Changes in tcp.h

f088104d837a991c65e51fa30bb4196169b3244d - Merge drm/drm-next into drm-intel-gt-next

Tue, 16 Sep 2025 12:53:20 +0200

Merge drm/drm-next into drm-intel-gt-nextBackmerge in order to get the commit: 048832a3f400 ("drm/i915: Refactor shmem_pwrite() to use kiocb and write_iter")To drm-intel-gt-next as there are followup fixes to be applied.Signed-off-by: Joonas Lahtinen List of files: /linux/drivers/net/ovpn/tcp.h

ab93e0dd72c37d378dd936f031ffb83ff2bd87ce - Merge branch 'next' into for-linus

Wed, 06 Aug 2025 19:08:54 +0200

Merge branch 'next' into for-linusPrepare input updates for 6.17 merge window. List of files: /linux/drivers/net/ovpn/tcp.h

a7bee4e7f78089c101be2ad51f4b5ec64782053e - Merge tag 'ib-mfd-gpio-input-pwm-v6.17' of git://git.kernel.org/pub/scm/linux/kernel/git/lee/mfd into next

Mon, 04 Aug 2025 08:28:48 +0200

Merge tag 'ib-mfd-gpio-input-pwm-v6.17' of git://git.kernel.org/pub/scm/linux/kernel/git/lee/mfd into nextMerge an immutable branch between MFD, GPIO, Input and PWM to resolveconflicts for the merge window pull request. List of files: /linux/drivers/net/ovpn/tcp.h

e9ef810dfee7a2227da9d423aecb0ced35faddbe - Merge branch 'for-6.17/amd-sfh' into for-linus

Thu, 31 Jul 2025 22:36:25 +0200

Merge branch 'for-6.17/amd-sfh' into for-linus- add support for operating modes (Basavaraj Natikar) List of files: /linux/drivers/net/ovpn/tcp.h

74f1af95820fc2ee580a775a3a17c416db30b38c - Merge remote-tracking branch 'drm/drm-next' into msm-next

Sun, 29 Jun 2025 04:54:49 +0200

Merge remote-tracking branch 'drm/drm-next' into msm-nextBack-merge drm-next to (indirectly) get arm-smmu updates for makingstall-on-fault more reliable.Signed-off-by: Rob Clark List of files: /linux/drivers/net/ovpn/tcp.h

c598d5eb9fb331ba17bc9ad67ae9a2231ca5aca5 - Merge drm/drm-next into drm-misc-next

Wed, 11 Jun 2025 09:01:34 +0200

Merge drm/drm-next into drm-misc-nextBackmerging to forward to v6.16-rc1Signed-off-by: Thomas Zimmermann List of files: /linux/drivers/net/ovpn/tcp.h

86e2d052c2320bf12571a5d96b16c2745e1cfc5e - Merge drm/drm-next into drm-xe-next

Mon, 09 Jun 2025 18:26:55 +0200

Merge drm/drm-next into drm-xe-nextBackmerging to bring in 6.16Signed-off-by: Thomas Hellström List of files: /linux/drivers/net/ovpn/tcp.h

34c55367af96f62e89221444f04487440ebc6487 - Merge drm/drm-next into drm-intel-next

Mon, 09 Jun 2025 11:40:46 +0200

Merge drm/drm-next into drm-intel-nextSync to v6.16-rc1, among other things to get the fixed size GENMASK_U*()and BIT_U*() macros.Signed-off-by: Jani Nikula List of files: /linux/drivers/net/ovpn/tcp.h

886178a33a30fe685e926d84f531243982fb3c70 - Merge git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf after rc3

Thu, 26 Jun 2025 18:48:06 +0200

Merge git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf after rc3Cross-merge BPF, perf and other fixes after downstream PRs.It restores BPF CI to green after critical fixcommit bc4394e5e79c ("perf: Fix the throttle error of some clock events")No conflicts.Signed-off-by: Alexei Starovoitov List of files: /linux/drivers/net/ovpn/tcp.h

