Changes in Makefile

18a9a4342136c5ae954b37d961c374d369615de2 - selftests: net: Test UDP length overflow with PMTU discover and big MTU

Tue, 01 Sep 2026 21:57:13 +0200

selftests: net: Test UDP length overflow with PMTU discover and big MTUTwo previous commits fixed overflow of UDP length when setsockoptIP(V6)_MTU_DISCOVER is set to IPV6_PMTUDISC_DO or IP(V6)_PMTUDISC_PROBE,and a large packet is sent over a netdev with an unusually large MTU.This commit adds the selftests that replicate the described steps toreproduce for IPv6 and IPv4, and also one more test that ensures thatsending UDP jumbograms over a raw socket is still possible after thefix.Signed-off-by: Alice Mikityanska Reviewed-by: Willem de Bruijn Link: https://patch.msgid.link/20260901195714.673548-4-alice.kernel@fastmail.imSigned-off-by: Jakub Kicinski List of files: /linux/tools/testing/selftests/net/Makefile

c923c14942b164cfc2c1efa4e6324214f2fc248a - selftests: net: Add exception cache tests

Fri, 28 Aug 2026 21:23:44 +0200

selftests: net: Add exception cache testsAdd a test for the IPv4 and IPv6 exception caches, covering theexceptions that are created in response to ICMP errors quoting a UDPpacket.The topology consists of a host (h1) that reaches a remote host (h2)via a router (r1), with a second router (r2) attached to the segmentshared by h1 and r1. UDP packets are injected using a packet socket, sothat an ICMP error quoting them is only matched to a socket when one wasopened separately with the same source port. PMTU errors are provoked bylowering the MTU of the far end of the path and redirects by pointingr1's route towards h2 back over the segment it received the packet from.The following is tested for both address families and for both PMTU andredirect exceptions:* An error that is not matched to a socket creates an exception that carries the new MTU or gateway.* An error that is matched to a socket creates the same exception.The PMTU tests further verify that a lower PMTU replaces the one storedin the exception whereas a higher one does not, and that a socket whichdisabled PMTU discovery using IP{,V6}_PMTUDISC_OMIT gets the sameexception as the other cases.Without "ipv4: udp: Create exceptions before socket matching" and "ipv6:udp: Create exceptions before socket matching", the tests that do notopen a socket fail: # ./exception_cache.sh TEST: IPv4: PMTU: exception without a matching socket [FAIL] No socket: exception does not carry an MTU of 1400 TEST: IPv6: PMTU: exception without a matching socket [FAIL] No socket: exception does not carry an MTU of 1400 TEST: IPv4: PMTU: exception with a matching socket [ OK ] TEST: IPv6: PMTU: exception with a matching socket [ OK ] TEST: IPv4: PMTU: exception with a socket ignoring it [FAIL] PMTU discovery disabled: exception does not carry an MTU of 1400 TEST: IPv6: PMTU: exception with a socket ignoring it [FAIL] PMTU discovery disabled: exception does not carry an MTU of 1400 TEST: IPv4: Redirect: exception without a matching socket [FAIL] No socket: exception does not carry the new gateway TEST: IPv6: Redirect: exception without a matching socket [FAIL] No socket: exception does not carry the new gateway TEST: IPv4: Redirect: exception with a matching socket [ OK ] TEST: IPv6: Redirect: exception with a matching socket [ OK ]Signed-off-by: Ido Schimmel Link: https://patch.msgid.link/20260828192344.2596928-5-idosch@nvidia.comSigned-off-by: Jakub Kicinski List of files: /linux/tools/testing/selftests/net/Makefile

96bf660d4c14948293fe5d8e26d2de536f8eb1d8 - selftests: net: separate ipv6_flowlabel_mgr test

Thu, 13 Aug 2026 05:07:05 +0200

selftests: net: separate ipv6_flowlabel_mgr testThe ipv6_flowlabel_mgr used to be a component of a broader overallflow label test, defined in the ipv6_flowlabel.sh file. This wrapperscript called tests defined on ipv6_flowlabel.c andipv6_flowlabel_mgr.c files, using predefined parameters and enforcingthe in_netns.sh helper to set network namespaces for each test env.However, the ipv6_flowlabel_mgr.c was drastically changed recently.These modifications led to the mgr tests becoming a self contained andindependent test suite, enforcing netns creation by itself andnot relying on the ipv6_flowlabel.sh wrapper for proper test executionanymore. Therefore, remove the mgr tests from the wrapper and updatethe Makefile to handle it as a standalone test program instead.Signed-off-by: Marcelo Mendes Spessoto Junior Reviewed-by: Hangbin Liu Link: https://patch.msgid.link/20260813030708.37609-1-marcelomspessoto@gmail.comSigned-off-by: Jakub Kicinski List of files: /linux/tools/testing/selftests/net/Makefile

