret -ne 0 ];then
211		end_test "FAIL: gre tunnel endpoint"
212		return 1
213	fi
214	end_test "PASS: gre tunnel endpoint"
215}
216
217# tc uses rtnetlink too, for full tc testing
218# please see tools/testing/selftests/tc-testing.
219kci_test_tc()
220{
221	dev=lo
222	local ret=0
223
224	run_cmd tc qdisc add dev "$dev" root handle 1: htb
225	run_cmd tc class add dev "$dev" parent 1: classid 1:10 htb rate 1mbit
226	run_cmd tc filter add dev "$dev" parent 1:0 prio 5 handle ffe: protocol ip u32 divisor 256
227	run_cmd tc filter add dev "$dev" parent 1:0 prio 5 handle ffd: protocol ip u32 divisor 256
228	run_cmd tc filter add dev "$dev" parent 1:0 prio 5 handle ffc: protocol ip u32 divisor 256
229	run_cmd tc filter add dev "$dev" protocol ip parent 1: prio 5 handle ffe:2:3 u32 ht ffe:2: match ip src 10.0.0.3 flowid 1:10
230	run_cmd tc filter add dev "$dev" protocol ip parent 1: prio 5 handle ffe:2:2 u32 ht ffe:2: match ip src 10.0.0.2 flowid 1:10
231	run_cmd tc filter show dev "$dev" parent  1:0
232	run_cmd tc filter del dev "$dev" protocol ip parent 1: prio 5 handle ffe:2:3 u32
233	run_cmd tc filter show dev "$dev" parent  1:0
234	run_cmd tc qdisc del dev "$dev" root handle 1: htb
235
236	if [ $ret -ne 0 ];then
237		end_test "FAIL: tc htb hierarchy"
238		return 1
239	fi
240	end_test "PASS: tc htb hierarchy"
241
242}
243
244kci_test_polrouting()
245{
246	local ret=0
247	run_cmd ip rule add fwmark 1 lookup 100
248	run_cmd ip route add local 0.0.0.0/0 dev lo table 100
249	run_cmd ip r s t all
250	run_cmd ip rule del fwmark 1 lookup 100
251	run_cmd ip route del local 0.0.0.0/0 dev lo table 100
252
253	if [ $ret -ne 0 ];then
254		end_test "FAIL: policy route test"
255		return 1
256	fi
257	end_test "PASS: policy routing"
258}
259
260kci_test_route_get()
261{
262	local hash_policy=$(sysctl -n net.ipv4.fib_multipath_hash_policy)
263
264	local ret=0
265	run_cmd ip route get 127.0.0.1
266	run_cmd ip route get 127.0.0.1 dev "$devdummy"
267	run_cmd ip route get ::1
268	run_cmd ip route get fe80::1 dev "$devdummy"
269	run_cmd ip route get 127.0.0.1 from 127.0.0.1 oif lo tos 0x10 mark 0x1
270	run_cmd ip route get ::1 from ::1 iif lo oif lo tos 0x10 mark 0x1
271	run_cmd ip addr add dev "$devdummy" 10.23.7.11/24
272	run_cmd ip route get 10.23.7.11 from 10.23.7.12 iif "$devdummy"
273	run_cmd ip route add 10.23.8.0/24 \
274		nexthop via 10.23.7.13 dev "$devdummy" \
275		nexthop via 10.23.7.14 dev "$devdummy"
276
277	sysctl -wq net.ipv4.fib_multipath_hash_policy=0
278	run_cmd ip route get 10.23.8.11
279	sysctl -wq net.ipv4.fib_multipath_hash_policy=1
280	run_cmd ip route get 10.23.8.11
281	sysctl -wq net.ipv4.fib_multipath_hash_policy="$hash_policy"
282	run_cmd ip route del 10.23.8.0/24
283	run_cmd ip addr del dev "$devdummy" 10.23.7.11/24
284
285
286	if [ $ret -ne 0 ];then
287		end_test "FAIL: route get"
288		return 1
289	fi
290
291	end_test "PASS: route get"
292}
293
294check_addr_not_exist()
295{
296	dev=$1
297	addr=$2
298	if ip addr show dev $dev | grep -q $addr; then
299		return 1
300	else
301		return 0
302	fi
303}
304
305kci_test_addrlft()
306{
307	for i in $(seq 10 100) ;do
308		lft=$(((RANDOM%3) + 1))
309		run_cmd ip addr add 10.23.11.$i/32 dev "$devdummy" preferred_lft $lft valid_lft $((lft+1))
310	done
311
312	slowwait 5 check_addr_not_exist "$devdummy" "10.23.11."