2c7e4a2663a1ab5a740c59c31991579b6b865a26 - Merge tag 'net-6.16-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net

Thu, 05 Jun 2025 21:34:55 +0200

Merge tag 'net-6.16-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netPull networking fixes from Jakub Kicinski: "Including fixes from CAN, wireless, Bluetooth, and Netfilter. Current release - regressions: - Revert "kunit: configs: Enable CONFIG_INIT_STACK_ALL_PATTERN in all_tests", makes kunit error out if compiler is old - wifi: iwlwifi: mvm: fix assert on suspend - rxrpc: fix return from none_validate_challenge() Current release - new code bugs: - ovpn: couple of fixes for socket cleanup and UDP-tunnel teardown - can: kvaser_pciefd: refine error prone echo_skb_max handling logic - fix net_devmem_bind_dmabuf() stub when DEVMEM not compiled - eth: airoha: fixes for config / accel in bridge mode Previous releases - regressions: - Bluetooth: hci_qca: move the SoC type check to the right place, fix GPIO integration - prevent a NULL deref in rtnl_create_link() after locking changes - fix udp gso skb_segment after pull from frag_list - hv_netvsc: fix potential deadlock in netvsc_vf_setxdp() Previous releases - always broken: - netfilter: - nf_nat: also check reverse tuple to obtain clashing entry - nf_set_pipapo_avx2: fix initial map fill (zeroing) - fix the helper for incremental update of packet checksums after modifying the IP address, used by ILA and BPF - eth: - stmmac: prevent div by 0 when clock rate is misconfigured - ice: fix Tx scheduler handling of XDP and changing queue count - eth: fix support for the RGMII interface when delays configured"* tag 'net-6.16-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net: (76 commits) calipso: unlock rcu before returning -EAFNOSUPPORT seg6: Fix validation of nexthop addresses net: prevent a NULL deref in rtnl_create_link() net: annotate data-races around cleanup_net_task selftests: drv-net: tso: make bkg() wait for socat to quit selftests: drv-net: tso: fix the GRE device name selftests: drv-net: add configs for the TSO test wireguard: device: enable threaded NAPI netlink: specs: rt-link: decode ip6gre netlink: specs: rt-link: add missing byte-order properties net: wwan: mhi_wwan_mbim: use correct mux_id for multiplexing wifi: cfg80211/mac80211: correctly parse S1G beacon optional elements net: dsa: b53: do not touch DLL_IQQD on bcm53115 net: dsa: b53: allow RGMII for bcm63xx RGMII ports net: dsa: b53: do not configure bcm63xx's IMP port interface net: dsa: b53: do not enable RGMII delay on bcm63xx net: dsa: b53: do not enable EEE on bcm63xx net: ti: icssg-prueth: Fix swapped TX stats for MII interfaces. selftests: netfilter: nft_nat.sh: add test for reverse clash with nat netfilter: nf_nat: also check reverse tuple to obtain clashing entry ... List of files: /linux/drivers/net/ovpn/tcp.h

ec6a328b2e68adfaa322b633519b72ab6cd33e3a - Merge tag 'ovpn-net-20250603' of https://github.com/OpenVPN/ovpn-net-next

Thu, 05 Jun 2025 12:37:10 +0200

Merge tag 'ovpn-net-20250603' of https://github.com/OpenVPN/ovpn-net-nextAntonio Quartulli says:====================In this batch you can find the following bug fixes:Patch 1: when releasing a UDP socket we were wrongly invokingsetup_udp_tunnel_sock() with an empty config. This was notproperly shutting down the UDP encap state.With this patch we simply undo what was done during setup.Patch 2: ovpn was holding a reference to a 'struct socket'without increasing its reference counter. This was intendedand worked as expected until we hit a race condition whereuser space tries to close the socket while kernel space isalso releasing it. In this case the (struct socket *)->skmember would disappear under our feet leading to a null-ptr-deref.This patch fixes this issue by having struct ovpn_socket holda reference directly to the sk member while also increasingits reference counter.Patch 3: in case of errors along the TCP RX path (softirq)we want to immediately delete the peer, but this operation maysleep. With this patch we move the peer deletion to a scheduledworker.Patch 4 and 5 are instead fixing minor issues in the ovpnkselftests.* tag 'ovpn-net-20250603' of https://github.com/OpenVPN/ovpn-net-next: selftest/net/ovpn: fix missing file selftest/net/ovpn: fix TCP socket creation ovpn: avoid sleep in atomic context in TCP RX error path ovpn: ensure sk is still valid during cleanup ovpn: properly deconfigure UDP-tunnel====================Link: https://patch.msgid.link/20250603111110.4575-1-antonio@openvpn.net/Signed-off-by: Paolo Abeni List of files: /linux/drivers/net/ovpn/tcp.h