1016a547c6851cde2f5f57f173cba08153e3bcef - selftests: seg6: add test for post-encap SID route lookup

Sat, 11 Jul 2026 18:29:07 +0200

selftests: seg6: add test for post-encap SID route lookupAdd a selftest for the SEG6_IPTUNNEL_TABLE attribute, which selects the FIBtable for the post-encap SID route lookup. This looks up the route for thefirst SID, the outer destination of the encapsulated packet.Two routers provide L3 VPN services over an IPv6 underlay. Each router usesa separate VRF per tenant, with default blackhole routes (IPv4 and IPv6)that drop unmatched traffic. Tenant traffic is encapsulated, thendecapsulated with an End.DT46.The encap routes are installed in the tenant VRF, but the routes that matchthe first SIDs live in a separate underlay table (500). The "lookup 500"attribute points the lookup there rather than to the VRF.The test covers both the input path, where forwarded host traffic triggersencapsulation, and the output path, where a router originates traffic fromits own loopback inside a VRF.With the "lookup" attribute, traffic reaches its destination on both paths.Without it, on the input path the lookup stays in the VRF and hits theblackhole, and on the output path it falls through to the main table, whichhas no matching route.Signed-off-by: Andrea Mayer Reviewed-by: Nicolas Dichtel Link: https://patch.msgid.link/20260711162907.6521-3-andrea.mayer@uniroma2.itSigned-off-by: Jakub Kicinski List of files: /linux/tools/testing/selftests/net/Makefile

4d3365d5d3283010a5d8ab44f568d65e75a06629 - Merge branch 'big-tcp-for-udp-tunnels'

Wed, 22 Jul 2026 13:48:46 +0200

Merge branch 'big-tcp-for-udp-tunnels'Alice Mikityanska says:====================BIG TCP for UDP tunnelsThis series is a follow-up to "BIG TCP without HBH in IPv6", and it addssupport for BIG TCP IPv4/IPv6 workloads in vxlan and geneve. Now thatIPv6 BIG TCP doesn't require stripping the HBH in all variouscombinations in tunneled traffic, adding BIG TCP becomes feasible.Patch 01 adds accessors for the length field in the UDP header, assuggested by Paolo in review. The usage of udp_set_len is then added inthe following patches that start using length=0 in BIG TCP UDP packets.Patches 02-04 close the gaps that prevent BIG TCP packets from goingthrough UDP tunnel code.Patch 05 validates packets in udp_gro_receive to exclude packets withlength=0 from GRO aggregation.Patch 06 is for proper formatting in tcpdump (set UDP len to 0 ratherthan a trimmed value on overflow).Patches 07-08 bump up tso_max_size for VXLAN and GENEVE.Patch 09 adds selftests.====================$Link: https://patch.msgid.link/20260710134242.216538-1-alice.kernel@fastmail.imSigned-off-by: Paolo Abeni List of files: /linux/tools/testing/selftests/net/Makefile

5cb53743e1ff3a2e0eac415412c724b78c5f047f - selftests: net: Add a test for BIG TCP in UDP tunnels

Fri, 10 Jul 2026 15:42:42 +0200

selftests: net: Add a test for BIG TCP in UDP tunnelsThe test sets up VXLAN and GENEVE tunnels over IPv4 and IPv6 and runsIPv4 and IPv6 traffic through them with BIG TCP enabled. It checks thata non-negligible amount of big aggregated packets are seen by setting upiptables counters.Check the number of packets on both TX and RX sides to verify that GSOpackets are valid and not dropped. Capture on the lower netdev (veth),when checksum offload is on, to verify that encapsulated BIG TCP packetscan get to their destination. In the test with TX checksum offload off,software GSO splits aggregated VXLAN packets before passing them toveth, so capture inside the tunnel instead to check that the big packetsare not dropped.Check that the amount of SACKs is negligible. On unsupported kernels,some amount of broken GSO packets bigger than 65536 bytes can beproduced in VXLAN tunnels, but they don't reach the destination. SeeingTCP SACKs is a sign that such packets could have been dropped (in suchcases, the amount of SACKs is a few times bigger than the number ofattempts to send BIG TCP packets).Signed-off-by: Alice Mikityanska Link: https://patch.msgid.link/20260710134242.216538-10-alice.kernel@fastmail.imReviewed-by: Nikolay Aleksandrov Signed-off-by: Paolo Abeni List of files: /linux/tools/testing/selftests/net/Makefile