313	if [ $? -eq 1 ]; then
314		check_err 1
315		end_test "FAIL: preferred_lft addresses remaining"
316		return
317	fi
318
319	end_test "PASS: preferred_lft addresses have expired"
320}
321
322kci_test_promote_secondaries()
323{
324	promote=$(sysctl -n net.ipv4.conf.$devdummy.promote_secondaries)
325
326	sysctl -q net.ipv4.conf.$devdummy.promote_secondaries=1
327
328	for i in $(seq 2 254);do
329		IP="10.23.11.$i"
330		ip -f inet addr add $IP/16 brd + dev "$devdummy"
331		ifconfig "$devdummy" $IP netmask 255.255.0.0
332	done
333
334	ip addr flush dev "$devdummy"
335
336	[ $promote -eq 0 ] && sysctl -q net.ipv4.conf.$devdummy.promote_secondaries=0
337
338	end_test "PASS: promote_secondaries complete"
339}
340
341kci_test_addrlabel()
342{
343	local ret=0
344	run_cmd ip addrlabel add prefix dead::/64 dev lo label 1
345	run_cmd_grep "prefix dead::/64 dev lo label 1" ip addrlabel list
346	run_cmd ip addrlabel del prefix dead::/64 dev lo label 1
347	run_cmd ip addrlabel add prefix dead::/64 label 1
348	run_cmd ip addrlabel del prefix dead::/64 label 1
349
350	# concurrent add/delete
351	for i in $(seq 1 1000); do
352		ip addrlabel add prefix 1c3::/64 label 12345 2>/dev/null
353	done &
354
355	for i in $(seq 1 1000); do
356		ip addrlabel del prefix 1c3::/64 label 12345 2>/dev/null
357	done
358
359	wait
360
361	ip addrlabel del prefix 1c3::/64 label 12345 2>/dev/null
362
363	if [ $ret -ne 0 ];then
364		end_test "FAIL: ipv6 addrlabel"
365		return 1
366	fi
367
368	end_test "PASS: ipv6 addrlabel"
369}
370
371kci_test_ifalias()
372{
373	local ret=0
374	namewant=$(uuidgen)
375	syspathname="/sys/class/net/$devdummy/ifalias"
376	run_cmd ip link set dev "$devdummy" alias "$namewant"
377
378	if [ $ret -ne 0 ]; then
379		end_test "FAIL: cannot set interface alias of $devdummy to $namewant"
380		return 1
381	fi
382	run_cmd_grep "alias $namewant" ip link show "$devdummy"
383
384	if [ -r "$syspathname" ] ; then
385		read namehave < "$syspathname"
386		if [ "$namewant" != "$namehave" ]; then
387			end_test "FAIL: did set ifalias $namewant but got $namehave"
388			return 1
389		fi
390
391		namewant=$(uuidgen)
392		echo "$namewant" > "$syspathname"
393	        run_cmd_grep "alias $namewant" ip link show "$devdummy"
394
395		# sysfs interface allows to delete alias again
396		echo "" > "$syspathname"
397	        run_cmd_grep_fail "alias $namewant" ip link show "$devdummy"
398
399		for i in $(seq 1 100); do
400			uuidgen > "$syspathname" &
401		done
402
403		wait
404
405		# re-add the alias -- kernel should free mem when dummy dev is removed
406		run_cmd ip link set dev "$devdummy" alias "$namewant"
407
408	fi
409
410	if [ $ret -ne 0 ]; then
411		end_test "FAIL: set interface alias $devdummy to $namewant"
412		return 1
413	fi
414
415	end_test "PASS: set ifalias $namewant for $devdummy"
416}
417
418kci_test_vrf()
419{
420	vrfname="test-vrf"
421	local ret=0
422	run_cmd ip link show type vrf
423	if [ $? -ne 0 ]; then
424		end_test "SKIP: vrf: iproute2 too old"
425		return $ksft_skip
426	fi
427	run_cmd ip link add "$vrfname" type vrf table 10
428	if [ $ret -ne 0 ];then
429		end_test "FAIL: can't add vrf interface, skipping test"
430		return 0
431	fi
432	run_cmd_grep "$vrfname" ip -br link show type vrf
433	if [ $ret -ne 0 ];then
434		end_test "FAIL: created vrf device not found"
435		return 1
436	fi
437
438	run_cmd ip link set dev "$vrfname" up
439	run_cmd ip link set dev "$devdummy" master "$vrfname"
440	run_cmd ip link del dev "$vrfname"
441
442	if [ $ret -ne 0 ];then
443		end_test "FAIL: vrf"
444		return 1
445	fi
446
447	end_test "PASS: vrf"
448}
449
450kci_test_encap_vxlan()
451{
452	local ret=0
453	vxlan="test-vxlan0"
454	vlan="test-vlan0"
455	run_cmd ip -netns "$testns" link add "$vxlan" type vxlan id 42 group 239.1.1.1 \
456		dev "$devdummy" dstport 4789
457	if [ $? -ne 0 ]; then
458		end_test "FAIL: can't add vxlan interface, skipping test"
459		return 0
460	fi
461
462	run_cmd ip -netns "$testns" addr add 10.2.11.49/24 dev "$vxlan"
463	run_cmd ip -netns "$testns" link set up dev "$vxlan"
464	run_cmd ip -netns "$testns" link add link "$vxlan" name "$vlan" type vlan id 1
465
466	# changelink testcases
467	run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan vni 43
468	run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan group ffe5::5 dev "$devdummy"
469	run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan ttl inherit
470
471	run_cmd ip -netns "$testns" link set dev "$vxlan" type vxlan ttl 64
472	run_cmd ip -netns "$testns" link set dev "$vxlan" type vxlan nolearning