ba499a07ce1d912e48e225eadd9b3f994b05fd58 - ovpn: ensure sk is still valid during cleanup

Wed, 30 Apr 2025 02:26:49 +0200

ovpn: ensure sk is still valid during cleanupRemoving a peer while userspace attempts to close its transportsocket triggers a race condition resulting in the followingcrash:Oops: general protection fault, probably for non-canonical address 0xdffffc0000000077: 0000 [#1] SMP KASANKASAN: null-ptr-deref in range [0x00000000000003b8-0x00000000000003bf]CPU: 12 UID: 0 PID: 162 Comm: kworker/12:1 Tainted: G O 6.15.0-rc2-00635-g521139ac3840 #272 PREEMPT(full)Tainted: [O]=OOT_MODULEHardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-20240910_120124-localhost 04/01/2014Workqueue: events ovpn_peer_keepalive_work [ovpn]RIP: 0010:ovpn_socket_release+0x23c/0x500 [ovpn]Code: ea 03 80 3c 02 00 0f 85 71 02 00 00 48 b8 00 00 00 00 00 fc ff df 4d 8b 64 24 18 49 8d bc 24 be 03 00 00 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 30RSP: 0018:ffffc90000c9fb18 EFLAGS: 00010217RAX: dffffc0000000000 RBX: ffff8881148d7940 RCX: ffffffff817787bbRDX: 0000000000000077 RSI: 0000000000000008 RDI: 00000000000003beRBP: ffffc90000c9fb30 R08: 0000000000000000 R09: fffffbfff0d3e840R10: ffffffff869f4207 R11: 0000000000000000 R12: 0000000000000000R13: ffff888115eb9300 R14: ffffc90000c9fbc8 R15: 000000000000000cFS: 0000000000000000(0000) GS:ffff8882b0151000(0000) knlGS:0000000000000000CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033CR2: 00007f37266b6114 CR3: 00000000054a8000 CR4: 0000000000750ef0PKRU: 55555554Call Trace: unlock_ovpn+0x8b/0xe0 [ovpn] ovpn_peer_keepalive_work+0xe3/0x540 [ovpn] ? ovpn_peers_free+0x780/0x780 [ovpn] ? lock_acquire+0x56/0x70 ? process_one_work+0x888/0x1740 process_one_work+0x933/0x1740 ? pwq_dec_nr_in_flight+0x10b0/0x10b0 ? move_linked_works+0x12d/0x2c0 ? assign_work+0x163/0x270 worker_thread+0x4d6/0xd90 ? preempt_count_sub+0x4c/0x70 ? process_one_work+0x1740/0x1740 kthread+0x36c/0x710 ? trace_preempt_on+0x8c/0x1e0 ? kthread_is_per_cpu+0xc0/0xc0 ? preempt_count_sub+0x4c/0x70 ? _raw_spin_unlock_irq+0x36/0x60 ? calculate_sigpending+0x7b/0xa0 ? kthread_is_per_cpu+0xc0/0xc0 ret_from_fork+0x3a/0x80 ? kthread_is_per_cpu+0xc0/0xc0 ret_from_fork_asm+0x11/0x20 Modules linked in: ovpn(O)This happens because the peer deletion operation reachesovpn_socket_release() while ovpn_sock->sock (struct socket *)and its sk member (struct sock *) are still both valid.Here synchronize_rcu() is invoked, after which ovpn_sock->sock->skbecomes NULL, due to the concurrent socket closing triggeredfrom userspace.After having invoked synchronize_rcu(), ovpn_socket_release() willattempt dereferencing ovpn_sock->sock->sk, triggering the crashreported above.The reason for accessing sk is that we need to retrieve itsprotocol and continue the cleanup routine accordingly.This crash can be easily produced by running openvpn userspace inclient mode with `--keepalive 10 20`, while entirely omitting thisoption on the server side.After 20 seconds ovpn will assume the peer (server) to be dead,will start removing it and will notify userspace. The latter willreceive the notification and close the transport socket, thustriggering the crash.To fix the race condition for good, we need to refactor struct ovpn_socket.Since ovpn is always only interested in the sock->sk member (struct sock *)we can directly hold a reference to it, raher than accessing it viaits struct socket container.This means changing "struct socket *ovpn_socket->sock" to"struct sock *ovpn_socket->sk".While acquiring a reference to sk, we can increase its refcounterwithout affecting the socket close()/destroy() notification(which we rely on when userspace closes a socket we are using).By increasing sk's refcounter we know we can dereference itin ovpn_socket_release() without incurring in any race conditionanymore.ovpn_socket_release() will ultimately decrease the referencecounter.Cc: Oleksandr Natalenko Fixes: 11851cbd60ea ("ovpn: implement TCP transport")Reported-by: Qingfang Deng Closes: https://github.com/OpenVPN/ovpn-net-next/issues/1Tested-by: Gert Doering Link: https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg31575.htmlReviewed-by: Michal Swiatkowski Signed-off-by: Antonio Quartulli List of files: /linux/drivers/net/ovpn/tcp.h