e5382133c51cc92766914b54c9c257d7c54c8079 - selftests: net: add FOU multicast encapsulation resubmit test

Wed, 08 Jul 2026 02:35:04 +0200

selftests: net: add FOU multicast encapsulation resubmit testAdd a selftest to verify that FOU-encapsulated packets addressed to amulticast destination are correctly resubmitted to the inner protocolhandler (GRE) via the UDP multicast delivery path. Both IPv4 and IPv6paths are tested.The test creates two network namespaces connected by a veth pair witha FOU/GRETAP (IPv4) and FOU/ip6gretap (IPv6) tunnel using multicastremote addresses (239.0.0.1 and ff0e::1). Ping is sent through eachtunnel and received packets are counted on the receiver's tunnelinterface.The veth pair is created directly inside the namespaces to avoidpossible name collisions with devices in the root namespace.Static neighbor entries are configured on the sender because ARP/NDreplies from the receiver cannot traverse the unidirectional multicasttunnel back to the sender.The early demux optimization (net.ipv4.ip_early_demux, which controlsboth IPv4 and IPv6) is disabled on the receiver to force packetsthrough __udp4_lib_mcast_deliver() / __udp6_lib_mcast_deliver(), whichis the code path being tested.Signed-off-by: Anton Danilov Assisted-by: Claude:claude-opus-4-6Reviewed-by: Willem de Bruijn Link: https://patch.msgid.link/a5b65f092d22a12b52fc536c0565b948cd8ecae3.1783372173.git.littlesmilingcloud@gmail.comSigned-off-by: Paolo Abeni List of files: /linux/tools/testing/selftests/net/Makefile

ae57a55332436ca58d1824d3375478afd51dca6a - selftests: net: add local ECMP rehash test

Mon, 15 Jun 2026 06:21:58 +0200

selftests: net: add local ECMP rehash testAdd ecmp_rehash.sh with nine scenarios verifying that TCP rehashselects a different local ECMP path for IPv6: - SYN retransmission (forward path blocked during setup) - SYN/ACK retransmission (reverse path blocked during setup) - Midstream RTO (forward path blocked on established connection) - Midstream ACK rehash (reverse path blocked on established connection) - PLB rehash (ECN-driven congestion on established connection) - Hash policy 1 negative test (rehash attempted but path unchanged) - No flowlabel leak (client mp_hash does not alter on-wire flowlabel) - Dst rebuild consistency (dst invalidation does not change path) - Syncookie server path consistency (SYN-ACK and post-cookie ACKs use the same ECMP path)The policy 1 test verifies that fib_multipath_hash_policy=1 computesa deterministic 5-tuple hash, so txhash re-rolls do not change theECMP path while TcpTimeoutRehash still increments.The flowlabel leak test sets auto_flowlabels=0 on the client andinstalls tc filters on client egress that drop TCP packets withnonzero flowlabel, confirming that the client's fl6->mp_hash doesnot leak into the on-wire IPv6 flow label.The PLB test needs DCTCP, a restricted congestion control. Ratherthan relax the host-global tcp_allowed_congestion_control (noper-netns equivalent), it pins dctcp on the test routes via thecongctl route attribute, confined to the test namespaces.The dst rebuild test streams data, invalidates the cached dst byadding and removing a dummy route (bumping the fib6_node sernum),and verifies that traffic stays on the same path. The sernum changecauses ip6_dst_check() to fail on the next transmit, triggering afresh route lookup via inet6_csk_route_socket().ECMP_REBUILD_ROUNDS=10 repeats the check to reduce the probabilityof a buggy kernel passing by chance with 2-way ECMP.The syncookie server path consistency test verifies that theserver's SYN-ACK and subsequent ACKs use the same ECMP path.With syncookies, the request socket is freed after the SYN-ACK,so cookie_tcp_reqsk_init() must derive the same txhash (from thecookie) that was used for the SYN-ACK's route lookup.The syncookie test forces tcp_syncookies=2; it skips whenCONFIG_SYN_COOKIES is not available. selftests/net/config selectsit (and CONFIG_TCP_CONG_DCTCP for the PLB test).Signed-off-by: Neil Spring Link: https://patch.msgid.link/20260615042158.1600746-3-ntspring@meta.comSigned-off-by: Jakub Kicinski List of files: /linux/tools/testing/selftests/net/Makefile