473
474	run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan proxy
475	run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan norsc
476	run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan l2miss
477	run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan l3miss
478	run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan external
479	run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan udpcsum
480	run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan udp6zerocsumtx
481	run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan udp6zerocsumrx
482	run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan remcsumtx
483	run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan remcsumrx
484	run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan gbp
485	run_cmd_fail ip -netns "$testns" link set dev "$vxlan" type vxlan gpe
486	run_cmd ip -netns "$testns" link del "$vxlan"
487
488	if [ $ret -ne 0 ]; then
489		end_test "FAIL: vxlan"
490		return 1
491	fi
492	end_test "PASS: vxlan"
493}
494
495kci_test_encap_fou()
496{
497	local ret=0
498	name="test-fou"
499	run_cmd_grep 'Usage: ip fou' ip fou help
500	if [ $? -ne 0 ];then
501		end_test "SKIP: fou: iproute2 too old"
502		return $ksft_skip
503	fi
504
505	if ! /sbin/modprobe -q -n fou; then
506		end_test "SKIP: module fou is not found"
507		return $ksft_skip
508	fi
509	/sbin/modprobe -q fou
510
511	run_cmd ip -netns "$testns" fou add port 7777 ipproto 47
512	if [ $? -ne 0 ];then
513		end_test "FAIL: can't add fou port 7777, skipping test"
514		return 1
515	fi
516	run_cmd ip -netns "$testns" fou add port 8888 ipproto 4
517	run_cmd_fail ip -netns "$testns" fou del port 9999
518	run_cmd ip -netns "$testns" fou del port 7777
519	if [ $ret -ne 0 ]; then
520		end_test "FAIL: fou"s
521		return 1
522	fi
523
524	end_test "PASS: fou"
525}
526
527# test various encap methods, use netns to avoid unwanted interference
528kci_test_encap()
529{
530	local ret=0
531	setup_ns testns
532	if [ $? -ne 0 ]; then
533		end_test "SKIP encap tests: cannot add net namespace $testns"
534		return $ksft_skip
535	fi
536	run_cmd ip -netns "$testns" link set lo up
537	run_cmd ip -netns "$testns" link add name "$devdummy" type dummy
538	run_cmd ip -netns "$testns" link set "$devdummy" up
539	run_cmd kci_test_encap_vxlan
540	run_cmd kci_test_encap_fou
541
542	ip netns del "$testns"
543	return $ret
544}
545
546kci_test_macsec()
547{
548	msname="test_macsec0"
549	local ret=0
550	run_cmd_grep "^Usage: ip macsec" ip macsec help
551	if [ $? -ne 0 ]; then
552		end_test "SKIP: macsec: iproute2 too old"
553		return $ksft_skip
554	fi
555	run_cmd ip link add link "$devdummy" "$msname" type macsec port 42 encrypt on
556	if [ $ret -ne 0 ];then
557		end_test "FAIL: can't add macsec interface, skipping test"
558		return 1
559	fi
560	run_cmd ip macsec add "$msname" tx sa 0 pn 1024 on key 01 12345678901234567890123456789012
561	run_cmd ip macsec add "$msname" rx port 1234 address "1c:ed:de:ad:be:ef"
562	run_cmd ip macsec add "$msname" rx port 1234 address "1c:ed:de:ad:be:ef" sa 0 pn 1 on key 00 0123456789abcdef0123456789abcdef
563	run_cmd ip macsec show
564	run_cmd ip link del dev "$msname"
565
566	if [ $ret -ne 0 ];then
567		end_test "FAIL: macsec"
568		return 1
569	fi
570
571	end_test "PASS: macsec"
572}
573
574#-------------------------------------------------------------------
575# Example commands
576#   ip x s add proto esp src 14.0.0.52 dst 14.0.0.70 \
577#            spi 0x07 mode transport reqid 0x07 replay-window 32 \
578#            aead 'rfc4106(gcm(aes))' 1234567890123456dcba 128 \
579#            sel src 14.0.0.52/24 dst 14.0.0.70/24
580#   ip x p add dir out src 14.0.0.52/24 dst 14.0.0.70/24 \
581#            tmpl proto esp src 14.0.0.52 dst 14.0.0.70 \
582#            spi 0x07 mode transport reqid 0x07
583#
584# Subcommands not tested
585#    ip x s update
586#    ip x s allocspi
587#    ip x s deleteall
588#    ip x p update
589#    ip x p deleteall
590#    ip x p set
591#-------------------------------------------------------------------
592kci_test_ipsec()
593{
594	local ret=0
595	algo="aead rfc4106(gcm(aes)) 0x3132333435363738393031323334353664636261 128"
596	srcip=192.168.123.1
597	dstip=192.168.123.2
598	spi=7
599
600	ip addr add $srcip dev $devdummy
601
602	# flush to be sure there's nothing configured
603	run_cmd ip x s flush ; ip x p flush
604
605	# start the monitor in the background
606	tmpfile=`mktemp /var/run/ipsectestXXX`
607	mpid=`(ip x m > $tmpfile & echo $!) 2>/dev/null`