1b98f357dadd6ea613a435fbaef1a5dd7b35fd21 - Merge tag 'net-next-6.16' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next

Thu, 29 May 2025 00:24:36 +0200

Merge tag 'net-next-6.16' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-nextPull networking updates from Paolo Abeni: "Core: - Implement the Device Memory TCP transmit path, allowing zero-copy data transmission on top of TCP from e.g. GPU memory to the wire. - Move all the IPv6 routing tables management outside the RTNL scope, under its own lock and RCU. The route control path is now 3x times faster. - Convert queue related netlink ops to instance lock, reducing again the scope of the RTNL lock. This improves the control plane scalability. - Refactor the software crc32c implementation, removing unneeded abstraction layers and improving significantly the related micro-benchmarks. - Optimize the GRO engine for UDP-tunneled traffic, for a 10% performance improvement in related stream tests. - Cover more per-CPU storage with local nested BH locking; this is a prep work to remove the current per-CPU lock in local_bh_disable() on PREMPT_RT. - Introduce and use nlmsg_payload helper, combining buffer bounds verification with accessing payload carried by netlink messages. Netfilter: - Rewrite the procfs conntrack table implementation, improving considerably the dump performance. A lot of user-space tools still use this interface. - Implement support for wildcard netdevice in netdev basechain and flowtables. - Integrate conntrack information into nft trace infrastructure. - Export set count and backend name to userspace, for better introspection. BPF: - BPF qdisc support: BPF-qdisc can be implemented with BPF struct_ops programs and can be controlled in similar way to traditional qdiscs using the "tc qdisc" command. - Refactor the UDP socket iterator, addressing long standing issues WRT duplicate hits or missed sockets. Protocols: - Improve TCP receive buffer auto-tuning and increase the default upper bound for the receive buffer; overall this improves the single flow maximum thoughput on 200Gbs link by over 60%. - Add AFS GSSAPI security class to AF_RXRPC; it provides transport security for connections to the AFS fileserver and VL server. - Improve TCP multipath routing, so that the sources address always matches the nexthop device. - Introduce SO_PASSRIGHTS for AF_UNIX, to allow disabling SCM_RIGHTS, and thus preventing DoS caused by passing around problematic FDs. - Retire DCCP socket. DCCP only receives updates for bugs, and major distros disable it by default. Its removal allows for better organisation of TCP fields to reduce the number of cache lines hit in the fast path. - Extend TCP drop-reason support to cover PAWS checks. Driver API: - Reorganize PTP ioctl flag support to require an explicit opt-in for the drivers, avoiding the problem of drivers not rejecting new unsupported flags. - Converted several device drivers to timestamping APIs. - Introduce per-PHY ethtool dump helpers, improving the support for dump operations targeting PHYs. Tests and tooling: - Add support for classic netlink in user space C codegen, so that ynl-c can now read, create and modify links, routes addresses and qdisc layer configuration. - Add ynl sub-types for binary attributes, allowing ynl-c to output known struct instead of raw binary data, clarifying the classic netlink output. - Extend MPTCP selftests to improve the code-coverage. - Add tests for XDP tail adjustment in AF_XDP. New hardware / drivers: - OpenVPN virtual driver: offload OpenVPN data channels processing to the kernel-space, increasing the data transfer throughput WRT the user-space implementation. - Renesas glue driver for the gigabit ethernet RZ/V2H(P) SoC. - Broadcom asp-v3.0 ethernet driver. - AMD Renoir ethernet device. - ReakTek MT9888 2.5G ethernet PHY driver. - Aeonsemi 10G C45 PHYs driver. Drivers: - Ethernet high-speed NICs: - nVidia/Mellanox (mlx5): - refactor the steering table handling to significantly reduce the amount of memory used - add support for complex matches in H/W flow steering - improve flow