8d72997dab65b1e9e3220302e26eaecd9b99c02f - Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net

Fri, 05 Jun 2026 00:26:27 +0200

Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netCross-merge networking fixes after downstream PR (net-7.1-rc7).Silent conflicts:net/wireless/nl80211.c cb9959ab5f99 ("wifi: cfg80211: enforce HE/EHT cap/oper consistency") a384ae969902 ("wifi: cfg80211: move AP HT/VHT/... operation to beacon info")https://lore.kernel.org/aiGJDaHV4UlCexIQ@sirena.org.ukConflicts:drivers/net/wireless/intel/iwlwifi/mld/ap.c a342c99cb70d ("wifi: iwlwifi: mld: honor BSS_CHANGED_BEACON_ENABLED") 9bf1b409afc7 ("wifi: iwlwifi: mld: send tx power constraints before link activation")https://lore.kernel.org/ah2bfedhV45ZxMO8@sirena.org.ukdrivers/net/wireless/intel/iwlwifi/pcie/drv.c 093305d801fa ("wifi: iwlwifi: pcie: simplify the resume flow if fast resume is not used") e2323929a68a ("wifi: iwlwifi: pcie: add debug print for resume flow if powered off")https://lore.kernel.org/ah2bfedhV45ZxMO8@sirena.org.ukAdjacent changes:drivers/net/ethernet/airoha/airoha_eth.c b38cae85d1c4 ("net: airoha: Fix use-after-free in metadata dst teardown") ec6c391bcca7 ("net: airoha: Introduce airoha_gdm_dev struct")drivers/net/ethernet/microchip/lan743x_main.c 8173d22b211f ("net: lan743x: permit VLAN-tagged packets up to configured MTU") e3c6508a46f5 ("net: lan743x: avoid netdev-based logging before netdev registration")Signed-off-by: Jakub Kicinski List of files: /linux/tools/testing/selftests/net/Makefile

8df1c84e7272a5e24b563df7e50111dc81014d4a - selftests: net: add vxlan vnifilter notification test

Tue, 02 Jun 2026 20:51:38 +0200

selftests: net: add vxlan vnifilter notification testAdd a selftest for VXLAN vnifilter netlink notifications that verifiesRTM_NEWTUNNEL and RTM_DELTUNNEL are sent correctly when VNIs are added,deleted, or updated, and that no spurious notifications are sent whena VNI is re-added with the same attributes.Signed-off-by: Andy Roulin Acked-by: Petr Machata Link: https://patch.msgid.link/20260602185138.253265-4-aroulin@nvidia.comSigned-off-by: Jakub Kicinski List of files: /linux/tools/testing/selftests/net/Makefile

c0375944d99781e13285a62a3485257ad488b30c - selftests: net: Add protodown tests

Thu, 07 May 2026 12:59:06 +0200

selftests: net: Add protodown testsAdd a selftest for the protodown mechanism.Five test cases are included:1. Basic protodown toggling: Verify that setting protodown on macvlan results in DOWN operational state and clearing it restores UP.2. Same as the previous test case, but with vxlan.3. Protodown reasons: Verify that protodown cannot be cleared while there are active protodown reasons, but can be cleared once all reasons are removed.4. Protodown with lower device being toggled: Verify that toggling the lower device's carrier while protodown is on does not cause the macvlan to gain carrier.5. Protodown with lower device down: Verify that toggling protodown while the lower device has no carrier does not cause the macvlan to gain carrier.Note that the last two test cases fail without "net: Do not turn oncarrier when protodown is on" and "net: Do not unconditionally turn oncarrier when turning off protodown": # ./protodown.sh TEST: Basic protodown on/off with macvlan [ OK ] TEST: Basic protodown on/off with vxlan [ OK ] TEST: Protodown reasons [ OK ] TEST: Protodown with lower device toggled [FAIL] Macvlan operational state is not DOWN despite protodown TEST: Protodown with lower device down [FAIL] Macvlan is not LOWERLAYERDOWN after clearing protodownAssisted-by: Claude:claude-opus-4-6Signed-off-by: Ido Schimmel Link: https://patch.msgid.link/20260507105906.891817-5-idosch@nvidia.comSigned-off-by: Jakub Kicinski List of files: /linux/tools/testing/selftests/net/Makefile