608	sleep 0.2
609
610	ipsecid="proto esp src $srcip dst $dstip spi 0x07"
611	run_cmd ip x s add $ipsecid \
612            mode transport reqid 0x07 replay-window 32 \
613            $algo sel src $srcip/24 dst $dstip/24
614
615
616	lines=`ip x s list | grep $srcip | grep $dstip | wc -l`
617	run_cmd test $lines -eq 2
618	run_cmd_grep "SAD count 1" ip x s count
619
620	lines=`ip x s get $ipsecid | grep $srcip | grep $dstip | wc -l`
621	run_cmd test $lines -eq 2
622	run_cmd ip x s delete $ipsecid
623
624	lines=`ip x s list | wc -l`
625	run_cmd test $lines -eq 0
626
627	ipsecsel="dir out src $srcip/24 dst $dstip/24"
628	run_cmd ip x p add $ipsecsel \
629		    tmpl proto esp src $srcip dst $dstip \
630		    spi 0x07 mode transport reqid 0x07
631
632
633	lines=`ip x p list | grep $srcip | grep $dstip | wc -l`
634	run_cmd test $lines -eq 2
635
636	run_cmd_grep "SPD IN  0 OUT 1 FWD 0" ip x p count
637
638	lines=`ip x p get $ipsecsel | grep $srcip | grep $dstip | wc -l`
639	run_cmd test $lines -eq 2
640
641	run_cmd ip x p delete $ipsecsel
642
643	lines=`ip x p list | wc -l`
644	run_cmd test $lines -eq 0
645
646	# check the monitor results
647	kill $mpid
648	lines=`wc -l $tmpfile | cut "-d " -f1`
649	run_cmd test $lines -eq 20
650	rm -rf $tmpfile
651
652	# clean up any leftovers
653	run_cmd ip x s flush
654	run_cmd ip x p flush
655	ip addr del $srcip/32 dev $devdummy
656
657	if [ $ret -ne 0 ]; then
658		end_test "FAIL: ipsec"
659		return 1
660	fi
661	end_test "PASS: ipsec"
662}
663
664#-------------------------------------------------------------------
665# Example commands
666#   ip x s add proto esp src 14.0.0.52 dst 14.0.0.70 \
667#            spi 0x07 mode transport reqid 0x07 replay-window 32 \
668#            aead 'rfc4106(gcm(aes))' 1234567890123456dcba 128 \
669#            sel src 14.0.0.52/24 dst 14.0.0.70/24
670#            offload dev sim1 dir out
671#   ip x p add dir out src 14.0.0.52/24 dst 14.0.0.70/24 \
672#            tmpl proto esp src 14.0.0.52 dst 14.0.0.70 \
673#            spi 0x07 mode transport reqid 0x07
674#
675#-------------------------------------------------------------------
676kci_test_ipsec_offload()
677{
678	local ret=0
679	algo="aead rfc4106(gcm(aes)) 0x3132333435363738393031323334353664636261 128"
680	srcip=192.168.123.3
681	dstip=192.168.123.4
682	sysfsd=/sys/kernel/debug/netdevsim/netdevsim0/ports/0/
683	sysfsf=$sysfsd/ipsec
684	sysfsnet=/sys/bus/netdevsim/devices/netdevsim0/net/
685	probed=false
686
687	if ! mount | grep -q debugfs; then
688		mount -t debugfs none /sys/kernel/debug/ &> /dev/null
689	fi
690
691	# setup netdevsim since dummydev doesn't have offload support
692	if [ ! -w /sys/bus/netdevsim/new_device ] ; then
693		run_cmd modprobe -q netdevsim
694		if [ $ret -ne 0 ]; then
695			end_test "SKIP: ipsec_offload can't load netdevsim"
696			return $ksft_skip
697		fi
698		probed=true
699	fi
700
701	echo "0" > /sys/bus/netdevsim/new_device
702	while [ ! -d $sysfsnet ] ; do :; done
703	udevadm settle
704	dev=`ls $sysfsnet`
705
706	ip addr add $srcip dev $dev
707	ip link set $dev up
708	if [ ! -d $sysfsd ] ; then
709		end_test "FAIL: ipsec_offload can't create device $dev"
710		return 1
711	fi
712	if [ ! -f $sysfsf ] ; then
713		end_test "FAIL: ipsec_offload netdevsim doesn't support IPsec offload"
714		return 1
715	fi
716
717	# flush to be sure there's nothing configured
718	ip x s flush ; ip x p flush
719
720	# create offloaded SAs, both in and out
721	run_cmd ip x p add dir out src $srcip/24 dst $dstip/24 \
722	    tmpl proto esp src $srcip dst $dstip spi 9 \
723	    mode transport reqid 42
724
725	run_cmd ip x p add dir in src $dstip/24 dst $srcip/24 \
726	    tmpl proto esp src $dstip dst $srcip spi 9 \
727	    mode transport reqid 42
728
729	run_cmd ip x s add proto esp src $srcip dst $dstip spi 9 \
730	    mode transport reqid 42 $algo sel src $srcip/24 dst $dstip/24 \
731	    offload dev $dev dir out
732
733	run_cmd ip x s add proto esp src $dstip dst $srcip spi 9 \
734	    mode transport reqid 42 $algo sel src $dstip/24 dst $srcip/24 \
735	    offload dev $dev dir in
736
737	if [ $ret -ne 0 ]; then
738		end_test "FAIL: ipsec_offload can't create SA"
739		return 1
740	fi
741
742	# does offload show up in ip output
743	lines=`ip x s list | grep -c "crypto offload parameters: dev $dev dir"`
744	if [ $lines -ne 2 ] ; then
745		check_err 1
746		end_test "FAIL: ipsec_offload SA offload missing from list output"
747	fi
748
749	# we didn't create a peer, make sure we can Tx