streeing error handling - convert to netdev instance locking - Intel (100G, ice, igb, ixgbe, idpf): - ice: add switchdev support for LLDP traffic over VF - ixgbe: add firmware manipulation and regions devlink support - igb: introduce support for frame transmission premption - igb: adds persistent NAPI configuration - idpf: introduce RDMA support - idpf: add initial PTP support - Meta (fbnic): - extend hardware stats coverage - add devlink dev flash support - Broadcom (bnxt): - add support for RX-side device memory TCP - Wangxun (txgbe): - implement support for udp tunnel offload - complete PTP and SRIOV support for AML 25G/10G devices - Ethernet NICs embedded and virtual: - Google (gve): - add device memory TCP TX support - Amazon (ena): - support persistent per-NAPI config - Airoha: - add H/W support for L2 traffic offload - add per flow stats for flow offloading - RealTek (rtl8211): add support for WoL magic packet - Synopsys (stmmac): - dwmac-socfpga 1000BaseX support - add Loongson-2K3000 support - introduce support for hardware-accelerated VLAN stripping - Broadcom (bcmgenet): - expose more H/W stats - Freescale (enetc, dpaa2-eth): - enetc: add MAC filter, VLAN filter RSS and loopback support - dpaa2-eth: convert to H/W timestamping APIs - vxlan: convert FDB table to rhashtable, for better scalabilty - veth: apply qdisc backpressure on full ring to reduce TX drops - Ethernet switches: - Microchip (kzZ88x3): add ETS scheduler support - Ethernet PHYs: - RealTek (rtl8211): - add support for WoL magic packet - add support for PHY LEDs - CAN: - Adds RZ/G3E CANFD support to the rcar_canfd driver. - Preparatory work for CAN-XL support. - Add self-tests framework with support for CAN physical interfaces. - WiFi: - mac80211: - scan improvements with multi-link operation (MLO) - Qualcomm (ath12k): - enable AHB support for IPQ5332 - add monitor interface support to QCN9274 - add multi-link operation support to WCN7850 - add 802.11d scan offload support to WCN7850 - monitor mode for WCN7850, better 6 GHz regulatory - Qualcomm (ath11k): - restore hibernation support - MediaTek (mt76): - WiFi-7 improvements - implement support for mt7990 - Intel (iwlwifi): - enhanced multi-link single-radio (EMLSR) support on 5 GHz links - rework device configuration - RealTek (rtw88): - improve throughput for RTL8814AU - RealTek (rtw89): - add multi-link operation support - STA/P2P concurrency improvements - support different SAR configs by antenna - Bluetooth: - introduce HCI Driver protocol - btintel_pcie: do not generate coredump for diagnostic events - btusb: add HCI Drv commands for configuring altsetting - btusb: add RTL8851BE device 0x0bda:0xb850 - btusb: add new VID/PID 13d3/3584 for MT7922 - btusb: add new VID/PID 13d3/3630 and 13d3/3613 for MT7925 - btnxpuart: implement host-wakeup feature"* tag 'net-next-6.16' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next: (1611 commits) selftests/bpf: Fix bpf selftest build warning selftests: netfilter: Fix skip of wildcard interface test net: phy: mscc: Stop clearing the the UDPv4 checksum for L2 frames net: openvswitch: Fix the dead loop of MPLS parse calipso: Don't call calipso functions for AF_INET sk. selftests/tc-testing: Add a test for HFSC eltree double add with reentrant enqueue behaviour on netem net_sched: hfsc: Address reentrant enqueue adding class to eltree twice octeontx2-pf: QOS: Refactor TC_HTB_LEAF_DEL_LAST callback octeontx2-pf: QOS: Perform cache sync on send queue teardown net: mana: Add support for Multi Vports on Bare metal net: devmem: ncdevmem: remove unused variable net: devmem: ksft: upgrade rx test to send 1K data net: devmem: ksft: add 5 tuple FS support net: devmem: ksft: add exit_wait to make rx test pass net: devmem: ksft: add ipv4 support net: devmem: preserve sockc_err page_pool: fix ugly page_pool formatting net: devmem: move list_add to net_devmem_bind_dmabuf. selftests: netfilter: nft_queue.sh: include file transfer duration in log message net: phy: mscc: Fix memory leak when using one step timestamping ... List of files: /linux/drivers/net/ovpn/tcp.h