6a4c4656b0d2d4056a1f0c35442db4e8a5cf8021 - Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net

Thu, 30 Apr 2026 21:49:56 +0200

Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netCross-merge networking fixes after downstream PR (net-7.1-rc3).Conflicts:net/ipv4/igmp.c 726fa7da2d8c ("ipv4: igmp: get rid of IGMPV3_{QQIC,MRC} and simplify calculation") c6bebaa744f7 ("ipv4: igmp: annotate data-races in igmp_heard_query()")https://lore.kernel.org/a7365e4873340f7a5e30411207de3bf9@kernel.orgAdjacent changes:net/psp/psp_main.c 30cb24f97d44 ("psp: strip variable-length PSP header in psp_dev_rcv()") c2b22277ad89 ("psp: validate IPv4 header fields in psp_dev_rcv()")net/sched/sch_fq_codel.c f83e07b29246 ("net/sched: sch_fq_codel: annotate data-races from fq_codel_dump_class_stats()") 3f3aa77ff1c8 ("net/sched: add qstats_cpu_drop_inc() helper")net/wireless/pmsr.c 0f3c0a197309 ("wifi: nl80211: fix NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST usage") 410aa47fd9d3 ("wifi: cfg80211: allow suppressing FTM result reporting for PD requests")Signed-off-by: Jakub Kicinski List of files: /linux/tools/testing/selftests/net/Makefile

5c6baef3885c0e16e63d432fe31aa6f7e98e18dc - selftests: drv-net: convert so_txtime to drv-net

Mon, 04 May 2026 19:38:34 +0200

selftests: drv-net: convert so_txtime to drv-netIn preparation for extending to pacing hardware offload, convert theso_txtime.sh test to a drv-net test that can be run against netdevsimand real hardware.Also update so_txtime.c to not exit on first failure, but run tocompletion and report exit code there. This helps with debuggingunexpected results, especially when processing multiple packets,as happens in the "reverse_order" testcase.Signed-off-by: Willem de Bruijn ----v6 -> v7- update test to use new argument expect_fail- v6 received Reviewed-by, but dropped due to above (minor) changev5 -> v6- fix order in tools/testing/selftests/drivers/net/configv4 -> v5- move qdisc setup/restore into each test- add tc to utils.py (separate patch)- test expected failure (separate patch)- fix pylint- convert fail to pass for timing errors if KSFT_MACHINE_SLOW (cmd does not special case KSFT_SKIP process returncode yet)Responses to sashiko review- The test converts per packet failure to errors, to continue testing other packets, but other error() cases are not in scope.- The test starts sender and receiver at an absolute future time, like the original test. This assumes ~msec scale sync'ed clocks.- The tc qdisc replace command works fine with noqueue. Tested manually.v3 -> v4- restore original qdisc after test- drop unnecessary underscore in tap test namesv2 -> v3- Makefile: so_txtime from YNL_GEN_FILES to TEST_GEN_FILES (Sashiko, NIPA)v1 -> v2- move so_txtime.c for net/lib to drivers/net (Jakub)- fix drivers/net/config order (Jakub)- detect passing when failure is expected (Jakub, Sashiko)- pass pylint --disable=R (Jakub)- only call ksft_run once (Jakub)- do not sleep if waiting time is negative (Sashiko)- add \n when converting error() to fprintf() (Sashiko)- 4 space indentation, instead of 2 space- increase sync delay from 100 to 200ms, to fix rare vng flakesLink: https://patch.msgid.link/20260504174056.565319-4-willemdebruijn.kernel@gmail.comSigned-off-by: Jakub Kicinski List of files: /linux/tools/testing/selftests/net/Makefile

d39887f55d8edaacdb4fbc4cbfecff31dec1dc6a - net: selftests: add getsockopt_iter regression tests