750	ip neigh add $dstip dev $dev lladdr 00:11:22:33:44:55
751	# use ping to exercise the Tx path
752	ping -I $dev -c 3 -W 1 -i 0 $dstip >/dev/null
753
754	# does driver have correct offload info
755	run_cmd diff $sysfsf - << EOF
756SA count=2 tx=3
757sa[0] tx ipaddr=$dstip
758sa[0]    spi=0x00000009 proto=0x32 salt=0x61626364 crypt=1
759sa[0]    key=0x34333231 38373635 32313039 36353433
760sa[1] rx ipaddr=$srcip
761sa[1]    spi=0x00000009 proto=0x32 salt=0x61626364 crypt=1
762sa[1]    key=0x34333231 38373635 32313039 36353433
763EOF
764	if [ $? -ne 0 ] ; then
765		end_test "FAIL: ipsec_offload incorrect driver data"
766		check_err 1
767	fi
768
769	# does offload get removed from driver
770	ip x s flush
771	ip x p flush
772	lines=`grep -c "SA count=0" $sysfsf`
773	if [ $lines -ne 1 ] ; then
774		check_err 1
775		end_test "FAIL: ipsec_offload SA not removed from driver"
776	fi
777
778	# clean up any leftovers
779	echo 0 > /sys/bus/netdevsim/del_device
780	$probed && rmmod netdevsim
781
782	if [ $ret -ne 0 ]; then
783		end_test "FAIL: ipsec_offload"
784		return 1
785	fi
786	end_test "PASS: ipsec_offload"
787}
788
789kci_test_gretap()
790{
791	DEV_NS=gretap00
792	local ret=0
793
794	setup_ns testns
795	if [ $? -ne 0 ]; then
796		end_test "SKIP gretap tests: cannot add net namespace $testns"
797		return $ksft_skip
798	fi
799
800	run_cmd_grep "^Usage:" ip link help gretap
801	if [ $? -ne 0 ];then
802		end_test "SKIP: gretap: iproute2 too old"
803		ip netns del "$testns"
804		return $ksft_skip
805	fi
806
807	# test native tunnel
808	run_cmd ip -netns "$testns" link add dev "$DEV_NS" type gretap seq \
809		key 102 local 172.16.1.100 remote 172.16.1.200
810
811
812	run_cmd ip -netns "$testns" addr add dev "$DEV_NS" 10.1.1.100/24
813	run_cmd ip -netns "$testns" link set dev $DEV_NS up
814	run_cmd ip -netns "$testns" link del "$DEV_NS"
815
816	# test external mode
817	run_cmd ip -netns "$testns" link add dev "$DEV_NS" type gretap external
818	run_cmd ip -netns "$testns" link del "$DEV_NS"
819
820	if [ $ret -ne 0 ]; then
821		end_test "FAIL: gretap"
822		ip netns del "$testns"
823		return 1
824	fi
825	end_test "PASS: gretap"
826
827	ip netns del "$testns"
828}
829
830kci_test_ip6gretap()
831{
832	DEV_NS=ip6gretap00
833	local ret=0
834
835	setup_ns testns
836	if [ $? -ne 0 ]; then
837		end_test "SKIP ip6gretap tests: cannot add net namespace $testns"
838		return $ksft_skip
839	fi
840
841	run_cmd_grep "^Usage:" ip link help ip6gretap
842	if [ $? -ne 0 ];then
843		end_test "SKIP: ip6gretap: iproute2 too old"
844		ip netns del "$testns"
845		return $ksft_skip
846	fi
847
848	# test native tunnel
849	run_cmd ip -netns "$testns" link add dev "$DEV_NS" type ip6gretap seq \
850		key 102 local fc00:100::1 remote fc00:100::2
851
852
853	run_cmd ip -netns "$testns" addr add dev "$DEV_NS" fc00:200::1/96
854	run_cmd ip -netns "$testns" link set dev $DEV_NS up
855	run_cmd ip -netns "$testns" link del "$DEV_NS"
856
857	# test external mode
858	run_cmd ip -netns "$testns" link add dev "$DEV_NS" type ip6gretap external
859	run_cmd ip -netns "$testns" link del "$DEV_NS"
860
861	if [ $ret -ne 0 ]; then
862		end_test "FAIL: ip6gretap"
863		ip netns del "$testns"
864		return 1
865	fi
866	end_test "PASS: ip6gretap"
867
868	ip netns del "$testns"
869}
870
871kci_test_erspan()
872{
873	DEV_NS=erspan00
874	local ret=0
875	run_cmd_grep "^Usage:" ip link help erspan
876	if [ $? -ne 0 ];then
877		end_test "SKIP: erspan: iproute2 too old"
878		return $ksft_skip
879	fi
880	setup_ns testns
881	if [ $? -ne 0 ]; then
882		end_test "SKIP erspan tests: cannot add net namespace $testns"
883		return $ksft_skip
884	fi
885
886	# test native tunnel erspan v1
887	run_cmd ip -netns "$testns" link add dev "$DEV_NS" type erspan seq \
888		key 102 local 172.16.1.100 remote 172.16.1.200 \
889		erspan_ver 1 erspan 488
890
891
892	run_cmd ip -netns "$testns" addr add dev "$DEV_NS" 10.1.1.100/24
893	run_cmd ip -netns "$testns" link set dev $DEV_NS up
894	run_cmd ip -netns "$testns" link del "$DEV_NS"
895
896	# test native tunnel erspan v2
897	run_cmd ip -netns "$testns" link add dev "$DEV_NS" type erspan seq \
898		key 102 local 172.16.1.100 remote 172.16.1.200 \
899		erspan_ver 2 erspan_dir ingress erspan_hwid 7
900
901
902	run_cmd ip -netns "$testns" addr add dev "$DEV_NS" 10.1.1.100/24
903	run_cmd ip -netns "$testns" link set dev $DEV_NS up
904	run_cmd ip -netns "$testns" link del "$DEV_NS"
905
906	# test external mode
907	run_cmd ip -netns "$testns" link add dev "$DEV_NS" type erspan external
908	run_cmd ip -netns "$testns" link del "$DEV_NS"
