Changes in bridge_stp_mode.sh

91a4855d6c03e770e42f17c798a36a3c46e63de2 - Merge tag 'net-next-7.1' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next

Wed, 15 Apr 2026 03:36:10 +0200

Merge tag 'net-next-7.1' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-nextPull networking updates from Jakub Kicinski: "Core & protocols: - Support HW queue leasing, allowing containers to be granted access to HW queues for zero-copy operations and AF_XDP - Number of code moves to help the compiler with inlining. Avoid output arguments for returning drop reason where possible - Rework drop handling within qdiscs to include more metadata about the reason and dropping qdisc in the tracepoints - Remove the rtnl_lock use from IP Multicast Routing - Pack size information into the Rx Flow Steering table pointer itself. This allows making the table itself a flat array of u32s, thus making the table allocation size a power of two - Report TCP delayed ack timer information via socket diag - Add ip_local_port_step_width sysctl to allow distributing the randomly selected ports more evenly throughout the allowed space - Add support for per-route tunsrc in IPv6 segment routing - Start work of switching sockopt handling to iov_iter - Improve dynamic recvbuf sizing in MPTCP, limit burstiness and avoid buffer size drifting up - Support MSG_EOR in MPTCP - Add stp_mode attribute to the bridge driver for STP mode selection. This addresses concerns about call_usermodehelper() usage - Remove UDP-Lite support (as announced in 2023) - Remove support for building IPv6 as a module. Remove the now unnecessary function calling indirection Cross-tree stuff: - Move Michael MIC code from generic crypto into wireless, it's considered insecure but some WiFi networks still need it Netfilter: - Switch nft_fib_ipv6 module to no longer need temporary dst_entry object allocations by using fib6_lookup() + RCU. Florian W reports this gets us ~13% higher packet rate - Convert IPVS's global __ip_vs_mutex to per-net service_mutex and switch the service tables to be per-net. Convert some code that walks the service lists to use RCU instead of the service_mutex - Add more opinionated input validation to lower security exposure - Make IPVS hash tables to be per-netns and resizable Wireless: - Finished assoc frame encryption/EPPKE/802.1X-over-auth - Radar detection improvements - Add 6 GHz incumbent signal detection APIs - Multi-link support for FILS, probe response templates and client probing - New APIs and mac80211 support for NAN (Neighbor Aware Networking, aka Wi-Fi Aware) so less work must be in firmware Driver API: - Add numerical ID for devlink instances (to avoid having to create fake bus/device pairs just to have an ID). Support shared devlink instances which span multiple PFs - Add standard counters for reporting pause storm events (implement in mlx5 and fbnic) - Add configuration API for completion writeback buffering (implement in mana) - Support driver-initiated change of RSS context sizes - Support DPLL monitoring input frequency (implement in zl3073x) - Support per-port resources in devlink (implement in mlx5) Misc: - Expand the YAML spec for Netfilter Drivers - Software: - macvlan: support multicast rx for bridge ports with shared source MAC address - team: decouple receive and transmit enablement for IEEE 802.3ad LACP "independent control" - Ethernet high-speed NICs: - nVidia/Mellanox: - support high order pages in zero-copy mode (for payload coalescing) - support multiple packets in a page (for systems with 64kB pages) - Broadcom 25-400GE (bnxt): - implement XDP RSS hash metadata extraction - add software fallback for UDP GSO, lowering the IOMMU cost - Broadcom 800GE (bnge): - add link status and configuration handling - add various HW and SW statistics - Marvell/Cavium: - NPC HW block support for cn20k - Huawei (hinic3): - add mailbox / control queue - add rx VLAN offload - add driver info and link management - Ethernet NICs: - Marvell/Aquantia: - support reading SFP module info on some AQC100 cards - Realtek PCI (r8169): - add support for RTL8125cp - Realtek USB (r8152): - support for the RTL8157 5Gbit chip - add 2500baseT EEE status/configuration support - Ethernet NICs embedded and off-the-shelf IP: - Synopsys (stmmac): - cleanup and reorganize SerDes handling and PCS support - cleanup descriptor handling and per-platform data - cleanup and consolidate MDIO defines and handling - shrink driver memory use for internal structures - improve Tx IRQ coalescing - improve TCP segmentation handling - add support for Spacemit K3 - Cadence (macb): - support PHYs that have inband autoneg disabled with GEM - support IEEE 802.3az EEE - rework usrio capabilities and handling - AMD (xgbe): - improve power management for S0i3 - improve TX resilience for link-down handling - Virtual: - Google cloud vNIC: - support larger ring sizes in DQO-QPL mode - improve HW-GRO handling - support UDP GSO for DQO format - PCIe NTB: - support queue count configuration - Ethernet PHYs: - automatically disable PHY autonomous EEE if MAC is in charge - Broadcom: - add BCM84891/BCM84892 support - Micrel: - support for LAN9645X internal PHY - Realtek: - add RTL8224 pair order support - support PHY LEDs on RTL8211F-VD - support spread spectrum clocking (SSC) - Maxlinear: - add PHY-level statistics via ethtool - Ethernet switches: - Maxlinear (mxl862xx): - support for bridge offloading - support for VLANs - support driver statistics - Bluetooth: - large number of fixes and new device IDs - Mediatek: - support MT6639 (MT7927) - support MT7902 SDIO - WiFi: - Intel (iwlwifi): - UNII-9 and continuing UHR work - MediaTek (mt76): - mt7996/mt7925 MLO fixes/improvements - mt7996 NPU support (HW eth/wifi traffic offload) - Qualcomm (ath12k): - monitor mode support on IPQ5332 - basic hwmon temperature reporting - support IPQ5424 - Realtek: - add USB RX aggregation to improve performance - add USB TX flow control by tracking in-flight URBs - Cellular: - IPA v5.2 support"* tag 'net-next-7.1' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next: (1561 commits) net: pse-pd: fix kernel-doc function name for pse_control_find_by_id() wireguard: device: use exit_rtnl callback instead of manual rtnl_lock in pre_exit wireguard: allowedips: remove redundant space tools: ynl: add sample for wireguard wireguard: allowedips: Use kfree_rcu() instead of call_rcu() MAINTAINERS: Add netkit selftest files selftests/net: Add additional test coverage in nk_qlease selftests/net: Split netdevsim tests from HW tests in nk_qlease tools/ynl: Make YnlFamily closeable as a context manager net: airoha: Add missing PPE configurations in airoha_ppe_hw_init() net: airoha: Fix VIP configuration for AN7583 SoC net: caif: clear client service pointer on teardown net: strparser: fix skb_head leak in strp_abort_strp() net: usb: cdc-phonet: fix skb frags[] overflow in rx_complete() selftests/bpf: add test for xdp_master_redirect with bond not up net, bpf: fix null-ptr-deref in xdp_master_redirect() for down master net: airoha: Remove PCE_MC_EN_MASK bit in REG_FE_PCE_CFG configuration sctp: disable BH before calling udp_tunnel_xmit_skb() sctp: fix missing encap_port propagation for GSO fragments net: airoha: Rely on net_device pointer in ETS callbacks ... List of files: /linux/tools/testing/selftests/net/bridge_stp_mode.sh