Fri, 01 May 2026 17:52:53 +0200

net: selftests: add getsockopt_iter regression testsAdd a single kselftest covering the proto_ops getsockopt_iterconversions for AF_NETLINK and AF_VSOCK, using one fixture per protocol:netlink:NETLINK_PKTINFO covers the flag-style int path (exact size, oversizeclamp, undersize -EINVAL); NETLINK_LIST_MEMBERSHIPS covers thesize-discovery path that always reports the required buffer length backvia optlen, even when the user buffer is too small to receive any groupbits.vsock:SO_VM_SOCKETS_BUFFER_SIZE covers the u64 path (exact size, oversizeclamp, undersize -EINVAL).Each fixture also exercises an unknown optname and a bogus level sothe returned-length / errno semantics preserved by the sockopt_tconversion are pinned down.Signed-off-by: Breno Leitao Reviewed-by: Bobby Eshleman Acked-by: Stanislav Fomichev Link: https://patch.msgid.link/20260501-getsock_one-v1-3-810ce23ea70e@debian.orgSigned-off-by: Jakub Kicinski List of files: /linux/tools/testing/selftests/net/Makefile

d1ae37dc6881a6a9113c8545cdbba731393d8dcd - selftest: net: Add test for TCP flow failover with ECMP routes.

Thu, 30 Apr 2026 22:09:01 +0200

selftest: net: Add test for TCP flow failover with ECMP routes.Without the previous commit, TCP failed to switch to alternativeIPv6 routes immediately upon carrier loss.It would persist with the dead route until reaching the thresholdnet.ipv4.tcp_retries1, leading to unnecessary delays in failover.Let's add a selftest for this scenario to ensure TCP fails overimmediately upon a carrier loss event.Before: TEST: TCP IPv4 failover [ OK ] TEST: TCP IPv6 failover [FAIL]After: TEST: TCP IPv4 failover [ OK ] TEST: TCP IPv6 failover [ OK ]Signed-off-by: Kuniyuki Iwashima Signed-off-by: Sagarika Sharma Link: https://patch.msgid.link/20260430200909.527827-3-sharmasagarika@google.comSigned-off-by: Jakub Kicinski List of files: /linux/tools/testing/selftests/net/Makefile

e254ffb9502c8b4c7f8712c34ae6590796825260 - selftests/net: Split netdevsim tests from HW tests in nk_qlease

Tue, 14 Apr 2026 00:08:05 +0200

selftests/net: Split netdevsim tests from HW tests in nk_qleaseAs pointed out in 3d2c3d2eea9a ("selftests: net: py: explicitly forbidmultiple ksft_run() calls"), ksft_run() cannot be called multiple times.Move the netdevsim-based queue lease tests to selftests/net/ so thateach file has exactly one ksft_run() call.The HW tests (io_uring ZC RX, queue attrs, XDP with MP, destroy) remainin selftests/drivers/net/hw/.Fixes: 65d657d80684 ("selftests/net: Add queue leasing tests with netkit")Signed-off-by: Daniel Borkmann Link: https://lore.kernel.org/netdev/20260409181950.7e099b6c@kernel.orgReviewed-by: Nikolay Aleksandrov Link: https://patch.msgid.link/20260413220809.604592-3-daniel@iogearbox.netSigned-off-by: Jakub Kicinski List of files: /linux/tools/testing/selftests/net/Makefile

20ae6d76e381eb520d0d1db526a41b22390816f6 - selftests: net: add bridge STP mode selection test

Sun, 05 Apr 2026 22:52:24 +0200

selftests: net: add bridge STP mode selection testAdd a selftest for the IFLA_BR_STP_MODE bridge attribute that verifies:1. stp_mode defaults to auto on new bridges2. stp_mode can be toggled between user, kernel, and auto3. Changing stp_mode while STP is active is rejected with -EBUSY4. Re-setting the same stp_mode while STP is active succeeds5. stp_mode user in a network namespace yields userspace STP (stp_state=2)6. stp_mode kernel forces kernel STP (stp_state=1)7. stp_mode auto in a netns preserves traditional fallback to kernel STP8. stp_mode and stp_state can be set atomically in a single message9. stp_mode persists across STP disable/enable cyclesTest 5 is the key use case: it demonstrates that userspace STP can nowbe enabled in non-init network namespaces by setting stp_mode to userbefore enabling STP.Test 8 verifies the atomic usage pattern where both attributes are setin a single netlink message, which is supported because br_changelink()processes IFLA_BR_STP_MODE before IFLA_BR_STP_STATE.The test gracefully skips if the installed iproute2 does not supportthe stp_mode attribute.Assisted-by: Claude:claude-opus-4-6Reviewed-by: Ido Schimmel Acked-by: Nikolay Aleksandrov Signed-off-by: Andy Roulin Link: https://patch.msgid.link/20260405205224.3163000-4-aroulin@nvidia.comSigned-off-by: Jakub Kicinski List of files: /linux/tools/testing/selftests/net/Makefile