909
910	if [ $ret -ne 0 ]; then
911		end_test "FAIL: erspan"
912		ip netns del "$testns"
913		return 1
914	fi
915	end_test "PASS: erspan"
916
917	ip netns del "$testns"
918}
919
920kci_test_ip6erspan()
921{
922	DEV_NS=ip6erspan00
923	local ret=0
924	run_cmd_grep "^Usage:" ip link help ip6erspan
925	if [ $? -ne 0 ];then
926		end_test "SKIP: ip6erspan: iproute2 too old"
927		return $ksft_skip
928	fi
929	setup_ns testns
930	if [ $? -ne 0 ]; then
931		end_test "SKIP ip6erspan tests: cannot add net namespace $testns"
932		return $ksft_skip
933	fi
934
935	# test native tunnel ip6erspan v1
936	run_cmd ip -netns "$testns" link add dev "$DEV_NS" type ip6erspan seq \
937		key 102 local fc00:100::1 remote fc00:100::2 \
938		erspan_ver 1 erspan 488
939
940
941	run_cmd ip -netns "$testns" addr add dev "$DEV_NS" 10.1.1.100/24
942	run_cmd ip -netns "$testns" link set dev $DEV_NS up
943	run_cmd ip -netns "$testns" link del "$DEV_NS"
944
945	# test native tunnel ip6erspan v2
946	run_cmd ip -netns "$testns" link add dev "$DEV_NS" type ip6erspan seq \
947		key 102 local fc00:100::1 remote fc00:100::2 \
948		erspan_ver 2 erspan_dir ingress erspan_hwid 7
949
950
951	run_cmd ip -netns "$testns" addr add dev "$DEV_NS" 10.1.1.100/24
952	run_cmd ip -netns "$testns" link set dev $DEV_NS up
953	run_cmd ip -netns "$testns" link del "$DEV_NS"
954
955	# test external mode
956	run_cmd ip -netns "$testns" link add dev "$DEV_NS" \
957		type ip6erspan external
958
959	run_cmd ip -netns "$testns" link del "$DEV_NS"
960
961	if [ $ret -ne 0 ]; then
962		end_test "FAIL: ip6erspan"
963		ip netns del "$testns"
964		return 1
965	fi
966	end_test "PASS: ip6erspan"
967
968	ip netns del "$testns"
969}
970
971kci_test_fdb_get()
972{
973	brdev="test-br0"
974	vxlandev="vxlan10"
975	test_mac=de:ad:be:ef:13:37
976	localip="10.0.2.2"
977	dstip="10.0.2.3"
978	local ret=0
979
980	run_cmd_grep 'bridge fdb get' bridge fdb help
981	if [ $? -ne 0 ];then
982		end_test "SKIP: fdb get tests: iproute2 too old"
983		return $ksft_skip
984	fi
985
986	setup_ns testns
987	if [ $? -ne 0 ]; then
988		end_test "SKIP fdb get tests: cannot add net namespace $testns"
989		return $ksft_skip
990	fi
991	IP="ip -netns $testns"
992	BRIDGE="bridge -netns $testns"
993	run_cmd $IP link add "$vxlandev" type vxlan id 10 local $localip \
994                dstport 4789
995	run_cmd $IP link add name "$brdev" type bridge
996	run_cmd $IP link set dev "$vxlandev" master "$brdev"
997	run_cmd $BRIDGE fdb add $test_mac dev "$vxlandev" master
998	run_cmd $BRIDGE fdb add $test_mac dev "$vxlandev" dst $dstip self
999	run_cmd_grep "dev $vxlandev master $brdev" $BRIDGE fdb get $test_mac brport "$vxlandev"
1000	run_cmd_grep "dev $vxlandev master $brdev" $BRIDGE fdb get $test_mac br "$brdev"
1001	run_cmd_grep "dev $vxlandev dst $dstip" $BRIDGE fdb get $test_mac dev "$vxlandev" self
1002
1003	ip netns del $testns &>/dev/null
1004
1005	if [ $ret -ne 0 ]; then
1006		end_test "FAIL: bridge fdb get"
1007		return 1
1008	fi
1009
1010	end_test "PASS: bridge fdb get"
1011}
1012
1013kci_test_fdb_del()
1014{
1015	local test_mac=de:ad:be:ef:13:37
1016	local dummydev="dummy1"
1017	local brdev="test-br0"
1018	local ret=0
1019
1020	run_cmd_grep 'bridge fdb get' bridge fdb help
1021	if [ $? -ne 0 ]; then
1022		end_test "SKIP: fdb del tests: iproute2 too old"
1023		return $ksft_skip
1024	fi
1025
1026	setup_ns testns
1027	if [ $? -ne 0 ]; then
1028		end_test "SKIP fdb del tests: cannot add net namespace $testns"
1029		return $ksft_skip
1030	fi
1031	IP="ip -netns $testns"
1032	BRIDGE="bridge -netns $testns"
1033	run_cmd $IP link add $dummydev type dummy
1034	run_cmd $IP link add name $brdev type bridge vlan_filtering 1
1035	run_cmd $IP link set dev $dummydev master $brdev
1036	run_cmd $BRIDGE fdb add $test_mac dev $dummydev master static vlan 1
1037	run_cmd $BRIDGE vlan del vid 1 dev $dummydev
1038	run_cmd $BRIDGE fdb get $test_mac br $brdev vlan 1
1039	run_cmd $BRIDGE fdb del $test_mac dev $dummydev master vlan 1
1040	run_cmd_fail $BRIDGE fdb get $test_mac br $brdev vlan 1
1041
1042	ip netns del $testns &>/dev/null
1043
1044	if [ $ret -ne 0 ]; then
1045		end_test "FAIL: bridge fdb del"
1046		return 1
1047	fi
1048
1049	end_test "PASS: bridge fdb del"
1050}
1051
1052kci_test_neigh_get()
1053{
1054	dstmac=de:ad:be:ef:13:37
1055	dstip=10.0.2.4
1056	dstip6=dead::2
1057	local ret=0
1058
1059	run_cmd_grep 'ip neigh get' ip neigh help
1060	if [ $? -ne 0 ];then
1061		end_test "SKIP: fdb get tests: iproute2 too old"
1062		return $ksft_skip
1063	fi