9a0b084a0ff7f8805c57c338603cf60005ee7c7e - Merge branch 'introducing-openvpn-data-channel-offload'

Thu, 17 Apr 2025 12:30:08 +0200

Merge branch 'introducing-openvpn-data-channel-offload'Antonio Quartulli says:====================Introducing OpenVPN Data Channel OffloadNotable changes since v25:* removed netdev notifier (was only used for our own devices)* added .dellink implementation to address what was previously done in notifier* removed .ndo_open and moved netif_carrier_off() call to .ndo_init* fixed author in MODULE_AUTHOR()* properly indented checks in ovpn.yaml* switched from TSTATS to DSTATS* removed obsolete comment in ovpn_socket_new()* removed unrelated hunk in ovpn_socket_new()The latest code can also be found at:https://github.com/OpenVPN/ovpn-net-nextReviewed-by: Sabrina Dubroca Tested-by: Oleksandr Natalenko ====================Link: https://patch.msgid.link/20250415-b4-ovpn-v26-0-577f6097b964@openvpn.netSigned-off-by: Paolo Abeni List of files: /linux/drivers/net/ovpn/tcp.h

11851cbd60ea1e5abbd97619d69845ead99303d6 - ovpn: implement TCP transport

Tue, 15 Apr 2025 13:17:28 +0200

ovpn: implement TCP transportWith this change ovpn is allowed to communicate to peers also via TCP.Parsing of incoming messages is implemented through the strparser API.Note that ovpn redefines sk_prot and sk_socket->ops for the TCP socketused to communicate with the peer.For this reason it needs to access inet6_stream_ops, which is declaredas extern in the IPv6 module, but it is not fully exported.Therefore this patch is also adding EXPORT_SYMBOL_GPL(inet6_stream_ops)to net/ipv6/af_inet6.c.Cc: David Ahern Cc: Eric Dumazet Cc: Jakub Kicinski Cc: Paolo Abeni Cc: Simon Horman Signed-off-by: Antonio Quartulli Link: https://patch.msgid.link/20250415-b4-ovpn-v26-11-577f6097b964@openvpn.netReviewed-by: Sabrina Dubroca Tested-by: Oleksandr Natalenko Signed-off-by: Paolo Abeni List of files: /linux/drivers/net/ovpn/tcp.h