d6aa47704561b2e363821d243fd405da1ac06bcb - Merge branch 'net-bridge-add-stp_mode-attribute-for-stp-mode-selection'

Sat, 11 Apr 2026 00:52:46 +0200

Merge branch 'net-bridge-add-stp_mode-attribute-for-stp-mode-selection'Andy Roulin says:====================net: bridge: add stp_mode attribute for STP mode selectionThe bridge-stp usermode helper is currently restricted to the initialnetwork namespace, preventing userspace STP daemons like mstpd fromoperating on bridges in other namespaces. Since commit ff62198553e4("bridge: Only call /sbin/bridge-stp for the initial networknamespace"), bridges in non-init namespaces silently fall back tokernel STP with no way to request userspace STP.This series adds a new IFLA_BR_STP_MODE bridge attribute that allowsexplicit per-bridge control over STP mode selection. Three modes aresupported: - auto (default): existing behavior, try /sbin/bridge-stp in init_net, fall back to kernel STP otherwise - user: directly enable BR_USER_STP without invoking the helper, works in any network namespace - kernel: directly enable BR_KERNEL_STP without invoking the helperThe user and kernel modes bypass call_usermodehelper() entirely,addressing the security concerns discussed at [1]. Userspace isresponsible for ensuring an STP daemon manages the bridge, ratherthan relying on the kernel to invoke /sbin/bridge-stp.Patch 1 adds the kernel support. The mode can only be changed whileSTP is disabled and is processed before IFLA_BR_STP_STATE inbr_changelink() so both can be set atomically in a single netlinkmessage.Patch 2 adds documentation for the new attribute in the bridge docs.Patch 3 adds a selftest with 9 test cases. The test requires iproute2with IFLA_BR_STP_MODE support and can be run with virtme-ng: vng --run arch/x86/boot/bzImage --skip-modules \ --overlay-rwdir /sbin --overlay-rwdir /tmp --overlay-rwdir /bin \ --exec 'cp /path/to/iproute2-next/ip/ip /bin/ip && \ cd tools/testing/selftests/net && \ bash bridge_stp_mode.sh'iproute2 support can be found here [2].[1] https://lore.kernel.org/netdev/565B7F7D.80208@nod.at/[2] https://github.com/aroulin/iproute2-next/tree/bridge-stp-mode====================Link: https://patch.msgid.link/20260405205224.3163000-1-aroulin@nvidia.comSigned-off-by: Jakub Kicinski List of files: /linux/tools/testing/selftests/net/bridge_stp_mode.sh

20ae6d76e381eb520d0d1db526a41b22390816f6 - selftests: net: add bridge STP mode selection test

Sun, 05 Apr 2026 22:52:24 +0200

selftests: net: add bridge STP mode selection testAdd a selftest for the IFLA_BR_STP_MODE bridge attribute that verifies:1. stp_mode defaults to auto on new bridges2. stp_mode can be toggled between user, kernel, and auto3. Changing stp_mode while STP is active is rejected with -EBUSY4. Re-setting the same stp_mode while STP is active succeeds5. stp_mode user in a network namespace yields userspace STP (stp_state=2)6. stp_mode kernel forces kernel STP (stp_state=1)7. stp_mode auto in a netns preserves traditional fallback to kernel STP8. stp_mode and stp_state can be set atomically in a single message9. stp_mode persists across STP disable/enable cyclesTest 5 is the key use case: it demonstrates that userspace STP can nowbe enabled in non-init network namespaces by setting stp_mode to userbefore enabling STP.Test 8 verifies the atomic usage pattern where both attributes are setin a single netlink message, which is supported because br_changelink()processes IFLA_BR_STP_MODE before IFLA_BR_STP_STATE.The test gracefully skips if the installed iproute2 does not supportthe stp_mode attribute.Assisted-by: Claude:claude-opus-4-6Reviewed-by: Ido Schimmel Acked-by: Nikolay Aleksandrov Signed-off-by: Andy Roulin Link: https://patch.msgid.link/20260405205224.3163000-4-aroulin@nvidia.comSigned-off-by: Jakub Kicinski List of files: /linux/tools/testing/selftests/net/bridge_stp_mode.sh