1064
1065	# ipv4
1066	run_cmd ip neigh add $dstip lladdr $dstmac dev "$devdummy"
1067	run_cmd_grep "$dstmac" ip neigh get $dstip dev "$devdummy"
1068	run_cmd ip neigh del $dstip lladdr $dstmac dev "$devdummy"
1069
1070	# ipv4 proxy
1071	run_cmd ip neigh add proxy $dstip dev "$devdummy"
1072	run_cmd_grep "$dstip" ip neigh get proxy $dstip dev "$devdummy"
1073	run_cmd ip neigh del proxy $dstip dev "$devdummy"
1074
1075	# ipv6
1076	run_cmd ip neigh add $dstip6 lladdr $dstmac dev "$devdummy"
1077	run_cmd_grep "$dstmac" ip neigh get $dstip6 dev "$devdummy"
1078	run_cmd ip neigh del $dstip6 lladdr $dstmac dev "$devdummy"
1079
1080	# ipv6 proxy
1081	run_cmd ip neigh add proxy $dstip6 dev "$devdummy"
1082	run_cmd_grep "$dstip6" ip neigh get proxy $dstip6 dev "$devdummy"
1083	run_cmd ip neigh del proxy $dstip6 dev "$devdummy"
1084
1085	if [ $ret -ne 0 ];then
1086		end_test "FAIL: neigh get"
1087		return 1
1088	fi
1089
1090	end_test "PASS: neigh get"
1091}
1092
1093kci_test_bridge_parent_id()
1094{
1095	local ret=0
1096	sysfsnet=/sys/bus/netdevsim/devices/netdevsim
1097	probed=false
1098
1099	if [ ! -w /sys/bus/netdevsim/new_device ] ; then
1100		run_cmd modprobe -q netdevsim
1101		if [ $ret -ne 0 ]; then
1102			end_test "SKIP: bridge_parent_id can't load netdevsim"
1103			return $ksft_skip
1104		fi
1105		probed=true
1106	fi
1107
1108	echo "10 1" > /sys/bus/netdevsim/new_device
1109	while [ ! -d ${sysfsnet}10 ] ; do :; done
1110	echo "20 1" > /sys/bus/netdevsim/new_device
1111	while [ ! -d ${sysfsnet}20 ] ; do :; done
1112	udevadm settle
1113	dev10=`ls ${sysfsnet}10/net/`
1114	dev20=`ls ${sysfsnet}20/net/`
1115	run_cmd ip link add name test-bond0 type bond mode 802.3ad
1116	run_cmd ip link set dev $dev10 master test-bond0
1117	run_cmd ip link set dev $dev20 master test-bond0
1118	run_cmd ip link add name test-br0 type bridge
1119	run_cmd ip link set dev test-bond0 master test-br0
1120
1121	# clean up any leftovers
1122	ip link del dev test-br0
1123	ip link del dev test-bond0
1124	echo 20 > /sys/bus/netdevsim/del_device
1125	echo 10 > /sys/bus/netdevsim/del_device
1126	$probed && rmmod netdevsim
1127
1128	if [ $ret -ne 0 ]; then
1129		end_test "FAIL: bridge_parent_id"
1130		return 1
1131	fi
1132	end_test "PASS: bridge_parent_id"
1133}
1134
1135address_get_proto()
1136{
1137	local addr=$1; shift
1138
1139	ip -N -j address show dev "$devdummy" |
1140	    jq -e -r --arg addr "${addr%/*}" \
1141	       '.[].addr_info[] | select(.local == $addr) | .protocol'
1142}
1143
1144address_count()
1145{
1146	ip -N -j address show dev "$devdummy" "$@" |
1147	    jq -e -r '[.[].addr_info[] | .local | select(. != null)] | length'
1148}
1149
1150do_test_address_proto()
1151{
1152	local what=$1; shift
1153	local addr=$1; shift
1154	local addr2=${addr%/*}2/${addr#*/}
1155	local addr3=${addr%/*}3/${addr#*/}
1156	local proto
1157	local count
1158	local ret=0
1159	local err
1160
1161	ip address add dev "$devdummy" "$addr3"
1162	check_err $?
1163	proto=$(address_get_proto "$addr3")
1164	[[ "$proto" == null ]]
1165	check_err $?
1166
1167	ip address add dev "$devdummy" "$addr2" proto 0x99
1168	check_err $?
1169	proto=$(address_get_proto "$addr2")
1170	[[ "$proto" == 0x99 ]]
1171	check_err $?
1172
1173	ip address add dev "$devdummy" "$addr" proto 0xab
1174	check_err $?
1175	proto=$(address_get_proto "$addr")
1176	[[ "$proto" == 0xab ]]
1177	check_err $?
1178
1179	ip address replace dev "$devdummy" "$addr" proto 0x11
1180	proto=$(address_get_proto "$addr")
1181	check_err $?
1182	[[ "$proto" == 0x11 ]]
1183	check_err $?
1184
1185	count=$(address_count)
1186	check_err $?
1187	(( count >= 3 )) # $addr, $addr2 and $addr3 plus any kernel addresses
1188	check_err $?
1189
1190	count=$(address_count proto 0)
1191	check_err $?
1192	(( count == 1 )) # just $addr3
1193	check_err $?
1194
1195	count=$(address_count proto 0x11)
1196	check_err $?
1197	(( count == 2 )) # $addr and $addr3
1198	check_err $?
1199
1200	count=$(address_count proto 0xab)
1201	check_err $?
1202	(( count == 1 )) # just $addr3
1203	check_err $?
1204
1205	ip address del dev "$devdummy" "$addr"
1206	ip address del dev "$devdummy" "$addr2"
1207	ip address del dev "$devdummy" "$addr3"
1208
1209	if [ $ret -ne 0 ]; then
1210		end_test "FAIL: address proto $what"
1211		return 1
1212	fi
1213	end_test "PASS: address proto $what"
1214}
1215
1216kci_test_address_proto()
1217{
1218	local ret=0
1219
1220	do_test_address_proto IPv4 192.0.2.1/28
1221	check_err $?
1222
1223	do_test_address_proto IPv6 2001:db8:1::1/64
1224	check_err $?