b6e39e48469e37057fce27a1b87cf6d3e456aa42 - Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net

Thu, 02 Apr 2026 19:57:09 +0200

Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/netCross-merge networking fixes after downstream PR (net-7.0-rc8).Conflicts:net/ipv6/seg6_iptunnel.c c3812651b522f ("seg6: separate dst_cache for input and output paths in seg6 lwtunnel") 78723a62b969a ("seg6: add per-route tunnel source address")https://lore.kernel.org/adZhwtOYfo-0ImSa@sirena.org.uknet/ipv4/icmp.c fde29fd934932 ("ipv4: icmp: fix null-ptr-deref in icmp_build_probe()") d98adfbdd5c01 ("ipv4: drop ipv6_stub usage and use direct function calls")https://lore.kernel.org/adO3dccqnr6j-BL9@sirena.org.ukAdjacent changes:drivers/net/ethernet/stmicro/stmmac/chain_mode.c 51f4e090b9f8 ("net: stmmac: fix integer underflow in chain mode") 6b4286e05508 ("net: stmmac: rename STMMAC_GET_ENTRY() -> STMMAC_NEXT_ENTRY()")Signed-off-by: Jakub Kicinski List of files: /linux/tools/testing/selftests/net/Makefile

32dfd742f06a68fac6499a58f52025990c854031 - selftests: seg6: add test for dst_cache isolation in seg6 lwtunnel

Sat, 04 Apr 2026 02:44:05 +0200

selftests: seg6: add test for dst_cache isolation in seg6 lwtunnelAdd a selftest that verifies the dst_cache in seg6 lwtunnel is notshared between the input (forwarding) and output (locally generated)paths.The test creates three namespaces (ns_src, ns_router, ns_dst)connected in a line. An SRv6 encap route on ns_router encapsulatestraffic destined to cafe::1 with SID fc00::100. The SID isreachable only for forwarded traffic (from ns_src) via an ip rulematching the ingress interface (iif veth-r0 lookup 100), andblackholed in the main table.The test verifies that: 1. A packet generated locally on ns_router does not reach ns_dst with an empty cache, since the SID is blackholed; 2. A forwarded packet from ns_src populates the input cache from table 100 and reaches ns_dst; 3. A packet generated locally on ns_router still does not reach ns_dst after the input cache is populated, confirming the output path does not reuse the input cache entry.Both the forwarded and local packets are pinned to the same CPUwith taskset, since dst_cache is per-cpu.Cc: Shuah Khan Signed-off-by: Andrea Mayer Reviewed-by: Nicolas Dichtel Reviewed-by: Justin Iurman Link: https://patch.msgid.link/20260404004405.4057-3-andrea.mayer@uniroma2.itSigned-off-by: Jakub Kicinski List of files: /linux/tools/testing/selftests/net/Makefile

c1f9a89b0c901266028e66cd8e6bdf54c8c3042e - selftests: net: add test for Netlink policy dumps

Wed, 11 Mar 2026 04:28:39 +0100

selftests: net: add test for Netlink policy dumpsAdd validation for the nlctrl family, accessing family info anddumping policies. TAP version 13 1..4 ok 1 nl_nlctrl.getfamily_do ok 2 nl_nlctrl.getfamily_dump ok 3 nl_nlctrl.getpolicy_dump ok 4 nl_nlctrl.getpolicy_by_op # Totals: pass:4 fail:0 xfail:0 xpass:0 skip:0 error:0Link: https://patch.msgid.link/20260311032839.417748-5-kuba@kernel.orgSigned-off-by: Jakub Kicinski List of files: /linux/tools/testing/selftests/net/Makefile