1225
1226	return $ret
1227}
1228
1229kci_test_enslave_bonding()
1230{
1231	local bond="bond123"
1232	local ret=0
1233
1234	setup_ns testns
1235	if [ $? -ne 0 ]; then
1236		end_test "SKIP bonding tests: cannot add net namespace $testns"
1237		return $ksft_skip
1238	fi
1239
1240	run_cmd ip -netns $testns link add dev $bond type bond mode balance-rr
1241	run_cmd ip -netns $testns link add dev $devdummy type dummy
1242	run_cmd ip -netns $testns link set dev $devdummy up
1243	run_cmd ip -netns $testns link set dev $devdummy master $bond down
1244	if [ $ret -ne 0 ]; then
1245		end_test "FAIL: initially up interface added to a bond and set down"
1246		ip netns del "$testns"
1247		return 1
1248	fi
1249
1250	end_test "PASS: enslave interface in a bond"
1251	ip netns del "$testns"
1252}
1253
1254# Called to validate the addresses on $IFNAME:
1255#
1256# 1. Every `temporary` address must have a matching `mngtmpaddr`
1257# 2. Every `mngtmpaddr` address must have some un`deprecated` `temporary`
1258#
1259# If the mngtmpaddr or tempaddr checking failed, return 0 and stop slowwait
1260validate_mngtmpaddr()
1261{
1262	local dev=$1
1263	local prefix=""
1264	local addr_list=$(ip -j -n $testns addr show dev ${dev})
1265	local temp_addrs=$(echo ${addr_list} | \
1266		jq -r '.[].addr_info[] | select(.temporary == true) | .local')
1267	local mng_prefixes=$(echo ${addr_list} | \
1268		jq -r '.[].addr_info[] | select(.mngtmpaddr == true) | .local' | \
1269		cut -d: -f1-4 | tr '\n' ' ')
1270	local undep_prefixes=$(echo ${addr_list} | \
1271		jq -r '.[].addr_info[] | select(.temporary == true and .deprecated != true) | .local' | \
1272		cut -d: -f1-4 | tr '\n' ' ')
1273
1274	# 1. All temporary addresses (temp and dep) must have a matching mngtmpaddr
1275	for address in ${temp_addrs}; do
1276		prefix=$(echo ${address} | cut -d: -f1-4)
1277		if [[ ! " ${mng_prefixes} " =~ " $prefix " ]]; then
1278			check_err 1 "FAIL: Temporary $address with no matching mngtmpaddr!";
1279			return 0
1280		fi
1281	done
1282
1283	# 2. All mngtmpaddr addresses must have a temporary address (not dep)
1284	for prefix in ${mng_prefixes}; do
1285		if [[ ! " ${undep_prefixes} " =~ " $prefix " ]]; then
1286			check_err 1 "FAIL: No undeprecated temporary in $prefix!";
1287			return 0
1288		fi
1289	done
1290
1291	return 1
1292}
1293
1294kci_test_mngtmpaddr()
1295{
1296	local ret=0
1297
1298	setup_ns testns
1299	if [ $? -ne 0 ]; then
1300		end_test "SKIP mngtmpaddr tests: cannot add net namespace $testns"
1301		return $ksft_skip
1302	fi
1303
1304	# 1. Create a dummy Ethernet interface
1305	run_cmd ip -n $testns link add ${devdummy} type dummy
1306	run_cmd ip -n $testns link set ${devdummy} up
1307	run_cmd ip netns exec $testns sysctl -w net.ipv6.conf.${devdummy}.use_tempaddr=1
1308	run_cmd ip netns exec $testns sysctl -w net.ipv6.conf.${devdummy}.temp_prefered_lft=10
1309	run_cmd ip netns exec $testns sysctl -w net.ipv6.conf.${devdummy}.temp_valid_lft=25
1310	run_cmd ip netns exec $testns sysctl -w net.ipv6.conf.${devdummy}.max_desync_factor=1
1311
1312	# 2. Create several mngtmpaddr addresses on that interface.
1313	# with temp_*_lft configured to be pretty short (10 and 35 seconds
1314	# for prefer/valid respectively)
1315	for i in $(seq 1 9); do
1316		run_cmd ip -n $testns addr add 2001:db8:7e57:${i}::1/64 mngtmpaddr dev ${devdummy}
1317	done
1318
1319	# 3. Confirm that a preferred temporary address exists for each mngtmpaddr
1320	# address at all times, polling once per second for 30 seconds.
1321	slowwait 30 validate_mngtmpaddr ${devdummy}
1322
1323	# 4. Delete each mngtmpaddr address, one at a time (alternating between
1324	# deleting and merely un-mngtmpaddr-ing), and confirm that the other
1325	# mngtmpaddr addresses still have preferred temporaries.
1326	for i in $(seq 1 9); do
1327		(( $i % 4 == 0 )) && mng_flag="mngtmpaddr" || mng_flag=""
1328		if (( $i % 2 == 0 )); then
1329			run_cmd ip -n $testns addr del 2001:db8:7e57:${i}::1/64 $mng_flag dev ${devdummy}
1330		else
1331			run_cmd ip -n $testns addr change 2001:db8:7e57:${i}::1/64 dev ${devdummy}
1332		fi
1333		# the temp addr should be deleted
1334		validate_mngtmpaddr ${devdummy}
1335	done
1336
1337	if [ $ret -ne 0 ]; then
1338		end_test "FAIL: mngtmpaddr add/remove incorrect"
1339	else
1340		end_test "PASS: mngtmpaddr add/remove correctly"
1341	fi
1342
1343	ip netns del "$testns"
1344	return $ret
1345}
1346
1347kci_test_rtnl()
1348{
1349	local current_test
1350	local ret=0
1351
1352	kci_add_dummy
1353	if [ $ret -ne 0 ];then
1354		end_test "FAIL: cannot add dummy interface"
1355		return 1
1356	fi
1357
1358	for current_test in ${TESTS:-$ALL_TESTS}; do
1359		$current_test
1360		check_err $?
1361	done
1362
1363	kci_del_dummy
1364	return $ret
1365}
1366
1367usage()
1368{
1369	cat <<EOF
1370usage: ${0##*/} OPTS
1371
1372        -t <test>   Test(s) to run (default: all)
1373                    (options: $(echo $ALL_TESTS))
1374        -v          Verbose mode (show commands and output)
1375        -P          Pause after every test
1376        -p          Pause after every failing test before cleanup (for debugging)
1377EOF
1378}
1379
1380#check for needed privileges
1381if [ "$(id -u)" -ne 0 ];then
1382	end_test "SKIP: Need root privileges"
1383	exit $ksft_skip
1384fi
1385
1386for x in ip tc;do
1387	$x -Version 2>/dev/null >/dev/null
1388	if [ $? -ne 0 ];then
1389		end_test "SKIP: Could not run test without the $x tool"
1390		exit $ksft_skip
1391	fi
1392done
1393
1394while getopts t:hvpP o; do
1395	case $o in
1396		t) TESTS=$OPTARG;;
1397		v) VERBOSE=1;;
1398		p) PAUSE_ON_FAIL=yes;;
1399		P) PAUSE=yes;;
1400		h) usage; exit 0;;
1401		*) usage; exit 1;;
1402	esac
1403done
1404
1405[ $PAUSE = "yes" ] && PAUSE_ON_FAIL="no"
1406
1407kci_test_rtnl
1408
1409exit $?
1410